last executing test programs: 43.897172236s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000380), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ipv6_route\x00') lseek(r6, 0x73, 0x0) lseek(r6, 0xf53, 0x0) fchdir(r4) close(r4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 42.209132197s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = inotify_init1(0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23b) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04049200"], 0xd) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="4136882e84d39c44a91fe1c1a8f928df2ce4f6c785767d9e4bda38776ac90500ef4f2d3291af7fc8b05e8a2e47acc2308013223f26a704eb8674b4968d6701d29e56e2", @ANYRESHEX, @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES64=r0], 0x14) syz_open_dev$I2C(0x0, 0x0, 0x0) 41.155435593s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="0000000001"], 0x28}}, 0x0) 39.957522911s ago: executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4f0c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012063, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000007b000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) 38.825591664s ago: executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x3ff}) io_uring_enter(r1, 0x1, 0x2, 0x1, 0x0, 0x0) 9.155951901s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b708000000000000"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000009500000000000000982547eb6703e5f9045579b86425a4596117f0085767f06d2a5861bd41fbf6ab3d5fc152030defaf1de115aadd3f6c4831df84d12d0795db69dca057f4796d129b25a5f5a3aa54005997b28c9251c7c49a42f3ec04bd6f3319bec43cf3fda1eeda0e5d357cf06a1782ff"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) close(r1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) 8.719047403s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 8.568263814s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000040)) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c", 0x1}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000000000000000070000001c"], 0x78}}], 0x1, 0x40805) 8.492447543s ago: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) unshare(0x6020400) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x202) r2 = socket$unix(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3401000019000000000000000000"], 0x134}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket(0x2, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, 0x0, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x4) 8.337533928s ago: executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000900)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, &(0x7f0000000840)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0xa}}], 0x20}, 0x0) 8.128474956s ago: executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 7.022284435s ago: executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x3ff}) io_uring_enter(r1, 0x1, 0x2, 0x1, 0x0, 0x0) 5.879313477s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0x10000) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYRESHEX, @ANYRES16, @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYBLOB="defdd6f24cb9acb7fe0b0dc92a093135912ebef426731ffe88138f2b03791edb32e2ba3924188f2c07da77a1d75290af3db49e3aeedbaabdfc897ff5feb67e05cb1f923278506034c99285994c8d2a07e7732f9e4666bedc57efbc75eda531e10945eab9810dce4df5cb4468fee9df15bad908ce6d2cf900c4541ebe94681428ac2202f0132ddfd00bb4d24ace8c513914431814c2", @ANYRES32, @ANYRES32=r3, @ANYRES8, @ANYRES64=r4], 0x0, 0x0, &(0x7f0000000580)) sendfile(r0, r1, 0x0, 0x1ff) 5.186954564s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.823959829s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000", @ANYRES32=r7, @ANYBLOB="0000000001"], 0x28}}, 0x0) 3.613672907s ago: executing program 3: syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000480)='./file0\x00', 0x1810002, &(0x7f0000002380)=ANY=[], 0x1, 0x1cd, &(0x7f0000002180)="$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") lseek(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4837e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 3.253590367s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r2}) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c", 0x1}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000000000000000070000001c"], 0x78}}], 0x1, 0x40805) 3.003166667s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x8, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000000780)=""/4096, 0x41100}, 0x90) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f0000ac1000/0x2000)=nil, 0x2000, 0x0, 0x110, r1, 0x7b7ae000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000100)=0x1) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc0200000000000000000000000000002001000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3459e6dbf830"], 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r7, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 2.932398573s ago: executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4f0c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012063, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) 2.858974713s ago: executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc54, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf5, 0x2fc, &(0x7f0000000440)="$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") 2.670245093s ago: executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 2.468869352s ago: executing program 3: syz_mount_image$bcachefs(&(0x7f000000f640), &(0x7f000000f680)='./file1\x00', 0x200012, &(0x7f00000000c0)=ANY=[], 0x1, 0xf62a, &(0x7f0000034ec0)="$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") r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000fa) sendfile(r2, r2, 0x0, 0x100000000) 2.394948532s ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.922209372s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.692502497s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.330637847s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000", @ANYRES32=r7, @ANYBLOB="0000000001"], 0x28}}, 0x0) 450.796334ms ago: executing program 4: syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000480)='./file0\x00', 0x1810002, &(0x7f0000002380)=ANY=[], 0x1, 0x1cd, &(0x7f0000002180)="$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") lseek(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4837e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 184.792989ms ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r2}) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c", 0x1}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000000000000000070000001c"], 0x78}}], 0x1, 0x40805) 9.169635ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x0, 0x0, 0x101, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xfc}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040), 0x1000) syz_mount_image$bcachefs(&(0x7f0000000780), &(0x7f0000000800)='./file1\x00', 0x8000, &(0x7f0000000800)=ANY=[], 0x1, 0x5db0, &(0x7f0000005e00)="$eJzs3X2QHOWZGPDumVntSquPlSybFRJiMbIdccEWKBDLd442vrNjO7KRhQVYnE4SsMI6hCT0gUC6hK8cEExSqoI6CMQpHVDkKuVKcOkSwp1SJWPAV74qCpn4D458HRWcP+IjqrPEEcnlTe1u9+5Mb7/Ts9OzQpDfr2p3tnufed7n6Xmnp7t3dzYCAADg/wuv/P6ed79+/hd/fO/Qqbu+/Ce33hP1VqOoWhfQl9ze8T4VyLRa/pMzDY9sd61/9DY7L87704Xv9t235msPrfrSTzb/2fzBpcuGrvz+kavuv+/Fz//yxceeWFM0Tk9ye8nEcvxXcRQtffvIY/e//OfnjayLR8aP++6O5s+PF/xgfpxJseJ0FEU3jdfZ+M0jp1ZuHbm95zvdDevnZZLkzve6+sz3D7eeZJ4d3HTDU8duGXz5yMCulT8/ecXOuydC4p66+RRFczfX378riqKZyceIdLb1p3dObtdGUTSr7n6fLajr4hbrvzSwvCS5nZHc9hbkSb9/UWa51mIdtcxtd4v3a1dlmvNPyO8kuzOaLmmfc5Pb55PbS6aYp5p+xFEljmrj5W+PJ+ZIVNdtHMWjc7tnfLkyuhyNL0fZ5TizXMksV7syfY2Om0y0ahw3rk/jMuvT3XEtWX9R/b46x7rA+kXJbU/yRH0vXY6yX4zpnfTFRB9RXV0nztbECKgEZmy6fry85MHoTdb1xgsm3Wc4R/q9Ez/asuGdNw483xeoI34uTvLHbeUfHHry2LPXHV3UH8q/uZLkr7SV/5Xqq6efOdk/O5j/UJq/2lb+9b/62YP3Xr1/YXD7nEi3T62t/Msenn3w1P513QOh/IfT/D1t5b9y49JVF5zcd3uw/hXp9pnZVv6fPrL8zMZDLxwN5o/S/LPayv/mk08vqS569Hgw/7F0+/S2lf+alY+v/uri+54Ibv/X0vxz2sq/4fj9m3c99dLy4Pxcm26fvrbyn179+ltn+tY8Hdp3xofP3isswIfRR5JjrAeT5XbPM8uqO194fKA2dsw3O/mY08mBMuK6cxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaNejq//9bfXLn/jft68//h+Wbqsly921KIqjKHqnOracrp8RRfHMKIr27N2ye++2HTcP/O7Ofbt3bNk+sGXvwNCOvbvvHPg7f3tg99Cu7VvuHPnuiktXjt1vwWi2KFoQXzCpluHh4eEoigbq16Xj/eFXnvu/65/4629F0YqPvr60FuznM//lrS8uzPmcEQ8Or/2XVzxyYMb/nDe2oi+pqy9UV1/jurSC3sHX/uILz78xUtfHmtX12KvX/p+GgkZXTORJVLqjyugX3fGs3DrGq56oZ3R71bZu2z60onj7xoHt+6mX/vjkv7tj/T8b2749wT5a3L4jW7U2/NAv7v3U3V8Y+tw5/LgXbe+6FkbrS7dfT7K95yZ9zQ30VQn0dfvAmyf++b/9T8/cHa2o/eLCyWMX9dWVTICueFFL46YjzIrnN8T2JPHpI57e7zN7b931mT13Hrh0261bbh66eWjHypVXrLps5WWXr1r5mdHWxz53rP90/E+12P/sJNPseHHudsuuTce9cPRzNUrKTm/qvmjUFfWO3Wa2cxqe7bo3+V5vvGBSruEc6fdO/GjLhnfeOPB86JkXPzc24sxozthtvCQQuT1zx+p4wXnjn53n5c4/6Nmefm7teVlUV9G8GqmreF7VV9RkP/bqxQ/+4qkH/sX1Lewv6kJH60vrnDXydLksqnveTt5WeX218PgM5m2HGy/d/cd3bttwqGh/Xv/I1H/OiAeH/8eS+Gv79vzF7rEVZ+X1sr6gNl8vx6ueqGd0e/Ukj8e5un27o2rSV29uXevipz7/qVuP/tp4fTNmRHds2bt392Vjnz+off3ljHkLt92z+IJJfV0+9rlov39hZrlwv1/J769ov58dZyI+P99AZrk3qrb1OrH+Vz978N6r9y8Mvk6caPV14vcalqolXycqgef7Q3/93YF3r//mu0Xz6ao9i+9amPM5297g8Avf+/XLPnft1V8aW3FW9kP1BbW5HxqvOqkn3V6j+6HLz50+mjzOIxNkGh/nhidiPDh84fc/ec2ZU7d9Y2xF0fYdj87bviuL9/PVQF/Xd318/iM/X/zxzs3fPZv+5uJPz5p9js3fnmT79gS273jVST3V+u376Rt3br9pbPncPW4b011w/pO+7uy588AtW7ZvH9q9p7W+Wn09TcfJbuV2X0/TV48FBX2lj9dEX9P3RSvbq9XnW1r/TZkc7T7fAFITrwszGtZn95/pdb+lc6P1n37gh6/GA2Ovl5263pqOc37mhXnK11uTFUXnSR/PLDeeJ9Wiur7HTD5PGr1L0XlSdpyc86Tv/Wbd9y/OxBefxzyY20no8etKXnnzrptm6q2NZAjNj/4kf3+ynB5vLv10dEX1+U98JR5sbX60ejydjvO3Mhuo3ePpovmxLMqvq9Pz45OZOxU/3odyK+sJPB5Fj/eyhkTDw2XPy/sCVafn5b1R3Fb+waEnjz173dFFwfybK0n+Slv5X6m+evqZk/2zg/kPpflrbeVf9vDsg6f2r+sO5j+cbp+etvJfuXHpqgtO7rs9mH9FWv/MtvL/9JHlZzYeeuFoMH+U5u9tK/81Kx9f/dXF9z0RzP9anIwz8tyNoiOnVm4dW46jrmT+p3V0NdQVZZfjzHIls1ytX66M/ax3fIBqHDeuT+My69M+asn6i+pqzLM+sD591vYkT+z30uUo+0Xz9enuKa3rROA63dlSqTv2yFtfdH2yU955u/8P65fTn/+nc6C7NvbYXZ7ZXkWvH9m9d5oveB02cAmj6Lrq5J+/zWrr+ffmk08vqS569HjwuuqxVq+r7mpYmlVwXbVsvcH9xbF0f1puf9Qfyv9amr/c60Ewf/J6UDTPPpFZLpxnXfnjFc2z7HFKbzSnrb43HL9/866nXloenGdrx57wxfPs0YalOYXzrNzPpYPz7Lm4I9sjmH9tZ45rgvMsOa4pmmeXZJbLz7PG49GvJbd3ZOJ7kyvEU+379OrX3zrTt+bp4Dw73Oo8+6OGpb7CeVbu+Db4OI0f30738fkH+/jzfTs+TH6cO13Hh+sC66d6fNg76YuJPqIP4vFhYD8DAM38+KE7/1f9cnr+n752p+f/P8zcr+x5Zfb3oVKdOq8M5j/cmfOV4HHq+PnKdJ9vTfdx9vSebzmOD+Qfv4483deFpve80nlIshxlvxjjPAQAgPfDRf/6u79Vv5ye/4//3lvy9/8vpcuZ+zvPDeQ/a+e5032dxHl0bv4O/X5F8XWw6b5O5TqA6wDFXAcAAPhw2LR199DQnl1bbhzatG3Htr3j67tGz5wm/57q301u16Yr7p6Ij5r8/vTazPJE/vz4b+TERzn1fDYQH1Ib/Z3XKLrhxm9fvummodun2n9ovKL+8+Kb9Z89vwj1vyoQH1K2/9B4Rf3nxTfr/+pg/sZ6PheIDynbf2i8ov7z4pv1/81g/sZ6fj0QH1K2/9B4Rf3nxTfrP/v3YKH+fyMQH1K2/9B4Rf3nxTfr/5pg/sZ6Ph+IDynbf2i8ov7z4pv1f20wf2M9fy8QH1K2/9B4Rf3nxTfr/7pg/sZ6Vo/dxKH3r8wq2//qwvpa76dZ/98K5m+sZzAQH1K2/9B4Rf3nxTfrf0Mwf2M9fz8QH1K2/9B4Rf3nxTfr//pg/sZ6vhCIDynbf2i8ov7z4pv1/9vB/I31/GYgPqRs/6HxivrPi2/W/8Zg/sZ6fisQH1K2/9B4Rf3nxTfr/3eC+Rvr+WIgPqRs/6HxivrPi2/W/6Zg/sZ6vhSIDynbf2i8ov7z4pv1vzmYv7GefxCIDynbf2a8mZPra72fZv1vyYmPcur5ciA+pGz/ofGK+s+Ln1ULv+/4DcH8jfV8JRAfUrb/0HhF/efFN3v8bwzmb6znq4H4kLL9h8Yr6j8vvln/2fc7DPX/DwPxIWX7D41X1H9efLP+h4L5G+tZE4gPKdt/aLyi/vPim/W/NZg//30DsvEhZfsPjVfUf158s/5vDuZvrOfrgfiQsv2Hxmvsf3JTefHN+v92MH9jPVcF4kPK9h8ar+jxz4tv1v+2YP7GetYG4kPK9h8ar6j/vPhm/f9uMH9jPd8IxIeU7T80XlH/efHN+r8lmL+xnnWB+JCy/YfGK+o/L75Z/9uD+RvruToQH1K2/9B4Rf3nxTfr/9Zg/sZ6vhmIDynbf2i8ov7z4pv1vyOYv7Ge9YH4kLL9h8Yr6j8vvln/O4P5G+u5JhAfUrb/0HhF/efFN+t/VzB/Yz3XBuJDyvYfGq+o/11dk+Ob9X9bMH9jPdcF4kPK9h8ar6j/vPhm/e8O5m+s51uB+JCy/YfGK+o/L75Z/3uC+Rvr2RCIDynbf2i8ov7z4pv1vzeYv7Ge6wPxIVPtv6fF8Yr6z4tv1v++YP7Gen47EB9S9vEPjVfUf158s/5vD+ZvrGdjID6kbP+h8Yr6z4tv1v/+YP7Gen4nEB9Stv/QeEX958U36z/7PpCh/jcF4kPG+9+7e2ho075dN23ZO7Rpx86bhvZs2r972969Q8mBWtm/Kwv/XdD7/IcsNNXw/BibJNt27BnaPXn/PbPp/K2fE9Honz2N/aioJ/5YS/HZt71ud9acK/O9K6o13V7nZ5bnJe9HOy/wfrTZ+DTt4tEvJr8fbXbYWsH7uBbtn7Ljh/ZPcZP4vP1raH9W9Po35f1f4fzuadp/dnV38od93fFHW4qPmvx/t9bma7m/Ow3O19dam6/Z910vmq/Z+KnO196S8zU7fmg+VZrENzseanW+bgjEp1qfn3Gw37x5NdX/M5imndL/Gcx8mqSN/2XQ+vOh3N+RB58PSdFFz4fs33EXPR+y8VN9Psws+XzIjl/0fMiLb3Z+3Orz4dpAfEjr86Hc+xYE58OK1uZD9v9YFc2HbPxU50NPyfmQHb9oPuTFN7te2Op8+GYgvlWtz49y7ysSnB+bW5sf2f8nUTQ/svFTnR9xyfmRHb9ofuTFN/t5Sqvz4xuB+FTD6+fWPaMn9du2bN92IPMLGH3J6+f7