last executing test programs: 54.679226123s ago: executing program 4 (id=1000): syz_emit_ethernet(0x52, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) 53.564574971s ago: executing program 4 (id=1003): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000003c0)={[{@max_batch_time}, {@inode_readahead_blks}], [], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) kcmp(r5, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) epoll_create1(0x0) 52.434313115s ago: executing program 4 (id=1008): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") socket$inet6_tcp(0xa, 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x4, 0x10000000000001ba}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES64=r2, @ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x20000042}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f0000000080), 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x1a4, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private0, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x9, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0xc, @private2, 0x18}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048850}, 0x20040000) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x8, r4, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x98}}, 0x0) 29.617684335s ago: executing program 0 (id=1047): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)={0x28, r5, 0x90d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) accept4$netrom(r3, 0x0, 0x0, 0x0) unshare(0x20040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r8, 0x1}, 0x20) 29.499771201s ago: executing program 0 (id=1050): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0), 0x12) 28.626475296s ago: executing program 3 (id=1051): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xd00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 28.529317178s ago: executing program 0 (id=1052): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x2000002, &(0x7f0000000000)=ANY=[], 0x11, 0x5fdf, &(0x7f0000000b00)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAELkJDX2JpMIoMDyDaIRBaeyAvEBngE2GTDIi+SZ0A8AJZsVlkQCtXMOeOamp7pcezp6p7z+0ntqq9OV/cp/6emuqer+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/64c/O9iLi6u/SgqMRX4hBRD9iua5PRD1zOd9/GBHHYqM5XoiIwWJEvf7GP89FXIiIT45EPHh4Z7VefG6f/bh45vbNz378g3/+8S/3jv3i7Z9/1G7/6RfPf/ynuxFHf/LGx5/dfTrbDgAAAKWoqqrqpbf5x9P7+37XnQIApiIf/6skL1er1Wr1U63/3J+t/qgLrZuq8e42i4hYb65Tv2bwcTwAzJn1+LTrLtAh+RdtGBHPdN0JYKb1uu4AB+LBwzurvZRvr3k8OLHZnv9OuS3/9d7W9R27TSdpn2MyrZ+vezGI53fpz/KU+jBLcv79dv5XN9tH6X4Hnf+07Jb/aPPSp+Lk/Aft/Fu25f/XiJjb/Ptj8y9Vzn/4OPmvD+Z4/5c/AAAAAACHX/77/9GOP/9dfPJN2Ze9Pv89MaU+AAAAAAAAAMDT9qTj/20x/h8AAADMrPq9eu1vRx4t2+272OrlV3oRz7buDxQmXSyz0nU/AAAAAAAAAAAAAKAkw81zeK/0IhYi4tmVlaqq6ltTu35cT7r+vCt9+6FkXf+SBwCATZ8caV3L34tYiogrqVxYWVmpqqXllWqlWl7Mr2dHi0vVcuN9bZ7WyxZH+3hBPBxV9YMtNdZrmvR+eVJ7+/Hq5xpVg310bDo6ChsAks2j0QNHpEOmqp6Lrl/lMB/s/4eP/Z/96PrnFAAAADh4VVVVvfR13sfT+H79rjsFAEzDUj7+tz8XUKvVarVaffjqpmq8u80iItab69SvGQzHDwBzZj0+7boLdEj+RRtGxLGuOwHMtF7XHeBAPHh4Z7WX8u01jwdpfPd8Lsi2/Nd7G+vl9cdNJ2mfYzKtn697MYjnd+nPC1PqwyzJ+ffb+V/dbB+l+x10/tOyW/71dh7toD9dy/kP2vm3HJ78+2PzL1XOf/hY+Q/kDwAAAAAAMyz//f+oz3/zJgMAAAAAAADA3Hnw8M5qvu41f/7/5TH36zXnXP95aOT8e/vO3/W/h0nOv9/Ov3VCzqAxf/+tR/n/5+Gd1Y9u//tLeTrz+S8MRvVzL/T6g2E656daeCeux41YizM77j/c1n52R/vCtvZzE9rP72gf1e3Luf1UrMav40a8vdW+OOHEqKUJ7dWE9pz/wP5fpJz/sHGr819J7b3WtHb/w/6O/b45Hfc8l//x35d37l3Tdy8GW9vWVG/fyQ76s/F/8swofntr7eap31+7ffvm2UiTbUvPRZo8ZTn/hXTL+b/y0mZ7/r3f3F/vfzh67Pxnxb0Y7pr/S435entfnXLfupDzH6Vbzj8fgcbv//Oc/+77/2sd9AcAAAAAAAAAAAAAAAD2UlXVxiWilyPiUrr+p6trMwGA6crH/yrJy9VqtVqtVh++uqka781mEUvb16lfM/xh3IMBALPsfxHxr647QWfkX7D8fX/19CtddwaYqlvvf/DLazdurN281XVPAAAAAAAAAIDPK4//eaIx/vPGeUCtcaO3jf/6VpyY2/E/+6PBxljnaYNejL3H/z4Ze4//PZzwfAt7NY4m93dxQvvShPaxF3o05PxfTBnn/I+nDStp/NdXOuhP13L+J9NYzzn/r7Xu18y/+vs859/flv/p2+/95vSt9z94/fp7195de3ftV2fPXLpw/uKF8xcvnn7n+o21M5v/jn+wPXfu+ZDzz2NfOw+0LDn/nLn8y5Lz/2qq5V+WnP/LqZZ/WXL++fWe/MuS88/vfeRflpz/q6mWf1ly/l9PtfzLkvN/LdXyL0vO/xupln9Zcv6vp1r+Zcn5n0q1/MuS8z+davmXJeefP+GSf1ly/vnMBvmXJed/LtXyL0vO/3yq5V+WnP+FVMu/LDn/i6mWf1ly/pdSLf+y5Py/mWr5lyXn/61Uy78sOf83Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1Vv5D7rtF9OR8/9+qu3/Zcn5v5lq+Zfl0ff/mzFjxkye6fo3EwAAAAAAAAAAAADQNo3TibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnv3FiNneZ8B/N2TvTYnN5yJA7YxYGBhd30ChxhMElJK2pSSkDYtqXHstXHiU73rBBAqS6EtUZCK1F7Qi6ZJlEaR2goURWoq0Qipkdq7cpWUm6iVuLBUqByUVEoFbDQz7/vuzOzszK696535vt8P4b935puZd775ZnaftZ4ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpt/NjEn/eFECr/V/9YF8KFlb+vCXsqX07vXOkVAgAAAOfqveqf/3BJPmHPAi5Ut82/Xfsf35+ZmZkJX3jn9Pt/OTOTz9gQwsDqEKrnJf/+y1/M1G8TPRuG+/rrvu7vcPMDHc4f7HD+UIfzV3U4f3WH84c7nD9nB8yxpvb7mOqVba7+dV1tl4bLwlD1vM0tLvVs3+r+/vS7nKq+6mVmhg6Gw+FImAhjcy7TV/0vhFc3Vm7r/pBuq7/uttaHEM787Kn9aQ19cR9vDg03VlX/2L19b9jwzs+e2v+dqbeubjU77oY5Kw1hy6bKOp8LYfbXVaEvrM77JK2zv26d61usc6BhnX3Vy1X+3rzOMwtcZ7rfw3Gdr7dZ5/p42uPXhxCmw7zbNHs29Ie1Tbea9/dw7YioXEflofxAGFzUcbJxAcdJ5TJvXt94nDQfk2n/b4z7ZHCeNdQ/HG8/s2rOfj+r42RN7Zq74VitXPeDlRsdHq7/1WrDsVrZ5qkb5j8GWj52LY6BfCzXHQObOh0D/asGqsdA/+yaNzUcA+NzLtMf+qq3dfqG9sfA6NTRE6OTTzx52+Gj+w5NHJo4Nj62c/u2Hdu37dgxevDwkYmx2p+L26U9ZG3oz8fgpvhak47Bm5q2rT8kZ765RM+D+DrUDc+Dyn3/zI2VBV3YH+Y5xivbPLfl3J8H+ft+3fNgsO550PI1tcXzYHABz4PKNme2LOx75mDd/63WsCyvhdU19XXF98PKbT5y8/yvhevjup6/ZbHfDwfmHAPpbvXF517llPzz3vCdcb/MPS6uqZxxwapwanLi5O2P75uaOjke4jgvLq17rJqPl7V19ynMOV76F3287Pn7d2+8psXp6+K+Gr61/WNV2Wb7SPvHqvrq3rg/V4Xa/mw4dWuIY4md7/3Z6rtZZX/mLNFmf1a2ee62c/9ZMOeSute/oU6vfwNDg7XXv4G8N4YaXv/mPjQD1ZWFcOa2hb3+DcX/z/fr32Vd8vpX2VeP3N7+GKhs8/zoYo+Bwbavf9fH2RfXc3NMDMN1uf/96vnTtcO07rHseNwMDg7F42Yw3WLjcbNtzmUq11a57S1jZ3fcbLm+8bFq+LmlgMdNZV/91Vj746ayzWvj5/7asSb9te61Y1WnY2BoYFVlvUP5IKi93s2sScfA7WF/OB6OhAP5MpVHuXJbI1sXdgysiv+f79eOq7rkGKjsq5e2tj8GKtv8aNvS/uy0JZ6St6n72an59wvzZf5rBmevr3m3LeVjNRjX+fEffyqf1ipDVLZ5a/tic0b7/XRrPOWCFvup+fkz3zF9IJyf/XRVXOeRHe1/N1XZ5rKdCzye9oQQ3hh/o/r7rvj73e+d+vH3G37v2+p3ym+Mv/HA6EM/Wcz6AQA4e+9X/5xeVftZs+5frBfy7/8AAABAT0i5vz/OTP4HAACAwki5fyDOTP4HAACAwki5fzDOrCT5/7E7d7383tMhvxvgTJTOT7vhwbtr26WO93T8esPMrMrpH/320MtffXpht90fQnj3gQ+23P6xu9O6ak6kdX648fQ5rrpuQbf/6MOz29W/f8KZXbXrT/dnoYdB6iq/Orq1er0bnhivztceCNX50PTzz9auv/Z12v70ttr2fxPftGTPwb6Gy2+J69kc54b4njIP7pndD5WZLvfy+mv/9dLPzt5eulzfpourd/OlP65db3qPqBcvrW2f7vd86/+Xr3335cr2j9/Qev1P97de/+l4vW/G+cvdte3r9/lX69b/p3H96fbS5W7/1g9brv+VK2vbvxKPi2/E2bz+e//iQ++1erzS7ey5q3a5dPtj/7e9erl0fen6m9c//PR4w/5ovv7X3qldz+4v/3ygfvt0erqd5NG7Go/vvvj4NvTIQwjf/bPQsJ/DR2qX++em9afrO3FX6/Xf2rTOE33XVS8/e3/WNdyvr//d1pb3N61nzz+ua7g/L94X9987oz+qXO/ph+LxGM///9dr19f8Xqav3Nf4epO2/8a62vM2Xd9o0/pfbFr/9HWVfdd5/fe/U1v/K/esblj/nk/E4+n+2uy0/kN/e0nD5b/5ndrjcfIrI8eOT546fKBur9Y/j1cPr1l7wYUXXXxJfC1t/nrv8anHJk5uGNswFsKGHnzLwOVe/7fi/N/amF76W6j5yc9rx90Ln6x937rpF7WvX4ynPxofz/T98et/PdRwvDY/7tP31Oa5rv+WuI6FuvJr/33dgjY8/flXT/3Tn7zV/HNBuj8nLh+u3r+XNl5RPa/vtdr5za9XnfzX5Y3P658OjlXnD+J+nYnvzLzpitrtNV9/em+SFz5de/6mn+TS5UPT+4msG2i8H+e6/p/Gn2N+eFXj6186Pn7wdNO7Oa8LfZUlTMfXhzBdOz9tlfb3C2euaHl76X14wvTVi1nmvCafmBw9cvjYqcdHpyYmp0Ynn3hy79Hjp45N7a2+d+neL3a6/Ozze231+X1gYuf2UH22H6+NZVZd/0Urt/4TD+8/cMfYjQcmDu47dXDq4RMTJw/tn5zcP3Fg8sZ9Bw9OfKXT5Q8f2D2+dde2O7aOHDp8YPedu3Zt2zVy+NjxyjJqi+pg59iXRo6d3Fu9yOTu7bvGd+zYPjZy9PiBid13jI2NnOp0+er3ppHKpb88cnLiyL6pw0cnRiYPPzmxe3zXzp1bO77749ETByc3jJ48dWz01OTEydHafdkwVT258r2v0+Uph8nj8fWuSV/86fxzt+7M749b8e1n5r2q2iaNP56Gt+N7QaXvb52+Trl/KM6sJPkfAAAAyiDl/vjG/7NnyP8AAABQGCn3r44zk/8BAACgMFLuryX/4fzx72XJ/0vV/39G/79K/1//P+j/Z/r/+v9B/1//vwP9f/3/Xl6//r/+P511W/8/5v6wJgT//g8AAAAFlXL/2jgz+R8AAAAKI+X+C+LM5H8AAAAojJT7L4wzK0n+9/n/+v/6/+36/2lb/f+g/98N/f/N/6P/P4f+v/5/0P8/ayvdn+/19Xdh/3+N/j/dptv6/yn3XxRnVpL8DwAAAGWQcv/FcWbyPwAAABRGyv2XxJnJ/wAAAFAYKfevizMrSf7X/9f/79T/f3dmZqa8/X+f/19P/3/F+/8+/78F/X/9/6D/f9ZWuj/f6+vvwv6/z/+n63Rb/z/l/l+LMytJ/gcAAIAySLn/A3Fm8j8AAAAURsr9l8aZyf8AAABQGCn3XxZnVpL8X87+/5shBP3/4PP/9f+b1qn/v+L9/4Gg/79o+v/6/0H//6ytdH++19ev/6//T2fd1v9Puf/yOLOS5H8AAAAog5T7r4gzk/8BAACgMFLuvzLOTP4HAACAwki5/6o4s5Lk/3L2/33+v/5/jf5/4zr1/1e8/1+cz/9fM/tX/X/9/3b0//X/e3n9Bej/9+n/s9y6rf+fcv/VcWYlyf8AAABQBin3XxNnJv8DAABAYaTc/8E4M/kfAAAACiPl/vVxZj2f//sXtJX+v/6//r/+v/6//v9y6q3+//zfO/X/a/T/Gy1d/396dgH6/z2z/gL0/33+P8uu2/r/Kfd/KM6s5/M/AAAAkKTcf22cmfwPAAAAhZFy/3VxZvI/AAAAFEbK/RvizEqS//X/9f/1//X/9f/1/5dTb/X/56f/X6P/38jn/+v/6//r/9Net/X/U+7fGGdWkvwPAAAAZZBy/6Y4M/kfAAAACiPl/uvjzOR/AAAAKIyU+zfHmZUk/+v/6//r/+v/N/T/r62/Jf1//f9zp/+v/9+O/r/+fy+vX/9f/5/Ouq3/n3L/DXFmJcn/AAAAUAYp998YZyb/AwAAQGGk3H9TnJn8DwAAAIWRcv+WOLOS5P8F9//7Qgj6//PS/2+9fv3/Ze7/D/j8/6D/3/X0//X/29H/1//v5fXr/+v/01m39f9T7r85zqwk+R8AAADKIOX+W+LM5H8AAAAojJT7b40zk/8BAACgMFLuH4kzK0n+9/n/+v/6/z3c/1+Oz//X/8/0/5eG/r/+fzv6//r/vbz+0vX/VzV+qf/PQnRb/z/l/tvizEqS/wEAAKAMUu6/Pc5M/gcAAIDCSLl/NM5M/gcAAICeNNjitJT7x+LMSpL/z2v/v+kB0P/X/w/6//r/+v/6/+dI/1//P/Rq/39A/7/X11+6/n8T/X8Wotv6/yn3j8eZlST/AwAAQBmk3L81zkz+BwAAgMJIuX9bnJn8DwAAAIWRcv/2OLOS5H+f/6//r/+v/6//r/+/nPT/9f/bKXX/3+f/9/z69f/1/2nU3+K0buv/p9y/I86sJPkfAAAAyiDl/p1xZvI/AAAAFEbK/XfEmcn/AAAAUBgp998ZZ1aS/K//r/+v/6//r/+v/7+c9P/L1/9v1f+cj/6//n8vr1//X/+fzrqt/59y/644s5LkfwAAACiDlPs/HGcm/wMAAEBhpNx/V5yZ/A8AAAA9pV0PLeX+j8SZlST/6/8Xvf8/s1r/X/9f/7/9+vX/l9LcF2D9//L1/xezfv1//f9eXr/+v/4/nXVb/z/l/t1xZiXJ/wAAAFAGKfffHWcm/wMAAEBhpNx/T5yZ/A8AAACFkXL/njizkuR//f+i9/99/r/+v/5/p/Xr/y8v/X/9/3b0/3uz/x9/bNH/76L+f+UY0v+nG3Vb/z/l/nvjzEqS/wEAAKAMUu7/aJyZ/A8AAACFkXL/x+LM5H8AAAAojJT7Px5nVpL8r/+v/6//r/+v/6//v5z0/5et/199KdT/r9H/Pzsr3Z/v9fV3U//f5//Trbqt/59y/31xZiXJ/wAAAFAGKfd/Is5M/gcAAIDCSLn/1+PM5H8AAAAojJT7748zK0n+1//X/y9C//8Z/X/9f/3/rqX/7/P/29H/1//v5fXr/+v/01m39f9T7v+NOLOS5H8AAAAog5T7H4gzk/8BAACgMFLu/2ScmfwPAAAAPWbVvOek3P+bcWYlyf/6/+en/9+fr1//3+f/6//r/+v/LyX9f/3/oP9/1la6P9/r69f/1/+ns27r/6fc/1txZiXJ/wAAAFAGKfd/Ks5M/gcAAIDCSLn/t+PM5H8AAAAojJT7H4wzK2D+b1UqXOr+f/Pl2ylT/9/n/+v/B/1//f+6var/v3T0//X/g/7/WVvp/nyvr1//X/+fzrqt/59y/+/EmRUw/wMAAEBZpdz/UJyZ/A8AAACFkXL/p+PM5H8AAAAojJT7PxNnVpL87/P/9f/1//X/9f/1/5eT/r/+fzv6//r/vbx+/X/9fzrrtv5/yv0Px5mVJP8DAABAGaTc/9k4M/kfAAAACiPl/t+NM5P/AQAAoDBS7v+9OLOS5H/9f/1//X/9f/1//f/lpP8/t/9feQ1byv7/fz638O31/xvvh/6//r/+v/4/y6vb+v8p938uzqwk+R8AAADKIOX+348zk/8BAACgMFLu/4M4M/kfAAAACiPl/kfizEqS//X/9f/1//X/9f/1/5eT/r/P/2/nbPr/q+sur/9/bla6P9/r69f/1/+ns27r/6fc//k4s5LkfwAAACiDlPv/MM5sMfl/cKlXBQAAACyllPv3xpn5938AAAAojJT7H40zK0n+X4L+f3/Q/9f/1/9veTzo/+v/6//r/+v/t+fz//X/e3n9+v/6/3TWbf3/lPv3xZntabwZAAAAoHel3P+FOLOS/Ps/AAAAlEHK/fvjzOR/AAAAKIyU+w/EmZUk//v8f/1//X/9f/1//f/lpP+v/9+O/r/+fy+vX/9f/5/Ouq3/n3L/RJxZSfI/AAAAlEHK/QfjzOR/AAAAKIyU+w/Fmcn/AAAAUBgp9z8WZ1aS/K//r/+v/1/a/v/r32tap/6//v9y0P/X/29H/1//v5fXr/+v/09n3db/T7n/cJxZSfI/AAAAlEHK/V+MM5P/AQAAoDBS7v9SnJn8DwAAAIWRcv+ROLOS5H/9f/1//f/S9v99/n+k/7+89P/1/9vR/9f/7+X16//r/9NZt/X/U+4/GmdWkvwPAAAAZZBy/7E4M/kfAAAACiPl/uNxZvI/AAAAFEbK/SfizEqS//X/F9f/75unG3h2/f/V+v/6//r/+v/6/+dI//889f/jsa3/30j/X/9f/1//n/a6rf+fcv8fxZmVJP8DAABAGaTcfzLOTP4HAACAwki5fzLOTP4HAACAwki5f+pX7N3njl5n1cfhJ8WvE73iHDgFvvCVQ+AYkDgFekvooQZC7y30FjqEEnrvvfdOIPQqBSVeaxk7473Hk3k8977XdX1giQmC7dhC+iv66Y5bmuz/S9f/X3mXn2yx/78Q7/8f/P36f/2//l//r/+fpP8P+v9z6f/1/5P0/6d3+n/2ZLT+P3f/A+KWJvsfAAAAOsjd/8C4xf4HAACAaeTuf1DcYv8DAADANHL3PzhuabL/B3v/v2oO/b/+f6f/1/+f9/dT/6//P4j+X/+/0/8f2Un381v//on6f+//szej9f+5+x8StzTZ/wAAANBB7v6Hxi32PwAAAEwjd//D4hb7HwAAAKaRu//hcUuT/T9Y/3/2u/T/+n/9v/7/vL+f+n/9/0H0//r/nf7/yE66n9/69+v/9f+sG63/z93/iLilyf4HAACADnL3PzJusf8BAABgGrn7HxW32P8AAAAwjdz918QtB+3/05fqqy4d/b/+X/+v/9f/6//3Sf+v/1+i/9f/b/n79f/6f9aN1v/n7r82bvHP/wEAAGAaufsfHbfY/wAAADCN3P2PiVvsfwAAAJhG7v7Hxi1N9r/+X/+v/9f/X7r+/7T+X/9/7PT/+v+d/v/ITrqf3/r36//1/6wbrf/P3f+4uKXJ/gcAAIAOcvc/Pm6x/wEAAGAaufufELfY/wAAADCN3P1PjFua7H/9v/5f/6//9/6//n+f9P/6/yX6f/3/lr9f/6//Z93e+//7XnfnPWz/n7v/urilyf4HAACADnL3Pylusf8BAABgGrn7nxy32P8AAAAwjdz9T4lbmux//b/+/2z/f/tl+n/9v/7/7M/1/8dD/6//X6L/1/9v+fv1//p/1u29/1/p/c//97n7nxq3NNn/AAAA0EHu/qfFLfY/AAAATCN3/9PjFvsfAAAAppG7//q4pcn+1//r/73/r//X/+v/90n/r/9fov/X/2/5+5f6//sc4vv1/3QwWv+fu/8ZcUuT/Q8AAAAd5O5/Ztxi/wMAAMA0cvffELfY/wAAADCN3P3Pilua7H/9v/5f/6//P7f/v7xl/3/Hz/T/+6H/1/8v0f/r/7f8/d7/1/+zbrT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9uabL/9f/6f/2//v9uvf9/xRz9v/f/90f/r/9fov/X/2/5+/fW/19/7zv+D1P/zxRG6/9z9z8/bmmy/wEAAKCD3P0viFvsfwAAAJhG7v4Xxi32PwAAAGzZOSFW7v4XxS1N9v9d+/9zS1z9/+FM2v/fftlO/6//P2vm9//1//uj/9f/Lzls/7/T/9evRf8/zvd7/1//z7rR+v/c/S+OW5rsfwAAAOggd/9L4hb7HwAAAKaRu/+lcYv9DwAAANPI3f+yuKXJ/vf+/xD9f1Usg/X/3v/X/5/z69L/6/+PQv+v/1/i/X/9/5a/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/VdzSZP8fQ/9/pf5/2vf/9f/6/3N+Xfp//f9R6P/1/0v0/wf3/1dd4H9P/z/W9+v/9f+sG63/z91/Y9zSZP8DAABAB7n7Xx232P8AAAAwjdz9r4lb7H8AAACYRu7+18YtTfb/hfr/2/7/zF/3/v/h6P8P/n79v/5f/6//1//r/5fo/73/v+Xv1//r/1k3Wv+fu/91cUuT/Q8AAAAd5O5/fdxi/wMAAMA0cve/IW6x/wEAAGAaufvfGLc02f/H8P7/ef3/PfX/+n/9f9xB+///y/8e/f8Z+v/90v/r/5fo//X/m/v+y87+idL/6/9ZN1r/n7v/TXFLk/0PAAAAHeTuf3PcYv8DAADANHL3vyVusf8BAABgGrn73xq3NNn/x9//e/9f/3+R/f/l+v/k/f/4fdX/6/8vgv5f/7/T/x+Z/t/7//p/9m20/j93/01xS5P9DwAAAB3k7n9b3GL/AwAAwDRy9789brH/AQAAYBq5+98RtzTZ//p//f+J9//e/y/6//h91f/r/y+C/l//v9P/H9le+vmr9f/6f/0/Z43W/+fuf2fc0mT/AwAAQAe5+98Vt9j/AAAAMI3c/e+OW+x/AAAAmEbu/vfELU32v/5f/6//H77/v+n8P2/6f/3/luj/9f9L9P8X3//f6eT7/5vit8b7/0P0//GDa/T/jGe0/j93/3vjlib7HwAAADrI3f++uMX+BwAAgGnk7r85brH/AQAAYBq5+98ftzTZ//r/rff/97s1vkD/P2//7/3/uPp//f9B9P/6/12z/n/49//1/97/1//zP0br/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAmEbu/g/FLfY/AAAATCN3/y1xS5P9r//fev/v/X/9v/5f/z82/b/+f4n+X/+/5e/X/+v/WTda/5+7/8NxS5P9DwAAAB3k7v9I3GL/AwAAwDRy9380brH/AQAAYBq5+z8WtzTZ//p//b/+X/9/t/v/a/X/O/3/Ben/9f9L9P/6/y1/v/5f/8+60fr/3P0fj1ua7H8AAADoIHf/J+IW+x8AAACmkbv/k3GL/Q8AAADTyN3/qbjhXvc4uU86Xqcu8PPozfX/+n/9v/7f+//6/33S/+v/l+j/9f9b/n79v/6fdaP1/7n7Px23+Of/AAAAMI3c/Z+JW+x/AAAAmEbu/lviFvsfAAAApvHZO//1qt3n4pYm+1//r//X/+v/9f/6/33S/+v/l+j/9f9b/n79v/6fdaP1/7n7Px+3NNn/AAAA0EHu/i/ELfY/AAAATCN3/xfjFvsfAAAAppG7/0txS5P9r//X/+v/9f/6f/3/Pun/9f9L9P/6/y1/v/5f/8+60fr/3P1fjlua7H8AAADoIHf/V+IW+x8AAACmkbv/q3GL/Q8AAADTyN3/tbilyf7X/+v/9f/6f/2//n+f9P/6/yX6f/3/lr9f/6//Z91o/X/u/q/HLU32PwAAAHSQu/8bcYv9DwAAANPI3f/NuMX+BwAAgGnk7v9W3NJk/8/c/y/9x/T/Z+j/9f87/b/+f8/0//r/Jfp//f+Wv1//r/9n3Wj9f+7+b8ctTfY/AAAAdJC7/ztxi/0PAAAA08jd/924xf4HAACAaeTu/17c0mT/z9z/Lznu/v9UXP2//n+n/y/6f/3/Tv+v/1+h/9f/b/n79f/6f9adUP9/aneB/j93//fjlib7HwAAADrI3f+DuMX+BwAAgGnk7v9h3GL/AwAAwDRy9/8obpln/9//5oW/qP/3/r/+X/+v/9f/75P+X/+/RP+v/9/y9+v/9f+sG+39/9z9P45b5tn/AAAA0F7u/p/ELfY/AAAATCN3/0/jFvsfAAAAppG7/2dxS5P9r//X/+v/W/X/V+z0//r/S0z/r/9fov/X/2/5+/X/+n/Wjdb/5+7/edzSZP8DAABAB7n7fxG32P8AAAAwjdz9v4xb7H8AAACYRu7+X8UtTfa//l//r/9v1f97/1//f8np//X/S/T/+v8tf7/+X//PutH6/9z9v45bmux/AAAA6CB3/2/iFvsfAAAAppG7/7dxi/0PAAAA08jd/7u4pcn+1//r//X/o/b/Z/4M6v/1//r/Zfp//f9O/39kJ93Pb/379f/6f9aN1v/n7r81bmmy/wEAAKCD3P2/j1vsfwAAAJhG7v4/xC32PwAAAEwjd/9tcUuT/a//1/9P2f+fnqH/9/6//l//fxj6f/3/Tv9/ZCfdz2/9++fu/69e/fXr/zmM0fr/3P1/jFua7H8AAADoIHf/n+IW+x8AAACmkbv/z3GL/Q8AAADTyN3/l7ilyf7X/+v/L77/P1W/7mH7/yne/9f/6//1/4eh/9f/7zbc/99w45kf6/+3+f1z9//e/+d4jNb/5+7/a9zSZP8DAABAB7n7/xa32P8AAAAwjdz9f49b7H8AAACYRu7+f8QtTfa//l//P+X7//p//b/+fxgt+//8c6f/X9W9//f+/7a/f+7+/wr9P8ditP4/d/8/45Ym+x8AAAA6yN3/r7jF/gcAAIBp5O7/d9xi/wMAAMA0cvf/J25psv/1//p//b/+X/+v/9+nlv2/9/8PTf+v/9/y98/d/3v/n+MxWv+fu/+/AQAA//9zlTC7") chdir(&(0x7f0000000240)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 28.306586237s ago: executing program 1 (id=1053): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @probe_request={{{}, {}, @device_b, @device_b}, @void, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 28.040154036s ago: executing program 3 (id=1055): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x8927, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000180), &(0x7f0000000340)=0x4) 27.872344526s ago: executing program 1 (id=1056): syz_usb_connect(0x0, 0x43, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406650000000000000000000424130004871300"], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0xa00010, &(0x7f0000000700)=ANY=[], 0x6, 0x641, &(0x7f00000001c0)="$eJzs3c1vHGcdB/DvrNcbO6DUbZM2oEpYjVQQFolf5IK5NCCEfKhQVQ6crcRprGxcZLvIrRAy7xInDv0DysE3TkjcI5Uz3Hr1CVVC4tKTb0EzO7vexGvXrh2vTT+f6NnnmXlmnnnmt8/MzuzGmgBfWotTaT5KkcWpNzfL6Z3tufbO9tylurqdpCw3kmYnS7GaFB8nt9NJ+Vo5s16+OGg7H64svP3JZzufdqaadaqWbxy23tFs1SmTSUbq/CmtPx2nvdFOoWznzuD2jqHo7WEZsBvdwMGwPd5n6zirn/C4Bc6DovO5uc9EcjnJWH0dkPrs0Djb3p2+Y53lAAAA4IJ6bje72cyVYfcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpL6+f9FnRrd8mSK7vP/W/W81OUL7dGwOwAAAAAAAAAAp+Abu9nNZq50px8X1W/+r1YTV6vXr+S9rGc5a7mZzSxlIxtZy0ySib6GWptLGxtrM0dYc3bgmrNns78AAAAAAAAA8H/qN1nc+/0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGaaTOi06xqNPVbnkijWaSsSStcrmt5F/d8gVRDJr56Oz7AQAAACcydszlyxvi53azm81cqWf9e7So7vlfqqrH8l5Ws5GVbKSd5dyt76HLu/7GzvZce2d77mGZ9rf9g/8eqytVi72vIQZt+Xq1xHjuZaWaczN3qs7cTaNas3S925/B/fp12afijdoRe3a3L1h/PuhbhKGYqCIy2ovIdN23MhrPHx6Jz313moduaSaN3jc/V59BzC/Xebk/fxhOzEcGz+5FopEqErN9o++lwyORfPPvf/3Z/fbqg/v31qfOzzD6gp4eE3N9kXj5Qkeieczlp6tIXOtNL+bH+WmmMpm3spaV/CJL2chyHtf1S/V4Ll8nDo/U7Sem3vq8nrTq96UzeI/Sp8n8qCot5dVq3StZSZF3czfLeb36N5uZfDfzmc9C3zt87cB+V/tWHfWN4x31N75VF8aT/LHOh63zkVrG9fm+uPafcy9Vdf1z9qL0wumfG5tfrwvlNn5b5+fDxFORmOmLxIuHR+Iv1bGx3l59sHb/wKuYraemX6vzcsT9vu9TYvjjphwvL2SsPpM8OTrKuhd7Z5kn49Wqf3Hp1DX21V2r6oqie6T+5MAjtVVfw+1vabaqe3lg3VxVd72v7onrrbybdu96CIBz7PK3L7fG/zP+z/GPxn83fn/8zbEfXvrepVdaGf3H6Peb0yOvNV4p/paP8qve/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAC6+9/8GCp3V5eG1xoHFx1uoWifpDPWWxLYdiF7kMET9zg7XOxOxe6MJJkUNX5ecAY8Gzc2nj481vr73/wnZWHS+8sv7O8Ojo/vzC9MP/63K17K+3l6c5r/xpfHV5ngVO196E/uL44V4++BgAAAAAAAAAAAHK0v7d5XP//vy/8lwbD3kcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYlucSvNRisxM35wup3e259pl6pb3lmwmaTSS4pdJ8XFyO52Uib7mijcO2M6HKwtvf/LZzqd7bTWr5ctG6/wEtuqUySQjdX5a7d05cXtFbw/LgN3oBg6G7X8BAAD//3hrAA8=") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)}], 0x1}}], 0x2, 0x0) 26.661671576s ago: executing program 0 (id=1058): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGApCpYcYjfQ5NBceimhUEoDpR+g9x5Dv0A/RaANhBJMe+hFZeWVo8SSrThKrFS/H6w9s7vy7Gj2P57RSCiAkTWZ/ShEvBIR3yQRhzuOFSM/OLl+3trD63PZlkSz+emfSST5vvb5Sf77YDtTjPj1q4iThc3l1ldWF8uVSrqU56ca1StT9ZXVU5eq5YV0Ib08Mzt75u3ZmffefWdgdX3j/N/ff3L3wzNfH1/77uf7R24ncTYO5cc66/EMbnRmJmMyf07G4+wTJ04PoLBhkuz2BbAjY3mcj0fWBxyOsTzqgf++LyOiCYyoRPzDiGqPA9pz+wHNg18aDz5YnwBtrn9x/bWR2NeaGx1YSx6bGWXz3YkBlJ+V8csfd25nWwzudQiAbd24GRGni8XN/V+S9387d7qPc54sQ/8HL87dbPzzZrfxT2Fj/BNdxj8Hu8TuTmwf/4X7Ayimp2z8937X8e/GotXEWJ77X2vMN55cvFRJs77t/xFxIsb3Zvmt1nPOrN1r9jrWOf7Ltqz89lgwv477xb2PP2a+3Cg/S507PbgZ8WrX8W+y0f5Jl/bPno/zfZZxLL3zWq9j29f/+Wr+FPF61/Z/tKKVbL0+OdW6H6bad8Vmf9069luv8ne7/ln7H9i6/hNJ53pt/enL+HHfP2mvYzu9//ckn7XSe/J918qNxtJ0xJ7k4837Zx49tp1vn5/V/8Txrfu/bvf//oj4vM/63zp6q+epw9D+80/V/k+fuPfRFz/0Kr+/9n+rlTqR7+mn/+v3Ap/luQMAAAAAAIBhU4iIQ5EUShvpQqFUWn9/x9E4UKjU6o2TF2vLl+ej9VnZiRgvtFe6D3e8H2I6fz9sOz/zRH42Io5ExLdj+1v50lytMr/blQcAAAAAAAAAAAAAAAAAAIAhcbDH5/8zv4/t9tUBz52v/IbRtW38D+KbnoCh5P8/jC7xD6NL/MPoEv8wusQ/jC7xD6NL/MPoEv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAwUOfPncu25trD63NZfv7qyvJi7eqp+bS+WKouz5XmaktXSgu12kIlLc3Vqtv9vUqtdmV6JpavTTXSemOqvrJ6oVpbvty4cKlaXkgvpOMvpFYAAAAAAAAAAAAAAAAAAADwcqmvrC6WK5V0SUJiR4nicFyGxIATu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj/wYAAP//Gis4ow==") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 26.661421923s ago: executing program 3 (id=1059): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x10080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syncfs(r0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) symlink(0x0, &(0x7f00000008c0)='./file0\x00') r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) getsockname$ax25(r4, &(0x7f00000001c0)={{0x3, @null}, [@rose, @null, @bcast, @bcast, @bcast, @null, @bcast, @bcast]}, &(0x7f0000000040)=0x48) 24.516853656s ago: executing program 3 (id=1062): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) arch_prctl$ARCH_SHSTK_STATUS(0x1001, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/97, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7a5, &(0x7f0000000140)={{@local}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000080)={{0x0, 0xdf}}) 24.130830745s ago: executing program 2 (id=1063): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0), 0x12) 24.07399779s ago: executing program 0 (id=1073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/970], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @private}, {0x6, @multicast}, 0xe, {0x2, 0x0, @dev}}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @multicast1}]}, 0x24}}, 0x0) unshare(0x40000600) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x21) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) write(r5, &(0x7f0000000040)="1c00000021002551071c0165ff00dc020200000003100f000ee1000c", 0x1c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) sendmsg$inet(r1, &(0x7f0000004980)={&(0x7f0000003400)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x50) 24.073609566s ago: executing program 1 (id=1064): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)="01", 0x1}], 0x1}, 0x0) 23.072399781s ago: executing program 3 (id=1065): socket$netlink(0x10, 0x3, 0x9) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c6163746976655f6c6f67733d322c6e6f71756f74612c6e6f71756f74612c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d272c6a71666d743d76667376302c696e6c696e655f78617474722c00a3d783e0bf6d79bc2fa16e7f"], 0x1, 0x551a, &(0x7f0000005a40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@nodelalloc}, {@block_validity}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000001380)="$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") unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 23.010843748s ago: executing program 1 (id=1066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000f9ffff8304"]) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000005a80), &(0x7f0000005ac0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x0, 0x6, 0xff, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r7, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r7, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB], 0x15, 0x0) 22.941381286s ago: executing program 2 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@remote}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000440)={'mangle\x00', 0xc4, "3b4a1a30afcad4182a9a211dd1ba95e84fd4233db2df4310c79aeb9db4674b06fff17286348c8e629b09ffc1102d60ca0efbfe5c0882f9a49594c08bb5ff23791d09679057ad4c511883d195e55b53fc3dda836ff3a8235932c57f1250f872432f29bb841bc8659326d979019e0cba13c8a489e467542212c920856a0ea4c05b13c86ab137592fc1ae8c2bbc8315218b70c82c9fc103edacc9576964e850e6ae451e10f8fc21acf36693290bea56958d4307899f30dc55d7cfe2536f46f2da4e94dac601"}, &(0x7f0000000040)=0xe8) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x101081, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edaff0c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0), 0xfecc) open(0x0, 0x143142, 0x0) 22.009683045s ago: executing program 2 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) 21.874365255s ago: executing program 1 (id=1069): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x0, 0x0) 21.112605493s ago: executing program 2 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) shmctl$SHM_LOCK(0x0, 0xb) shmat(0xffffffffffffffff, &(0x7f0000ff0000/0x10000)=nil, 0x0) open(0x0, 0x64942, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000003140)={{}, "066fa89d34cfd800c1544315a142d075e7c1181ef7d00befd05551f3000d3380d17c16dd7b9be43e48861079ba5e2197ea0decf03a7631f90aa63366d69ff24e6b212bffe8192a466c530aa59f132241d08c4c8f648640d8c22bf4b41178a82388f48216da0ef67f791cb5e6b03bfbc9540f85768faf7a8c32fc22e1e6e7041607bcf076085ad9293055903731b37e053792103003676a0234f2f9261535546308c91632d9fc52f2ac6a34224a2bed7aaacc206c74ca20924a151e221dd2442aac83e452b251f2b62f07d79cd30e09037780963a1f3ebef4ceae8f0bb9885f95d550a4e017acf3977c38e1c01dd7d93795df8f7634b43e946016327b2f32930b9f3073d9b54d9dc87ca37ecd07c2495a5bcb591b5d1aa77a7093d6c9e3940ade2e47d6bed7b000cd3a3ed1d3a264d91dfdac2063850cf58c0786c0a9b99a6b8edd6d46ae666fe179d328b6f4a86c3c9aae1adc447c6fb018fa77213af662932e98e19552d6e23a9a34087ed6ef22fdd59a5e823e490e1a2ba5a98ae00967f86d4eb4d1f2c143c37656e39bc24dbbe449f1b27a54cbd6907b42e0427834061aa2793a264ef0813c06602aa1cc61a9720d9b579c60e31c144972fe69f5f48c03c01e91272f4a1529f1e23aab617e2590d176e019a324ecfa2c9cb29d294ab40dcc892bb1ee7a2d4622738c18ccb03a5b0c6a2748d44061735e6690b908ed697e504f631aeab8ed9838aef6029cd972143e735a9c93ccbdcf180c358d47b4c12cc2c5b6b231bf371829cfddd3374e2bbffd1a672c7f131ca6bffa22a20c9da7024d07ebe238e425a80104d076fe4b5d622e549fd073db26c93de0657af0938d32430a56b71014546f726c3d8dc27cc7d77aefb1ff8c23e1d20bf085fc7ee322a3cf51b03bfeda2d4c63b1b522453f2affe27a3aa40c69f23dcd1d8a4971623f09506a1cb1636ef61dfcce4d85e28c5647ea2ec6c98bd43159ff3155deb3450accfb021e6d776fda9b8e6627e51a31f05558d0a307b6dec4a15bed051c9248823c988e665721fefd162a822ceaceddc9b9455f995bb556e52f7a156db22e01049e63d6805a22d0935420c99ab20433dae3281d6fd08fb5d880e34ecd18206e1d9cc0c258ac4fe5bf74fe1fe3d16155bec5a3435cf1d26f7e2be6d75fe88dbfaec0954ebe47442b06b422f8dce3bfe476df982d976116ec22ba0818364ba630df69015fc87985c178ef45e15f3282b3dce88d0f6371142bbbcfe0064206705687a506c2c56fd63d24ae0d4ac2599ee2bd40a17b7113c10acfba54ea725fdcdfaab8dc50c1e80b7b4a6b10f6d37ef2de9edab86a46612ed21f0e1774f0877c451f85e0cbc3189f6e0fcc8e08af2bcdd643df665a855db7858a054037f107ee82295da30ca195c8faa23bf83f89c76a4d2dcb2e4a08bb22f88f79580ac4a51fd5f76b337f86e74c3793eb90a5b73914d774113abb72e13e3ee4dcc61f3390a790369b01ba449e1aa4dfca631df92f9645feef12a1dbfcd13bdfec11b1bd0d1c15638b4fcef54b6bffb5a19e73ef2c98c81abb2abc969288a69f651ab2b2e4d02862c72efb47821904855a69fe1bd22518451ddc5cfb5b45439090fb7b6ea6e744df9fae44c294314c43e59ebdda7a559b1685c06eef4582f2e3e4a92feccef746e50a478c5daaf7e7b2d1be246071aa3942d80c7c2135c33244884c7671c4118010e2e40e2257758242917b5502b204431d9a7491ca503c81411bbc14042e0ff079123116958338e5d2edb7f659374619810cd8deb1aeffbb3770598289fa29a9577e364bfc6b2a19168c48a590a731751de299f94911bc7e91921ce5836a7f1ea470145929ea5018da7243ee054dc197e68e6ba4c1fb7ddf463bb8683a8c781882967d79f8fdface520a6e3e9c8ceae5cfa9eae92aaaa1502f30b60c251e2e9c677e91ab17b8631bfabf2eb565b618aa0b8be59dcbd737f28468a937163b4143b405e035094a4004b88fb0de4dcffca60a82e30a359404af7729bcfea56739045cabd37fb5347089a606dc8612abb36d257d37dfed74971aa1bbe9f57007a289a34437d4f5a7f63c218a69aba9f377ee699ef14880378231512297be5b72098ce9235d3a00a18d612f4e657f6ea310cc301a8da22a578d08a026d729553517f0d15d5c99c7bd294a2748662c007cd9c8840fe87dac2a3e49272e01382d0cec51fbfdae5d12e980cc4a1f9acc115141c2fd0bca99b7e16fdb1d1aa935f5f4cfeaf58a9b0d3a8af51f1a3e7a4130a4d9a5e4b0e186351bf58a47ab1432e3bb61e250022871d176e1343bc0d56d4539f5a3aea13a048c55f747f8c1df61450c474f460d452a3ce67b16bce886a266ad813f32c7a7bb31da8620f1c9406eec69e560315950d855a194b951169cac2b3e2f54bf86686a113ddb10eec1b88f6be2d4153553787f6107791d750aba04c8961fe7a780a033303beb87cd1c06d8529038568d17e2b3ddb183c616f0df7238b10e1f12a9914c7f83947145d97e524e65e9f6d778a6eb4d223e40d95e4a389bff6f59c9ded97ecf8bef6ed273bed7f112fceaaa681d0bd422ad80dba28303ea324f09ec6f8e79ad4e6ac1e807349ffa2042bad42e21601cefc641c8d411036c3c0d51f6cd684dbb39462d8f73c0043c5a4e30231bfcdef15f340c169051a5da15317fc4eafb72828df573c658a559d8c5589a13c2fb63eedd6dd1b93cb0e4af06a32dddb1b10725b9c5c1517550c12fdec503d6b0409fb82ca9d82a5f08dcfad64eb4091c427b83f7f2c3e90722c2ca59db96d350327f237559d6d01d761d45838de0a01af1445698f9fe851e42d14009d9d4ec87b5a97d7140a3167efb53a74e3742d971211847e161fbf0d3ef85d972b56acae5284781f00d3b77226090fe01d30f730e589460e53cdffcc354bb3f3d89139d01b3cf25c5c811f93c1f68cb680065889bb09d435753ffa37360df75f4be392d49a98f1a3bb09a0f4e86a2420bec72d562d14cb7aaf76667a0fe6639832ddfaf53672f0ae5846d75f5a0c1801522d23f0c98a80930a95b3a17c87eb1c6672c7c73480e5b025a3f926124b7aa198755a5dd5cb2445eb88bec6371a5d87ff199b779bfec921bd8df00ccb680660884aab4b73675bbaeb6f1833e91ec985cb99eb6318d13f1652b2e83bf7568fcc0fd89380d55bed41abc5197af7fbc2a8cd2d3ede5452d2ad2afb6e60bc1a87ec1490c9b9443e6840491316d57ece7bc8dae699b2a4977badc9ab2118d801ac309c675f132503a855c00fbfc30b1cb73d2160862ec8eb99cd902b2eab6c81c525f2431933d34e40a104c952dff1471f803be8e7c6a4e8d4fc71d6af083e599908313d0e2be962913afacf5738ea0d5072b01c3eb7c4d1f6ef5ead1c5b2d99966a8dcf7be89d136baf95357e034cd91d37dffcd3b5d186ccbb6b084febd1ab3b101d0539b0becf55dc5c34247c6001ed7ecd45c83c73d78a20ba0815ffd66dde2e6d1e7671fc77b26d8486753c0d0f2dbb439a7c6b09527d5efbacc81d5e46b01c9db7e89b2a310a1e7d8f28629184e2d545a104c3371439c42eb768d47942fc3ceb9b0859fed6ae6f094002b36cdf08744c51fbcdb34fb132ddcbb907634e7be0b41b885dea5cd6eac9f84ba334f4a749e9f9ac623b173afde32d019734ef74f01b2b7235430e55296d788d02c8808262c3311b949e7b2554ab463142952bcc0304697ff9e83966fb0c20d3ddf08bf0b46eddeb60a06181920ea2318d31f9ed6da3a74d24311ad04abd4e6951a6e19d6f0bb7af87258f7fc820b4d93009c99fad4e28768ebfb5bc41fb554f75f9d90a76f3afd9d459a07310d5fd390ce69422ac35fa9be5513f4229a7208215e649f610fc5803bcf4fd160aa45be5df4815008fd8679b45e599e587e4bf4e44953953268f558f1d1c1ff13fb276b53abe0c368b4aa00eea8e6b6a154cdd7d9ffed6daeb467712a448b7f85bed094cce2b733f80bef79d7f251efaac91e60fa2262cc4477a9f8ea13f197329ada23432f9c4c0b7128d8a71be2868d6b30ca7f982f788421d4a09d68815bb7014cbe9391d506ca6f38cea5fd306bb6e77c22ba01110f496f99e1c149163d730a63d39abdfacbc8d2bbde1006458b74191ce753ca9e9271ede39d6061fcad87075dbf9d5e36c078fb224fb72c5663074918394ca871959cb8625ff2b7794b22e189a6d7ddf82d14bb401dbc336eadb6dd03d36231a3706e2b874a260c7482ea0d6c37bbfaf7ca483e0683090c060acbb40125f32b8654cd07cac1d7cccb2455090349b2fffd049702bc9063ddc71ec4d73e6e3254cab7b03c102ec72c2188c142d52dd440ddcf53809ccf91f1bfb257ce2624549dd493e732b3b52a6c1a27de64969f35de8e639520f533aa8e24937e0a8c614d5c7dc9a16682750c185e7ec878e2be1214c7f3463ed2593f8ad3674b4b0278f561825c4b8f8ef5aad9f8439992a30c98eee8d01a8b271fbf671685e9138e1d07ea086f6a686c8202c279f46aa7e9355aa1c1ee9323a406f291464f435f8f2eec25675decab0cdb989fdeacaebcac2c629f6532c5e25062fe754ee9fce4efc786df9c04740199f628c24b87cda0011ca681cf7a4aa9a05a8e37ba792ebff301512914cebb04b8fef56103028dd601952590c48128b08f33add2288f440b5dfba94f8fa474d10059d6fde4f82b24aacf3d9b97f47b10e6cf83db204322334af78b39e03edf1800d79ee0c31f5c9c8c8418d6eedc906eab6713840b73a529597be98974c0cc8a79e7046b8d378fa576e00c2d20e57e4b66701df2ce00d29650bcbd008176a7aeaffc9ecb0a59261bdfcf5aad947a683a0965e8fcc9a30cb7f39e2efaba2d47c4831133b1fe4820c436d24da43614e09240139de44906609a7269cd8a1a460f68c3426f73ecfd50901d23c0c22c31cc257ab2d9c90b95932ade672d74afafa15ec412ab15b2c1f35fb88a8580ab64d630e0aafc6d4ec0a1e98855e6451340672e4700bb8ae441808b7e916088ea8cc9dd53702b4cc40b4ba60f4d3e972561398b1081eb271d4a71cdb134d8a17da35fb4efbc8d44ab9bd62ff70d00e00b061f025b0cdbf75d0a508e6b05f28304297ce59c09e3a4ea8ed45ec280af9f2bbbe45b308234dea9617ca9730c7ae68e0cc3881bdcc4cc8a510ecd13a835d6e5d0228e792e9c3f7a9043a8c324fc9ad0d4f6437d40ee5d7d61284d3f346c2f407bad1bef33d20323a708a357297dbc5e504e3df72e9f57447c53ac25832fcb6dd87a63074c2cfc62127f4258857d957d6084e2c103cd43db384952091284421e77c05b1a258bd20ca428373677551644c93ac97e8479c19b9cd4827dc0748df015cd42b2e36d7662b8688a1fe2f6a833a7640c35399201d928a10fba6bb7c7e6d738d6b9ec0f0af873c7f8d272eda3c9eb448aed0ff73a10192f6095371475a6f1a5f9aa177fd8cc793cd74b9d8ed05a56afbf5de94496708bc9448fbd2f0651bf2d35e4926ae7a67864d5f4e8107320536c738fdd555c6eed6cd9a41c5b0a8b02dec3e2f1daa9c5b576b99d5043ccca60e0085efc09bd829cc38d9f4e5eddd9afedf61b1b21b17ddafeb5d1580a5a0cd0ea588203b7de76c9d1611e40b3f17d2adbc724fc992d8fd321c98d32b14fb1eb23e1d3253efbfd35a8cfff1686fe0c250f33de60ced79d0154292264bf18bc86b1c9c103225475195c1bd5657110448c8ebddab135780abb600b55ca64aba2d1a70d564fc7b67dc252dbf4ed6d11ee"}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sg0, 0x0, &(0x7f00000001c0)='./file2\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004600)={0x2020}, 0x2020) 19.985360747s ago: executing program 1 (id=1071): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) r1 = socket(0x10, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0xee01, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r2, 0xe7d02281b1d40d47, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x888}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d7029f063dd8e2d6bf7da997e6509e8"], 0x24) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0407ff0200000000000032b66092b882c2f81b2fd1dcb83e02abf936d6dd6d4c78608eb03c1f638d402be0c57d0837b87d2a48f4fd17c96e2ab033dff6a125148fd6959519c071e8bb84a318b8ee9c43c7ecf1936184c6d81bb7d5f1525f530100000806a7ec6b827128c7e44c28f686ed16ac3d375c33db60245e3c4b5069b93e4a4170d7d65b92ebaca3f7675043d2bca647b3f8b78d6d362be54f6b0432d7ce1037412434f399fa8e241e04baa680af1edd5f5148a92c01429b4c5800d5ecd89cbe1b0f6266457b549ec20f44886006e1ec48aa5d7558a1c12b2011e45a68e266af01534f1819c3d5ac9dbd1b96f3ac40f4d4ab80db5082b24f"], 0x102) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x0, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 19.341329933s ago: executing program 2 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) gettid() rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18.950339465s ago: executing program 3 (id=1074): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 18.160437802s ago: executing program 2 (id=1075): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r0 = syz_clone(0x102100, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x0, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000040)={0x1}) r2 = syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000300)='./bus\x00', 0x0) ioprio_set$pid(0x0, 0x0, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) lsm_list_modules(0x0, &(0x7f0000000480), 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setns(r2, 0x10000000) 18.057621667s ago: executing program 0 (id=1076): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000680), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x143, &(0x7f00000002c0)="$eJzs0L9LclEcx/H38efzQx99wAd8GiJoSArzesW2BoUkIbtQuDQFeqNASxTCsZob+gPuULSKQzQ2lE2WQtjf4RY0FsdjhNDUfF7L5X6+3/u5h7Oy3I8RBjcjAqjV7UbDLs9sWIXc5tX1zR858AM/RivVWl0ul9UHtxnYlU8PDI9VfB90ARV7sXRQke/DDMSA7G/Y2fNioHZ/uSAbkVnFTo6z2Cx0/qnM/CJLjbMpD2RDKpN9bxcwJ//x97PvBWg6XnVQPxOazkK79bDe6+bj89P2qZn7fxmIuinaPnULTec50Y0/JdqtQb9XWLMKVj9lmkspI2kY6YH12Munj87wrAYOYUtM9vlkRxFOBDgCWqP58E4Egc75q1UN+SM/gf0wiMmJGJ9PTUrbUe9HgkDTNE3TNE3TNE3Tvuk9AAD//2ihW3g=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file2/file0\x00', 0x1000884, &(0x7f0000000280), 0x1, 0x5100, &(0x7f000000f3c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=0x2, 0x2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SG_IO(r1, 0x2285, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0}) open(&(0x7f00000000c0)='./file2\x00', 0x0, 0x18000000) 15.91630303s ago: executing program 4 (id=1008): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x4, 0x10000000000001ba}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES64=r2, @ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x20000042}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f0000000080), 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x1a4, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private0, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x9, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0xc, @private2, 0x18}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048850}, 0x20040000) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x8, r4, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x98}}, 0x0) 8.547174213s ago: executing program 4 (id=1008): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") socket$inet6_tcp(0xa, 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x4, 0x10000000000001ba}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES64=r2, @ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x20000042}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f0000000080), 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x1a4, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private0, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x9, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0xc, @private2, 0x18}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048850}, 0x20040000) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x8, r4, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x98}}, 0x0) 0s ago: executing program 4 (id=1008): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") socket$inet6_tcp(0xa, 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x4, 0x10000000000001ba}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES64=r2, @ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x20000042}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f0000000080), 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x1a4, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private0, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x9, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0xc, @private2, 0x18}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048850}, 0x20040000) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x8, r4, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x98}}, 0x0) kernel console output (not intermixed with test programs): ridge_slave_0) entered disabled state [ 592.681934][ T29] audit: type=1326 audit(2000000321.871:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.4.