last executing test programs: 1m2.815467343s ago: executing program 3 (id=1676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)) 1m1.956418993s ago: executing program 3 (id=1678): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2}, 0x10) 1m1.800493706s ago: executing program 3 (id=1679): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa0, 0xa0, 0x3, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0, 0x0, {0x100000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x7}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="3232b3c71587"}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 1m1.245014481s ago: executing program 3 (id=1681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x110, 0x6, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x6, 0x2a, 0x0, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000006500), 0x3ffffffffffff68, 0x40012003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x10, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 43.136908116s ago: executing program 3 (id=1681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x110, 0x6, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x6, 0x2a, 0x0, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000006500), 0x3ffffffffffff68, 0x40012003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x10, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 18.694784597s ago: executing program 3 (id=1681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x110, 0x6, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x6, 0x2a, 0x0, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000006500), 0x3ffffffffffff68, 0x40012003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x10, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.350814588s ago: executing program 4 (id=1930): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 9.192359061s ago: executing program 4 (id=1932): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=ANY=[@ANYBLOB], 0xe0}], 0x1}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x2b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) epoll_create1(0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x4}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000002880), 0x0) 9.062474191s ago: executing program 4 (id=1934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.448313753s ago: executing program 1 (id=1942): r0 = syz_io_uring_setup(0xb01, &(0x7f0000000280), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x12, 0x0, r0, 0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS) io_uring_enter(r0, 0x702, 0x0, 0x0, 0x0, 0x0) 7.228151381s ago: executing program 1 (id=1945): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008bd28750000000000000109022400010400000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000107"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.227547441s ago: executing program 0 (id=1956): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000140)='./bus\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000780)="$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") r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000340)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f00000004c0)) 6.240479401s ago: executing program 0 (id=1960): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c6163746976655f6c6f67733d322c6e6f71756f74612c6e6f71756f74612c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d272c6a71666d743d76667376302c696e6c696e655f78617474722c00a3d783e0bf6d79bc2fa16e7f"], 0x1, 0x5532, &(0x7f000000af80)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALzdJsP9Bb1RY/sKVUPXjSbJKGtElm2aTp2pMHj+LB/0QUPHn0b/Dg2Zt4qHgTVjLvrHbVgrTZxG5/P5g8875588zzhlJ4ZpYE8Mxazn97kMWpOBYRixFxMqI8z6qjdDmFlyLidEQsPHRk1fyfE4cj4nhEnJokTzmz6q0vz47PXPzlnV+/++HIoRNfffvj/HYNzNvLEdHfTOf3+ikWnRRvV/ONcbeM/QvjKqY3+neqcZHivfZGmeFeY3ddo4znO2l9sXl3OIm3eo3mJHa6t8r5zUG64HDc2c1TfuB2Y6sct9obZewOizJ27qe6tu+n/9vuD0cpT6vK90mZPkaj3Zjm29vttJ/NO2VsDkbVfMpbtNrbkziuYnW5aBa9VlnHxpN80/9v73YHd7fzcXtr2C0G+cW1+itr9Uu1+lbRao/aF2qNfuvShXyl05ssq43ajf7lTlF0eu21ZtFfzVc6zWatXs9XrrQ3uo1BXq+vnV87V7u4Wp2dzd+8/kHea+Urk/h6d3B31O0N81vFVp4+sZqvr51/dTU/U8/fu3Yjv3Hz6tVrN96PKx9ef+3a229Ui/5RVr6yfm59vVY/V1uvrx7A/X/0iP1/VhU9xf3DE8nmXQDA00f/D8zD/vX/WzdjZ6ec38/+P+LBpMNPefT/j21a/e/OLPrfx+//s0e1KU9V/78P9z/giej/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeWT8tff1WebKcxieq+eeqqReqcRYRCxGx8y8W4/CenItVnqVHrF/6Ww3fZ1FmmFzjSHUcj4jL1fH78/v9LQAAAMDB9c2np79I3Xp6WZ53QcxSummzcPLjKeXLImJp+ecpZVuYvLw4pWTlv+9DsT2lbOUNrKNTSpZuuR2aVrb/ZHFPOPpQyFJYmGk5AADATOztBGbbhQAAADBLn8+7AOYji91HmbvPgsu/vP/rgeCxPSMAAADgKZTNuwAAAABg35X9v9//AwAAgIMt/f4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7BzNzdqA2EYgD/bOJA/BUW5pxVuUEZKyDHHiALSBCWQFtIANZDblrCCFR4vWlbsj+Sx2V09jwTDWOZlBsFhvpEGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT//r9eLv7+9/uubs9t3kmQ0AAABwzrZeL5oX09T/2F7/3F762vaLiCgj4tzavYp3J5lVm1M/cH99bwz/IpqEw2eM28eHiJhVEbOIuP7S97cAAAAAb9dmuZqn1Xp6ml56QAwpFW3KTz8y5RURUU+vMqWVh7xvmcKa3/cofmVKawpYk0xhqeQ2ypX2LM3f/Vi1m9xpitSUj78/29wBAIABVSfNsKsQAAAAhvTz6VuqIcbBwIq43co8bgWOU9Nu770/6QEAAACvUHHpAQAAAAC9a9b/L/r8v3D+HwAAAHSVzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT9t6vdgsV/OuObt9N3lmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABww/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8uzM7m7b+ilFyiIiCB73YdFtbexMPSvDgnyCEdFtjV8Wagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3kUMGDp8jMziTTtOAYdGab/Xzgzfvu8jLv+2ZDyHfeJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZefd/TjND/OTOCnfu/3g+lre3znQ525u3V3KWx732kz6yfBy/UVvsbtEAAAAmB1pVd9HxL1seyXvk/mi/s+qMXnN//0zk7iq5w/W/VVf1f55++3X+y/uTTQ/mSc/6cX18ejUo6n0/79VTrfn/nFEv7jyxb2XtPhAkg82X9jJiuvZ+/bWrfcGRTjXRrYAwGGcrPoyqH4fyvthl4kBMDP6tcK7qv/T+W5zAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjDzmY8VcW9iFjq78e5Ow+urz2uv7l1d6lq527c2KqfMz9FFhEX18ejUy2uZdp9efXa5dXxeHSl/eCViOhq9nfK5V/+qMHgiE6uj+BA0OtHHObLk/LDno5VdBoM8u/5ZoM7/KEEAMCRlJUtr+vvZdsrEfFsLETs/vBw/f96LY6G9f/9j8/drs9Vr/+H7S2xO3PNhi1v/LW7u3v12pvrn65eGl0affbW6eHbwzPnz549v1zcK1lucMfk2H+SMQAAAEfUoGy1+j+ShUf3/0/U4mhY/3/x3fDr+lzprNX/De1v+nWdCQAAwGx7/tU//+g95v3eYBBfrW5sXBlOjnuvT0+OHaT6r82VrV7/pwtdZwUAAAC0YWez99D+/4VaHA33/5/+8aWf6+dMI+J4uf9/cu3z8YX2ljPV2vjb467XCAAAQLeOl62+/58Vz/8ne488JBHxxmuTuPw3gI3q//T9b36qz1V//v9Me0ucSsni5HoU/WJEf7HrjAAAADjKjpUtL/Z/z7ZXPvnlxIcDz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtO3vAAAA//+ibz84") prctl$PR_GET_THP_DISABLE(0x2a) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@data_ordered}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xc3300, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x7, 0xfffffd9b, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x1) sendfile(r4, r0, 0x0, 0x100800001) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)) 6.086747753s ago: executing program 4 (id=1949): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x0, 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="18a73c21e1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180000008156000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x3d, &(0x7f0000000100)=""/61, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xf, 0x401, 0x81}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x1, 0x4, 0x7}, {0x0, 0x3, 0x10, 0x6}, {0x1, 0x2, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x6}, {0x0, 0x1, 0x4}], 0x10, 0x2}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22040815, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r0, 0x0) shutdown(r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000038230000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr$incfs_size(&(0x7f0000000440)='./file7\x00', &(0x7f0000000480), &(0x7f00000004c0)=0x8, 0x8, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) 5.110903203s ago: executing program 4 (id=1951): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file1\x00', 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x1000, 0x4) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={[{@index_off}, {@nfs_export_off}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) futex_waitv(&(0x7f0000000bc0)=[{0xff, &(0x7f0000000040)=0x367, 0x82}, {0xfffffffffffffbff, &(0x7f0000000080)=0x40, 0x82}, {0x8, &(0x7f0000000180)=0x7095, 0x2}, {0x5, &(0x7f00000001c0)=0xb, 0x2}, {0x7ff8000000, &(0x7f0000000240)=0xd805, 0x2}, {0x6, &(0x7f0000000280)=0xd48, 0x82}, {0x7ff, &(0x7f00000002c0), 0x2}, {0x8, &(0x7f0000000300)=0x6, 0x82}, {0x5, &(0x7f00000003c0)=0x7, 0x2}, {0xfffffffffffffff8, &(0x7f0000000400)=0x6, 0x2}, {0x2, &(0x7f0000000440)=0x1, 0x82}, {0x7d2, &(0x7f0000000500)=0x8, 0x82}, {0xfffffffffffffffc, &(0x7f0000000540)=0x7fffffffffffffff, 0x82}, {0x64, &(0x7f0000000580)=0xaf4}, {0x6, &(0x7f0000000600)=0x4, 0x82}, {0x7, &(0x7f0000000640)=0x2e5f}, {0x100, &(0x7f0000000680)=0x8}, {0xd6da, &(0x7f00000006c0)=0x2, 0x82}, {0xfffffffffffff467, &(0x7f0000000700)=0xb64, 