/Xp4Vl6X/+Y3/vK9sU9JHZVJdRQdT8SZOuYnlcwP/d/DQN03/ud/s/6Hv3zgu1G04qPVJeG6J0qe+JQRDw4vuGvZs9d97PgXRuqvNK1/PDL9v8UF/+84G5/2U9u+c8/eX9u6c9+OVn/jqrn0/VAq48vT9H4oycpqi+9vEvp7gqm+v0nXpC/OTS2/vwnAh8S8w8/NqV9O3/8vfT3qT/Z9M5MdYLq+9ePscu+vFzzOPtTacfbybL8Fx9nZ+LTfVo+zKyWPs7PjFx1n58U3+729Vo+zvx6IDzgW+kbjPBmZIKPzY2jT/p27638nroV50lW/mH6v1f9b26rW653e/+Nbvr7pfd/GdrVe//S+L+T01z+9/wd4+uuf3v/z3K6zdr6UvFlk0ftHFp1Hhf4ufarnUTMmfXFuch4FAOe+f7r77X9Vv5ye/ydnsePn/99JlqsdHn+6z6PKXn8oOq+c7uPkD/7770/veZDzgSaDnQOcDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADk+6P/9h9/UL/cXesfvX3l9/e8+/Xzv/jje4dO3fXlP7n1nvP+dOG7ffet+dpDq770k81/Nn9w6bKhK79/5Kr773vx87988bEn1hQO1Dd2c0my2BNF8V/FUbT07SOP3f/yn583si4eGT/uuzuaPz9e8IP5cSbDitNRFN00XmfjN4+cWrl15Pae73Q3rJ+XSZLtK+qtpvU01BndUdgRH0A9yTw7uOmGp47dMvjykYFdK39+8oqdd0+ExD118ymK5m6uv39XFEUzk48R6WzrT++c3K6NomhW3f0+W1DXxS3Wf2lgeUlyOyO57S3Ik37/osxyrcU6apnb7hbv167KNOfPym6/7M5ouqR9zk1un09uL5linmr6EUeVOKqNl789npgjUd3jFkfx6NzuGV+ujC5H48tRdjnOLFcyy9WuTF+j4yYbthrHjevTuMz6dHdcS9ZfVL+vzrEusH5RctuTPFHfS5ej7Bdjeid9MdFHVFfXibM1MQIqgedeun68vOTB6E3W9cYLJt1nOEf6vRM/2rLhnTcOPN8XqCN+Lk7yx23lHxx68tiz1x1d1B/Kv7mS5K+0lf+V6qunnznZPzuY/1Cav9pW/vW/+tmD9169f2Fw+5xIt0+trfzLHp598NT+dd0DofyH0/w9beW/cuPSVRec3Hd7sP4V6faZ2Vb+nz6y/MzGQy8cDeaP0vyz2sr/5pNPL6kuevR4MP+xdPv0tpX/mpWPr/7q4vueCG7/19L8c9rKv+H4/Zt3PfXS8uD8XJtun7628p9e/fpbZ/rWPB3ad8aHz/YrLMCHy0eSY6wHk+V2zzPLqjtfeHygNnbMNzv5mNPJgTLiunMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI2Tlc3Ve//NbRh6769n/f9F9rcRTFgfsM50i/V50xODjQRh3LHp598NT+dd3p8sjY/W3kAQAAACZb/OYDt9Uvp+fhlWQ5jnqi/mh/PDNanHv/9BrB4nQpblyfvYYwcyKyI3kqHcpT7VCeWofydHUoz4wO5enuUJ6egjw9UWt5ZjbNU2m5nlkdytPboTyzO5RnTofyzO1QnnkdytPXLM9V8aT1oTzzm9bT+nxe0KE8H+lQnoUdyvPRDuX5WIfynNehPNlrylOdh3OSyPNDeUa/qBbmqcXV8W/kXU9Px7mg5Di9LY6TvWY/1XFmtjjOxSXH6WlxnE+WHCcOjtPdMM7yzP0qUxynUtBPOm/vCPWTLrU4/+/sUJ4DHcpzsEN5fq9Def5Rh/L84w7luatkHoCQP3jxku/VL6fn/+n5Zxz1Rd21y6NZyR4nexUgPd+9cPTz5Ne70A4pzbcks76rKF/2BDuT78Kp1pe9gJDJ9/Gm+WqTzldz8tXq8y3rUD4AAACYin9y+mDDj+Ymn//3R921hePnr5/I3L/wfD37g+xEmu+SDuUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP/Hrr3GyFWXDQD/n53ZmXmXSxfSlim9bdq+FELohaZvXnhfYdJEEoywRWy5NGStsLANSwvdFmjVFMHYZhMMWrxw+2BBYggRSEgadE0woMQPNjaI4eK6sBL4QgTpDSg6ZnbP2T07O8NuR2mt/n5pzpnnnOf5P/8zTZo8ZwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL++33/3L8+n48G+3vaugY7+EIXKn5rKNST3MrlSqa2Bfbz3wtqr//zK1t1JXOmdzzawEAAAADDOkxfMODMdJ3N4MnpHoRDy2aUhH+XG1BXj9wDFOG5qHT7PWRSWZ3b/98VRqWkoPjU6ZUxdIa4rxHEmruvZsvXGtd3dnRs/xQ+VPtXPUb2fKISh1xdzTg6rFm1/bk/UNvwcLRM8R1Nct3jTTTcv7tmy9Zx1N629ofOGzvXLli0/b+mypeeet2zx9eu6O5cMH0N+gvVCCKWx38sEf5EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUbPv17m+k48G+3vaugY7+liiEqE5NuYbkXiZXKrU1sI/XHnh4VmbGvXuTuNI7n21gIQAAAGCcXzw548J0nMzhyegdhULIZ3MhE2YMxfNGU7MhlMvJ9QVV14/G3gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKNr38H2P6bjwb7e9q6Bjv4TohCiOjXlGpJ7mVyp1NbAPlYv+8GFn5t51/1JXOldbGAdAAAAYLyXzmy+Kx0nc3hTHEehEIphfmiOZoypS94NnF61XnVess7sSeZVvzuolzd/knlnTDLvrAnyLo3PtwcAAAA4/lzV+pvV6TiZ/5vjOAqtIZ8thkwcTzTHJ+8F5lblJfUTzfdJ/bw69RPN/Ul99dwPAAAA/8nOefupj9Px+Pm/GPLZwsj8PdHv6ZfEZ7+TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1/PLgxT9Lx4N9ve1dAx39mSiEqE5NuYbkXiZXKrU1sI9Vf3trx52X3zY1iSu989kGFgIAAADGeTz3v7el42QOT0bvKBRCPtsSmsMJQ3P/G7kpU9d9febsEEJpKCGXC7ev3bRp47nDxyTvC9Guzyy8qe/scXlLh49H/0kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/1LLHdq5Jx4N9ve1dAx39/xWFENWpKdeQ3MvkSqW2Bvbx0s6zDl9zzzN9SVzpXWxgHQAAAGC8Wd3P/ikdJ3N4MvtHoRCKIRdyYfpQnJ71K5qq1qv3zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD499GzZeuNa7u7Ozf64IMPPox8ONb/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMfKT9d/5910PNjX29410NFfiEKI6tSUa0juZXKlUlsD+/ifa+acN3v/5luTuNK72MA6AAAAwHhr3tm8Px0nc3gy+0ehEIqhOTSHaXE83tD833o0dgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxLc0MUykfotJXHetcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAp+HAy6seSMeDfb3tXQMd/SdFIUR1aso1JPcyuVKprYF9XL33m1+6edfzZyVxpXc+W/lUamA1AAAAIK357Ze/nI6TOTwbx1EohHx2VsiHWfGV7rELRJkkseZ7gdG6r44py0y6bkfVjod3VojfQxRG9hmGXjuM1t3ziXXF+GpT6+S+JwAAADieTdtx6dfScTL/N8dxFFpDPjstNVffPKa+ZdJz/L1j6k6adN2Px9S1TlD3T/hKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAG3b3yhdPS8WBfb3vXQEd/FIUQ1akp15Dcy+RKpbYG9lHqfODZR6/sm5HEld7FBtYBAAAAxrv8rcK303EyhyezfxQKoRhmh5PD7KG5P7SOrU/yTij99tUVu1+5KoQl01+ck63b7/t7rng3HPr/Nz4YPgyFITSNTWoKYUrcL6rT79rfPbbquY+3PxTCkmmZWfX7jbYaPVSJSuVTty149Mrpe1fUXQYAAACOa4WHD/woHSfzfzJRR6E15LPr687/Sd4Rzf/tPTO3TY2P8RuAqoqm1rhfU51+ve8/1HZwzRcPVub/F+cURv6vwJnzx+anW6WPVe8colJ57lNnrD584JbLhi8k/TN1+q9pnnfKzndmzkv6F+Lr14XJ9g9V/Xs6Ds1f1HLiRWP7hxDaavX/4cVPfrjq/vevGu5f//te/IfBz04NG75X6E6Ow1fG91/54PKdW3NvThnbP6rTf+HzT+9/4vZVd1c//+nZWv3HH6tUumbLvfvuXHjHis7zU/2b6vS/te219771k58/Uum/b27LSP+Fn/D8E/bfM3/Hvl3b71sz9vsv1ep/7Tkbn96y7up7qp+/pWrh9DefPo7//l+fFV2yuefVjdW3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjm8dT3x0KB0P9vW2dw109DdFIUR1aso1JPcyuVKp7Qj6Z+PzrzJ7Pnpkf/HE5Hqld/FIHwYAAACo6bIVr9+QjpM5PJn9o1AIxZALudAyNPefum3Bo1dO37sitMb343O2e0PPprOv37B5/XVH+xEAAACACey64MMV6TiZ/5Pf5aPQGvLZBaE5nv9XPrh859bcm1OS+T+EMPRzf/b6dd2dS8LIe4KejkPzF7WceFGSl4nPhUreoms3dMevCZJ1n3n8/5aef8XlI/lN6fxzR/PmPnXG6sMHbrmsZt6y0bzXZ0WXbO55dWNqn6WRvKWjeb377lx4x4rO85PniOJzIX6eJG/P/B37dm2/b02S1xSfW+L1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAQTvngr19Jx4N9ve1dAx39IRNCVKemXENyL5Mrldoa2MdHF744eLj18w8ncaV3PtvAQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp79RciVRXHAfycmbEdHbNZEdwtW5R8UQiEJcmHcF/6Q2wlRlGCtEXbS0VClJEPqUtLVA9CgaEvotFzsQ9S+bBJWhREFj1ETwX1VLEPuxJrVMzsPbMzVy+7XVAiPh8YzvzOnfu9v3vmzB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/tMe/fHuWnfdVxtoj+dfff7i/Tfe+cXh8blX7vno2UPrP153sTkxet/rO+76Zuzz/pGhzePbP5h6YHLi7B1/nj16bHTJC720MGzNynoI8bcYwtDPU0cnz325vjUXW9ePzYOhvz+u/aQ/5hK2zYcQnuz02Xtwam74qdZ46I2+nvkbciH5+wqNaupnQbO3X/5f6tk+O/DYEyennx45N7Vx3/Cvs7c9d3DxI7HetZ9CWDPWff6KEMLK7NWSdttAOjkbd4UQVnWdd/sSfd2yzP5vLag3ZON12dhYIicd35Sra8vso5Yb+5Z5XlmVq5yfl1+//MPoakn3uSYbT2fj1n+ZU02vGCox1DrtPxMX90jo+t5iiO29Xe/UlXYdOnXI1zFXV3J1dUXuvtrXzRa2GmPvfPpcbj49jmvZ/KbuZ/UV7C6YH8zGevZD/SPVIf9mQeOyN4v3Ebr6mrlWG6NApeC3l+Y77WVfRiOba8S1l53z9xWkYzOfPb7n9+9fPt0s6CO+H7P8WCp/ZPz49HuPnBkcKMofq2T5lVL556tfzb87O7C6MP9Iyq+Wyn/or19eO/zg/nWF6zOT1qdWKn/zm6sPzO3f3bexKP9Eyq+Xyt++d2jHzbMvvFjY/7a0PitL5X/31pZLe498eKYwP6T8VaXyfzh+akN18O0LhfnTaX0apfIfHn5n5703TRwrXP+vU/71pfL3XJgc23fy0y2F+3NXWp9mqfz5nd/+dKk5eqro2RlPXOt/2H/Yr2MTgEEgDKMEUiZVFsi4GSHjWnjCYalW8h5YWF37fwB7eWJjffEf7cxZqRf+96yb74p3rzzUOVK7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQFMCAAD//+jDW9s=") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) fchdir(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x0, 0x400) setsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x48be, &(0x7f0000000000), &(0x7f00000011c0), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. 2024/06/21 13:41:35 fuzzer started 2024/06/21 13:41:35 dialing manager at 10.128.0.169:30010 [ 69.548004][ T5096] cgroup: Unknown subsys name 'net' [ 69.693475][ T5096] cgroup: Unknown subsys name 'rlimit' 2024/06/21 13:41:37 starting 5 executor processes [ 71.069519][ T5093] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 71.853805][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.860438][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.280866][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.292585][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.300713][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.300929][ T5128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.308623][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.320597][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.323255][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.330859][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.337440][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.343971][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.350879][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.359715][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.365425][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.371088][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.388495][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.392184][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.396198][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.404665][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.421165][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.429595][ T5130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.438241][ T5133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.446249][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.447804][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.454310][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.467740][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.469156][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.484375][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.492306][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.492550][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.511891][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.178124][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 74.255930][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 74.290381][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 74.322754][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 74.339295][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 74.553323][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.561424][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.569159][ T5113] bridge_slave_0: entered allmulticast mode [ 74.576327][ T5113] bridge_slave_0: entered promiscuous mode [ 74.585493][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.592890][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.600179][ T5117] bridge_slave_0: entered allmulticast mode [ 74.607211][ T5117] bridge_slave_0: entered promiscuous mode [ 74.648947][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.656123][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.664215][ T5113] bridge_slave_1: entered allmulticast mode [ 74.672097][ T5113] bridge_slave_1: entered promiscuous mode [ 74.691500][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.698919][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.706378][ T5117] bridge_slave_1: entered allmulticast mode [ 74.713680][ T5117] bridge_slave_1: entered promiscuous mode [ 74.772794][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.780533][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.787740][ T5122] bridge_slave_0: entered allmulticast mode [ 74.795443][ T5122] bridge_slave_0: entered promiscuous mode [ 74.829858][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.837094][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.844437][ T5114] bridge_slave_0: entered allmulticast mode [ 74.852545][ T5114] bridge_slave_0: entered promiscuous mode [ 74.863112][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.870429][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.877647][ T5115] bridge_slave_0: entered allmulticast mode [ 74.885605][ T5115] bridge_slave_0: entered promiscuous mode [ 74.893470][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.900822][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.908015][ T5122] bridge_slave_1: entered allmulticast mode [ 74.915737][ T5122] bridge_slave_1: entered promiscuous mode [ 74.925583][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.952278][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.962251][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.970156][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.978701][ T5114] bridge_slave_1: entered allmulticast mode [ 74.985775][ T5114] bridge_slave_1: entered promiscuous mode [ 74.993922][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.001430][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.008754][ T5115] bridge_slave_1: entered allmulticast mode [ 75.015792][ T5115] bridge_slave_1: entered promiscuous mode [ 75.038703][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.050939][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.163493][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.187829][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.207404][ T5113] team0: Port device team_slave_0 added [ 75.217488][ T5117] team0: Port device team_slave_0 added [ 75.226208][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.249986][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.264149][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.287832][ T5113] team0: Port device team_slave_1 added [ 75.296536][ T5117] team0: Port device team_slave_1 added [ 75.318231][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.387195][ T5114] team0: Port device team_slave_0 added [ 75.410478][ T5122] team0: Port device team_slave_0 added [ 75.431022][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.438021][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.465340][ T5128] Bluetooth: hci1: command tx timeout [ 75.471386][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.485889][ T5114] team0: Port device team_slave_1 added [ 75.519925][ T5122] team0: Port device team_slave_1 added [ 75.528833][ T54] Bluetooth: hci0: command tx timeout [ 75.528856][ T5126] Bluetooth: hci2: command tx timeout [ 75.529104][ T5126] Bluetooth: hci3: command tx timeout [ 75.534682][ T5128] Bluetooth: hci4: command tx timeout [ 75.552315][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.559749][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.586189][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.598196][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.605464][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.631673][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.659012][ T5115] team0: Port device team_slave_0 added [ 75.679308][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.686314][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.713429][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.734020][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.741092][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.767726][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.782070][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.789107][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.815344][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.829296][ T5115] team0: Port device team_slave_1 added [ 75.876317][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.885311][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.912245][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.925536][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.932846][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.958953][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.032509][ T5117] hsr_slave_0: entered promiscuous mode [ 76.039766][ T5117] hsr_slave_1: entered promiscuous mode [ 76.047461][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.054531][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.080668][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.093947][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.101016][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.127038][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.156807][ T5113] hsr_slave_0: entered promiscuous mode [ 76.163972][ T5113] hsr_slave_1: entered promiscuous mode [ 76.170678][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.178661][ T5113] Cannot create hsr debugfs directory [ 76.245292][ T5114] hsr_slave_0: entered promiscuous mode [ 76.252333][ T5114] hsr_slave_1: entered promiscuous mode [ 76.260037][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.267647][ T5114] Cannot create hsr debugfs directory [ 76.292629][ T5122] hsr_slave_0: entered promiscuous mode [ 76.299836][ T5122] hsr_slave_1: entered promiscuous mode [ 76.307408][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.315224][ T5122] Cannot create hsr debugfs directory [ 76.442509][ T5115] hsr_slave_0: entered promiscuous mode [ 76.449590][ T5115] hsr_slave_1: entered promiscuous mode [ 76.455878][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.463925][ T5115] Cannot create hsr debugfs directory [ 76.998160][ T5114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.013380][ T5114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.023946][ T5114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.038844][ T5114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.105472][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.116207][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.136678][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.146992][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.233179][ T5117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.243762][ T5117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.264404][ T5117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.274587][ T5117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.379746][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.401277][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.413083][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.435954][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.529248][ T5128] Bluetooth: hci1: command tx timeout [ 77.559148][ T5115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.585193][ T5115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.595256][ T5115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.609094][ T5128] Bluetooth: hci4: command tx timeout [ 77.609308][ T5126] Bluetooth: hci3: command tx timeout [ 77.614533][ T4489] Bluetooth: hci0: command tx timeout [ 77.620714][ T5126] Bluetooth: hci2: command tx timeout [ 77.643295][ T5115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.750910][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.815058][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.860147][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.903365][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.910821][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.950822][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.979989][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.995824][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.003493][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.046368][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.053530][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.112976][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.120218][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.137354][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.175128][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.212171][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.219416][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.259039][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.266223][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.327657][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.367575][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.433878][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.441126][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.491268][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.526140][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.533391][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.583825][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.591077][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.662707][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.669946][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.828116][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.934165][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.133979][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.256478][ T5122] veth0_vlan: entered promiscuous mode [ 79.311142][ T5122] veth1_vlan: entered promiscuous mode [ 79.412949][ T5117] veth0_vlan: entered promiscuous mode [ 79.440340][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.484201][ T5114] veth0_vlan: entered promiscuous mode [ 79.497357][ T5117] veth1_vlan: entered promiscuous mode [ 79.516672][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.551357][ T5114] veth1_vlan: entered promiscuous mode [ 79.594244][ T5122] veth0_macvtap: entered promiscuous mode [ 79.608622][ T5126] Bluetooth: hci1: command tx timeout [ 79.640924][ T5122] veth1_macvtap: entered promiscuous mode [ 79.689194][ T5126] Bluetooth: hci4: command tx timeout [ 79.689565][ T54] Bluetooth: hci3: command tx timeout [ 79.694734][ T5126] Bluetooth: hci2: command tx timeout [ 79.700421][ T5128] Bluetooth: hci0: command tx timeout [ 79.725067][ T5113] veth0_vlan: entered promiscuous mode [ 79.743986][ T5117] veth0_macvtap: entered promiscuous mode [ 79.781319][ T5114] veth0_macvtap: entered promiscuous mode [ 79.798271][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.807708][ T5117] veth1_macvtap: entered promiscuous mode [ 79.822154][ T5114] veth1_macvtap: entered promiscuous mode [ 79.831971][ T5113] veth1_vlan: entered promiscuous mode [ 79.859359][ T5115] veth0_vlan: entered promiscuous mode [ 79.877369][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.906843][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.916251][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.925092][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.934681][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.951963][ T5115] veth1_vlan: entered promiscuous mode [ 79.990047][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.001848][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.014826][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.030227][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.041827][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.051841][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.062650][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.073981][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.119321][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.130147][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.141892][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.153698][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.164854][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.175573][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.186813][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.199508][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.229558][ T5114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.238341][ T5114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.247572][ T5114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.256861][ T5114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.271828][ T5117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.280705][ T5117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.292671][ T5117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.301610][ T5117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.377397][ T5113] veth0_macvtap: entered promiscuous mode [ 80.407188][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.416402][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.452622][ T5113] veth1_macvtap: entered promiscuous mode [ 80.482558][ T5115] veth0_macvtap: entered promiscuous mode [ 80.521935][ T5115] veth1_macvtap: entered promiscuous mode [ 