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fae513799b9 code=0x7ffc0000 [ 592.713740][ T29] audit: type=1326 audit(2000000321.871:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.4.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae513799b9 code=0x7ffc0000 [ 592.743810][ T29] audit: type=1326 audit(2000000321.871:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.4.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae513799b9 code=0x7ffc0000 [ 592.774249][ T29] audit: type=1326 audit(2000000321.871:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.4.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae513799b9 code=0x7ffc0000 [ 592.830100][ T29] audit: type=1326 audit(2000000321.871:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.4.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae513799b9 code=0x7ffc0000 [ 592.861076][ T29] audit: type=1326 audit(2000000321.871:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.4.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae513799b9 code=0x7ffc0000 [ 593.058823][ T9658] loop3: detected capacity change from 0 to 40427 [ 593.091075][ T9658] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 593.098050][ T9658] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 593.139517][ T9658] F2FS-fs (loop3): Found nat_bits in checkpoint [ 593.177473][ T9658] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 593.190535][ T9658] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 593.244084][ T9164] syz-executor: attempt to access beyond end of device [ 593.244084][ T9164] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 593.268767][ T9164] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 593.456669][ T7485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.470880][ T5240] Bluetooth: hci3: command tx timeout [ 593.494941][ T7485] bond_slave_0: left promiscuous mode [ 593.505420][ T7485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.515481][ T7485] bond_slave_1: left promiscuous mode [ 593.524080][ T7485] bond0 (unregistering): Released all slaves [ 593.721130][ T9674] loop3: detected capacity change from 0 to 164 [ 593.747307][ T9674] Unable to read rock-ridge attributes [ 593.773987][ T9674] syz.3.740[9674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.774098][ T9674] syz.3.740[9674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.780068][ T9597] hsr_slave_0: entered promiscuous mode [ 593.787792][ T9672] loop2: detected capacity change from 0 to 2048 [ 593.809484][ T9597] hsr_slave_1: entered promiscuous mode [ 593.815691][ T9674] syz.3.740[9674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.816946][ T9597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.828796][ T9674] Unable to read rock-ridge attributes [ 593.853918][ T9672] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 593.873150][ T9597] Cannot create hsr debugfs directory [ 593.877922][ T9672] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 593.922553][ T9672] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 593.955642][ T9672] UDF-fs: Scanning with blocksize 512 failed [ 593.968281][ T9672] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 593.978232][ T9672] UDF-fs: Scanning with blocksize 1024 failed [ 593.999653][ T9672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 594.012784][ T9672] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 594.020945][ T9672] UDF-fs: Scanning with blocksize 2048 failed [ 594.031600][ T9672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 594.070221][ T9672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 594.088256][ T9672] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 594.096222][ T9672] UDF-fs: Scanning with blocksize 4096 failed [ 594.102755][ T9672] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 594.143389][ T9674] syzkaller0: entered promiscuous mode [ 594.158269][ T9674] syzkaller0: entered allmulticast mode [ 594.238342][ T7485] hsr_slave_0: left promiscuous mode [ 594.259619][ T7485] hsr_slave_1: left promiscuous mode [ 594.273845][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 594.273861][ T29] audit: type=1326 audit(2000000323.603:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.302793][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.317191][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.326343][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.334452][ T29] audit: type=1326 audit(2000000323.634:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.357509][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.368964][ T29] audit: type=1326 audit(2000000323.634:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.430243][ T7485] veth1_macvtap: left promiscuous mode [ 594.436009][ T29] audit: type=1326 audit(2000000323.634:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.466650][ T7485] veth0_macvtap: left promiscuous mode [ 594.474318][ T7485] veth1_vlan: left promiscuous mode [ 594.479895][ T7485] veth0_vlan: left promiscuous mode [ 594.486343][ T9684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.490283][ T29] audit: type=1326 audit(2000000323.634:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.518965][ T5352] IPVS: starting estimator thread 0... [ 594.526024][ T29] audit: type=1326 audit(2000000323.634:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.552987][ T29] audit: type=1326 audit(2000000323.634:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.604687][ T9685] IPVS: using max 18 ests per chain, 43200 per kthread [ 594.611693][ T29] audit: type=1326 audit(2000000323.634:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.644632][ T29] audit: type=1326 audit(2000000323.634:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.699256][ T29] audit: type=1326 audit(2000000323.634:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3d8b799b9 code=0x7ffc0000 [ 594.835372][ T9682] loop2: detected capacity change from 0 to 32768 [ 594.924056][ T9682] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 595.023027][ T9682] XFS (loop2): Ending clean mount [ 595.155007][ T9168] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 595.638991][ T7485] team0 (unregistering): Port device team_slave_1 removed [ 595.718592][ T7485] team0 (unregistering): Port device team_slave_0 removed [ 599.567136][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.642047][ T9492] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.866147][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.873331][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.934533][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.942060][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.580746][ T9492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.591222][ T9492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.013868][ T9733] loop2: detected capacity change from 0 to 128 [ 601.029184][ T9733] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 601.180666][ T9733] syz.2.751: attempt to access beyond end of device [ 601.180666][ T9733] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 601.195248][ T9733] syz.2.751: attempt to access beyond end of device [ 601.195248][ T9733] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 601.250596][ T9734] FAT-fs (loop2): FAT read failed (blocknr 128) [ 601.680190][ T9732] loop3: detected capacity change from 0 to 1024 [ 601.811104][ T9732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.873429][ T9597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 601.898258][ T9740] loop2: detected capacity change from 0 to 512 [ 601.941362][ T9597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 601.954113][ T9740] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.753: invalid indirect mapped block 8 (level 2) [ 601.986529][ T9597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.013455][ T9597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.039843][ T9740] EXT4-fs (loop2): 1 truncate cleaned up [ 602.045978][ T9740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.151306][ T9492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.340502][ T9492] veth0_vlan: entered promiscuous mode [ 602.367533][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.928111][ T9164] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.965920][ T9597] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.975513][ T9168] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 603.013103][ T9492] veth1_vlan: entered promiscuous mode [ 603.095150][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.102345][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.120322][ T9168] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 603.159913][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.167108][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.194335][ T9168] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 603.252719][ T9492] veth0_macvtap: entered promiscuous mode [ 603.272682][ T9168] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 603.300639][ T9492] veth1_macvtap: entered promiscuous mode [ 603.416112][ T9745] coredump: 65(syz.2.753): interrupted: fatal signal pending [ 603.424301][ T9745] coredump: 65(syz.2.753): Error writing out the process memory [ 603.432914][ T9745] coredump: 65(syz.2.753): written to core: VMAs: 39, size 99651584; core: 53007626 bytes, pos 78909440 [ 603.474990][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.516684][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.552291][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.568669][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.578819][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.589573][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.610652][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.683171][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.695301][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.714741][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.733771][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.746600][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.759983][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.776983][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.797626][ T9492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.807333][ T9492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.820010][ T9492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.828754][ T9492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.032273][ T8166] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 604.080192][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.184509][ T9745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.251668][ T8166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.310131][ T8166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.332683][ T8166] usb 5-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 604.349991][ T8166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.368697][ T8166] usb 5-1: config 0 descriptor?? [ 604.380896][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.494637][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.522530][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.534563][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.553934][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.576018][ T7485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.590726][ T7485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.625836][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.750112][ T9597] veth0_vlan: entered promiscuous mode [ 604.806871][ T8166] logitech 0003:046D:C101.000C: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.4-1/input0 [ 604.818469][ T9597] veth1_vlan: entered promiscuous mode [ 604.843800][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 604.860284][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 604.870244][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 604.882423][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 604.891850][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 604.904003][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 604.955053][ T35] bridge_slave_1: left allmulticast mode [ 604.961167][ T35] bridge_slave_1: left promiscuous mode [ 604.967104][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.998381][ T35] bridge_slave_0: left allmulticast mode [ 605.013739][ T35] bridge_slave_0: left promiscuous mode [ 605.028912][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.104475][ T9765] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 605.439619][ T9762] loop0: detected capacity change from 0 to 32768 [ 605.490911][ T9762] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 605.598354][ T9762] XFS (loop0): Ending clean mount [ 605.666702][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 605.677772][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.711273][ T2467] kworker/u8:6 (2467) used greatest stack depth: 17720 bytes left [ 605.719362][ T6439] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 605.762020][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 605.762040][ T29] audit: type=1804 audit(2000000335.650:193): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.699" name="/newroot/0/file0/bus" dev="loop0" ino=9289 res=1 errno=0 [ 605.916073][ T6439] usb 4-1: Using ep0 maxpacket: 8 [ 605.921707][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.930421][ T29] audit: type=1804 audit(2000000335.818:194): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.699" name="/newroot/0/file0/bus" dev="loop0" ino=9289 res=1 errno=0 [ 605.952503][ T6439] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 605.952538][ T6439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.969842][ T6439] usb 4-1: config 0 descriptor?? [ 605.995560][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.022476][ T35] bond0 (unregistering): Released all slaves [ 606.080780][ T1807] usb 5-1: USB disconnect, device number 17 [ 606.128669][ T9597] veth0_macvtap: entered promiscuous mode [ 606.172234][ T9597] veth1_macvtap: entered promiscuous mode [ 606.199538][ T9492] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 606.482599][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.504770][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.531884][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.551796][ T9782] loop0: detected capacity change from 0 to 512 [ 606.558743][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.588379][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.599800][ T9782] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.762: bad orphan inode 15 [ 606.610494][ T9782] ext4_test_bit(bit=14, block=18) = 1 [ 606.619222][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.635286][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.649922][ T9782] is_bad_inode(inode)=0 [ 606.654107][ T9782] NEXT_ORPHAN(inode)=1023 [ 606.658423][ T9782] max_ino=32 [ 606.673625][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.693124][ T9782] i_nlink=0 [ 606.727355][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.758745][ T9782] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2978: inode #15: comm syz.0.762: corrupted xattr block 19: e_value size too large [ 606.796880][ T9769] loop3: detected capacity change from 0 to 1024 [ 606.832476][ T9782] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 606.885241][ T5240] Bluetooth: hci0: command tx timeout [ 606.895394][ T9782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.908629][ T9782] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 606.931745][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.949059][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.953715][ T6439] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 606.959938][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.983538][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.989940][ T6439] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 606.994894][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.019606][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.029868][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.042278][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.050793][ T6439] asix 4-1:0.0: probe with driver asix failed with error -71 [ 607.053808][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.093185][ T6439] usb 4-1: USB disconnect, device number 11 [ 607.104412][ T35] hsr_slave_0: left promiscuous mode [ 607.112322][ T35] hsr_slave_1: left promiscuous mode [ 607.119969][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.127967][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.140626][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.148488][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.177150][ T35] veth1_macvtap: left promiscuous mode [ 607.182707][ T35] veth0_macvtap: left promiscuous mode [ 607.191583][ T35] veth1_vlan: left promiscuous mode [ 607.197170][ T35] veth0_vlan: left promiscuous mode [ 607.629930][ T6335] hfsplus: b-tree write err: -5, ino 4 [ 607.859778][ T35] team0 (unregistering): Port device team_slave_1 removed [ 607.965432][ T35] team0 (unregistering): Port device team_slave_0 removed [ 608.168292][ T9795] loop3: detected capacity change from 0 to 256 [ 608.188703][ T9795] exfat: Bad value for 'uid' [ 608.202720][ T9795] exfat: Bad value for 'uid' [ 608.874908][ T5240] Bluetooth: hci0: command tx timeout [ 609.110891][ T9597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.128879][ T9597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.160640][ T9597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.183777][ T9597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.438914][ T9492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.537555][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 609.618510][ T9761] chnl_net:caif_netlink_parms(): no params data found [ 609.661276][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.685396][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.765578][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 609.782123][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 609.792691][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.814941][ T25] usb 5-1: config 0 descriptor?? [ 610.559279][ T9802] netlink: 'syz.4.766': attribute type 10 has an invalid length. [ 610.674385][ T9813] loop3: detected capacity change from 0 to 256 [ 610.796040][ T9802] team0: Device veth1_macvtap failed to register rx_handler [ 610.833767][ T9813] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 610.871591][ T5240] Bluetooth: hci0: command tx timeout [ 610.921054][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.928426][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.937042][ T9761] bridge_slave_0: entered allmulticast mode [ 610.952619][ T9761] bridge_slave_0: entered promiscuous mode [ 611.509027][ T7485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.517268][ T29] audit: type=1800 audit(2000000341.674:195): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.768" name="file1" dev="loop3" ino=1048731 res=0 errno=0 [ 611.558854][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 611.569136][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 611.580895][ T25] asix 5-1:0.0: probe with driver asix failed with error -71 [ 611.597675][ T25] usb 5-1: USB disconnect, device number 18 [ 611.767601][ T7485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.795767][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.802915][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.847990][ T9761] bridge_slave_1: entered allmulticast mode [ 611.860668][ T9824] loop0: detected capacity change from 0 to 256 [ 611.876091][ T9761] bridge_slave_1: entered promiscuous mode [ 611.893131][ T9824] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.942174][ T9824] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 612.834260][ T5240] Bluetooth: hci0: command tx timeout [ 614.318316][ T9761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.576692][ T9761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.612203][ T9840] loop1: detected capacity change from 0 to 256 [ 614.752340][ T9842] loop3: detected capacity change from 0 to 2048 [ 614.771710][ T9842] udf: Bad value for 'anchor' [ 614.921955][ T9761] team0: Port device team_slave_0 added [ 615.570008][ T9761] team0: Port device team_slave_1 added [ 616.639120][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.656367][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.770463][ T9761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.814234][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.833258][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.906777][ T9761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.932478][ T5315] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 617.104319][ T9761] hsr_slave_0: entered promiscuous mode [ 617.125347][ T5315] usb 5-1: Using ep0 maxpacket: 32 [ 617.139232][ T5315] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 8 [ 617.149867][ T9761] hsr_slave_1: entered promiscuous mode [ 617.156310][ T9761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.172367][ T9761] Cannot create hsr debugfs directory [ 617.178389][ T5315] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 617.255754][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 617.912718][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 617.948292][ T5315] usb 5-1: Product: syz [ 617.959059][ T5315] usb 5-1: Manufacturer: syz [ 617.965399][ T5315] usb 5-1: SerialNumber: syz [ 617.992454][ T5315] usb 5-1: config 0 descriptor?? [ 618.028308][ T9857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 618.132604][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 618.149020][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 618.168330][ T25] usb 2-1: config 0 has no interface number 0 [ 618.332961][ T9875] loop0: detected capacity change from 0 to 128 [ 618.354647][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d [ 618.371690][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.380219][ T25] usb 2-1: Product: syz [ 618.384565][ T25] usb 2-1: Manufacturer: syz [ 618.389675][ T25] usb 2-1: SerialNumber: syz [ 618.396603][ T25] usb 2-1: config 0 descriptor?? [ 619.268253][ T25] usb 2-1: USB disconnect, device number 13 [ 619.321136][ T5315] usb 5-1: USB disconnect, device number 19 [ 619.720423][ T9875] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 620.140011][ T9883] x_tables: duplicate underflow at hook 1 [ 620.151598][ T9880] vlan2: entered promiscuous mode [ 620.162268][ T9880] batadv0: entered promiscuous mode [ 620.193704][ T9880] batadv0: left promiscuous mode [ 620.250337][ T9883] loop1: detected capacity change from 0 to 256 [ 620.267270][ T9883] exfat: Deprecated parameter 'namecase' [ 620.312895][ T9883] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 621.000646][ T5315] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 621.477049][ T5315] usb 2-1: Using ep0 maxpacket: 32 [ 621.496385][ T5315] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 621.514965][ T5315] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 621.535683][ T5315] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 621.554667][ T5315] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 621.569858][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 621.581383][ T5315] usb 2-1: Product: syz [ 621.590203][ T5315] usb 2-1: Manufacturer: syz [ 621.623649][ T9761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 621.639387][ T5315] usb 2-1: SerialNumber: syz [ 621.681993][ T9761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 621.742124][ T9761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 621.793791][ T9761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 622.338730][ T9908] loop4: detected capacity change from 0 to 1024 [ 622.371077][ T5315] usb 2-1: USB disconnect, device number 14 [ 622.428825][ T9908] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 622.438914][ T9908] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 622.451293][ T9908] EXT4-fs (loop4): invalid journal inode [ 622.458083][ T9908] EXT4-fs (loop4): can't get journal size [ 622.481542][ T9908] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.788: blocks 48-48 from inode overlap system zone [ 622.503462][ T9908] EXT4-fs (loop4): failed to initialize system zone (-117) [ 622.512482][ T9908] EXT4-fs (loop4): mount failed [ 622.679608][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.732025][ T9761] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.785596][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.792775][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.826168][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.833434][ T6335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.382074][ T9761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.515594][ T9761] veth0_vlan: entered promiscuous mode [ 623.618704][ T9761] veth1_vlan: entered promiscuous mode [ 623.801699][ T9761] veth0_macvtap: entered promiscuous mode [ 623.847706][ T9761] veth1_macvtap: entered promiscuous mode [ 623.923553][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.952666][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.006989][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.037541][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.067067][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.083979][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.094308][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.111954][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.132853][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.160906][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.178876][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.191013][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.207700][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.220160][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.246593][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.273300][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.297749][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.326894][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.378309][ T9761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.398605][ T9761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.425935][ T9761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.452937][ T9761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.522324][ T9796] coredump: 93(syz.3.764): written to core: VMAs: 39, size 97554432; core: 71779550 bytes, pos 97562624 [ 629.627339][ T9925] 9pnet_fd: p9_fd_create_unix (9925): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 629.670369][ T9927] loop3: detected capacity change from 0 to 64 [ 629.807305][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.815184][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.000531][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.044627][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.298963][ T9939] serio: Serial port pts1 [ 630.814885][ T9941] bridge0: entered promiscuous mode [ 630.854910][ T9927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.792'. [ 630.865441][ T9941] vlan2: entered promiscuous mode [ 630.911653][ T9941] bridge0: left promiscuous mode [ 631.296804][ T9957] syz.1.797: attempt to access beyond end of device [ 631.296804][ T9957] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 631.310501][ T9957] efs: cannot read volume header [ 631.863803][ T46] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 632.059493][ T46] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 632.081537][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 632.120786][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8447, setting to 1024 [ 632.168217][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 633.202210][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 633.219476][ T46] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 634.105087][ T46] usb 5-1: Manufacturer: syz [ 634.142653][ T46] usb 5-1: config 0 descriptor?? [ 634.149278][ T46] usb 5-1: can't set config #0, error -71 [ 634.186373][ T46] usb 5-1: USB disconnect, device number 20 [ 634.363381][ T6439] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 634.924679][ T6439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.952205][ T6439] usb 4-1: New USB device found, idVendor=0419, idProduct=06df, bcdDevice= 0.00 [ 634.980196][ T6439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.006329][ T6439] usb 4-1: config 0 descriptor?? [ 635.011103][ T9977] loop1: detected capacity change from 0 to 8192 [ 635.024800][ T6439] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 635.172284][ T9977] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 635.186786][ T9977] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 635.197404][ T9977] REISERFS (device loop1): using ordered data mode [ 635.204378][ T9977] reiserfs: using flush barriers [ 635.213675][ T9977] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device unknown-block(7,1): -16 [ 635.226131][ T9977] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device [ 635.245998][ T9977] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 637.218285][ T9996] loop0: detected capacity change from 0 to 128 [ 638.709934][ T6439] usb 4-1: USB disconnect, device number 12 [ 638.968994][T10040] pimreg: entered allmulticast mode [ 638.981165][T10040] pimreg: left allmulticast mode [ 639.315637][ T5315] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 639.544476][ T5315] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 639.661083][ T5315] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 639.793663][ T5315] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 639.914189][ T5315] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 639.945067][ T5315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.989340][T10044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 640.416214][T10044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 640.961949][T10060] loop4: detected capacity change from 0 to 256 [ 642.282289][ T5315] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.727799][ T5315] usb 3-1: USB disconnect, device number 19 [ 643.026501][T10070] loop1: detected capacity change from 0 to 512 [ 643.119048][T10070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.136845][ T29] audit: type=1800 audit(2000000374.866:196): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.819" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 643.585522][ T29] audit: type=1804 audit(2000000374.940:197): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.819" name="/newroot/9/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 643.648585][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.141387][T10062] loop3: detected capacity change from 0 to 32768 [ 644.166311][T10062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.817 (10062) [ 644.267010][T10085] netlink: 'syz.2.823': attribute type 4 has an invalid length. [ 644.998272][T10086] loop1: detected capacity change from 0 to 64 [ 645.039250][T10062] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 645.108397][T10062] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 645.135104][T10084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.147458][T10062] BTRFS info (device loop3): using free-space-tree [ 645.157872][T10088] loop2: detected capacity change from 0 to 256 [ 645.194912][T10088] MINIX-fs: mounting file system with errors, running fsck is recommended [ 645.248091][T10088] Trying to free block not in datazone [ 645.263455][T10088] Trying to free block not in datazone [ 645.326420][T10100] loop0: detected capacity change from 0 to 512 [ 645.425807][T10100] EXT4-fs (loop0): 1 truncate cleaned up [ 645.434282][T10100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.455922][ T9164] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 645.612562][T10114] loop4: detected capacity change from 0 to 1024 [ 645.811215][T10114] syz.4.828: attempt to access beyond end of device [ 645.811215][T10114] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 645.865482][ T29] audit: type=1326 audit(2000000377.742:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.4.828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae513799b9 code=0x0 [ 646.028573][T10116] syz.4.828: attempt to access beyond end of device [ 646.028573][T10116] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 646.645933][ T9492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.499225][T10121] infiniband syz2: set active [ 647.504380][T10121] infiniband syz2: added team_slave_1 [ 647.512418][T10121] syz2: rxe_create_cq: returned err = -12 [ 647.519323][T10121] infiniband syz2: Couldn't create ib_mad CQ [ 647.525574][T10121] infiniband syz2: Couldn't open port 1 [ 647.577484][T10121] RDS/IB: syz2: added [ 647.582888][T10121] smc: adding ib device syz2 with port count 1 [ 647.589597][T10121] smc: ib device syz2 port 1 has pnetid [ 647.651992][T10126] loop2: detected capacity change from 0 to 764 [ 647.727505][T10126] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 648.720095][T10137] loop3: detected capacity change from 0 to 512 [ 648.742919][ T29] audit: type=1326 audit(2000000380.743:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e59799b9 code=0x7fc00000 [ 648.765210][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.803341][T10137] EXT4-fs (loop3): filesystem is read-only [ 649.330880][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 649.704964][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 649.725286][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.749369][T10155] coredump: 29(syz.2.831): coredump has not been created, error -30 [ 649.764291][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.785322][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 649.810316][ T25] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 649.828241][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.847518][ T25] usb 2-1: config 0 descriptor?? [ 649.937749][T10157] loop4: detected capacity change from 0 to 64 [ 649.960631][T10157] minix: Unknown parameter '@' [ 650.608075][T10166] loop0: detected capacity change from 0 to 4096 [ 651.139632][T10166] ntfs3: loop0: Failed to load $BadClus (-22). [ 651.429609][T10168] loop2: detected capacity change from 0 to 64 [ 651.486435][T10167] loop1: detected capacity change from 0 to 512 [ 652.135211][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 653.727830][T10175] loop0: detected capacity change from 0 to 1024 [ 653.770737][T10175] hfsplus: failed to load root directory [ 653.812640][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 653.818687][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 