last executing test programs: 29.057173976s ago: executing program 1 (id=108): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xce) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x10, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@directio}], [], 0x6b}}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800700, &(0x7f0000000940), 0x2, 0x449, &(0x7f0000000400)="$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") setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) 27.756010311s ago: executing program 1 (id=114): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) 27.323004179s ago: executing program 1 (id=116): r0 = epoll_create1(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x800, 0x100000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000010}) r2 = dup3(r1, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_STOP_NAN(r2, 0x0, 0x2000c091) close_range(r1, r1, 0x0) 26.945659346s ago: executing program 1 (id=122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xc5) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_pts(0xffffffffffffffff, 0x42) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc8) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141c7d, 0x62) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4) 25.521833773s ago: executing program 1 (id=127): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2ce, &(0x7f00000004c0)="$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") setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x40000000, 0x0) ioprio_set$pid(0x1, r0, 0x2004) 22.601026369s ago: executing program 1 (id=142): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="4f000e0b80000000ffffffffff00ed0001000406e0080080d0912a01022d1a400013770000000000000004000400140000000100070000009700080026006c09000008000c006400000008000d00000000000a00340002020202020200000500d50001000000000000"], 0x98}}, 0x0) 21.489224s ago: executing program 32 (id=142): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="4f000e0b80000000ffffffffff00ed0001000406e0080080d0912a01022d1a400013770000000000000004000400140000000100070000009700080026006c09000008000c006400000008000d00000000000a00340002020202020200000500d50001000000000000"], 0x98}}, 0x0) 19.838099791s ago: executing program 2 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x10003, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0x8, 0xfff, 0xa4a4, 0x0, 0x1, 0x7], 0x0, 0x2025c0}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.037870455s ago: executing program 2 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a224000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 15.349787977s ago: executing program 2 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) symlinkat(0x0, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4440c1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) 11.704487876s ago: executing program 2 (id=165): r0 = gettid() sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 11.112661028s ago: executing program 2 (id=168): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x4, 0x8, 0x1014}, 0x50) 10.565391718s ago: executing program 2 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797ab000"], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYRES8=r6, @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x41, 0x2) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 10.200639805s ago: executing program 0 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.91369971s ago: executing program 0 (id=173): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x80) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 9.379064511s ago: executing program 0 (id=175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) symlinkat(0x0, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4440c1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) 7.182907173s ago: executing program 0 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setitimer(0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) 7.164308633s ago: executing program 3 (id=180): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4066, &(0x7f0000008100)="$eJzszzFKw3AUBvAvrcEogSLoJIjFwU3i5pRbdJeewclBxdzEUTyA9/AOjl4hDpJIrYNLQeX3m97Hx3vJP/wR1TgVSZ6XT3tJjufpmuaj3Br6nc+l5jzlbjVJneRq/ebicfP/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FKTlXSbpHu5Ph1yNTbLw3Q3bS7qpDqYJffTlO1Rkf1kfvbN3WnymqRI8pZkMdvsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+JyJW1/rethuFtffThJ15Zj2/d9/+PPVsk7u3MsAAAAgACMMskoY+jfCJa+VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//SIAVRg==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') 6.910569078s ago: executing program 4 (id=181): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x40000000015, 0x805, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x4]}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.671679602s ago: executing program 4 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x10003, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0x8, 0xfff, 0xa4a4, 0x0, 0x1, 0x7], 0x0, 0x2025c0}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.087765984s ago: executing program 3 (id=183): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x350, 0x3a8, 0x3a8, 0x350, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'vlan1\x00', 'veth0_to_hsr\x00', {}, {}, 0x32}, 0x0, 0x248, 0x288, 0x700, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast2, [0xff0000ff, 0xffffff00, 0xff000000], 0x4d5, 0x0, 0x2f, 0x1, 0x4}, {@ipv4=@multicast1, [0xff000000, 0x0, 0xffffffff, 0xffffff00], @ipv4=@empty, [0xff000000, 0xffffffff, 0x0, 0xffffff00], 0x4d4, 0x0, 0x84, 0x0, 0x2, 0x1}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xff], @ipv6=@loopback, [0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x5c, 0x0, 0xa, 0x18}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff, 0xffffff00, 0xff000000], @ipv4=@multicast2, [0xffffffff, 0xffffffff, 0xc54f1331fbb311ad, 0xff], 0x4d6, 0x3505, 0x87, 0x1, 0x6, 0x10}], 0x4, 0xffff}}, @common=@hbh={{0x48}, {0x9, 0x0, 0x0, [0x41ea, 0x58, 0x5, 0x3576, 0x3a8, 0x6, 0xb02, 0x80, 0x200, 0x0, 0x4, 0xe, 0x1000, 0x3ff, 0x3, 0x7], 0xa}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x0, 0x7fff, 0x80000001, 0x6, 0xd14, 0x7fff, 0x80009]}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r5}, 0xc) 4.950371775s ago: executing program 3 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a224000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.14703271s ago: executing program 3 (id=185): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) 2.883801114s ago: executing program 4 (id=186): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=""/94, &(0x7f0000000240)=0x5e) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x1000, 0x100, 0x1, 0x4, "cdd480dfbfd344070c22e65ef771caf99e360f20c46d4b2108146c929bb89a8f80dac51abe16a04fd3c28226ffe3e05bd31383b3bed496698357104478ddebe57cf6df41eb28b49cff02cd7be9d225da7e28f5c8e519ae4864f15ec743e8fbb7ab8a8855b5c28a7d0076249ba5bcaefa91dca3938d6e46a27a82759c0d655f8e"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x4e, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.793630406s ago: executing program 0 (id=187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0xb, 0x0, @void}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) 2.646872579s ago: executing program 4 (id=188): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 2.506110552s ago: executing program 4 (id=189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) symlinkat(0x0, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) 1.638506318s ago: executing program 4 (id=190): gettid() sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.513563271s ago: executing program 3 (id=191): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = open(0x0, 0x1a1342, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x6, 0x110}}, 0x28) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r6}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r7}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509158ba86c902007a00004a32000400160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffeff, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @mcast2}, 0x1c) 1.370366784s ago: executing program 0 (id=192): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) 0s ago: executing program 3 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 73.002846][ T4255] cgroup: Unknown subsys name 'net' [ 73.136866][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.685465][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.900032][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.917407][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.925998][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.934737][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.942673][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.950448][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.955754][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.958701][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.966947][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.974180][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.987007][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.987935][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.995219][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.001996][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.008725][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.015873][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.023004][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.030074][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.038940][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.082587][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.092204][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.099896][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.107087][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.115048][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.122274][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.132820][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.137812][ T4271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.147457][ T4271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.156048][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.175146][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.577881][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 77.643952][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 77.694088][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 77.808406][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 77.825941][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 77.862567][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.870799][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.879163][ T4270] device bridge_slave_0 entered promiscuous mode [ 77.922713][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.930086][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.938249][ T4277] device bridge_slave_0 entered promiscuous mode [ 77.947862][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.955181][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.966567][ T4270] device bridge_slave_1 entered promiscuous mode [ 77.983613][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.990922][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.998843][ T4266] device bridge_slave_0 entered promiscuous mode [ 78.006806][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.014095][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.022246][ T4277] device bridge_slave_1 entered promiscuous mode [ 78.054727][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.062054][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.070382][ T4266] device bridge_slave_1 entered promiscuous mode [ 78.123360][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.135996][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.164016][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.197184][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.208206][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.235746][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.243259][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.251917][ T4276] device bridge_slave_0 entered promiscuous mode [ 78.261064][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.288420][ T4270] team0: Port device team_slave_0 added [ 78.294779][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.303108][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.311455][ T4276] device bridge_slave_1 entered promiscuous mode [ 78.334976][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.343050][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.351145][ T4272] device bridge_slave_0 entered promiscuous mode [ 78.360944][ T4270] team0: Port device team_slave_1 added [ 78.384275][ T4277] team0: Port device team_slave_0 added [ 78.390726][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.397841][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.405951][ T4272] device bridge_slave_1 entered promiscuous mode [ 78.432108][ T4266] team0: Port device team_slave_0 added [ 78.441875][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.452434][ T4277] team0: Port device team_slave_1 added [ 78.460068][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.496337][ T4266] team0: Port device team_slave_1 added [ 78.525677][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.532714][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.558760][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.595948][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.609200][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.618882][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.626062][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.652252][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.675372][ T4276] team0: Port device team_slave_0 added [ 78.682471][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.689453][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.715803][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.729259][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.736516][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.762722][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.791794][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.798809][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.825425][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.838151][ T4276] team0: Port device team_slave_1 added [ 78.860505][ T4272] team0: Port device team_slave_0 added [ 78.868934][ T4272] team0: Port device team_slave_1 added [ 78.875438][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.883034][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.909372][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.007824][ T4270] device hsr_slave_0 entered promiscuous mode [ 79.015063][ T4270] device hsr_slave_1 entered promiscuous mode [ 79.027349][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.034499][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.041665][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.049531][ T4277] Cannot create hsr debugfs directory [ 79.055679][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.063419][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.090254][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.102329][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.110384][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.137297][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.161770][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.168853][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.180380][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 79.195130][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 79.208134][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.228863][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.235954][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.262088][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.270607][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 79.272724][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 79.278828][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 79.340357][ T4266] device hsr_slave_0 entered promiscuous mode [ 79.347220][ T4266] device hsr_slave_1 entered promiscuous mode [ 79.354405][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.362284][ T4266] Cannot create hsr debugfs directory [ 79.432920][ T4272] device hsr_slave_0 entered promiscuous mode [ 79.440532][ T4272] device hsr_slave_1 entered promiscuous mode [ 79.447306][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.455524][ T4272] Cannot create hsr debugfs directory [ 79.468683][ T4276] device hsr_slave_0 entered promiscuous mode [ 79.475702][ T4276] device hsr_slave_1 entered promiscuous mode [ 79.482517][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.490379][ T4276] Cannot create hsr debugfs directory [ 79.805929][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.820891][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.838200][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.856130][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.905892][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.916527][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.926105][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.947729][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.002795][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.012978][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.023279][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.033196][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.144006][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.200366][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.214804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.226496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.236372][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.268188][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.279120][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.289051][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.299282][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.306744][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.316654][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.326432][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.351213][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.359428][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.368968][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.379232][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.386439][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.396901][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.406217][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.422574][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.450411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.459616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.474286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.483729][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.494169][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.513761][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.522596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.557924][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.571048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.584122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.593830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.608185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.616573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.626029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.642777][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.656229][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.683560][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.692670][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.702874][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.712214][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.722185][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.729318][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.749454][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.758626][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.767868][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.784550][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.791823][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.801734][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.814248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.822496][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.842685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.879194][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.895038][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.908591][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.923155][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.930529][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.961896][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.985803][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.003114][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.012853][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.040614][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.049465][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.063077][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.075053][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.088231][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.097406][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.108280][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.115481][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.138330][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.159689][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.169155][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.186150][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.201382][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.214558][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.240237][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 81.246333][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 81.259676][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.270976][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.291149][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.305604][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.316903][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.325012][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 