80.566104][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.575057][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.662966][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.680078][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.690204][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.700754][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.710761][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.722194][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.740562][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.764532][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.773181][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.786225][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.803704][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.814167][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.825287][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.837178][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.849349][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.872072][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.905985][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.931022][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.962282][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.973605][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.987602][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.004337][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.015783][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.032600][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.042616][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.060012][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.074231][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.084290][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.098223][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.108207][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.131860][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.148480][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.162423][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.172914][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.184546][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.196666][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.265391][ T5115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.274964][ T5115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.284502][ T5115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.297093][ T5115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.311668][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.320722][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.327053][ T5216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.336344][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.350443][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.417808][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.441051][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.441519][ T5219] syz-executor.3 (pid 5219) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 81.509641][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.517566][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.693356][ T5128] Bluetooth: hci1: command tx timeout [ 81.770223][ T5128] Bluetooth: hci2: command tx timeout [ 81.776356][ T5128] Bluetooth: hci0: command tx timeout [ 81.782975][ T54] Bluetooth: hci3: command tx timeout [ 81.788620][ T5126] Bluetooth: hci4: command tx timeout [ 82.452361][ T29] audit: type=1800 audit(1718977308.826:2): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 82.496906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.505626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.638815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.747660][ T5230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.823285][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.878957][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.941237][ T5234] dccp_close: ABORT with 1 bytes unread [ 83.166358][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.188573][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240920][ T29] audit: type=1326 audit(1718977309.616:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a53e7cf29 code=0x7ffc0000 [ 83.289152][ T29] audit: type=1326 audit(1718977309.636:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a53e7cf29 code=0x7ffc0000 [ 83.336201][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.356225][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.387460][ T29] audit: type=1326 audit(1718977309.656:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6a53e7cf29 code=0x7ffc0000 [ 83.457051][ T29] audit: type=1326 audit(1718977309.656:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a53e7cf29 code=0x7ffc0000 [ 83.492304][ T5248] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.529158][ T29] audit: type=1326 audit(1718977309.656:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a53e7cf29 code=0x7ffc0000 [ 83.541464][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.611541][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.485679][ T5205] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 85.261755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.271670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.131322][ T5205] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.266889][ T5297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.533123][ T5205] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.843446][ T5205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.028709][ T5205] usb 4-1: Product: syz [ 87.032955][ T5205] usb 4-1: Manufacturer: syz [ 87.037580][ T5205] usb 4-1: SerialNumber: syz [ 87.170413][ T5205] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.290077][ T5288] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.419927][ T48] cfg80211: failed to load regulatory.db [ 88.522182][ T5288] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 88.534914][ T5288] ath9k_htc: Failed to initialize the device [ 88.589166][ T5288] usb 4-1: ath9k_htc: USB layer deinitialized [ 89.298621][ T5320] dccp_close: ABORT with 1 bytes unread [ 89.528605][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.707890][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.775026][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 89.788492][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 89.826053][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.889010][ T5176] usb 4-1: USB disconnect, device number 2 [ 89.897911][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.949256][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.989784][ T8] usb 1-1: config 0 descriptor?? [ 90.006727][ T5319] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 90.720805][ T8] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 90.970038][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 91.012987][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 91.066595][ T8] usb 1-1: USB disconnect, device number 2 [ 92.304096][ T5374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.225373][ T5400] dccp_close: ABORT with 1 bytes unread [ 93.438870][ T5407] sit0: mtu greater than device maximum [ 93.528185][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.731023][ T5405] kvm: kvm [5404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8c [ 93.766577][ T5405] kvm: kvm [5404]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 93.798844][ T5405] kvm: kvm [5404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1e [ 93.814652][ T5405] kvm: kvm [5404]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 93.880511][ T5405] kvm: kvm [5404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1000000dd [ 93.932762][ T5405] kvm: kvm [5404]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 94.362417][ T5436] dccp_close: ABORT with 1 bytes unread [ 94.851190][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.883203][ T5455] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 94.927316][ T5455] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.955237][ T5458] Zero length message leads to an empty skb [ 95.182260][ T5467] Invalid option length (218) for dns_resolver key [ 95.929678][ T54] Bluetooth: hci4: command tx timeout [ 96.663673][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.925880][ T5505] usb usb9: usbfs: process 5505 (syz-executor.2) did not claim interface 0 before use [ 97.058594][ T5125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.111629][ T29] audit: type=1804 audit(1718977323.476:8): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1832710134/syzkaller.cUXeVd/19/bus" dev="sda1" ino=1956 res=1 errno=0 [ 97.280758][ T5125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 97.300186][ T5125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 97.325476][ T5125] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.369790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.542927][ T5125] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.562531][ T5125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.578133][ T5125] usb 1-1: config 0 descriptor?? [ 98.001559][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.059203][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.086628][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.124692][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.135039][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.182578][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.200083][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.231834][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.292043][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.320936][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.345725][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.381748][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.409093][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.428902][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.436505][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.463453][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.699308][ T5125] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 99.027205][ T5125] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.252071][ T5550] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 99.321109][ T5125] usb 1-1: USB disconnect, device number 3 [ 99.689582][ T54] Bluetooth: hci4: command tx timeout [ 100.316677][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.404772][ T5575] mmap: syz-executor.1 (5575) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.448241][ T5587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.460272][ T5587] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.469785][ T5587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.859443][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.077275][ T5588] team0: Device veth0_macvtap failed to register rx_handler [ 102.317031][ T5590] kvm: kvm [5589]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x9df00000800 [ 102.726838][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.638569][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.862869][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 103.890351][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.915404][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 103.946540][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.979434][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.004216][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.070699][ T8] usb 1-1: config 0 descriptor?? [ 104.085813][ T5635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.518984][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.526466][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.588505][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.595991][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.628960][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.647628][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.665484][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.682013][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.716910][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.750881][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.768652][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.805677][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.829795][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.853910][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.857499][ T5671] loop3: detected capacity change from 0 to 8 [ 104.871636][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.890002][ T54] Bluetooth: hci0: command tx timeout [ 104.904594][ T8] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 105.040531][ T8] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 105.157080][ T8] usb 1-1: USB disconnect, device number 4 [ 105.951031][ T5681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.974813][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.560701][ T5713] loop1: detected capacity change from 0 to 8 [ 107.900408][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.035072][ T5740] input: syz1 as /devices/virtual/input/input6 [ 109.368623][ T54] Bluetooth: hci4: command tx timeout [ 109.493581][ T5755] loop0: detected capacity change from 0 to 8 [ 110.639702][ T5766] sp0: Synchronizing with TNC [ 112.049159][ T5792] loop0: detected capacity change from 0 to 8 [ 114.306086][ T5841] loop1: detected capacity change from 0 to 8 [ 115.167612][ T54] Bluetooth: hci1: command tx timeout [ 115.204729][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.187860][ T5886] loop2: detected capacity change from 0 to 8 [ 117.403232][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.178580][ T54] Bluetooth: hci4: command tx timeout [ 119.440391][ T5921] loop4: detected capacity change from 0 to 8 [ 121.130618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.256314][ T5974] loop3: detected capacity change from 0 to 8 [ 124.423568][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.788857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.842120][ T6005] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 124.992928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.198459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 127.148097][ T6030] loop0: detected capacity change from 0 to 8 [ 129.984569][ T29] audit: type=1804 audit(1718977356.346:9): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4141134894/syzkaller.hD5heI/77/bus" dev="sda1" ino=1952 res=1 errno=0 [ 130.410768][ T6070] loop2: detected capacity change from 0 to 8 [ 132.528618][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.300990][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.307381][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.774206][ T54] Bluetooth: hci2: command tx timeout [ 133.808696][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.219252][ T54] Bluetooth: hci1: command tx timeout [ 135.485121][ T6177] loop4: detected capacity change from 0 to 8 [ 136.578767][ T54] Bluetooth: hci3: command tx timeout [ 137.028707][ T29] audit: type=1326 audit(1718977363.396:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c487cf29 code=0x7ffc0000 [ 137.147366][ T29] audit: type=1326 audit(1718977363.396:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c487cf29 code=0x7ffc0000 [ 137.227336][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.254539][ T29] audit: type=1326 audit(1718977363.446:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc1c487cf29 code=0x7ffc0000 [ 137.314660][ T29] audit: type=1326 audit(1718977363.446:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c487cf29 code=0x7ffc0000 [ 137.371865][ T29] audit: type=1326 audit(1718977363.446:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c487cf29 code=0x7ffc0000 [ 137.445339][ T6217] loop2: detected capacity change from 0 to 8 [ 138.766053][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.603742][ T48] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 139.789098][ T6274] loop3: detected capacity change from 0 to 8 [ 139.812855][ T48] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 140.282032][ T48] usb 5-1: string descriptor 0 read error: -22 [ 140.292851][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.923092][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.980804][ T48] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 141.076187][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.198331][ T48] usb 5-1: USB disconnect, device number 2 [ 141.948777][ T6309] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 142.129815][ T6314] loop1: detected capacity change from 0 to 8 [ 142.330044][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.664222][ T5205] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.871216][ T5205] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 144.897572][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.919339][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.976847][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.019197][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.069734][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.107188][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.117608][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.131810][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.153188][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.204200][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.253325][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.338816][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.363834][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.383495][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.408132][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.461647][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.496123][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.533868][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.628301][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.707425][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.758468][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.816755][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.839916][ T5205] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.872237][ T5205] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.895383][ T5205] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.917563][ T5205] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 145.979725][ T5205] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.033787][ T5205] usb 5-1: Product: syz [ 146.058989][ T5205] usb 5-1: Manufacturer: syz [ 146.064848][ T5205] usb 5-1: SerialNumber: syz [ 146.121120][ T5205] usb 5-1: config 0 descriptor?? [ 146.166512][ T5205] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 146.858938][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 147.564230][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.574319][ T5175] usb 5-1: USB disconnect, device number 3 [ 147.609244][ T5175] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 147.775617][ T29] audit: type=1800 audit(1718977374.146:15): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 147.846667][ T6388] team0: Port device bridge1 added [ 147.886224][ T6398] loop3: detected capacity change from 0 to 8 [ 149.236416][ T29] audit: type=1400 audit(1718977375.606:16): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="!" pid=6425 comm="syz-executor.1" [ 149.331395][ T6432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.468200][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.589943][ T6436] team0: Port device bridge1 added [ 151.102823][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.166074][ T6470] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 151.175091][ T6470] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.908738][ T54] Bluetooth: hci0: command tx timeout [ 153.114558][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.736365][ T54] Bluetooth: hci1: command tx timeout [ 155.618729][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.928058][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.462330][ T6619] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 158.541088][ T6622] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 159.638799][ T6660] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.738665][ T6660] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 160.169748][ T5128] Bluetooth: hci1: command tx timeout [ 160.391733][ T6692] loop0: detected capacity change from 0 to 8 [ 161.386691][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.623367][ T6707] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 161.706870][ T6705] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.709589][ T6712] Bluetooth: MGMT ver 1.23 [ 161.733234][ T6705] macvtap1: entered allmulticast mode [ 161.741528][ T6705] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 161.762020][ T6705] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 161.798701][ T6705] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 162.280196][ T6733] loop2: detected capacity change from 0 to 8 [ 162.618754][ T5173] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.698746][ T5175] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.776231][ T6748] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 162.788899][ T5288] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.808830][ T5173] usb 1-1: Using ep0 maxpacket: 8 [ 162.821955][ T5173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.832596][ T5173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.852909][ T5173] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 162.865855][ T5173] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 162.877802][ T5173] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 162.889343][ T5175] usb 4-1: Using ep0 maxpacket: 32 [ 162.894685][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.910248][ T5175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.923050][ T5173] hub 1-1:1.0: bad descriptor, ignoring hub [ 162.933642][ T5175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.938091][ T5173] hub 1-1:1.0: probe with driver hub failed with error -5 [ 162.947803][ T5175] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.955292][ T5173] cdc_wdm 1-1:1.0: skipping garbage [ 162.966055][ T5173] cdc_wdm 1-1:1.0: skipping garbage [ 162.968972][ T5175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.975569][ T5173] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 162.987661][ T5173] cdc_wdm 1-1:1.0: Unknown control protocol [ 162.996722][ T5175] usb 4-1: config 0 descriptor?? [ 163.012268][ T5288] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 163.027114][ T5175] hub 4-1:0.0: USB hub found [ 163.035065][ T5288] usb 5-1: config 0 has no interface number 0 [ 163.046465][ T5288] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.060835][ T5288] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.074388][ T5288] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 163.083728][ T5288] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 163.093354][ T5288] usb 5-1: Manufacturer: syz [ 163.103565][ T5288] usb 5-1: config 0 descriptor?? [ 163.496584][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.528900][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.557947][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.560820][ T5288] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0004/input/input9 [ 163.586096][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.588817][ T6736] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 163.685986][ T5288] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 163.695456][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.710671][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.757744][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.793859][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.817297][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.851603][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.860637][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.876430][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.906341][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.968039][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.656757][ T6779] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 164.767888][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.507134][ T6812] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.581748][ T6814] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 167.118378][ C0] hrtimer: interrupt took 54740 ns [ 168.090692][ T5175] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 168.141158][ T5175] usbhid 4-1:0.0: can't add hid device: -32 [ 168.148330][ T5175] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 168.603262][ T6832] loop0: detected capacity change from 0 to 32768 [ 168.645995][ T6832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6832) [ 168.713141][ T6832] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.726158][ T6832] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 168.737361][ T6832] BTRFS info (device loop0): using free-space-tree [ 169.043368][ T6753] cdc_wdm 1-1:1.0: Error autopm - -16 [ 169.043659][ T5205] usb 1-1: USB disconnect, device number 5 [ 169.068535][ T6738] cdc_wdm 1-1:1.0: Error autopm - -16 [ 169.107091][ T5173] usb 5-1: USB disconnect, device number 4 [ 169.109054][ T6832] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 169.143519][ T6853] loop2: detected capacity change from 0 to 256 [ 169.206231][ T6853] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 169.298719][ T5117] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.462259][ T5178] usb 4-1: USB disconnect, device number 3 [ 169.859951][ T6865] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 170.131966][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.344950][ T29] audit: type=1326 audit(1718977396.716:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 170.435503][ T29] audit: type=1326 audit(1718977396.716:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 170.508489][ T29] audit: type=1326 audit(1718977396.716:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 170.898666][ T29] audit: type=1326 audit(1718977396.716:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 171.386759][ T29] audit: type=1326 audit(1718977396.716:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 171.638915][ T29] audit: type=1326 audit(1718977396.716:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 171.784678][ T29] audit: type=1326 audit(1718977396.716:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 171.850046][ T29] audit: type=1326 audit(1718977396.716:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 171.927863][ T29] audit: type=1326 audit(1718977396.716:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 171.999745][ T29] audit: type=1326 audit(1718977396.716:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54eec7cf29 code=0x7ffc0000 [ 172.098673][ T5178] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.230035][ T6895] loop1: detected capacity change from 0 to 8 [ 172.313155][ T5288] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.481558][ T5178] usb 5-1: Using ep0 maxpacket: 32 [ 172.520465][ T5178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.531671][ T5178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.542887][ T5288] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 172.570883][ T5288] usb 1-1: config 0 has no interface number 0 [ 172.596877][ T5288] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.662402][ T5288] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.705270][ T5288] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 172.745542][ T5288] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 172.782954][ T5288] usb 1-1: Manufacturer: syz [ 172.817471][ T5288] usb 1-1: config 0 descriptor?? [ 172.948515][ T5178] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.957625][ T5178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.979569][ T5178] usb 5-1: config 0 descriptor?? [ 172.987356][ T5178] hub 5-1:0.0: USB hub found [ 173.408009][ T5288] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0005/input/input10 [ 173.413042][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.438684][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.489928][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.511292][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.551817][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.568692][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.590061][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.606708][ T5288] sony 0003:054C:03D5.0005: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 173.629722][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.747209][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.802829][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.821514][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.865155][ T5288] usb 1-1: USB disconnect, device number 6 [ 173.878992][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.264744][ T6911] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 174.858910][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.915300][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.928747][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.004381][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.024689][ T5178] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 175.074251][ T5178] usbhid 5-1:0.0: can't add hid device: -71 [ 175.094010][ T5178] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.258008][ T6935] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 176.533544][ T6939] loop3: detected capacity change from 0 to 8 [ 176.832449][ T5178] usb 5-1: USB disconnect, device number 5 [ 178.051334][ T6958] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 178.114257][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.152199][ T5288] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.862257][ T5288] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 178.917530][ T5288] usb 4-1: config 0 has no interface number 0 [ 178.953266][ T5288] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.018541][ T5288] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.066271][ T5288] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 179.103043][ T5288] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 179.142882][ T5288] usb 4-1: Manufacturer: syz [ 179.152950][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 179.152967][ T29] audit: type=1326 audit(1718977405.526:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.183436][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.198792][ T5288] usb 4-1: config 0 descriptor?? [ 179.218540][ T5128] Bluetooth: hci1: command tx timeout [ 179.232987][ T29] audit: type=1326 audit(1718977405.526:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.275266][ T29] audit: type=1326 audit(1718977405.526:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.312687][ T29] audit: type=1326 audit(1718977405.526:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.337852][ T6972] team0: Port device bridge1 added [ 179.355023][ T29] audit: type=1326 audit(1718977405.526:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.392483][ T29] audit: type=1326 audit(1718977405.556:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.435912][ T29] audit: type=1326 audit(1718977405.556:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 179.466243][ T29] audit: type=1326 audit(1718977405.556:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.501219][ T29] audit: type=1326 audit(1718977405.576:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4da7cf29 code=0x7ffc0000 [ 179.692461][ T5288] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0006/input/input11 [ 179.724112][ T6983] loop2: detected capacity change from 0 to 8 [ 180.104487][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.908477][ T6985] EXT4-fs: error -4 creating inode table initialization thread [ 180.916501][ T6985] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 181.071386][ T5288] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 181.142856][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.735591][ T7009] loop4: detected capacity change from 0 to 512 [ 181.748293][ T7009] ======================================================= [ 181.748293][ T7009] WARNING: The mand mount option has been deprecated and [ 181.748293][ T7009] and is ignored by this kernel. Remove the mand [ 181.748293][ T7009] option from the mount to silence this warning. [ 181.748293][ T7009] ======================================================= [ 181.783920][ T7009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.790935][ T7009] ext4: Unknown parameter 'nouser_xattr' [ 182.717354][ T5288] usb 4-1: USB disconnect, device number 4 [ 182.845531][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.061421][ T7026] loop2: detected capacity change from 0 to 8 [ 183.077920][ T7022] team0: Port device bridge2 added [ 183.368907][ T5128] Bluetooth: hci3: command tx timeout [ 183.588573][ T5205] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 183.778576][ T5205] usb 2-1: Using ep0 maxpacket: 32 [ 183.792841][ T5205] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.804741][ T5205] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.841690][ T5205] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 183.851482][ T5205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.863444][ T5205] usb 2-1: Product: syz [ 183.868425][ T5205] usb 2-1: Manufacturer: syz [ 183.876002][ T5205] usb 2-1: SerialNumber: syz [ 184.236591][ T5205] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.435026][ T5128] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 184.641237][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.650234][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.844088][ T7060] loop4: detected capacity change from 0 to 512 [ 184.852059][ T7060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.858937][ T7060] ext4: Unknown parameter 'nouser_xattr' [ 185.874118][ T6763] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 186.408549][ T54] Bluetooth: hci2: command tx timeout [ 186.488516][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 187.092882][ T7066] EXT4-fs: error -4 creating inode table initialization thread [ 187.100935][ T7066] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 187.215724][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.295874][ T48] usb 2-1: USB disconnect, device number 2 [ 187.371467][ T48] usblp0: removed [ 187.462868][ T7068] team0: Port device bridge2 added [ 187.612300][ T7078] loop2: detected capacity change from 0 to 256 [ 188.130106][ T7080] evm: overlay not supported [ 188.554456][ T5128] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 188.564128][ T5128] Bluetooth: hci4: Injecting HCI hardware error event [ 188.573281][ T5128] Bluetooth: hci4: hardware error 0x00 [ 188.585584][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 190.415031][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.655939][ T7112] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 190.729303][ T5128] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 191.243789][ T7114] team0: Port device bridge2 added [ 192.348870][ T7133] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 194.742695][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.749243][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.968758][ T5133] Bluetooth: hci2: command tx timeout [ 195.075783][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.292194][ T7161] team0: Port device bridge1 added [ 195.418184][ T7169] loop1: detected capacity change from 0 to 2048 [ 195.480348][ T7168] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 195.544747][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.584680][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.643782][ T7166] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.679028][ T7166] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 195.708981][ T7166] EXT4-fs (loop1): This should not happen!! Data will be lost [ 195.708981][ T7166] [ 195.737136][ T7166] EXT4-fs (loop1): Total free blocks count 0 [ 195.758515][ T7166] EXT4-fs (loop1): Free/Dirty block details [ 195.796368][ T7166] EXT4-fs (loop1): free_blocks=2415919104 [ 195.808735][ T7166] EXT4-fs (loop1): dirty_blocks=16 [ 195.817862][ T7166] EXT4-fs (loop1): Block reservation details [ 195.840864][ T7180] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.850578][ T7166] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 195.984146][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 196.165088][ T7185] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.237707][ T7185] loop3: detected capacity change from 0 to 512 [ 196.317445][ T7185] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 196.372375][ T7185] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 196.408673][ T7185] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 196.450618][ T7185] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 196.478772][ T7185] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 196.522020][ T7185] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 196.565199][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.615445][ T7185] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 196.638104][ T7185] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 196.659343][ T7185] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 196.738001][ T7185] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 196.792941][ T7185] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 196.820478][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 196.820501][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 196.826615][ T5130] Bluetooth: hci3: command 0x0406 tx timeout [ 196.844664][ T7194] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 196.861503][ T7185] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 196.876645][ T7185] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 196.915460][ T7197] loop4: detected capacity change from 0 to 8 [ 196.926767][ T7185] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 196.940367][ T7185] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 196.954756][ T7185] EXT4-fs error (device loop3): ext4_find_dest_de:2066: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 197.033760][ T7198] loop2: detected capacity change from 0 to 2048 [ 197.049086][ T5128] Bluetooth: hci2: command 0x0406 tx timeout [ 197.098211][ T7198] loop2: p2 p3 p7 [ 197.104981][ T5122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.970129][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.112385][ T7212] team0: Port device bridge2 added [ 198.326011][ T7216] loop2: detected capacity change from 0 to 256 [ 198.334812][ T7214] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.872633][ T29] audit: type=1326 audit(1718977425.246:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a53e7cf29 code=0x0 [ 199.222826][ T5288] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 199.277499][ T7240] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.354092][ T7242] loop1: detected capacity change from 0 to 8 [ 199.354205][ T7240] loop4: detected capacity change from 0 to 512 [ 199.398772][ T7240] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.414130][ T7240] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 199.424925][ T7240] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 199.444367][ T7240] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 199.455769][ T5288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.466227][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 199.468775][ T7240] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 199.479418][ T5288] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.479450][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.514513][ T5288] usb 3-1: config 0 descriptor?? [ 199.520913][ T7240] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 199.532686][ T5288] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 199.546330][ T7240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.598877][ T7240] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.618572][ T7240] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 199.638313][ T7240] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 199.655974][ T7245] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.667643][ T7245] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 199.677936][ T7245] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 199.693995][ T7245] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.705668][ T7245] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 199.717074][ T7245] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 199.753188][ T5288] usb 3-1: USB disconnect, device number 2 [ 199.760871][ T7240] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 199.795825][ T7245] EXT4-fs error (device loop4): ext4_find_dest_de:2066: inode #2: block 3: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 199.923303][ T5114] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.604410][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.493705][ T7262] loop2: detected capacity change from 0 to 4096 [ 201.539987][ T7262] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 201.666799][ T7270] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 201.733715][ T7262] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 201.926636][ T5115] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 201.950902][ T5115] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 202.344709][ T29] audit: type=1326 audit(1718977428.716:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea4da7cf29 code=0x0 [ 204.473775][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.057476][ T7310] loop2: detected capacity change from 0 to 512 [ 205.079813][ T7312] loop3: detected capacity change from 0 to 256 [ 205.141348][ T7310] EXT4-fs: Ignoring removed orlov option [ 205.148801][ T7310] EXT4-fs: Ignoring removed i_version option [ 205.170126][ T7310] ext3: Unknown parameter 'rootcontext' [ 205.288617][ T6879] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.652053][ T7327] loop4: detected capacity change from 0 to 16 [ 205.824036][ T7327] erofs: (device loop4): mounted with root inode @ nid 36. [ 206.098269][ T7320] syz-executor.4: attempt to access beyond end of device [ 206.098269][ T7320] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 206.286822][ T7335] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 206.315927][ T7327] syz-executor.4: attempt to access beyond end of device [ 206.315927][ T7327] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 207.552522][ T29] audit: type=1326 audit(1718977433.862:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a53e7cf29 code=0x0 [ 207.679856][ T7320] syz-executor.4: attempt to access beyond end of device [ 207.679856][ T7320] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 207.874071][ T7354] loop2: detected capacity change from 0 to 1024 [ 207.954776][ T7354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.317631][ T5115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.749738][ T7388] syz-executor.3[7388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.749905][ T7388] syz-executor.3[7388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.866037][ T7392] syz-executor.2[7392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.902901][ T7392] syz-executor.2[7392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.164328][ T7398] loop2: detected capacity change from 0 to 1024 [ 210.312548][ T7398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.738991][ T29] audit: type=1326 audit(1718977436.963:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea4da7cf29 code=0x0 [ 211.008448][ T5115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.151111][ T7394] loop4: detected capacity change from 0 to 40427 [ 211.198871][ T7394] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 211.232323][ T7394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 211.287283][ T7394] F2FS-fs (loop4): invalid crc value [ 211.337798][ T7394] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.544130][ T7394] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 211.559880][ T7394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.161689][ T2443] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 212.200256][ T2443] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 212.979232][ T7448] wg2: entered promiscuous mode [ 212.995687][ T7448] wg2: entered allmulticast mode [ 214.438099][ T7456] loop4: detected capacity change from 0 to 16 [ 214.508560][ T7456] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 214.738483][ T6763] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 215.321813][ T7477] loop3: detected capacity change from 0 to 16 [ 215.395624][ T7477] erofs: Unknown parameter 'ÿÿÿÿ' [ 216.110563][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.370932][ T7485] team0: Port device bridge3 added [ 216.695105][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.704288][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.714631][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.723424][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.731581][ T5126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.739619][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.677384][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 218.248610][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.286639][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.314950][ T7499] bridge_slave_0: entered allmulticast mode [ 218.350014][ T7499] bridge_slave_0: entered promiscuous mode [ 218.582687][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.740482][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.889059][ T5126] Bluetooth: hci5: command tx timeout [ 218.925483][ T7499] bridge_slave_1: entered allmulticast mode [ 219.152260][ T7499] bridge_slave_1: entered promiscuous mode [ 219.310318][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.355448][ T29] audit: type=1800 audit(1718977445.416:49): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 219.457737][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.495299][ T7528] team0: Port device bridge3 added [ 219.553042][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.809327][ T7499] team0: Port device team_slave_0 added [ 219.817918][ T7534] loop3: detected capacity change from 0 to 64 [ 219.837629][ T7499] team0: Port device team_slave_1 added [ 219.998993][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.026357][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.128327][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.242466][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.280067][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.412517][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.753386][ T7499] hsr_slave_0: entered promiscuous mode [ 220.780695][ T7499] hsr_slave_1: entered promiscuous mode [ 220.804311][ T7499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.839600][ T7499] Cannot create hsr debugfs directory [ 220.987452][ T5126] Bluetooth: hci5: command tx timeout [ 221.487559][ T7499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.734285][ T7499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.148056][ T7499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.689584][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.838240][ T7549] loop3: detected capacity change from 0 to 32768 [ 222.869160][ T7561] team0: Port device bridge3 added [ 222.945450][ T7563] loop4: detected capacity change from 0 to 64 [ 222.962183][ T7549] bcachefs (/dev/loop3): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 223.093322][ T5126] Bluetooth: hci5: command tx timeout [ 223.156205][ T7499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.390858][ T7549] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 223.646989][ T7549] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 223.828664][ T7549] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 223.828664][ T7549] running recovery passes: check_allocations [ 224.300157][ T7549] ================================================================== [ 224.308287][ T7549] BUG: KASAN: slab-use-after-free in bch2_fs_recovery+0xe85/0x38e0 [ 224.316240][ T7549] Read of size 8 at addr ffff88802bca4f98 