653.957995][ T25] usb 2-1: USB disconnect, device number 15 [ 654.178439][T10179] loop0: detected capacity change from 0 to 2048 [ 655.183222][T10179] loop0: p3 < > p4 < > [ 655.307482][T10179] loop0: partition table partially beyond EOD, truncated [ 655.439645][T10179] loop0: p3 start 4284289 is beyond EOD, truncated [ 655.464573][ T4682] loop0: p3 < > p4 < > [ 655.474360][ T4682] loop0: partition table partially beyond EOD, truncated [ 655.481826][ T4682] loop0: p3 start 4284289 is beyond EOD, truncated [ 656.510278][ T8946] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 658.531154][T10202] 9pnet_fd: Insufficient options for proto=fd [ 658.622138][ T8946] usb 1-1: Using ep0 maxpacket: 16 [ 659.299589][ T8946] usb 1-1: device descriptor read/all, error -71 [ 659.547422][T10218] loop4: detected capacity change from 0 to 256 [ 659.858702][T10223] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 659.962189][T10218] Bluetooth: MGMT ver 1.23 [ 661.790664][T10244] loop4: detected capacity change from 0 to 1764 [ 664.243572][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.261391][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.271297][T10266] dummy0: entered promiscuous mode [ 664.301412][T10266] batadv0: entered promiscuous mode [ 665.053875][ T5240] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 665.652144][T10285] loop4: detected capacity change from 0 to 256 [ 666.397400][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 667.061188][T10293] loop0: detected capacity change from 0 to 1024 [ 667.104296][T10293] EXT4-fs: Ignoring removed i_version option [ 667.110151][T10293] EXT4-fs (loop0): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 667.262164][T10293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.318331][ T29] audit: type=1800 audit(2000000400.241:200): pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.875" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 667.382064][T10300] loop4: detected capacity change from 0 to 1024 [ 667.414476][T10300] hfsplus: failed to load attributes file [ 667.484280][T10302] loop0: detected capacity change from 1024 to 11 [ 667.504272][T10303] syz.0.875: attempt to access beyond end of device [ 667.504272][T10303] loop0: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 667.602216][T10303] syz.0.875: attempt to access beyond end of device [ 667.602216][T10303] loop0: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 667.602304][T10303] syz.0.875: attempt to access beyond end of device [ 667.602304][T10303] loop0: rw=524288, sector=16, nr_sectors = 2 limit=11 [ 667.602379][T10303] syz.0.875: attempt to access beyond end of device [ 667.602379][T10303] loop0: rw=524288, sector=20, nr_sectors = 2 limit=11 [ 667.602458][T10303] syz.0.875: attempt to access beyond end of device [ 667.602458][T10303] loop0: rw=524288, sector=22, nr_sectors = 2 limit=11 [ 667.602679][T10303] syz.0.875: attempt to access beyond end of device [ 667.602679][T10303] loop0: rw=12288, sector=18, nr_sectors = 2 limit=11 [ 667.602785][T10303] EXT4-fs error (device loop0): ext4_get_inode_loc:4571: inode #18: block 9: comm syz.0.875: unable to read itable block [ 667.611618][T10303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5807: IO failure [ 667.712897][ T5315] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 667.723318][T10303] EXT4-fs error (device loop0): ext4_dirty_inode:6011: inode #18: comm syz.0.875: mark_inode_dirty error [ 667.723822][T10303] syz.0.875: attempt to access beyond end of device [ 667.723822][T10303] loop0: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 667.723907][T10303] syz.0.875: attempt to access beyond end of device [ 667.723907][T10303] loop0: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 667.726735][T10303] syz.0.875: attempt to access beyond end of device [ 667.726735][T10303] loop0: rw=524288, sector=16, nr_sectors = 2 limit=11 [ 667.726820][T10303] syz.0.875: attempt to access beyond end of device [ 667.726820][T10303] loop0: rw=524288, sector=20, nr_sectors = 2 limit=11 [ 667.726999][T10303] EXT4-fs error (device loop0): ext4_get_inode_loc:4571: inode #18: block 9: comm syz.0.875: unable to read itable block [ 667.727400][T10303] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #18: comm syz.0.875: can't get inode location 18 [ 667.746508][T10303] EXT4-fs error (device loop0): ext4_get_inode_loc:4571: inode #18: block 9: comm syz.0.875: unable to read itable block [ 667.765087][T10303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5807: IO failure [ 667.765525][T10303] EXT4-fs error (device loop0): ext4_dirty_inode:6011: inode #18: comm syz.0.875: mark_inode_dirty error [ 667.769230][T10303] EXT4-fs error (device loop0): ext4_get_inode_loc:4571: inode #18: block 9: comm syz.0.875: unable to read itable block [ 667.770400][T10303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5807: IO failure [ 667.771362][T10303] EXT4-fs (loop0): discard request in group:0 block:7 count:16 failed with -5 [ 667.890032][ T5315] usb 5-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 667.890073][ T5315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 667.890111][ T5315] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 667.892216][ T5315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.892256][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.892278][ T5315] usb 5-1: Product: syz [ 667.892294][ T5315] usb 5-1: Manufacturer: syz [ 667.892310][ T5315] usb 5-1: SerialNumber: syz [ 667.896987][ T5315] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 667.897027][ T5315] cdc_ncm 5-1:1.0: bind() failure [ 668.198876][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.241711][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.255197][ T9870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.273376][T10289] loop2: detected capacity change from 0 to 32768 [ 668.305345][T10294] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 668.334243][T10289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.874 (10289) [ 668.641388][T10289] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 668.641482][T10289] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 668.641512][T10289] BTRFS info (device loop2): using free-space-tree [ 668.712834][T10318] loop3: detected capacity change from 0 to 512 [ 668.727708][ T1807] usb 5-1: USB disconnect, device number 21 [ 668.733171][T10318] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 668.733194][T10318] UDF-fs: Scanning with blocksize 512 failed [ 668.734236][T10318] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 668.734259][T10318] UDF-fs: Scanning with blocksize 1024 failed [ 668.736616][T10318] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 668.736637][T10318] UDF-fs: Scanning with blocksize 2048 failed [ 668.737438][T10318] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 668.754886][T10318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.820974][T10318] bridge_slave_0: left allmulticast mode [ 668.821004][T10318] bridge_slave_0: left promiscuous mode [ 668.821157][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.977223][ T5240] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 668.977363][ T5240] Bluetooth: hci0: Injecting HCI hardware error event [ 668.982662][ T5240] Bluetooth: hci0: hardware error 0x00 [ 669.375034][ T9761] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 670.120767][ T7491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.000653][ T5240] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 671.138978][ T7491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.672192][ T7491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.033887][ T7491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.119217][T10340] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 672.182773][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 672.470081][ T7491] bridge_slave_1: left allmulticast mode [ 672.475803][ T7491] bridge_slave_1: left promiscuous mode [ 672.505443][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.560685][ T7491] bridge_slave_0: left allmulticast mode [ 672.568146][ T7491] bridge_slave_0: left promiscuous mode [ 672.576227][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.588285][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.648777][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.648882][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.675234][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.683329][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 672.693366][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.913043][T10363] loop1: detected capacity change from 0 to 512 [ 672.939052][T10363] EXT4-fs (loop1): Test dummy encryption mode enabled [ 672.965256][T10363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 673.037910][T10363] EXT4-fs (loop1): 1 truncate cleaned up [ 673.039666][ T5283] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 673.079020][T10363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.094358][T10339] loop2: detected capacity change from 0 to 32768 [ 673.121105][T10339] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.261792][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 673.270182][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.286034][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 673.302869][T10339] XFS (loop2): Ending clean mount [ 673.315361][ T5283] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 673.341589][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.371940][ T5283] usb 5-1: config 0 descriptor?? [ 673.385742][ T5283] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 673.440244][T10376] netlink: 4668 bytes leftover after parsing attributes in process `syz.2.884'. [ 673.537888][ T9761] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.674286][ T5283] usb 5-1: USB disconnect, device number 22 [ 674.040865][ T7491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.099305][ T7491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.126619][ T7491] bond0 (unregistering): Released all slaves [ 674.151085][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 674.437401][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.709551][ T5240] Bluetooth: hci1: command tx timeout [ 674.776455][T10385] loop4: detected capacity change from 0 to 1024 [ 674.819210][T10385] EXT4-fs: Ignoring removed orlov option [ 674.877667][T10385] EXT4-fs (loop4): Test dummy encryption mode enabled [ 674.936566][T10385] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 675.000492][T10385] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 675.035987][T10385] EXT4-fs (loop4): invalid journal inode [ 675.102228][T10385] EXT4-fs (loop4): can't get journal size [ 675.350806][T10385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 675.716623][ T9236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.744900][T10395] loop1: detected capacity change from 0 to 2048 [ 675.915210][T10395] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 675.961075][T10395] UDF-fs: Scanning with blocksize 512 failed [ 676.030251][T10395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.126410][ T7491] hsr_slave_0: left promiscuous mode [ 676.165770][ T7491] hsr_slave_1: left promiscuous mode [ 676.212264][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.257692][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.271842][T10401] loop3: detected capacity change from 0 to 2048 [ 676.301624][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.328601][T10401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.353859][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.388472][T10401] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.421242][ T7491] veth1_macvtap: left promiscuous mode [ 676.438210][T10401] fs-verity (loop3, inode 13): Unknown hash algorithm number: 4 [ 676.457660][ T7491] veth0_macvtap: left promiscuous mode [ 676.476218][T10407] loop4: detected capacity change from 0 to 1024 [ 676.484391][ T7491] veth1_vlan: left promiscuous mode [ 676.506473][ T7491] veth0_vlan: left promiscuous mode [ 676.632549][ T5234] Bluetooth: hci1: command tx timeout [ 676.647202][T10410] loop1: detected capacity change from 0 to 512 [ 676.686181][T10410] EXT4-fs: Ignoring removed oldalloc option [ 676.810983][T10410] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.899: Parent and EA inode have the same ino 15 [ 676.878666][T10410] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.899: Parent and EA inode have the same ino 15 [ 676.942752][T10410] EXT4-fs (loop1): 1 orphan inode deleted [ 676.960449][T10410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.888253][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.932216][ T9164] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.916684][ T5234] Bluetooth: hci1: command 0x040f tx timeout [ 680.904552][ T5234] Bluetooth: hci1: command 0x040f tx timeout [ 681.120271][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.903'. [ 681.686098][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.903'. [ 682.565964][T10431] loop3: detected capacity change from 0 to 4096 [ 682.586946][T10431] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 682.604470][T10431] ntfs3: loop3: Failed to load $LogFile (-22). [ 682.885022][ T5240] Bluetooth: hci1: command 0x040f tx timeout [ 683.185647][ T7491] team0 (unregistering): Port device team_slave_1 removed [ 683.288264][ T7491] team0 (unregistering): Port device team_slave_0 removed [ 683.356424][T10442] loop4: detected capacity change from 0 to 40427 [ 683.369025][T10442] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 683.379021][T10442] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 683.458776][T10442] F2FS-fs (loop4): Found nat_bits in checkpoint [ 683.511238][T10442] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 683.518684][T10442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 684.583621][T10428] bridge_slave_1: left allmulticast mode [ 684.597447][T10428] bridge_slave_1: left promiscuous mode [ 684.614378][T10428] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.646833][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 684.655760][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'. [ 684.674437][T10444] geneve2: entered promiscuous mode [ 684.681340][T10444] geneve2: entered allmulticast mode [ 684.805721][T10460] loop2: detected capacity change from 0 to 128 [ 684.932071][T10352] chnl_net:caif_netlink_parms(): no params data found [ 684.936661][T10460] vfat: Unknown parameter './file1' [ 685.169727][T10458] loop4: detected capacity change from 0 to 64 [ 685.247622][T10460] loop2: detected capacity change from 0 to 512 [ 686.153249][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.160394][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.390766][T10352] bridge_slave_0: entered allmulticast mode [ 686.397834][T10352] bridge_slave_0: entered promiscuous mode [ 686.632666][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.641257][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.648628][T10352] bridge_slave_1: entered allmulticast mode [ 686.657189][T10352] bridge_slave_1: entered promiscuous mode [ 686.681159][T10480] loop2: detected capacity change from 0 to 128 [ 686.702471][T10480] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 34359738403)! [ 686.745425][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.789654][T10480] EXT4-fs (loop2): group descriptors corrupted! [ 686.797802][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.863855][T10482] loop1: detected capacity change from 0 to 1024 [ 686.873370][T10482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 686.886244][T10480] @ÿ: renamed from veth0_vlan (while UP) [ 686.928898][T10482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.080029][T10489] loop3: detected capacity change from 0 to 512 [ 687.108745][T10352] team0: Port device team_slave_0 added [ 687.124959][T10489] EXT4-fs: Ignoring removed nobh option [ 687.153420][T10489] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 687.174708][T10352] team0: Port device team_slave_1 added [ 687.218943][T10482] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.1.916: corrupted in-inode xattr: bad e_name length [ 687.312431][T10491] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #2: comm syz.1.916: corrupted in-inode xattr: bad e_name length [ 687.328025][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.347190][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.375702][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.391500][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.399089][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.428955][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.565464][T10352] hsr_slave_0: entered promiscuous mode [ 687.580049][T10352] hsr_slave_1: entered promiscuous mode [ 687.608241][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.639634][T10352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.648942][T10352] Cannot create hsr debugfs directory [ 688.903715][T10511] binder: 10510:10511 ioctl c018620c 20000180 returned -1 [ 689.974174][T10516] loop2: detected capacity change from 0 to 2048 [ 689.990382][T10516] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 690.769539][T10516] NILFS (loop2): invalid segment: Checksum error in segment payload [ 690.809795][T10516] NILFS (loop2): unable to fall back to spare super block [ 690.819040][T10516] NILFS (loop2): error -22 while searching super root [ 690.974053][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 690.995617][T10352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 691.023920][T10531] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 691.034591][T10352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 691.042837][ T29] audit: type=1326 audit(2000000425.153:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.2.923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccd03799b9 code=0x0 [ 691.081318][T10352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 691.128536][T10352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 691.281715][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 691.295271][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 691.307451][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 691.332989][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 692.019159][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.035858][T10528] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 692.048277][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 692.106642][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.153841][ T8] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 692.187824][ T9881] udevd[9881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.240323][ T8] usb 4-1: USB disconnect, device number 13 [ 692.341254][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.507517][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.514728][ T7491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.524694][T10544] loop4: detected capacity change from 0 to 764 [ 692.537024][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.544168][ T7491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.598720][T10544] rock: directory entry would overflow storage [ 692.606897][T10544] rock: sig=0x4654, size=5, remaining=4 [ 692.691876][T10544] rock: directory entry would overflow storage [ 692.698272][T10544] rock: sig=0x4f50, size=4, remaining=3 [ 692.704320][T10544] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 693.125295][T10547] rock: directory entry would overflow storage [ 693.131648][T10547] rock: sig=0x4f50, size=4, remaining=3 [ 693.137515][T10547] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 693.529933][T10549] syz.1.932[10549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 693.530042][T10549] syz.1.932[10549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 693.663948][T10549] loop1: detected capacity change from 0 to 512 [ 693.757020][T10553] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 693.799285][T10549] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 693.807585][T10549] System zones: 0-2, 18-18, 34-35 [ 693.825110][T10549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.848077][T10549] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.849897][T10553] loop3: detected capacity change from 0 to 64 [ 693.907031][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.112547][T10352] veth0_vlan: entered promiscuous mode [ 694.121672][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.208826][T10562] loop4: detected capacity change from 0 to 64 [ 694.256949][T10562] Trying to free block not in datazone [ 694.265126][T10562] Trying to free block not in datazone [ 694.271072][T10562] Trying to free block not in datazone [ 694.277097][T10562] Trying to free block not in datazone [ 694.283221][T10562] Trying to free block not in datazone [ 694.288782][T10562] minix_free_block (loop4:6): bit already cleared [ 694.296079][T10562] Trying to free block not in datazone [ 694.301780][T10562] Trying to free block not in datazone [ 694.562233][T10352] veth1_vlan: entered promiscuous mode [ 694.858999][T10352] veth0_macvtap: entered promiscuous mode [ 694.924983][T10352] veth1_macvtap: entered promiscuous mode [ 694.960241][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.960269][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.960282][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.960296][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.960308][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.960322][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.960334][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.960348][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.961602][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.997555][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.997583][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.997595][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.997610][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.997622][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.997636][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.997648][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.997662][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.998732][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.002082][T10352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.002118][T10352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.002143][T10352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.002167][T10352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.781366][ T7485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.781393][ T7485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.960142][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.960167][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.689202][ T29] audit: type=1326 audit(2000000431.072:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe66f5799b9 code=0x0 [ 696.810119][ T29] audit: type=1326 audit(2000000431.198:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe66f5799b9 code=0x0 [ 697.725104][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.943'. [ 697.746772][T10566] loop1: detected capacity change from 0 to 32768 [ 697.786217][T10566] read_mapping_page failed! [ 697.828549][T10566] jfs_mount: Failed to read AGGREGATE_I [ 697.837440][T10566] Mount JFS Failure: -5 [ 697.841842][T10566] jfs_mount failed w/return code = -5 [ 697.893336][T10592] netlink: 68 bytes leftover after parsing attributes in process `syz.2.943'. [ 699.279924][T10600] loop1: detected capacity change from 0 to 2048 [ 699.493532][T10600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.962100][T10618] loop3: detected capacity change from 0 to 1024 [ 702.060749][T10621] loop0: detected capacity change from 0 to 512 [ 702.080239][T10621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 702.242568][T10621] EXT4-fs (loop0): 1 truncate cleaned up [ 702.249443][T10621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.308354][T10618] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 702.332155][ T29] audit: type=1800 audit(2000000436.980:204): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.950" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 res=0 errno=0 [ 702.375831][T10618] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 702.557394][T10618] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.951: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 702.758916][T10618] EXT4-fs (loop3): get root inode failed [ 702.765538][T10618] EXT4-fs (loop3): mount failed [ 702.812590][T10352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.827091][T10626] loop1: detected capacity change from 0 to 1024 [ 702.943640][T10626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.228406][ T8946] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 704.086066][ T8946] usb 1-1: config 0 has no interfaces? [ 704.162937][ T8946] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 704.348324][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.410884][ T8946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.574249][ T8946] usb 1-1: config 0 descriptor?? [ 705.746357][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 706.090508][T10630] batadv0: entered promiscuous mode [ 706.134481][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 706.314409][T10630] batadv0: left promiscuous mode [ 706.737363][T10660] loop2: detected capacity change from 0 to 65536 [ 707.250448][T10660] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 707.318604][T10660] XFS (loop2): Ending clean mount [ 707.325039][T10660] XFS (loop2): Quotacheck needed: Please wait. [ 707.431845][T10677] netlink: 9 bytes leftover after parsing attributes in process `syz.4.961'. [ 707.439865][T10660] XFS (loop2): Quotacheck: Done. [ 707.467913][T10677] 0·: renamed from hsr_slave_1 (while UP) [ 707.694515][T10677] 0·: entered allmulticast mode [ 707.782888][T10686] netlink: 56 bytes leftover after parsing attributes in process `syz.1.962'. [ 708.380350][T10677] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 708.782834][ T5283] usb 1-1: USB disconnect, device number 10 [ 709.646005][T10681] loop3: detected capacity change from 0 to 256 [ 709.744993][ T9761] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 709.771122][T10681] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x19a2be85, utbl_chksum : 0xe619d30d) [ 709.793280][T10681] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000010) [ 709.813236][T10681] exFAT-fs (loop3): Filesystem has been set read-only [ 709.832143][T10681] exFAT-fs (loop3): failed to load alloc-bitmap [ 709.848657][T10681] exFAT-fs (loop3): failed to recognize exfat type [ 710.414675][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 710.800753][T10698] loop1: detected capacity change from 0 to 32768 [ 710.819913][T10698] XFS: ikeep mount option is deprecated. [ 710.850290][T10698] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 710.929769][T10724] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 710.937575][T10724] netlink: 9360 bytes leftover after parsing attributes in process `syz.3.969'. [ 710.946652][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 710.997037][T10698] XFS (loop1): Ending clean mount [ 711.047920][T10698] XFS (loop1): Quotacheck needed: Please wait. [ 711.260465][T10700] loop4: detected capacity change from 0 to 40427 [ 711.291977][T10698] XFS (loop1): Quotacheck: Done. [ 711.439572][T10700] F2FS-fs (loop4): invalid crc value [ 711.497183][T10700] F2FS-fs (loop4): Found nat_bits in checkpoint [ 711.504893][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 711.548241][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 711.569210][ T9597] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 711.818402][T10700] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 713.308509][T10760] bio_check_eod: 64 callbacks suppressed [ 713.314376][T10760] syz.4.968: attempt to access beyond end of device [ 713.314376][T10760] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 713.330696][T10760] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 713.339031][T10760] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 714.060960][T10764] smc: adding net device pimreg with user defined pnetid SYZ1 [ 714.077954][T10764] pimreg: entered allmulticast mode [ 714.289018][T10776] veth1_macvtap: left promiscuous mode [ 714.306004][T10777] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 714.359256][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 714.378196][T10032] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 714.539237][T10780] loop4: detected capacity change from 0 to 4096 [ 714.559016][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 714.581751][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 714.606478][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.626278][ T5283] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 714.636609][ T25] usb 3-1: Product: syz [ 714.641034][ T25] usb 3-1: Manufacturer: syz [ 714.658808][ T25] usb 3-1: SerialNumber: syz [ 714.673952][ T25] usb 3-1: config 0 descriptor?? [ 714.979709][ T5283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 715.010045][ T5283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 715.108076][ T5283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 715.426334][ T25] msi2500 3-1:0.0: Registered as swradio16 [ 715.457155][ T25] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 715.555142][ T25] usb 3-1: USB disconnect, device number 20 [ 715.747614][T10788] loop3: detected capacity change from 0 to 128 [ 715.783370][T10788] FAT-fs (loop3): Directory bread(block 11554) failed [ 715.791826][T10788] FAT-fs (loop3): Directory bread(block 11555) failed [ 716.271738][T10788] FAT-fs (loop3): Directory bread(block 11556) failed [ 716.278921][T10788] FAT-fs (loop3): Directory bread(block 11557) failed [ 716.285917][T10788] FAT-fs (loop3): Directory bread(block 11558) failed [ 716.292740][T10788] FAT-fs (loop3): Directory bread(block 11559) failed [ 716.299697][T10788] FAT-fs (loop3): Directory bread(block 11560) failed [ 716.306562][T10788] FAT-fs (loop3): Directory bread(block 11561) failed [ 716.314673][T10788] FAT-fs (loop3): Directory bread(block 11562) failed [ 716.321519][T10788] FAT-fs (loop3): Directory bread(block 11563) failed [ 717.597502][ T5283] usb 1-1: string descriptor 0 read error: -71 [ 717.690572][ T5283] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.860946][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.055692][ T5283] usb 1-1: can't set config #1, error -71 [ 718.107453][T10799] loop4: detected capacity change from 0 to 512 [ 718.171305][ T5283] usb 1-1: USB disconnect, device number 11 [ 718.190936][T10799] EXT4-fs (loop4): Test dummy encryption mode enabled [ 718.221236][T10802] loop1: detected capacity change from 0 to 2048 [ 718.449679][T10799] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.982: corrupted in-inode xattr: invalid ea_ino [ 718.517855][T10799] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.982: couldn't read orphan inode 12 (err -117) [ 718.541443][T10802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.129536][T10799] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.499976][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.993232][ T29] audit: type=1326 audit(2000000455.124:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.011086][ T9236] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 721.146587][ T29] audit: type=1326 audit(2000000455.124:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.209800][T10828] loop1: detected capacity change from 0 to 256 [ 721.229717][T10828] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 721.231219][ T29] audit: type=1326 audit(2000000455.124:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.264809][ T29] audit: type=1326 audit(2000000455.135:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.280050][T10828] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 721.290266][ T29] audit: type=1326 audit(2000000455.135:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.389730][ T29] audit: type=1326 audit(2000000455.135:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.543940][ T29] audit: type=1326 audit(2000000455.135:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.566632][ T29] audit: type=1326 audit(2000000455.145:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 721.696357][T10840] Bluetooth: MGMT ver 1.23 [ 721.736631][ T29] audit: type=1326 audit(2000000455.145:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 722.157512][T10842] loop0: detected capacity change from 0 to 128 [ 722.246661][ T29] audit: type=1326 audit(2000000455.145:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fccd03799b9 code=0x7ffc0000 [ 722.319388][T10834] loop4: detected capacity change from 0 to 1024 [ 722.336699][T10834] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 722.437895][T10834] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 722.469181][T10834] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 722.525612][T10834] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 722.607598][T10834] journal_load_superblock: Cannot read journal superblock [ 722.633152][T10834] EXT4-fs (loop4): Could not load journal inode [ 722.721701][T10857] netlink: 92 bytes leftover after parsing attributes in process `syz.3.997'. [ 722.769933][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 722.776503][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.701945][T10870] loop1: detected capacity change from 0 to 1024 [ 723.723785][T10870] EXT4-fs: Ignoring removed orlov option [ 723.732727][T10870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 724.572529][T10870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.542172][ T9597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.142250][T10903] loop2: detected capacity change from 0 to 64 [ 726.243661][T10903] MINIX-fs: bad superblock [ 727.243045][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 727.260119][T10905] loop1: detected capacity change from 0 to 512 [ 727.298447][T10905] EXT4-fs: Ignoring removed orlov option [ 727.328777][T10905] EXT4-fs: Mount option(s) incompatible with ext2 [ 727.408827][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 727.433298][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 727.444360][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 727.459179][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 727.473559][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 727.483311][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 727.871533][ T5281] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 727.953402][T10910] loop2: detected capacity change from 0 to 32768 [ 727.970479][T10910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1009 (10910) [ 728.001806][T10910] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 728.012163][T10910] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 728.021335][T10910] BTRFS info (device loop2): using free-space-tree [ 728.053518][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.094871][ T6335] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x68892996 level 0 [ 728.108846][T10910] BTRFS error (device loop2): failed to load root extent [ 728.255626][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 728.267867][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 728.274547][T10910] BTRFS error (device loop2): open_ctree failed [ 