81.325054][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 81.331028][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 81.347506][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.356692][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.366349][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.375557][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.384961][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.396790][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.409219][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.417949][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.427128][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.435802][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.467454][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.479181][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.496225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.516723][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.562245][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.569269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.578900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.600824][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.607977][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.656922][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.672894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.681922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.701006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.730662][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.737884][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.769619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.798802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.817261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.857844][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.876104][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.895508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.905564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.921366][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.955915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.986909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.011540][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.018715][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.041389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.052423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.071091][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.078353][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.110591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.139554][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.160062][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.201783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.213731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.226191][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.235297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.246881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.256588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.266238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.311121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.329150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.349790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.360123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.367967][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.382310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.393517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.403594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.414244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.428693][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.449639][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.470182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.478294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.495006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.534180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.546719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.594384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.615067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.643061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.660760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.676273][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.752102][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.781588][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.803319][ T4270] device veth0_vlan entered promiscuous mode [ 82.814621][ T4266] device veth0_vlan entered promiscuous mode [ 82.837585][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.849576][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.881232][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.903894][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.916877][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.927688][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.978136][ T4270] device veth1_vlan entered promiscuous mode [ 83.017080][ T4266] device veth1_vlan entered promiscuous mode [ 83.102588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.112379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.121222][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.134897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.143583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.152600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.165126][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.175526][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.187548][ T4270] device veth0_macvtap entered promiscuous mode [ 83.201916][ T4270] device veth1_macvtap entered promiscuous mode [ 83.231780][ T4266] device veth0_macvtap entered promiscuous mode [ 83.248282][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.299613][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.314828][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.327151][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.332062][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 83.336519][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.342455][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 83.354992][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.362675][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.372265][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.381457][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.390771][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.400083][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 83.400847][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 83.406133][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 83.417988][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.431655][ T4266] device veth1_macvtap entered promiscuous mode [ 83.448211][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.473449][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.481858][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.492997][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.508529][ T4277] device veth0_vlan entered promiscuous mode [ 83.529526][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.539608][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.548771][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.557687][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.565806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.574812][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.585327][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.594844][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603815][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612690][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.632157][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.644826][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.656715][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.674077][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.693221][ T4277] device veth1_vlan entered promiscuous mode [ 83.702194][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.710719][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.719400][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.736735][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.747767][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.762200][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.776347][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.785580][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.795728][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.806803][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.818909][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.828372][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.837550][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.846762][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948788][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.960676][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.969310][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.981750][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.994668][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.003027][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.012479][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.022101][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.039644][ T4277] device veth0_macvtap entered promiscuous mode [ 84.080008][ T4272] device veth0_vlan entered promiscuous mode [ 84.116779][ T4277] device veth1_macvtap entered promiscuous mode [ 84.132633][ T4272] device veth1_vlan entered promiscuous mode [ 84.198530][ T4276] device veth0_vlan entered promiscuous mode [ 84.201196][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.216136][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.222162][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.234653][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.240097][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.251851][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.263491][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.274030][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.286377][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.299996][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.308245][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.318935][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.327735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.336907][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.345284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.354734][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.363951][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.372778][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.381936][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.391321][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.399303][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.417692][ T4272] device veth0_macvtap entered promiscuous mode [ 84.426507][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.438474][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.451999][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.463989][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.478692][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.502197][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.513426][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.524059][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.534698][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.551255][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.560816][ T4276] device veth1_vlan entered promiscuous mode [ 84.562450][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.571298][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.584048][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.595937][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.605505][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.614565][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.642845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.651741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.660819][ T4272] device veth1_macvtap entered promiscuous mode [ 84.688124][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.700615][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.725029][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.739215][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.749942][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.761753][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.771822][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.782442][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.794756][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.814535][ T4276] device veth0_macvtap entered promiscuous mode [ 84.829183][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.838784][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.848257][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.856964][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.867326][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.877035][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.885946][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.894985][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.916467][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.936627][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.947469][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.958027][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.968228][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.979053][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.991524][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.001991][ T4276] device veth1_macvtap entered promiscuous mode [ 85.043065][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.061452][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.091313][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.108346][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.118229][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.128452][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.190634][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.205210][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.250262][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.265831][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.290388][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.314268][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.333551][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.358305][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.375714][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.393467][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.403766][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 85.420163][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 85.444785][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.457249][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.469491][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.481711][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 85.487776][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 85.493494][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.494271][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 85.510822][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.524401][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.524669][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 85.536844][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.554286][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.565235][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.576459][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.588376][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.612731][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.622437][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.646983][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.658781][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.667905][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.682892][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.692582][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.701885][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.711476][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.766739][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.775703][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.787499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.800640][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.815916][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.854259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.967720][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.002176][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.038953][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.040028][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.106632][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.150267][ T4400] loop4: detected capacity change from 0 to 1024 [ 86.172346][ T4400] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.188052][ T4400] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.207449][ T4400] JBD2: no valid journal superblock found [ 86.213859][ T4400] EXT4-fs (loop4): error loading journal [ 86.239970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.268755][ T4402] loop2: detected capacity change from 0 to 128 [ 86.278940][ T4388] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.288344][ T4402] ======================================================= [ 86.288344][ T4402] WARNING: The mand mount option has been deprecated and [ 86.288344][ T4402] and is ignored by this kernel. Remove the mand [ 86.288344][ T4402] option from the mount to silence this warning. [ 86.288344][ T4402] ======================================================= [ 86.349384][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.376493][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.413376][ T14] cfg80211: failed to load regulatory.db [ 86.477454][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.842071][ T4414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.848371][ T4414] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.862075][ T4414] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 87.869626][ T4414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.875689][ T4414] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.895693][ T4414] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 87.903067][ T4414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.909071][ T4414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.921643][ T4414] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 87.928954][ T4414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.936004][ T4414] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.943830][ T4414] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 87.951346][ T4414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 87.957367][ T4414] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 87.977105][ T4414] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 88.085529][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.210223][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.227745][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.271034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.284132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.507898][ T4425] device bridge_slave_0 left promiscuous mode [ 88.641112][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.909045][ T4435] loop1: detected capacity change from 0 to 1024 [ 88.919786][ T4425] device bridge_slave_1 left promiscuous mode [ 88.930632][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.009227][ T4425] bond0: (slave bond_slave_0): Releasing backup interface [ 89.089343][ T4425] bond0: (slave bond_slave_1): Releasing backup interface [ 89.482761][ T4439] syz.1.12: attempt to access beyond end of device [ 89.482761][ T4439] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 89.897943][ T4425] team0: Port device team_slave_0 removed [ 89.998738][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.006161][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.012351][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.018458][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.039946][ T4273] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.071424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.079793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 90.088164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 90.096466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 90.104849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 90.113152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 90.121445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 90.129907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 90.205964][ T4425] team0: Port device team_slave_1 removed [ 90.254852][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.290071][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.337009][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.358966][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.324806][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 91.340011][ T4456] Invalid ELF header magic: != ELF [ 91.427387][ T4458] loop2: detected capacity change from 0 to 256 [ 91.569101][ T4458] FAT-fs (loop2): Directory bread(block 64) failed [ 91.614161][ T4458] FAT-fs (loop2): Directory bread(block 65) failed [ 91.629852][ C1] sched: RT throttling activated [ 91.661457][ T4458] FAT-fs (loop2): Directory bread(block 66) failed [ 91.698829][ T4458] FAT-fs (loop2): Directory bread(block 67) failed [ 91.742420][ T4458] FAT-fs (loop2): Directory bread(block 68) failed [ 91.749418][ T4460] loop4: detected capacity change from 0 to 256 [ 91.778731][ T4458] FAT-fs (loop2): Directory bread(block 69) failed [ 91.836621][ T4458] FAT-fs (loop2): Directory bread(block 70) failed [ 91.873656][ T4458] FAT-fs (loop2): Directory bread(block 71) failed [ 91.960220][ T4458] FAT-fs (loop2): Directory