by task syz-executor.3/7549 [ 224.324417][ T7549] [ 224.326778][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz-executor.3 Not tainted 6.10.0-rc4-next-20240620-syzkaller #0 [ 224.337314][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 224.347410][ T7549] Call Trace: [ 224.350718][ T7549] [ 224.353677][ T7549] dump_stack_lvl+0x241/0x360 [ 224.358413][ T7549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.363649][ T7549] ? __pfx__printk+0x10/0x10 [ 224.368366][ T7549] ? _printk+0xd5/0x120 [ 224.372557][ T7549] ? __virt_addr_valid+0x183/0x520 [ 224.377709][ T7549] ? __virt_addr_valid+0x183/0x520 [ 224.382860][ T7549] print_report+0x169/0x550 [ 224.387396][ T7549] ? __virt_addr_valid+0x183/0x520 [ 224.392545][ T7549] ? __virt_addr_valid+0x183/0x520 [ 224.397697][ T7549] ? __virt_addr_valid+0x44e/0x520 [ 224.402844][ T7549] ? __phys_addr+0xba/0x170 [ 224.407391][ T7549] ? bch2_fs_recovery+0xe85/0x38e0 [ 224.412532][ T7549] kasan_report+0x143/0x180 [ 224.417070][ T7549] ? bch2_fs_recovery+0xe85/0x38e0 [ 224.422225][ T7549] bch2_fs_recovery+0xe85/0x38e0 [ 224.427209][ T7549] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 224.432623][ T7549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.438643][ T7549] ? mark_lock+0x9a/0x360 [ 224.443012][ T7549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.449032][ T7549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.455403][ T7549] ? irqentry_exit+0x63/0x90 [ 224.460122][ T7549] ? lockdep_hardirqs_on+0x99/0x150 [ 224.465362][ T7549] ? bch2_fs_start+0x32f/0x5b0 [ 224.470150][ T7549] ? bch2_fs_start+0x34e/0x5b0 [ 224.474952][ T7549] bch2_fs_start+0x356/0x5b0 [ 224.479580][ T7549] bch2_fs_get_tree+0xd42/0x16c0 [ 224.484576][ T7549] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 224.490009][ T7549] ? generic_parse_monolithic+0x387/0x400 [ 224.495782][ T7549] ? apparmor_capable+0x138/0x1b0 [ 224.500925][ T7549] ? bpf_lsm_capable+0x9/0x10 [ 224.505638][ T7549] vfs_get_tree+0x90/0x2a0 [ 224.510115][ T7549] do_new_mount+0x2be/0xb40 [ 224.514673][ T7549] ? __pfx_do_new_mount+0x10/0x10 [ 224.519738][ T7549] __se_sys_mount+0x2d6/0x3c0 [ 224.524455][ T7549] ? __pfx___se_sys_mount+0x10/0x10 [ 224.529697][ T7549] ? exc_page_fault+0x590/0x8c0 [ 224.534596][ T7549] ? __x64_sys_mount+0x20/0xc0 [ 224.539400][ T7549] do_syscall_64+0xf3/0x230 [ 224.543946][ T7549] ? clear_bhb_loop+0x35/0x90 [ 224.548659][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.554609][ T7549] RIP: 0033:0x7f6a53e7e62a [ 224.559058][ T7549] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 224.578697][ T7549] RSP: 002b:00007f6a54c3def8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 224.587151][ T7549] RAX: ffffffffffffffda RBX: 00007f6a54c3df80 RCX: 00007f6a53e7e62a [ 224.595168][ T7549] RDX: 000000002000f640 RSI: 000000002000f680 RDI: 00007f6a54c3df40 [ 224.603172][ T7549] RBP: 000000002000f640 R08: 00007f6a54c3df80 R09: 0000000000200012 [ 224.611171][ T7549] R10: 0000000000200012 R11: 0000000000000202 R12: 000000002000f680 [ 224.619161][ T7549] R13: 00007f6a54c3df40 R14: 000000000000f62a R15: 00000000200000c0 [ 224.627160][ T7549] [ 224.630195][ T7549] [ 224.632530][ T7549] Allocated by task 7549: [ 224.636869][ T7549] kasan_save_track+0x3f/0x80 [ 224.641573][ T7549] __kasan_kmalloc+0x98/0xb0 [ 224.646274][ T7549] kmalloc_node_track_caller_noprof+0x225/0x440 [ 224.652560][ T7549] krealloc_noprof+0x7d/0x120 [ 224.657261][ T7549] bch2_sb_realloc+0x2f5/0x660 [ 224.662055][ T7549] __copy_super+0x5dc/0xe70 [ 224.666606][ T7549] bch2_sb_to_fs+0xab/0x150 [ 224.671140][ T7549] bch2_fs_alloc+0xd50/0x20a0 [ 224.675856][ T7549] bch2_fs_open+0x8cc/0xdf0 [ 224.680393][ T7549] bch2_fs_get_tree+0x750/0x16c0 [ 224.685375][ T7549] vfs_get_tree+0x90/0x2a0 [ 224.689825][ T7549] do_new_mount+0x2be/0xb40 [ 224.694356][ T7549] __se_sys_mount+0x2d6/0x3c0 [ 224.699075][ T7549] do_syscall_64+0xf3/0x230 [ 224.703613][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.709545][ T7549] [ 224.711886][ T7549] Freed by task 7549: [ 224.715883][ T7549] kasan_save_track+0x3f/0x80 [ 224.720588][ T7549] kasan_save_free_info+0x40/0x50 [ 224.725649][ T7549] poison_slab_object+0xe0/0x150 [ 224.730627][ T7549] __kasan_slab_free+0x37/0x60 [ 224.735430][ T7549] kfree+0x149/0x360 [ 224.739351][ T7549] krealloc_noprof+0xcf/0x120 [ 224.744049][ T7549] bch2_sb_realloc+0x2f5/0x660 [ 224.748923][ T7549] bch2_sb_field_resize_id+0x140/0x7c0 [ 224.754407][ T7549] bch2_sb_counters_from_cpu+0xac/0x300 [ 224.759989][ T7549] bch2_write_super+0xe80/0x3c80 [ 224.765038][ T7549] bch2_fs_recovery+0xe6c/0x38e0 [ 224.769999][ T7549] bch2_fs_start+0x356/0x5b0 [ 224.774606][ T7549] bch2_fs_get_tree+0xd42/0x16c0 [ 224.779565][ T7549] vfs_get_tree+0x90/0x2a0 [ 224.784008][ T7549] do_new_mount+0x2be/0xb40 [ 224.788536][ T7549] __se_sys_mount+0x2d6/0x3c0 [ 224.793238][ T7549] do_syscall_64+0xf3/0x230 [ 224.797781][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.803714][ T7549] [ 224.806050][ T7549] The buggy address belongs to the object at ffff88802bca4000 [ 224.806050][ T7549] which belongs to the cache kmalloc-4k of size 4096 [ 224.820126][ T7549] The buggy address is located 3992 bytes inside of [ 224.820126][ T7549] freed 4096-byte region [ffff88802bca4000, ffff88802bca5000) [ 224.834125][ T7549] [ 224.836465][ T7549] The buggy address belongs to the physical page: [ 224.842900][ T7549] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bca0 [ 224.851689][ T7549] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 224.860206][ T7549] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 224.867777][ T7549] page_type: 0xffffefff(slab) [ 224.872480][ T7549] raw: 00fff00000000040 ffff888015042140 ffffea0000b3d000 dead000000000002 [ 224.881090][ T7549] raw: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 224.889700][ T7549] head: 00fff00000000040 ffff888015042140 ffffea0000b3d000 dead000000000002 [ 224.898394][ T7549] head: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 224.907092][ T7549] head: 00fff00000000003 ffffea0000af2801 ffffffffffffffff 0000000000000000 [ 224.915794][ T7549] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 224.924485][ T7549] page dumped because: kasan: bad access detected [ 224.930920][ T7549] page_owner tracks the page as allocated [ 224.936652][ T7549] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5176, tgid 5176 (kworker/0:4), ts 207633708887, free_ts 207498216148 [ 224.958921][ T7549] post_alloc_hook+0x1f3/0x230 [ 224.963719][ T7549] get_page_from_freelist+0x2cbd/0x2d70 [ 224.969317][ T7549] __alloc_pages_noprof+0x256/0x6c0 [ 224.974549][ T7549] alloc_slab_page+0x5f/0x120 [ 224.979257][ T7549] allocate_slab+0x5a/0x2f0 [ 224.983787][ T7549] ___slab_alloc+0xcd1/0x14b0 [ 224.988493][ T7549] __slab_alloc+0x58/0xa0 [ 224.992849][ T7549] kmalloc_node_track_caller_noprof+0x281/0x440 [ 224.999145][ T7549] kmalloc_reserve+0x111/0x2a0 [ 225.003941][ T7549] __alloc_skb+0x1f3/0x440 [ 225.008392][ T7549] nsim_dev_trap_report_work+0x254/0xaa0 [ 225.014059][ T7549] process_scheduled_works+0xa2c/0x1830 [ 225.019635][ T7549] worker_thread+0x86d/0xd50 [ 225.024256][ T7549] kthread+0x2f0/0x390 [ 225.028373][ T7549] ret_from_fork+0x4b/0x80 [ 225.032824][ T7549] ret_from_fork_asm+0x1a/0x30 [ 225.037618][ T7549] page last free pid 5122 tgid 5122 stack trace: [ 225.043953][ T7549] free_unref_page+0xd22/0xea0 [ 225.048749][ T7549] __slab_free+0x31b/0x3d0 [ 225.053196][ T7549] qlist_free_all+0x9e/0x140 [ 225.057824][ T7549] kasan_quarantine_reduce+0x14f/0x170 [ 225.063300][ T7549] __kasan_slab_alloc+0x23/0x80 [ 225.068174][ T7549] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 225.074095][ T7549] sock_alloc_inode+0x28/0xc0 [ 225.078800][ T7549] new_inode_pseudo+0x69/0x1a0 [ 225.083590][ T7549] __sock_create+0x123/0x920 [ 225.088206][ T7549] __sys_socket+0x150/0x3c0 [ 225.092729][ T7549] __x64_sys_socket+0x7a/0x90 [ 225.097428][ T7549] do_syscall_64+0xf3/0x230 [ 225.101959][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.107893][ T7549] [ 225.110235][ T7549] Memory state around the buggy address: [ 225.115877][ T7549] ffff88802bca4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.123955][ T7549] ffff88802bca4f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.132055][ T7549] >ffff88802bca4f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.140134][ T7549] ^ [ 225.145003][ T7549] ffff88802bca5000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 2024/06/21 13:44:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 225.153086][ T7549] ffff88802bca5080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.161163][ T7549] ================================================================== [ 225.288160][ T5126] Bluetooth: hci5: command tx timeout [ 225.347419][ T7549] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 225.354841][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz-executor.3 Not tainted 6.10.0-rc4-next-20240620-syzkaller #0 [ 225.365451][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.375528][ T7549] Call Trace: [ 225.378837][ T7549] [ 225.381791][ T7549] dump_stack_lvl+0x241/0x360 [ 225.386507][ T7549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.391744][ T7549] ? __pfx__printk+0x10/0x10 [ 225.396366][ T7549] ? preempt_schedule+0xe1/0xf0 [ 225.401229][ T7549] ? vscnprintf+0x5d/0x90 [ 225.405564][ T7549] panic+0x349/0x870 [ 225.409488][ T7549] ? check_panic_on_warn+0x21/0xb0 [ 225.414631][ T7549] ? __pfx_panic+0x10/0x10 [ 225.419072][ T7549] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 225.425070][ T7549] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.431421][ T7549] ? print_report+0x502/0x550 [ 225.436117][ T7549] check_panic_on_warn+0x86/0xb0 [ 225.441087][ T7549] ? bch2_fs_recovery+0xe85/0x38e0 [ 225.446212][ T7549] end_report+0x77/0x160 [ 225.450463][ T7549] kasan_report+0x154/0x180 [ 225.454977][ T7549] ? bch2_fs_recovery+0xe85/0x38e0 [ 225.460103][ T7549] bch2_fs_recovery+0xe85/0x38e0 [ 225.465056][ T7549] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 225.470466][ T7549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.476486][ T7549] ? mark_lock+0x9a/0x360 [ 225.480848][ T7549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.486853][ T7549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.493211][ T7549] ? irqentry_exit+0x63/0x90 [ 225.497827][ T7549] ? lockdep_hardirqs_on+0x99/0x150 [ 225.503047][ T7549] ? bch2_fs_start+0x32f/0x5b0 [ 225.507834][ T7549] ? bch2_fs_start+0x34e/0x5b0 [ 225.512635][ T7549] bch2_fs_start+0x356/0x5b0 [ 225.517247][ T7549] bch2_fs_get_tree+0xd42/0x16c0 [ 225.522226][ T7549] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 225.527637][ T7549] ? generic_parse_monolithic+0x387/0x400 [ 225.533386][ T7549] ? apparmor_capable+0x138/0x1b0 [ 225.538461][ T7549] ? bpf_lsm_capable+0x9/0x10 [ 225.543187][ T7549] vfs_get_tree+0x90/0x2a0 [ 225.547626][ T7549] do_new_mount+0x2be/0xb40 [ 225.552155][ T7549] ? __pfx_do_new_mount+0x10/0x10 [ 225.557212][ T7549] __se_sys_mount+0x2d6/0x3c0 [ 225.561932][ T7549] ? __pfx___se_sys_mount+0x10/0x10 [ 225.567145][ T7549] ? exc_page_fault+0x590/0x8c0 [ 225.572013][ T7549] ? __x64_sys_mount+0x20/0xc0 [ 225.576795][ T7549] do_syscall_64+0xf3/0x230 [ 225.581406][ T7549] ? clear_bhb_loop+0x35/0x90 [ 225.586094][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.592012][ T7549] RIP: 0033:0x7f6a53e7e62a [ 225.596452][ T7549] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 225.616092][ T7549] RSP: 002b:00007f6a54c3def8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 225.624527][ T7549] RAX: ffffffffffffffda RBX: 00007f6a54c3df80 RCX: 00007f6a53e7e62a [ 225.632520][ T7549] RDX: 000000002000f640 RSI: 000000002000f680 RDI: 00007f6a54c3df40 [ 225.640506][ T7549] RBP: 000000002000f640 R08: 00007f6a54c3df80 R09: 0000000000200012 [ 225.648495][ T7549] R10: 0000000000200012 R11: 0000000000000202 R12: 000000002000f680 [ 225.656482][ T7549] R13: 00007f6a54c3df40 R14: 000000000000f62a R15: 00000000200000c0 [ 225.664470][ T7549] [ 225.667589][ T7549] Kernel Offset: disabled [ 225.671906][ T7549] Rebooting in 86400 seconds..