728.309845][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.414205][ T5281] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.484900][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.525697][ T5281] usb 2-1: config 0 descriptor?? [ 728.531765][T10905] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 728.870466][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.937496][T10905] loop1: detected capacity change from 0 to 128 [ 729.032858][ T5281] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 729.094897][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.102709][ T5281] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 729.174268][ T5281] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 729.288368][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.395015][ T25] usb 2-1: USB disconnect, device number 16 [ 729.480603][ T5240] Bluetooth: hci4: command tx timeout [ 729.687972][T10928] loop2: detected capacity change from 0 to 32768 [ 729.874947][ T12] bridge_slave_1: left allmulticast mode [ 729.880661][ T12] bridge_slave_1: left promiscuous mode [ 729.948988][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.004856][ T12] bridge_slave_0: left allmulticast mode [ 730.053578][ T12] bridge_slave_0: left promiscuous mode [ 730.059473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.161354][ T112] ERROR: (device loop2): diFree: numfree > numinos [ 730.161354][ T112] [ 730.444729][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 730.943574][ T46] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 731.133746][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.359762][ T46] usb 2-1: config 0 descriptor?? [ 731.398616][ T46] cp210x 2-1:0.0: cp210x converter detected [ 731.444679][ T5240] Bluetooth: hci4: command tx timeout [ 731.586882][ T46] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 731.596331][ T46] cp210x 2-1:0.0: querying part number failed [ 731.627635][ T46] usb 2-1: cp210x converter now attached to ttyUSB0 [ 732.737620][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.780707][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.805590][ T12] bond0 (unregistering): Released all slaves [ 732.943954][T10940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1014'. [ 733.067902][ T46] usb 2-1: USB disconnect, device number 17 [ 733.130931][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 733.202524][ T46] cp210x 2-1:0.0: device disconnected [ 733.430548][ T5240] Bluetooth: hci4: command tx timeout [ 733.534475][T10907] chnl_net:caif_netlink_parms(): no params data found [ 733.659010][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 734.076950][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 735.103220][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.137201][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 735.174285][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 735.183846][T10907] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.191873][T10907] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.197290][ T46] usb 2-1: SerialNumber: syz [ 735.199145][T10907] bridge_slave_0: entered allmulticast mode [ 735.211893][T10907] bridge_slave_0: entered promiscuous mode [ 735.236683][ T12] dummy0: left promiscuous mode [ 735.244514][ T46] usb 2-1: config 0 descriptor?? [ 735.249890][ T12] batadv0: left promiscuous mode [ 735.267519][ T12] hsr_slave_0: left promiscuous mode [ 735.275544][ T12] 0·: left promiscuous mode [ 735.278900][ T46] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 735.290832][ T46] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized! [ 735.302297][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.303788][ T46] usb 2-1: Failed to create links for entity 255 [ 735.310763][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.321893][ T46] usb 2-1: Failed to register entities (-22). [ 735.330356][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.338444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.386766][ T12] veth0_macvtap: left promiscuous mode [ 735.395231][ T12] veth1_vlan: left promiscuous mode [ 735.402461][ T12] veth0_vlan: left promiscuous mode [ 735.409057][ T5240] Bluetooth: hci4: command tx timeout [ 735.574664][ T5281] usb 2-1: USB disconnect, device number 18 [ 738.492674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 738.721797][ T12] team0 (unregistering): Port device team_slave_0 removed [ 739.322474][T11010] loop2: detected capacity change from 0 to 2048 [ 739.333410][T11010] udf: Unknown parameter 'nov' [ 740.603595][T11013] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 741.629434][T10907] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.638923][T10907] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.656822][T10907] bridge_slave_1: entered allmulticast mode [ 741.664155][T10907] bridge_slave_1: entered promiscuous mode [ 742.854154][T10907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.024444][T10907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.193962][T10907] team0: Port device team_slave_0 added [ 745.204957][ T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 745.236311][T10907] team0: Port device team_slave_1 added [ 745.439160][T10907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.478609][T10907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.539231][T10907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.551611][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.562210][ T46] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 745.574276][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.575534][T10907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.219145][T10907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.263295][ T46] usb 1-1: config 0 descriptor?? [ 746.270735][T11044] loop2: detected capacity change from 0 to 16 [ 746.299717][T10907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.383514][T11044] erofs: (device loop2): mounted with root inode @ nid 36. [ 746.388617][T11048] loop1: detected capacity change from 0 to 512 [ 746.431318][ T46] usb 1-1: can't set config #0, error -71 [ 746.449547][ T46] usb 1-1: USB disconnect, device number 12 [ 746.534705][T11048] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 746.534749][T10907] hsr_slave_0: entered promiscuous mode [ 746.621793][T10907] hsr_slave_1: entered promiscuous mode [ 747.878769][T10907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.915618][T10907] Cannot create hsr debugfs directory [ 747.970580][ T12] IPVS: stop unused estimator thread 0... [ 748.091806][T11066] futex_wake_op: syz.3.1044 tries to shift op by -1; fix this program [ 748.109710][T11064] capability: warning: `syz.1.1043' uses 32-bit capabilities (legacy support in use) [ 748.110772][T11065] loop2: detected capacity change from 0 to 512 [ 748.196082][T11066] loop3: detected capacity change from 0 to 2048 [ 748.274902][T11066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.355928][T11066] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.507302][ T9164] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.735459][T11085] netlink: 420 bytes leftover after parsing attributes in process `syz.3.1049'. [ 751.085861][ T5283] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 751.527238][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 751.549996][ T5283] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.737275][ T5283] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 751.956941][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.985455][T10907] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 752.013659][T10907] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 752.022255][ T5283] usb 2-1: config 0 descriptor?? [ 752.054216][ T5283] usb 2-1: bad CDC descriptors [ 752.079311][T10907] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 752.092785][T10907] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 753.444101][T11103] loop1: detected capacity change from 0 to 1024 [ 753.629597][ T5283] usb 2-1: USB disconnect, device number 19 [ 753.653929][T10907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.727344][T11126] loop2: detected capacity change from 0 to 8 [ 753.768210][T11126] squashfs: Unknown parameter 'Êl80211' [ 753.784951][T10907] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.824584][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.831825][ T518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.851924][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.859131][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.131447][T10907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.001722][T11169] loop2: detected capacity change from 0 to 8 [ 758.699990][ T5240] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 758.710274][ T5240] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 759.840254][T10907] veth0_vlan: entered promiscuous mode [ 759.872526][T10907] veth1_vlan: entered promiscuous mode [ 759.898189][T10907] veth0_macvtap: entered promiscuous mode [ 759.907558][T10907] veth1_macvtap: entered promiscuous mode [ 759.942219][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.957635][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.980960][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.032709][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.065291][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.079525][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.090201][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.102227][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.114640][T10907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.151024][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.178475][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.199486][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.213397][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.229235][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.240890][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.257898][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.269756][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.286689][T10907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.304222][T10907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.320005][T10907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.336513][T10907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.347812][T10907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.429064][ T5281] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 760.470150][T10032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.496326][T10032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.534194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.553867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.195138][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 761.201714][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 761.213673][ T5281] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 761.222832][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.233049][ T5281] usb 4-1: config 0 descriptor?? [ 761.436307][T11182] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 761.445458][T11182] bond0: (slave bond_slave_0): Releasing backup interface [ 761.726885][T11182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.735852][T11182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.750811][ T5281] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 761.758523][ T5281] hid-generic 0003:0158:0100.000E: unexpected long global item [ 761.766503][ T5281] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 761.939719][ T5281] usb 4-1: USB disconnect, device number 14 [ 762.164366][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.353337][T11194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.366041][T11194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.375489][T11194] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.398791][T11194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.411427][T11194] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 762.420801][T11194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.559463][ T5240] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 762.568478][ T5240] Bluetooth: hci3: Injecting HCI hardware error event [ 762.588186][T11194] Bluetooth: hci3: hardware error 0x00 [ 762.691242][T11192] chnl_net:caif_netlink_parms(): no params data found [ 762.737022][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.744468][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.752392][T11192] bridge_slave_0: entered allmulticast mode [ 762.761235][T11192] bridge_slave_0: entered promiscuous mode [ 762.769470][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.778143][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.785414][T11192] bridge_slave_1: entered allmulticast mode [ 762.792294][T11192] bridge_slave_1: entered promiscuous mode [ 762.821146][T11192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.833041][T11192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.861089][T11192] team0: Port device team_slave_0 added [ 762.876418][T11192] team0: Port device team_slave_1 added [ 762.896528][T11192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.904101][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.929985][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.942206][T11192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.954844][T11192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.962101][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.995194][T11192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.038259][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.079243][T11192] hsr_slave_0: entered promiscuous mode [ 763.089766][T11192] hsr_slave_1: entered promiscuous mode [ 763.099390][T11192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.107164][T11192] Cannot create hsr debugfs directory [ 763.140461][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.217204][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.324020][ T11] bridge_slave_1: left allmulticast mode [ 763.334817][ T11] bridge_slave_1: left promiscuous mode [ 763.343748][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.353033][ T11] bridge_slave_0: left allmulticast mode [ 763.360014][ T11] bridge_slave_0: left promiscuous mode [ 763.365709][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.857738][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.869077][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.880148][ T11] bond0 (unregistering): Released all slaves [ 764.244138][ T11] hsr_slave_0: left promiscuous mode [ 764.252611][ T11] hsr_slave_1: left promiscuous mode [ 764.271360][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.279304][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.287925][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.296063][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.318832][ T11] veth1_macvtap: left promiscuous mode [ 764.324526][ T11] veth0_macvtap: left promiscuous mode [ 764.330228][ T11] veth1_vlan: left promiscuous mode [ 764.335931][ T11] veth0_vlan: left promiscuous mode [ 764.378436][ T5240] Bluetooth: hci4: command tx timeout [ 764.530100][T11194] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 764.967564][ T11] team0 (unregistering): Port device team_slave_1 removed [ 765.036795][ T11] team0 (unregistering): Port device team_slave_0 removed [ 765.767193][T11192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 765.802599][T11192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 765.811870][T11192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 765.834633][T11192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 765.960252][T11192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.977786][T11192] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.987980][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.995111][ T7485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.022199][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.029364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.184562][T11192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.325525][T11192] veth0_vlan: entered promiscuous mode [ 766.338137][T11192] veth1_vlan: entered promiscuous mode [ 766.361353][ T5240] Bluetooth: hci4: command tx timeout [ 766.365409][T11192] veth0_macvtap: entered promiscuous mode [ 766.378123][T11192] veth1_macvtap: entered promiscuous mode [ 766.392958][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.403555][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.414012][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.424560][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.434537][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.445555][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.455580][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.467951][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.479371][T11192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.491780][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.502467][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.512288][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.523128][T11194] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 766.529909][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.539899][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.550425][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.560291][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.571979][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.584638][T11192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.595687][T11192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.604580][T11192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.613653][T11192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.622406][T11192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.693057][ T518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.703778][ T518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.725175][ T518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.733204][ T518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.544534][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.792817][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 769.809053][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 769.820347][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 769.830792][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 769.840577][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 769.851100][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 770.034880][T11212] chnl_net:caif_netlink_parms(): no params data found [ 770.080364][T11212] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.087608][T11212] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.095814][T11212] bridge_slave_0: entered allmulticast mode [ 770.102853][T11212] bridge_slave_0: entered promiscuous mode [ 770.110645][T11212] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.118003][T11212] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.128897][T11212] bridge_slave_1: entered allmulticast mode [ 770.135699][T11212] bridge_slave_1: entered promiscuous mode [ 770.159141][T11212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.170306][T11212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.200157][T11212] team0: Port device team_slave_0 added [ 770.210430][T11212] team0: Port device team_slave_1 added [ 770.231800][T11212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.238936][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.265362][T11212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.278337][T11212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.285326][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.312219][T11212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.343754][T11212] hsr_slave_0: entered promiscuous mode [ 770.350077][T11212] hsr_slave_1: entered promiscuous mode [ 770.356415][T11212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.364151][T11212] Cannot create hsr debugfs directory [ 771.849130][ T5240] Bluetooth: hci4: command tx timeout [ 771.912881][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.000208][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.075988][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.249742][ T11] bridge_slave_1: left allmulticast mode [ 772.255460][ T11] bridge_slave_1: left promiscuous mode [ 772.261858][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.270335][ T11] bridge_slave_0: left allmulticast mode [ 772.275979][ T11] bridge_slave_0: left promiscuous mode [ 772.284833][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.846904][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.858491][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.873837][ T11] bond0 (unregistering): Released all slaves [ 773.284485][T11212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 773.294979][T11212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 773.317119][T11212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 773.338071][T11212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 773.369879][ T11] hsr_slave_0: left promiscuous mode [ 773.376117][ T11] hsr_slave_1: left promiscuous mode [ 773.381901][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.399281][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.407288][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.419572][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.441642][ T11] veth1_macvtap: left promiscuous mode [ 773.447151][ T11] veth0_macvtap: left promiscuous mode [ 773.455365][ T11] veth1_vlan: left promiscuous mode [ 773.462776][ T11] veth0_vlan: left promiscuous mode [ 773.831271][ T5240] Bluetooth: hci4: command tx timeout [ 774.099809][ T11] team0 (unregistering): Port device team_slave_1 removed [ 774.164005][ T11] team0 (unregistering): Port device team_slave_0 removed [ 774.888306][T11212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.917542][T11212] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.954088][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.961243][T10032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.987194][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.994367][T10032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.215521][T11212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.358953][T11212] veth0_vlan: entered promiscuous mode [ 775.376913][T11212] veth1_vlan: entered promiscuous mode [ 775.402942][T11212] veth0_macvtap: entered promiscuous mode [ 775.411774][T11212] veth1_macvtap: entered promiscuous mode [ 775.425050][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.436136][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.446195][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.456709][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.467656][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.478220][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.488105][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.498688][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.510024][T11212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.521126][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.532411][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.542309][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.553036][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.563744][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.574452][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.587569][T11212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.598166][T11212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.609333][T11212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.626477][T11212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.635286][T11212] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.644053][T11212] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.654040][T11212] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.729034][ T7491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.751935][ T7491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.774364][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.782633][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.816941][ T5240] Bluetooth: hci4: command tx timeout [ 778.124661][ T7491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Connection to 10.128.1.152 closed by remote host. Stopping sshd: [ 778.865179][T11194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 778.877838][T11194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 778.899797][T11194] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 778.908631][T11194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 778.922596][T11194] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 778.944251][T11194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 OK Stopping dhcpcd... no /sbin/dhcpcd found; none killed Stopping network: [ 779.229810][T11241] chnl_net:caif_netlink_parms(): no params data found [ 779.342600][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.349979][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.357165][T11241] bridge_slave_0: entered allmulticast mode [ 779.365225][T11241] bridge_slave_0: entered promiscuous mode [ 779.375417][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.383562][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.391856][T11241] bridge_slave_1: entered allmulticast mode [ 779.399069][T11241] bridge_slave_1: entered promiscuous mode [ 779.423410][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.435259][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.481372][T11241] team0: Port device team_slave_0 added [ 779.495291][T11241] team0: Port device team_slave_1 added [ 779.526091][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.533410][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.561405][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.575730][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.583974][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.616962][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.668651][T11241] hsr_slave_0: entered promiscuous mode [ 779.675610][T11241] hsr_slave_1: entered promiscuous mode [ 779.682308][T11241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.689887][T11241] Cannot create hsr debugfs directory OK Stopping iptables: OK Stopping system message bus: done [ 780.208550][ T7491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.317769][ T7491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Stopping klogd: [ 780.414560][ T7491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 OK Stopping acpid: [ 780.572290][ T7491] bridge_slave_1: left allmulticast mode [ 780.578040][ T7491] bridge_slave_1: left promiscuous mode [ 780.583720][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.593740][ T7491] bridge_slave_0: left allmulticast mode [ 780.600055][ T7491] bridge_slave_0: left promiscuous mode [ 780.608231][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.928057][ T5240] Bluetooth: hci4: command tx timeout [ 781.022777][ T7491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.035188][ T7491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.046281][ T7491] bond0 (unregistering): Released all slaves [ 781.307196][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.315029][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 781.507322][ T7491] hsr_slave_0: left promiscuous mode [ 781.514274][ T7491] hsr_slave_1: left promiscuous mode [ 781.520471][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.528003][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_0 OK [ 781.546548][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.568688][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_1 Stopping syslogd: [ 781.619379][ T7491] veth1_macvtap: left promiscuous mode [ 781.624939][ T7491] veth0_macvtap: left promiscuous mode [ 781.645116][ T7491] veth1_vlan: left promiscuous mode [ 781.650434][ T7491] veth0_vlan: left promiscuous mode OK [ 781.887472][T11280] ------------[ cut here ]------------ [ 781.893366][T11280] WARNING: CPU: 1 PID: 11280 at mm/zswap.c:1700 zswap_swapoff+0x11b/0x2b0 [ 781.902441][T11280] Modules linked in: [ 781.906672][T11280] CPU: 1 UID: 0 PID: 11280 Comm: swapoff Not tainted 6.11.0-rc3-next-20240814-syzkaller #0 [ 781.916989][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 781.927204][T11280] RIP: 0010:zswap_swapoff+0x11b/0x2b0 [ 781.932650][T11280] Code: 74 05 e8 98 80 07 00 4b 83 7c 35 00 00 75 15 e8 8b fe 9e ff 48 ff c5 49 83 c6 50 83 7c 24 0c 17 76 9b eb 24 e8 76 fe 9e ff 90 <0f> 0b 90 eb e5 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 7c 90 48 8b 3c [ 781.952375][T11280] RSP: 0018:ffffc9000518fa38 EFLAGS: 00010293 [ 781.958466][T11280] RAX: ffffffff81f4940a RBX: dffffc0000000000 RCX: ffff88807c3b3c00 [ 781.966720][T11280] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8880196ab448 [ 781.975012][T11280] RBP: 0000000000000000 R08: ffffffff81f493c0 R09: 1ffffffff1d4750c [ 781.983316][T11280] R10: dffffc0000000000 R11: fffffbfff1d4750d R12: dffffc0000000000 [ 781.991850][T11280] R13: ffff8880196ab400 R14: 0000000000000048 R15: 0000000000000002 [ 782.000444][T11280] FS: 00007f2210186380(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 782.010049][T11280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.016973][T11280] CR2: 00007f2210420b4f CR3: 00000000603a6000 CR4: 00000000003506f0 [ 782.024962][T11280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 782.033268][T11280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 782.041494][T11280] Call Trace: [ 782.046665][T11280] [ 782.049763][T11280] ? __warn+0x163/0x4e0 [ 782.053938][T11280] ? zswap_swapoff+0x11b/0x2b0 [ 782.058939][T11280] ? report_bug+0x2b3/0x500 [ 782.063453][T11280] ? zswap_swapoff+0x11b/0x2b0 [ 782.068457][T11280] ? handle_bug+0x60/0x90 [ 782.072801][T11280] ? exc_invalid_op+0x1a/0x50 [ 782.077682][T11280] ? asm_exc_invalid_op+0x1a/0x20 [ 782.082725][T11280] ? zswap_swapoff+0xd0/0x2b0 [ 782.087604][T11280] ? zswap_swapoff+0x11a/0x2b0 [ 782.092388][T11280] ? zswap_swapoff+0x11b/0x2b0 [ 782.097690][T11280] ? zswap_swapoff+0x11a/0x2b0 [ 782.102874][T11280] __se_sys_swapoff+0x4657/0x4d00 [ 782.108006][T11280] ? count_memcg_event_mm+0x94/0x420 [ 782.113362][T11280] ? __pfx_lock_release+0x10/0x10 [ 782.118412][T11280] ? __lock_acquire+0x137a/0x2040 [ 782.123558][T11280] ? reacquire_held_locks+0x3eb/0x690 [ 782.128943][T11280] ? vma_end_read+0x18/0x170 [ 782.133680][T11280] ? __pfx___se_sys_swapoff+0x10/0x10 [ 782.139177][T11280] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 782.145260][T11280] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 782.151303][T11280] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 782.157655][T11280] ? exc_page_fault+0x590/0x8c0 [ 782.162602][T11280] ? do_syscall_64+0xb6/0x230 [ 782.167300][T11280] do_syscall_64+0xf3/0x230 [ 782.172577][T11280] ? clear_bhb_loop+0x35/0x90 [ 782.177281][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.183279][T11280] RIP: 0033:0x7f22102dfb37 [ 782.187716][T11280] Code: 73 01 c3 48 8b 0d f1 52 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 52 0d 00 f7 d8 64 89 01 48 [ 782.207855][T11280] RSP: 002b:00007ffc7df50488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 782.216312][T11280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22102dfb37 [ 782.225228][T11280] RDX: 00007f221037f7e8 RSI: 00007f221047ceed RDI: 000055ccd2b97a20 [ 782.233329][T11280] RBP: 000055ccd2b97a20 R08: 0000000000000000 R09: e5fed707c9a6fc0c [ 782.241372][T11280] R10: 000000000000001f R11: 0000000000000246 R12: 00007ffc7df506a8 [ 782.249481][T11280] R13: 000055ccd2b972a0 R14: 000055ccb87aa169 R15: 00007f22104bea80 [ 782.257543][T11280] [ 782.260585][T11280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 782.267874][T11280] CPU: 1 UID: 0 PID: 11280 Comm: swapoff Not tainted 6.11.0-rc3-next-20240814-syzkaller #0 [ 782.277860][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 782.287905][T11280] Call Trace: [ 782.291172][T11280] [ 782.294097][T11280] dump_stack_lvl+0x241/0x360 [ 782.298774][T11280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.304051][T11280] ? __pfx__printk+0x10/0x10 [ 782.308630][T11280] ? _printk+0xd5/0x120 [ 782.312781][T11280] ? __init_begin+0x41000/0x41000 [ 782.317799][T11280] ? vscnprintf+0x5d/0x90 [ 782.322134][T11280] panic+0x349/0x870 [ 782.326021][T11280] ? __warn+0x172/0x4e0 [ 782.330168][T11280] ? __pfx_panic+0x10/0x10 [ 782.334571][T11280] ? show_trace_log_lvl+0x3b2/0x410 [ 782.339777][T11280] __warn+0x346/0x4e0 [ 782.343753][T11280] ? zswap_swapoff+0x11b/0x2b0 [ 782.348597][T11280] report_bug+0x2b3/0x500 [ 782.352914][T11280] ? zswap_swapoff+0x11b/0x2b0 [ 782.357674][T11280] handle_bug+0x60/0x90 [ 782.361832][T11280] exc_invalid_op+0x1a/0x50 [ 782.366328][T11280] asm_exc_invalid_op+0x1a/0x20 [ 782.371172][T11280] RIP: 0010:zswap_swapoff+0x11b/0x2b0 [ 782.376558][T11280] Code: 74 05 e8 98 80 07 00 4b 83 7c 35 00 00 75 15 e8 8b fe 9e ff 48 ff c5 49 83 c6 50 83 7c 24 0c 17 76 9b eb 24 e8 76 fe 9e ff 90 <0f> 0b 90 eb e5 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 7c 90 48 8b 3c [ 782.396249][T11280] RSP: 0018:ffffc9000518fa38 EFLAGS: 00010293 [ 782.402315][T11280] RAX: ffffffff81f4940a RBX: dffffc0000000000 RCX: ffff88807c3b3c00 [ 782.410278][T11280] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8880196ab448 [ 782.418238][T11280] RBP: 0000000000000000 R08: ffffffff81f493c0 R09: 1ffffffff1d4750c [ 782.426198][T11280] R10: dffffc0000000000 R11: fffffbfff1d4750d R12: dffffc0000000000 [ 782.434160][T11280] R13: ffff8880196ab400 R14: 0000000000000048 R15: 0000000000000002 [ 782.442127][T11280] ? zswap_swapoff+0xd0/0x2b0 [ 782.446806][T11280] ? zswap_swapoff+0x11a/0x2b0 [ 782.451563][T11280] ? zswap_swapoff+0x11a/0x2b0 [ 782.456339][T11280] __se_sys_swapoff+0x4657/0x4d00 [ 782.461352][T11280] ? count_memcg_event_mm+0x94/0x420 [ 782.466716][T11280] ? __pfx_lock_release+0x10/0x10 [ 782.471743][T11280] ? __lock_acquire+0x137a/0x2040 [ 782.476774][T11280] ? reacquire_held_locks+0x3eb/0x690 [ 782.482134][T11280] ? vma_end_read+0x18/0x170 [ 782.486737][T11280] ? __pfx___se_sys_swapoff+0x10/0x10 [ 782.492115][T11280] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 782.498092][T11280] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 782.504070][T11280] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 782.510424][T11280] ? exc_page_fault+0x590/0x8c0 [ 782.515274][T11280] ? do_syscall_64+0xb6/0x230 [ 782.519945][T11280] do_syscall_64+0xf3/0x230 [ 782.524439][T11280] ? clear_bhb_loop+0x35/0x90 [ 782.529110][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.534998][T11280] RIP: 0033:0x7f22102dfb37 [ 782.539409][T11280] Code: 73 01 c3 48 8b 0d f1 52 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 52 0d 00 f7 d8 64 89 01 48 [ 782.559023][T11280] RSP: 002b:00007ffc7df50488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 782.567453][T11280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22102dfb37 [ 782.575423][T11280] RDX: 00007f221037f7e8 RSI: 00007f221047ceed RDI: 000055ccd2b97a20 [ 782.583391][T11280] RBP: 000055ccd2b97a20 R08: 0000000000000000 R09: e5fed707c9a6fc0c [ 782.591359][T11280] R10: 000000000000001f R11: 0000000000000246 R12: 00007ffc7df506a8 [ 782.599320][T11280] R13: 000055ccd2b972a0 R14: 000055ccb87aa169 R15: 00007f22104bea80 [ 782.607298][T11280] [ 782.610530][T11280] Kernel Offset: disabled [ 782.614915][T11280] Rebooting in 86400 seconds..