0x2}, {0xffffffffffff9254, &(0x7f0000000740)=0x9, 0xc1}, {0xc4, &(0x7f0000000780), 0x82}, {0x9, &(0x7f0000000800)=0xffffffffffffffff, 0x82}, {0x638a, &(0x7f0000000840)=0x401, 0x82}, {0xffffffff, &(0x7f0000000880)=0x100000000400, 0x2}, {0x9, &(0x7f00000008c0)=0x3, 0x2}, {0x6, &(0x7f0000000900)=0x8e, 0x2}, {0x3, &(0x7f0000000940)=0x662, 0x2}, {0xe, &(0x7f0000000980)=0x4, 0x82}, {0x7, &(0x7f00000009c0)=0x1, 0x2}, {0x8, &(0x7f0000000a00)=0x6, 0x2}, {0x6, &(0x7f0000000a40)=0x6, 0x184}, {0x8, &(0x7f0000000a80)=0x682a, 0x82}, {0x4, &(0x7f0000000ac0)=0x8, 0x2}, {0x8, &(0x7f0000000b00)=0x8, 0x2}, {0x9, &(0x7f0000000b40)=0xff, 0x82}, {0xa145, &(0x7f0000000b80)=0x9, 0x82}], 0x24, 0x0, &(0x7f0000000f40)={0x0, 0x989680}, 0x1) r4 = inotify_init1(0x180800) inotify_add_watch(r4, &(0x7f0000001080)='./file0\x00', 0x20) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "69dcaf2086ec9a8545f45826cb35be51ca73845d177dd8dba7221faeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000f80)={@desc={0x1, 0x0, @desc4}, 0x40, r5, '\x00', @b}) ioctl$FS_IOC_SETFLAGS(r3, 0x4c02, &(0x7f0000000140)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff"], 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.318501658s ago: executing program 0 (id=1952): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x1}]}, {0x0, [0x5f, 0x61, 0x4a7358bd3648fcb0]}}, 0x0, 0x29}, 0x20) 3.935211708s ago: executing program 0 (id=1953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x2c}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x1, 0x1000, 0x0, 0xfffffffa, 0x7, 0xffffffff}) socket$kcm(0x10, 0x0, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x0, {0x0, 0x5, 0x0, 0x7ff, 0x3}}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@getneigh={0x14, 0x1e, 0x609}, 0x14}}, 0x0) 3.92562839s ago: executing program 1 (id=1965): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002140), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000500)={0xc, @sliced}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpu.max\x00', 0x2, 0x0) fstat(r4, &(0x7f0000000180)) syz_usb_connect(0x0, 0x3e, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0505510, &(0x7f0000000080)) 2.392586114s ago: executing program 2 (id=1955): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1061880, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x3e]}}, 0x0, 0x2c}, 0x20) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@afid}, {@dfltuid={'dfltuid', 0x3d, r2}}], [], 0x6b}}) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 2.303426812s ago: executing program 2 (id=1957): unshare(0x40400) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.163938323s ago: executing program 0 (id=1958): gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000600850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000023008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0xfffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x104480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000180)={0x0, r5}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000440)=""/247) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$userns(r8, &(0x7f0000000100)) 1.534789614s ago: executing program 4 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, &(0x7f0000000080)=""/42, 0xffffff9b) 1.533944554s ago: executing program 2 (id=1971): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) request_key(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='-\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x0, 0x0, &(0x7f00000011c0)) fsetxattr$security_ima(r5, &(0x7f0000000000), 0x0, 0x12, 0x1) r6 = dup(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001050, r6, 0x0) r7 = memfd_create(&(0x7f0000000080)='!-]-]{^}+*\x00', 0x0) fsetxattr(r7, &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'erspan0\x00', 'sit0\x00', {}, {}, 0x1}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp={{0x28}, {0x0, "fe00"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6c, 0x3}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'ipvlan1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 615.354079ms ago: executing program 1 (id=1961): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x2f}}, 0x10) 473.578151ms ago: executing program 2 (id=1962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x8010) 377.435279ms ago: executing program 1 (id=1963): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x0) 