bread(block 72) failed [ 91.996229][ T4458] FAT-fs (loop2): Directory bread(block 73) failed [ 92.026636][ T26] audit: type=1800 audit(1757943531.513:2): pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 92.070901][ T4453] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 92.170272][ T4453] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 92.190894][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 92.197088][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 92.204328][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 92.205266][ T4458] syz.2.20: attempt to access beyond end of device [ 92.205266][ T4458] loop2: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 92.210447][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 92.210495][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 92.285905][ T4453] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.403179][ T4458] syz.2.20: attempt to access beyond end of device [ 92.403179][ T4458] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 92.438302][ T26] audit: type=1800 audit(1757943531.923:3): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.20" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 92.511345][ T4461] loop2: detected capacity change from 256 to 0 [ 92.646052][ T4453] syz.1.18 (4453) used greatest stack depth: 18248 bytes left [ 92.764892][ T4468] device batadv_slave_1 entered promiscuous mode [ 92.817071][ T4466] device batadv_slave_1 left promiscuous mode [ 92.826841][ T4469] loop1: detected capacity change from 0 to 256 [ 92.900274][ T4469] exfat: Deprecated parameter 'namecase' [ 92.960751][ T4469] exfat: Deprecated parameter 'namecase' [ 93.027744][ T4469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 93.139351][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.257929][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.276827][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.288024][ T4478] device bridge_slave_0 left promiscuous mode [ 93.329427][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.430072][ T26] audit: type=1326 audit(1757943532.893:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415cd8eba9 code=0x7ffc0000 [ 93.923870][ T26] audit: type=1326 audit(1757943532.893:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f415cd8eba9 code=0x7ffc0000 [ 93.978348][ T4478] device bridge_slave_1 left promiscuous mode [ 93.997527][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.005936][ T26] audit: type=1326 audit(1757943532.893:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415cd8eba9 code=0x7ffc0000 [ 94.043265][ T26] audit: type=1326 audit(1757943532.893:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f415cd90ac7 code=0x7ffc0000 [ 94.069533][ T4478] bond0: (slave bond_slave_0): Releasing backup interface [ 94.092187][ T26] audit: type=1326 audit(1757943532.903:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f415cd90a3c code=0x7ffc0000 [ 94.107651][ T4486] xt_cgroup: xt_cgroup: no path or classid specified [ 94.115181][ T4478] bond0: (slave bond_slave_1): Releasing backup interface [ 94.129130][ T26] audit: type=1326 audit(1757943532.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f415cd90974 code=0x7ffc0000 [ 94.159357][ T26] audit: type=1326 audit(1757943532.903:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f415cd90974 code=0x7ffc0000 [ 94.227324][ T4478] team0: Port device team_slave_0 removed [ 94.235422][ T26] audit: type=1326 audit(1757943532.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f415cd8d80a code=0x7ffc0000 [ 94.300006][ T4313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.312355][ T4478] team0: Port device team_slave_1 removed [ 94.318991][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.333935][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.351336][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.359429][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.600581][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 94.623678][ T4313] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.717087][ T4313] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.225247][ T4496] binder: 4490:4496 ioctl c018620c 200000000000 returned -1 [ 95.261055][ T4313] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 95.282369][ T4494] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.314818][ T4313] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 95.387074][ T4313] usb 2-1: Product: syz [ 95.397215][ T4313] usb 2-1: Manufacturer: syz [ 95.459810][ T4313] hub 2-1:4.0: USB hub found [ 95.703626][ T4313] hub 2-1:4.0: 2 ports detected [ 96.368943][ T4511] loop0: detected capacity change from 0 to 256 [ 96.492648][ T4313] usb 2-1: USB disconnect, device number 2 [ 96.578081][ T4511] FAT-fs (loop0): Directory bread(block 64) failed [ 96.607969][ T4511] FAT-fs (loop0): Directory bread(block 65) failed [ 96.611757][ T4518] loop3: detected capacity change from 0 to 1024 [ 96.664078][ T4511] FAT-fs (loop0): Directory bread(block 66) failed [ 96.824616][ T4511] FAT-fs (loop0): Directory bread(block 67) failed [ 97.102010][ T4511] FAT-fs (loop0): Directory bread(block 68) failed [ 97.600864][ T4511] FAT-fs (loop0): Directory bread(block 69) failed [ 97.607560][ T4511] FAT-fs (loop0): Directory bread(block 70) failed [ 97.630162][ T4511] FAT-fs (loop0): Directory bread(block 71) failed [ 97.637078][ T4511] FAT-fs (loop0): Directory bread(block 72) failed [ 97.650279][ T4511] FAT-fs (loop0): Directory bread(block 73) failed [ 97.775347][ T4510] syz.0.36: attempt to access beyond end of device [ 97.775347][ T4510] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 97.840321][ T4510] syz.0.36: attempt to access beyond end of device [ 97.840321][ T4510] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 97.954901][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 97.954916][ T26] audit: type=1800 audit(1757943537.443:14): pid=4510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 98.015688][ T4511] loop0: detected capacity change from 256 to 0 [ 98.052921][ T4527] loop4: detected capacity change from 0 to 256 [ 98.167533][ T4527] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 100.075403][ T4545] Zero length message leads to an empty skb [ 100.211874][ T4550] loop4: detected capacity change from 0 to 512 [ 100.270399][ T4547] loop2: detected capacity change from 0 to 1764 [ 100.315571][ T4550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.390179][ T4550] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.440341][ T4562] loop0: detected capacity change from 0 to 256 [ 100.537390][ T4562] FAT-fs (loop0): Directory bread(block 64) failed [ 100.580060][ T4562] FAT-fs (loop0): Directory bread(block 65) failed [ 100.620308][ T4562] FAT-fs (loop0): Directory bread(block 66) failed [ 100.655827][ T4562] FAT-fs (loop0): Directory bread(block 67) failed [ 100.727451][ T4562] FAT-fs (loop0): Directory bread(block 68) failed [ 100.779567][ T4562] FAT-fs (loop0): Directory bread(block 69) failed [ 100.802566][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 100.847249][ T4562] FAT-fs (loop0): Directory bread(block 70) failed [ 100.870080][ T4562] FAT-fs (loop0): Directory bread(block 71) failed [ 100.876762][ T4562] FAT-fs (loop0): Directory bread(block 72) failed [ 100.921184][ T4562] FAT-fs (loop0): Directory bread(block 73) failed [ 101.007233][ T4562] syz.0.54: attempt to access beyond end of device [ 101.007233][ T4562] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 101.055549][ T4562] syz.0.54: attempt to access beyond end of device [ 101.055549][ T4562] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 101.087804][ T26] audit: type=1800 audit(1757943540.573:15): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.54" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 101.112700][ T4572] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 101.160596][ T4573] loop0: detected capacity change from 256 to 0 [ 101.717674][ T4589] loop4: detected capacity change from 0 to 256 [ 101.751786][ T4589] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb45ad1ca, utbl_chksum : 0xe619d30d) [ 104.471045][ T4603] loop1: detected capacity change from 0 to 512 [ 104.562268][ T4603] EXT4-fs (loop1): 1 truncate cleaned up [ 104.589980][ T4603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.695151][ T4603] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.65: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 104.728673][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 104.757544][ T4603] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.65: deleted inode referenced: 15 [ 104.804650][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 104.881088][ T4613] loop4: detected capacity change from 0 to 1024 [ 104.916014][ T4613] hfsplus: invalid catalog entry type in lookup [ 104.925483][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 105.078847][ T4615] loop2: detected capacity change from 0 to 256 [ 106.603943][ T4641] loop3: detected capacity change from 0 to 256 [ 106.684597][ T4642] binder: 4639:4642 ioctl c018620c 200000000000 returned -22 [ 106.718640][ T4641] FAT-fs (loop3): Directory bread(block 64) failed [ 106.748607][ T4641] FAT-fs (loop3): Directory bread(block 65) failed [ 106.797412][ T4641] FAT-fs (loop3): Directory bread(block 66) failed [ 106.832103][ T4641] FAT-fs (loop3): Directory bread(block 67) failed [ 106.872131][ T4641] FAT-fs (loop3): Directory bread(block 68) failed [ 106.890535][ T4641] FAT-fs (loop3): Directory bread(block 69) failed [ 106.917674][ T4641] FAT-fs (loop3): Directory bread(block 70) failed [ 106.950086][ T4641] FAT-fs (loop3): Directory bread(block 71) failed [ 106.967903][ T4641] FAT-fs (loop3): Directory bread(block 72) failed [ 107.000659][ T4641] FAT-fs (loop3): Directory bread(block 73) failed [ 107.448290][ T4662] loop4: detected capacity change from 0 to 256 [ 107.698754][ T4671] loop1: detected capacity change from 0 to 512 [ 107.723748][ T4662] capability: warning: `syz.4.88' uses deprecated v2 capabilities in a way that may be insecure [ 107.726604][ T4671] EXT4-fs: Ignoring removed i_version option [ 107.778854][ T4671] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.800868][ T4671] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.161583][ T4671] EXT4-fs (loop1): 1 truncate cleaned up [ 108.167314][ T4671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.171643][ T4681] input: syz1 as /devices/virtual/input/input5 [ 108.562974][ T4671] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.91: corrupted in-inode xattr [ 108.714470][ T4671] EXT4-fs (loop1): Remounting filesystem read-only [ 108.745563][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 108.756911][ T4671] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.91: unable to update i_inline_off [ 108.765315][ T4675] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 108.776018][ T4675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.784884][ T4675] vhci_hcd vhci_hcd.0: Device attached [ 108.845304][ T4671] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.863866][ T4691] vhci_hcd: connection closed [ 108.866474][ T4430] vhci_hcd: stop threads [ 108.878838][ T4430] vhci_hcd: release socket [ 108.887776][ T4430] vhci_hcd: disconnect device [ 108.970225][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 109.218384][ T4697] loop4: detected capacity change from 0 to 8192 [ 109.449134][ T4700] 9pnet_fd: p9_fd_create_tcp (4700): problem connecting socket to 127.0.0.1 [ 111.886652][ T4721] loop3: detected capacity change from 0 to 1024 [ 111.897095][ T4721] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.941072][ T26] audit: type=1326 audit(1757943551.433:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 111.964315][ T4721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.024512][ T26] audit: type=1326 audit(1757943551.463:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 112.057252][ T4730] loop1: detected capacity change from 0 to 512 [ 112.104700][ T26] audit: type=1326 audit(1757943551.463:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 112.157031][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 112.162605][ T26] audit: type=1326 audit(1757943551.463:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 112.171311][ T4730] EXT4-fs (loop1): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 112.270611][ T26] audit: type=1326 audit(1757943551.463:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 112.388208][ T26] audit: type=1326 audit(1757943551.463:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 112.509159][ T26] audit: type=1326 audit(1757943551.463:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 113.169999][ T26] audit: type=1326 audit(1757943551.463:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04dd58d510 code=0x7ffc0000 [ 113.256912][ T26] audit: type=1326 audit(1757943551.463:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f04dd5903d7 code=0x7ffc0000 [ 113.438992][ T26] audit: type=1326 audit(1757943551.463:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04dd58eba9 code=0x7ffc0000 [ 113.948247][ T4760] loop0: detected capacity change from 0 to 512 [ 114.061705][ T4760] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 114.076927][ T4763] loop1: detected capacity change from 0 to 512 [ 114.109419][ T4763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.333636][ T4760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 114.367123][ T4760] System zones: 1-12 [ 114.625603][ T4763] EXT4-fs (loop1): 1 truncate cleaned up [ 114.632750][ T4763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.752871][ T4770] loop2: detected capacity change from 0 to 256 [ 114.761590][ T4760] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.121: corrupted in-inode xattr [ 114.820828][ T4763] getblk(): invalid block size 1024 requested [ 114.827013][ T4763] logical block size: 4096 [ 114.835992][ T4760] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.121: couldn't read orphan inode 15 (err -117) [ 114.860051][ T4763] CPU: 0 PID: 4763 Comm: syz.1.122 Not tainted syzkaller #0 [ 114.867538][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.877651][ T4763] Call Trace: [ 114.880965][ T4763] [ 114.883933][ T4763] dump_stack_lvl+0x168/0x22e [ 114.888759][ T4763] ? write_boundary_block+0xb0/0xb0 [ 114.894020][ T4763] ? show_regs_print_info+0x12/0x12 [ 114.899272][ T4763] ? load_image+0x3b0/0x3b0 [ 114.903865][ T4763] ? mark_lock+0x94/0x320 [ 114.908258][ T4763] __getblk_gfp+0x1c3/0xb20 [ 114.912783][ T4763] ext4_getblk+0x25e/0x6d0 [ 114.917222][ T4763] ? ext4_get_block_unwritten+0x100/0x100 [ 114.922977][ T4763] ? __might_sleep+0xd0/0xd0 [ 114.927629][ T4763] ? verify_lock_unused+0x140/0x140 [ 114.928892][ T4760] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.932857][ T4763] ? mod_objcg_state+0x507/0x890 [ 114.932916][ T4763] ext4_bread_batch+0x64/0x4a0 [ 114.951069][ T4763] __ext4_find_entry+0x105c/0x1be0 [ 114.956215][ T4763] ? ext4_ci_compare+0x3d0/0x3d0 [ 114.961177][ T4763] ? ext4_fname_prepare_lookup+0x2d3/0x3a0 [ 114.967020][ T4763] ? d_alloc_parallel+0x136f/0x1480 [ 114.972262][ T4763] ext4_lookup+0x144/0x6d0 [ 114.976740][ T4763] ? ext4_add_entry+0xd90/0xd90 [ 114.981654][ T4763] ? __init_waitqueue_head+0xa5/0x150 [ 114.987087][ T4763] __lookup_slow+0x27d/0x3a0 [ 114.991721][ T4763] ? lookup_one_len+0x2c0/0x2c0 [ 114.996637][ T4763] ? try_to_unlazy+0x34c/0x5a0 [ 115.001439][ T4763] ? preempt_count_add+0x8d/0x190 [ 115.006491][ T4763] ? down_read+0x1a8/0x2d0 [ 115.011039][ T4763] lookup_slow+0x53/0x70 [ 115.015323][ T4763] link_path_walk+0x928/0xe50 [ 115.020041][ T4763] ? handle_lookup_down+0x130/0x130 [ 115.025289][ T4763] __filename_parentat+0x201/0x610 [ 115.030443][ T4763] ? vfs_path_parent_lookup+0x50/0x50 [ 115.035844][ T4763] ? kasan_set_track+0x60/0x70 [ 115.040666][ T4763] ? __virt_addr_valid+0x188/0x540 [ 115.045805][ T4763] do_renameat2+0x230/0xc70 [ 115.050351][ T4763] ? fsnotify_move+0x4e0/0x4e0 [ 115.055149][ T4763] ? __check_object_size+0x500/0xa40 [ 115.060454][ T4763] ? getname_flags+0x206/0x500 [ 115.065248][ T4763] __x64_sys_renameat2+0xce/0xe0 [ 115.070249][ T4763] do_syscall_64+0x4c/0xa0 [ 115.074729][ T4763] ? clear_bhb_loop+0x60/0xb0 [ 115.079414][ T4763] ? clear_bhb_loop+0x60/0xb0 [ 115.084104][ T4763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.090042][ T4763] RIP: 0033:0x7f04dd58eba9 [ 115.094487][ T4763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.114207][ T4763] RSP: 002b:00007f04de494038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 115.122656][ T4763] RAX: ffffffffffffffda RBX: 00007f04dd7d5fa0 RCX: 00007f04dd58eba9 [ 115.130659][ T4763] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 115.138644][ T4763] RBP: 00007f04dd611e19 R08: 0000000000000004 R09: 0000000000000000 [ 115.146629][ T4763] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 115.154607][ T4763] R13: 00007f04dd7d6038 R14: 00007f04dd7d5fa0 R15: 00007ffee4566608 [ 115.162697][ T4763] [ 115.354075][ T4276] getblk(): invalid block size 1024 requested [ 115.370415][ T4276] logical block size: 4096 [ 115.386664][ T4276] CPU: 1 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 115.394301][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.404404][ T4276] Call Trace: [ 115.407726][ T4276] [ 115.410695][ T4276] dump_stack_lvl+0x168/0x22e [ 115.415418][ T4276] ? write_boundary_block+0xb0/0xb0 [ 115.420692][ T4276] ? show_regs_print_info+0x12/0x12 [ 115.425933][ T4276] ? load_image+0x3b0/0x3b0 [ 115.430610][ T4276] ? mark_lock+0x94/0x320 [ 115.435092][ T4276] __getblk_gfp+0x1c3/0xb20 [ 115.440205][ T4276] ext4_getblk+0x25e/0x6d0 [ 115.444677][ T4276] ? is_bpf_text_address+0x22/0x2a0 [ 115.450016][ T4276] ? ext4_get_block_unwritten+0x100/0x100 [ 115.455885][ T4276] ? preempt_count_add+0x8d/0x190 [ 115.460955][ T4276] ext4_bread+0x26/0x170 [ 115.465425][ T4276] __ext4_read_dirblock+0xcb/0x890 [ 115.470591][ T4276] htree_dirblock_to_tree+0x262/0xe70 [ 115.476015][ T4276] ? arch_stack_walk+0xf2/0x140 [ 115.480930][ T4276] ? ext4_htree_fill_tree+0x10e0/0x10e0 [ 115.486618][ T4276] ? kasan_set_track+0x60/0x70 [ 115.491439][ T4276] ? __kasan_kmalloc+0x8e/0xa0 [ 115.496266][ T4276] ? ext4_readdir+0x49f/0x3b60 [ 115.501096][ T4276] ? iterate_dir+0x218/0x560 [ 115.505746][ T4276] ext4_htree_fill_tree+0x5d4/0x10e0 [ 115.511103][ T4276] ? ext4_handle_dirty_dirblock+0x610/0x610 [ 115.517090][ T4276] ext4_readdir+0x2cfa/0x3b60 [ 115.521861][ T4276] ? ext4_dir_llseek+0x4b0/0x4b0 [ 115.526858][ T4276] ? trace_contention_end+0x5f/0x170 [ 115.532234][ T4276] ? __mutex_lock+0x19e/0xaf0 [ 115.536959][ T4276] ? __might_sleep+0xd0/0xd0 [ 115.541605][ T4276] ? read_lock_is_recursive+0x10/0x10 [ 115.547036][ T4276] ? __fdget_pos+0x2ae/0x360 [ 115.551696][ T4276] ? end_current_label_crit_section+0x14b/0x170 [ 115.557991][ T4276] ? preempt_count_add+0x8d/0x190 [ 115.563062][ T4276] ? down_read_killable+0x1cc/0x340 [ 115.568309][ T4276] ? fsnotify_perm+0x248/0x550 [ 115.573126][ T4276] iterate_dir+0x218/0x560 [ 115.577596][ T4276] ? ext4_dir_llseek+0x4b0/0x4b0 [ 115.582595][ T4276] __se_sys_getdents64+0xe5/0x260 [ 115.587674][ T4276] ? __x64_sys_getdents64+0x80/0x80 [ 115.592919][ T4276] ? filldir+0x700/0x700 [ 115.597269][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 115.602516][ T4276] do_syscall_64+0x4c/0xa0 [ 115.606966][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 115.611676][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 115.616404][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.622348][ T4276] RIP: 0033:0x7f04dd5c1513 [ 115.626903][ T4276] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 115.646552][ T4276] RSP: 002b:00007ffee4564768 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 115.655014][ T4276] RAX: ffffffffffffffda RBX: 000055558b3c4600 RCX: 00007f04dd5c1513 [ 115.663038][ T4276] RDX: 0000000000008000 RSI: 000055558b3c4600 RDI: 0000000000000005 [ 115.671065][ T4276] RBP: 000055558b3c45d4 R08: 0000000000000000 R09: 0000000000000000 [ 115.679092][ T4276] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 115.687128][ T4276] R13: 0000000000000010 R14: 000055558b3c45d0 R15: 00007ffee4566a20 [ 115.695180][ T4276] [ 116.233309][ T4276] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 116.247583][ T4276] getblk(): invalid block size 1024 requested [ 116.255077][ T4276] logical block size: 4096 [ 116.259689][ T4276] CPU: 1 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 116.267262][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.277605][ T4276] Call Trace: [ 116.280913][ T4276] [ 116.283876][ T4276] dump_stack_lvl+0x168/0x22e [ 116.288590][ T4276] ? write_boundary_block+0xb0/0xb0 [ 116.293917][ T4276] ? show_regs_print_info+0x12/0x12 [ 116.299162][ T4276] ? load_image+0x3b0/0x3b0 [ 116.303715][ T4276] ? __lock_acquire+0x7c50/0x7c50 [ 116.308791][ T4276] ? __lock_acquire+0x13c0/0x7c50 [ 116.313865][ T4276] __getblk_gfp+0x1c3/0xb20 [ 116.318425][ T4276] ? ext4_get_group_desc+0x42a/0x4d0 [ 116.323769][ T4276] ? ext4_get_group_desc+0x10a/0x4d0 [ 116.329119][ T4276] __ext4_get_inode_loc+0x474/0xdf0 [ 116.334402][ T4276] ? ext4_get_inode_loc+0xf0/0xf0 [ 116.339566][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 116.344834][ T4276] ? __might_sleep+0xd0/0xd0 [ 116.349481][ T4276] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 116.355765][ T4276] ? ktime_get_real_ts64+0x420/0x420 [ 116.361089][ T4276] ext4_reserve_inode_write+0x10a/0x290 [ 116.366699][ T4276] __ext4_mark_inode_dirty+0x16e/0x770 [ 116.372224][ T4276] ext4_dirty_inode+0xbf/0x100 [ 116.377044][ T4276] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 116.382923][ T4276] __mark_inode_dirty+0x2eb/0xe90 [ 116.388023][ T4276] ? iterate_dir+0x47c/0x560 [ 116.392666][ T4276] touch_atime+0x3a7/0x620 [ 116.397142][ T4276] ? current_time+0x2b0/0x2b0 [ 116.401967][ T4276] ? down_read_killable+0x1cc/0x340 [ 116.407217][ T4276] ? fsnotify_perm+0x248/0x550 [ 116.412036][ T4276] iterate_dir+0x47c/0x560 [ 116.416540][ T4276] ? ext4_dir_llseek+0x4b0/0x4b0 [ 116.421516][ T4276] __se_sys_getdents64+0xe5/0x260 [ 116.426605][ T4276] ? __x64_sys_getdents64+0x80/0x80 [ 116.431834][ T4276] ? filldir+0x700/0x700 [ 116.436145][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 116.441376][ T4276] do_syscall_64+0x4c/0xa0 [ 116.445811][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 116.450503][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 116.455202][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.461121][ T4276] RIP: 0033:0x7f04dd5c1513 [ 116.465573][ T4276] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 116.485197][ T4276] RSP: 002b:00007ffee4564768 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 116.493646][ T4276] RAX: ffffffffffffffda RBX: 000055558b3c4600 RCX: 00007f04dd5c1513 [ 116.501686][ T4276] RDX: 0000000000008000 RSI: 000055558b3c4600 RDI: 0000000000000005 [ 116.509674][ T4276] RBP: 000055558b3c45d4 R08: 0000000000000000 R09: 0000000000000000 [ 116.517660][ T4276] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 116.525646][ T4276] R13: 0000000000000010 R14: 000055558b3c45d0 R15: 00007ffee4566a20 [ 116.533646][ T4276] [ 116.551169][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 116.810446][ T4276] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Out of memory [ 116.828181][ T4276] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 116.869045][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 116.887426][ T4434] getblk(): invalid block size 1024 requested [ 116.896027][ T4434] logical block size: 4096 [ 116.898470][ T4801] loop3: detected capacity change from 0 to 512 [ 116.911030][ T4801] EXT4-fs: Ignoring removed nobh option [ 116.932548][ T4434] CPU: 1 PID: 4434 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 116.940256][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.948824][ T4801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.950337][ T4434] Workqueue: writeback wb_workfn (flush-7:1) [ 116.950405][ T4434] Call Trace: [ 116.950413][ T4434] [ 116.950422][ T4434] dump_stack_lvl+0x168/0x22e [ 116.950450][ T4434] ? write_boundary_block+0xb0/0xb0 [ 116.950478][ T4434] ? show_regs_print_info+0x12/0x12 [ 116.986569][ T4434] ? load_image+0x3b0/0x3b0 [ 116.991138][ T4434] ? __lock_acquire+0x7c50/0x7c50 [ 116.996228][ T4434] __getblk_gfp+0x1c3/0xb20 [ 117.000787][ T4434] ? ext4_get_group_desc+0x42a/0x4d0 [ 117.006124][ T4434] ? ext4_get_group_desc+0x10a/0x4d0 [ 117.011473][ T4434] __ext4_get_inode_loc+0x474/0xdf0 [ 117.016729][ T4434] ? writeback_sb_inodes+0x441/0x17d0 [ 117.022169][ T4434] ? ext4_get_inode_loc+0xf0/0xf0 [ 117.027250][ T4434] ? __writeback_single_inode+0x4ae/0x1160 [ 117.033112][ T4434] ? __lock_acquire+0x7c50/0x7c50 [ 117.038175][ T4434] ? do_raw_spin_lock+0x11d/0x280 [ 117.043244][ T4434] ext4_write_inode+0x2ea/0x5e0 [ 117.048145][ T4434] __writeback_single_inode+0x75b/0x1160 [ 117.053814][ T4434] writeback_sb_inodes+0xad8/0x17d0 [ 117.059103][ T4434] ? do_raw_spin_lock+0x11d/0x280 [ 117.064189][ T4434] ? queue_io+0x5a0/0x5a0 [ 117.068567][ T4434] ? rcu_is_watching+0x11/0xa0 [ 117.073362][ T4434] wb_writeback+0x468/0xd00 [ 117.077926][ T4434] ? percpu_ref_tryget+0x250/0x250 [ 117.083056][ T4434] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 117.089118][ T4434] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.094345][ T4434] wb_workfn+0x435/0xec0 [ 117.098620][ T4434] ? inode_wait_for_writeback+0x200/0x200 [ 117.104456][ T4434] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 117.110460][ T4434] ? read_lock_is_recursive+0x10/0x10 [ 117.115850][ T4434] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 117.122036][ T4434] ? _raw_spin_unlock+0x40/0x40 [ 117.126918][ T4434] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.132149][ T4434] ? process_one_work+0x7a1/0x1160 [ 117.137288][ T4434] process_one_work+0x898/0x1160 [ 117.142257][ T4434] ? worker_detach_from_pool+0x240/0x240 [ 117.147916][ T4434] ? _raw_spin_lock_irq+0xab/0xe0 [ 117.153135][ T4434] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 117.158531][ T4434] ? kthread_data+0x4b/0xc0 [ 117.163194][ T4434] worker_thread+0xaa2/0x1250 [ 117.167987][ T4434] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 117.173906][ T4434] ? __kthread_parkme+0x162/0x1c0 [ 117.179041][ T4434] kthread+0x29d/0x330 [ 117.183132][ T4434] ? worker_clr_flags+0x1a0/0x1a0 [ 117.188176][ T4434] ? kthread_blkcg+0xd0/0xd0 [ 117.192787][ T4434] ret_from_fork+0x1f/0x30 [ 117.197271][ T4434] [ 117.224216][ T4801] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.132: iget: bad i_size value: 38620345925642 [ 117.324471][ T4801] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.132: couldn't read orphan inode 15 (err -117) [ 117.520651][ T4801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.613407][ T4801] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.132: bg 0: block 5: invalid block bitmap [ 117.688445][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 117.802580][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 118.022667][ T4818] loop4: detected capacity change from 0 to 256 [ 118.066364][ T4818] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.121930][ T4818] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.177325][ T4818] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.203237][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 118.203254][ T26] audit: type=1800 audit(1757943557.693:51): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.138" name="file1" dev="loop4" ino=1048607 res=0 errno=0 [ 118.756808][ T26] audit: type=1326 audit(1757943558.193:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10438eba9 code=0x7ffc0000 [ 118.932994][ T26] audit: type=1326 audit(1757943558.203:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff10438eba9 code=0x7ffc0000 [ 119.146883][ T26] audit: type=1326 audit(1757943558.203:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10438eba9 code=0x7ffc0000 [ 119.231928][ T26] audit: type=1326 audit(1757943558.203:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff104390ac7 code=0x7ffc0000 [ 119.335312][ T26] audit: type=1326 audit(1757943558.213:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff104390a3c code=0x7ffc0000 [ 119.403611][ T26] audit: type=1326 audit(1757943558.223:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff104390974 code=0x7ffc0000 [ 119.525725][ T26] audit: type=1326 audit(1757943558.223:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff104390974 code=0x7ffc0000 [ 119.604673][ T26] audit: type=1326 audit(1757943558.223:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff10438d80a code=0x7ffc0000 [ 119.685691][ T26] audit: type=1326 audit(1757943558.233:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10438eba9 code=0x7ffc0000 [ 119.870110][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.098501][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.112583][ T4840] 9pnet_fd: p9_fd_create_tcp (4840): problem connecting socket to 127.0.0.1 [ 120.113433][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.229932][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.273489][ T126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.318869][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.378303][ T126] usb 5-1: config 0 descriptor?? [ 120.396858][ T4273] Bluetooth: hci1: unexpected event for opcode 0x080b [ 120.911316][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.009446][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.017800][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.026293][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.050531][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.058224][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.229280][ T4495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.745685][ T4863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 122.784766][ T126] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 122.878652][ T126] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 122.897271][ T126] usb 5-1: USB disconnect, device number 2 [ 123.028922][ T4495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.080468][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 123.161878][ T4871] loop4: detected capacity change from 0 to 256 [ 123.191731][ T4495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.380318][ T4495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.938657][ T4851] chnl_net:caif_netlink_parms(): no params data found [ 123.939220][ T4872] fido_id[4872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 125.160044][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 127.129740][ T4887] loop4: detected capacity change from 0 to 2048 [ 127.199476][ T4887] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh [ 127.240027][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 127.250724][ T4887] UDF-fs: Scanning with blocksize 512 failed [ 127.306464][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.325661][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.332943][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.366836][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.367799][ T4851] device bridge_slave_0 entered promiscuous mode [ 127.401611][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.436734][ T4887] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 127.446497][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.476674][ T4887] UDF-fs: Scanning with blocksize 1024 failed [ 127.484270][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.508964][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.521309][ T4851] device bridge_slave_1 entered promiscuous mode [ 127.577335][ T4887] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 127.627686][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.648852][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.688119][ T4887] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 127.736874][ T4887] UDF-fs: Scanning with blocksize 2048 failed [ 127.760050][ T4887] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 127.802880][ T4851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.813069][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.832798][ T4851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.857318][ T4887] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 127.896768][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.938202][ T4887] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 127.979995][ T4851] team0: Port device team_slave_0 added [ 127.986270][ T4887] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 128.001113][ T4887] UDF-fs: Scanning with blocksize 4096 failed [ 128.030063][ T4887] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 128.051505][ T4851] team0: Port device team_slave_1 added [ 128.261658][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.268673][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.345087][ T4903] loop3: detected capacity change from 0 to 512 [ 128.425760][ T4903] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.447273][ T4851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.470104][ T4903] UDF-fs: Scanning with blocksize 512 failed [ 128.509130][ T4903] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.615243][ T4903] UDF-fs: Scanning with blocksize 1024 failed [ 128.761035][ T4903] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.771659][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.778750][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.031205][ T4910] xt_cgroup: xt_cgroup: no path or classid specified [ 129.037434][ T4903] UDF-fs: Scanning with blocksize 2048 failed [ 129.206687][ T4903] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 129.258029][ T4903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.274310][ T4851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.320067][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 129.480718][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 129.480733][ T26] audit: type=1800 audit(1757943568.973:74): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.163" name="file1" dev="loop3" ino=36 res=0 errno=0 [ 130.094809][ T4925] loop4: detected capacity change from 0 to 1024 [ 130.169330][ T4925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.200844][ T4851] device hsr_slave_0 entered promiscuous mode [ 130.247580][ T4925] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.258473][ T4851] device hsr_slave_1 entered promiscuous mode [ 130.320046][ T4851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.328702][ T4851] Cannot create hsr debugfs directory [ 130.474596][ T4939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 130.478410][ T4941] loop0: detected capacity change from 0 to 1024 [ 130.626318][ T4924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.190965][ T4495] device hsr_slave_0 left promiscuous mode [ 131.207943][ T4495] device hsr_slave_1 left promiscuous mode [ 131.225340][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.245707][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.269416][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.276245][ T4366] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.287250][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.302860][ T4366] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 131.317406][ T4495] device bridge_slave_1 left promiscuous mode [ 131.323895][ T4366] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.323895][ T4366] [ 131.339040][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.343250][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 131.383258][ T4495] device bridge_slave_0 left promiscuous mode [ 131.423039][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.524330][ T4495] device veth1_macvtap left promiscuous mode [ 131.554485][ T4495] device veth0_macvtap left promiscuous mode [ 131.564352][ T4495] device veth1_vlan left promiscuous mode [ 131.573988][ T4495] device veth0_vlan left promiscuous mode [ 131.639983][ T4963] xt_cgroup: xt_cgroup: no path or classid specified [ 132.843241][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850375][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.867764][ T4495] team0 (unregistering): Port device team_slave_1 removed [ 137.751232][ T4495] team0 (unregistering): Port device team_slave_0 removed [ 137.970219][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.131339][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.069414][ T5006] xt_cgroup: xt_cgroup: no path or classid specified [ 141.178282][ C1] ------------[ cut here ]------------ [ 141.184213][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50 [ 141.194062][ C1] Modules linked in: [ 141.198028][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 141.205137][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.215291][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 141.221715][ C1] Code: ff ff ff e8 30 36 e4 f7 0f 0b 48 8b 7c 24 20 e8 d4 a4 7f fe e9 dd e9 ff ff e8 1a 36 e4 f7 0f 0b e9 f1 ee ff ff e8 0e 36 e4 f7 <0f> 0b e9 61 f2 ff ff e8 02 36 e4 f7 48 c7 c7 f0 7e fa 8d 4c 89 f6 [ 141.241584][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 141.247792][ C1] RAX: ffffffff899c9a82 RBX: 0000000000000000 RCX: ffff88813fed9dc0 [ 141.255895][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.263961][ C1] RBP: ffffc900001e0aa8 R08: ffff88813fed9dc0 R09: 0000000000000003 [ 141.272044][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 141.280080][ C1] R13: dffffc0000000000 R14: ffff888018286258 R15: ffff88801fe52c00 [ 141.288106][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 141.297124][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.303778][ C1] CR2: 000000110c36cb62 CR3: 000000005cbaf000 CR4: 00000000003506e0 [ 141.311840][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.319877][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.327898][ C1] Call Trace: [ 141.331241][ C1] [ 141.334166][ C1] ? verify_lock_unused+0x140/0x140 [ 141.339414][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 141.345062][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 141.351183][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 141.356717][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 141.362372][ C1] ? read_lock_is_recursive+0x10/0x10 [ 141.367814][ C1] __iterate_interfaces+0x243/0x500 [ 141.373113][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 141.379422][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 141.386740][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 141.393251][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 141.400384][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 141.406177][ C1] __hrtimer_run_queues+0x554/0xd60 [ 141.411497][ C1] ? hw_scan_work+0xf30/0xf30 [ 141.416275][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 141.421463][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 141.427601][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 141.429090][ T5022] syz.0.192 uses obsolete (PF_INET,SOCK_PACKET) [ 141.432819][ C1] handle_softirqs+0x2a1/0x920 [ 141.432885][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 141.432924][ C1] ? do_softirq+0x200/0x200 [ 141.432961][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 141.458749][ C1] __irq_exit_rcu+0x12f/0x220 [ 141.463535][ C1] ? irq_exit_rcu+0x20/0x20 [ 141.468232][ C1] irq_exit_rcu+0x5/0x20 [ 141.472592][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 141.478278][ C1] [ 141.481287][ C1] [ 141.484269][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 141.490335][ C1] RIP: 0010:default_idle+0xb/0x10 [ 141.495413][ C1] Code: 48 89 df e8 17 b7 af f7 e9 4c ff ff ff e8 fd 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 07 63 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 141.515186][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 141.521450][ C1] RAX: 648316a654cee300 RBX: ffffffff8a213fa7 RCX: 648316a654cee300 [ 141.529470][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c0500 RDI: ffffffff8adefca0 [ 141.537533][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6afa [ 141.545580][ C1] R10: ffffed10171e6afa R11: 1ffff110171e6af9 R12: 0000000000000001 [ 141.553629][ C1] R13: dffffc0000000000 R14: ffff88813fed9dc0 R15: 1ffffffff1c3eee6 [ 141.561718][ C1] ? default_idle_call+0x77/0xc0 [ 141.566754][ C1] default_idle_call+0x84/0xc0 [ 141.571649][ C1] do_idle+0x1fc/0x570 [ 141.575782][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 141.581484][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 141.586738][ C1] ? do_idle+0x6/0x570 [ 141.590917][ C1] cpu_startup_entry+0x3f/0x60 [ 141.595740][ C1] start_secondary+0xe4/0xf0 [ 141.600415][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 141.606813][ C1] [ 141.609932][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.617242][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 141.624349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.634443][ C1] Call Trace: [ 141.637751][ C1] [ 141.640640][ C1] dump_stack_lvl+0x168/0x22e [ 141.645351][ C1] ? memcpy+0x3c/0x60 [ 141.649370][ C1] ? show_regs_print_info+0x12/0x12 [ 141.654630][ C1] ? load_image+0x3b0/0x3b0 [ 141.659179][ C1] panic+0x2c9/0x710 [ 141.663110][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 141.667668][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 141.673796][ C1] __warn+0x2f8/0x4f0 [ 141.677939][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 141.683717][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 141.689474][ C1] report_bug+0x2ba/0x4f0 [ 141.693890][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 141.699648][ C1] handle_bug+0x3a/0x70 [ 141.703830][ C1] exc_invalid_op+0x16/0x40 [ 141.708349][ C1] asm_exc_invalid_op+0x16/0x20 [ 141.713213][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 141.719559][ C1] Code: ff ff ff e8 30 36 e4 f7 0f 0b 48 8b 7c 24 20 e8 d4 a4 7f fe e9 dd e9 ff ff e8 1a 36 e4 f7 0f 0b e9 f1 ee ff ff e8 0e 36 e4 f7 <0f> 0b e9 61 f2 ff ff e8 02 36 e4 f7 48 c7 c7 f0 7e fa 8d 4c 89 f6 [ 141.739178][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 141.745269][ C1] RAX: ffffffff899c9a82 RBX: 0000000000000000 RCX: ffff88813fed9dc0 [ 141.753302][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.761293][ C1] RBP: ffffc900001e0aa8 R08: ffff88813fed9dc0 R09: 0000000000000003 [ 141.769276][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 141.777259][ C1] R13: dffffc0000000000 R14: ffff888018286258 R15: ffff88801fe52c00 [ 141.785335][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 141.791096][ C1] ? verify_lock_unused+0x140/0x140 [ 141.796320][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 141.801900][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 141.807926][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 141.813410][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 141.818969][ C1] ? read_lock_is_recursive+0x10/0x10 [ 141.824400][ C1] __iterate_interfaces+0x243/0x500 [ 141.829612][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 141.835865][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 141.843071][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 141.849324][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 141.856369][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 141.861586][ C1] __hrtimer_run_queues+0x554/0xd60 [ 141.866802][ C1] ? hw_scan_work+0xf30/0xf30 [ 141.871672][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 141.876794][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 141.882880][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 141.888026][ C1] handle_softirqs+0x2a1/0x920 [ 141.892825][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 141.897699][ C1] ? do_softirq+0x200/0x200 [ 141.902227][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 141.907453][ C1] __irq_exit_rcu+0x12f/0x220 [ 141.912168][ C1] ? irq_exit_rcu+0x20/0x20 [ 141.916751][ C1] irq_exit_rcu+0x5/0x20 [ 141.921041][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 141.926890][ C1] [ 141.929837][ C1] [ 141.932785][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 141.938782][ C1] RIP: 0010:default_idle+0xb/0x10 [ 141.943835][ C1] Code: 48 89 df e8 17 b7 af f7 e9 4c ff ff ff e8 fd 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 07 63 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 141.963545][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 141.969625][ C1] RAX: 648316a654cee300 RBX: ffffffff8a213fa7 RCX: 648316a654cee300 [ 141.977616][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c0500 RDI: ffffffff8adefca0 [ 141.985601][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6afa [ 141.993603][ C1] R10: ffffed10171e6afa R11: 1ffff110171e6af9 R12: 0000000000000001 [ 142.001716][ C1] R13: dffffc0000000000 R14: ffff88813fed9dc0 R15: 1ffffffff1c3eee6 [ 142.009719][ C1] ? default_idle_call+0x77/0xc0 [ 142.014694][ C1] default_idle_call+0x84/0xc0 [ 142.019479][ C1] do_idle+0x1fc/0x570 [ 142.023571][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 142.029229][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 142.034462][ C1] ? do_idle+0x6/0x570 [ 142.038556][ C1] cpu_startup_entry+0x3f/0x60 [ 142.043423][ C1] start_secondary+0xe4/0xf0 [ 142.048071][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 142.054009][ C1] [ 142.057369][ C1] Kernel Offset: disabled [ 142.061746][ C1] Rebooting in 86400 seconds..