212.714542ms ago: executing program 2 (id=1964): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x3012}}) 212.066432ms ago: executing program 1 (id=1966): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x3, 0x6ad, &(0x7f0000002200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') 104.058641ms ago: executing program 2 (id=1967): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x81}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) 0s ago: executing program 0 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000010101010000000000000000020000000600124000000000240001800c000280f8ff01000000000014000180080001007f00000108000200000000000c001980080001000d"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 084][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.361469][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.371812][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.382469][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.394295][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.402156][ T6484] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 414.425848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.435074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.443256][ T6484] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 414.453076][ T6484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.464912][ T6484] usb 3-1: config 0 descriptor?? [ 414.521786][ T9493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.544569][ T9493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.564070][ T9493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.578533][ T9493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.661579][ T6484] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 414.680659][ T3645] Bluetooth: hci0: command tx timeout [ 415.609127][ T9876] x_tables: unsorted entry at hook 3 [ 415.652368][ T3679] usb 3-1: USB disconnect, device number 14 [ 415.659165][ T3877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.682308][ T3877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.763884][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 415.909687][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.946498][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.013891][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 416.038135][ T9891] device syz_tun entered promiscuous mode [ 416.180530][ T9890] device syz_tun left promiscuous mode [ 416.276304][ T9905] loop4: detected capacity change from 0 to 1024 [ 416.321238][ T9905] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 416.361556][ T9726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.371820][ T9726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.380986][ T9726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.390248][ T9726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.411543][ T9905] EXT4-fs (loop4): orphan cleanup on readonly fs [ 416.432273][ T9905] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.1476: Freeing blocks not in datazone - block = 0, count = 4096 [ 416.493350][ T3681] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 416.497259][ T9905] EXT4-fs (loop4): 1 orphan inode deleted [ 416.536280][ T9905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 416.656189][ T152] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 416.684452][ T9912] loop1: detected capacity change from 0 to 1024 [ 416.830019][ T3681] usb 4-1: Using ep0 maxpacket: 8 [ 416.840133][ T3645] Bluetooth: hci0: command tx timeout [ 416.990558][ T3681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.099968][ T152] usb 3-1: Using ep0 maxpacket: 16 [ 417.145545][ T3681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 417.215682][ T3681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.242696][ T8370] hfsplus: bad catalog entry type [ 417.281533][ T3681] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.348327][ T3681] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 417.364141][ T3681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.380065][ T152] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 417.395978][ T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.405849][ T3681] usb 4-1: config 0 descriptor?? [ 417.411415][ T152] usb 3-1: Product: syz [ 417.415714][ T152] usb 3-1: Manufacturer: syz [ 417.420839][ T152] usb 3-1: SerialNumber: syz [ 417.438721][ T9493] EXT4-fs (loop4): unmounting filesystem. [ 417.439673][ T152] usb 3-1: config 0 descriptor?? [ 417.501633][ T152] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 417.524383][ T152] dvb-usb: bulk message failed: -22 (2/0) [ 417.570011][ T152] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) error while loading driver (-22) [ 417.641090][ T9919] loop4: detected capacity change from 0 to 256 [ 417.668835][ T9919] FAT-fs (loop4): Directory bread(block 64) failed [ 417.689645][ T9919] FAT-fs (loop4): Directory bread(block 65) failed [ 417.695821][ T3679] usb 4-1: USB disconnect, device number 19 [ 417.700750][ T9919] FAT-fs (loop4): Directory bread(block 66) failed [ 417.708990][ T9919] FAT-fs (loop4): Directory bread(block 67) failed [ 417.730429][ T9919] FAT-fs (loop4): Directory bread(block 68) failed [ 417.772933][ T9919] FAT-fs (loop4): Directory bread(block 69) failed [ 417.779556][ T9919] FAT-fs (loop4): Directory bread(block 70) failed [ 417.807300][ T3681] usb 3-1: USB disconnect, device number 15 [ 417.820254][ T9919] FAT-fs (loop4): Directory bread(block 71) failed [ 417.830894][ T3877] hfsplus: b-tree write err: -5, ino 4 [ 417.834721][ T9919] FAT-fs (loop4): Directory bread(block 72) failed [ 417.851073][ T9919] FAT-fs (loop4): Directory bread(block 73) failed [ 417.938173][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.957613][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.972802][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.993847][ T9726] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.060824][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.070168][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.080567][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.087669][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.097618][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.106371][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.117031][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.124177][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.132239][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.152496][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.293403][ T9924] loop4: detected capacity change from 0 to 512 [ 418.305818][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 418.324343][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.335604][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.344823][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.371962][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.387550][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.408191][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.426436][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.435837][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.442138][ T9924] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 418.449782][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 418.513531][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.534504][ T9924] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 418.550260][ T9924] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1578: Failed to acquire dquot type 1 [ 418.583840][ T9924] EXT4-fs (loop4): 1 truncate cleaned up [ 418.589506][ T9924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 418.617937][ T9924] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 418.799105][ T9493] EXT4-fs (loop4): unmounting filesystem. [ 418.897680][ T3645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.911174][ T3645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.921668][ T3645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.931118][ T3645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.938610][ T3645] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 418.950265][ T3645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.073101][ T46] device hsr_slave_0 left promiscuous mode [ 419.128974][ T46] device hsr_slave_1 left promiscuous mode [ 419.143886][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.163951][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.197947][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.233290][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.269105][ T46] device bridge_slave_1 left promiscuous mode [ 419.283131][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.322098][ T46] device bridge_slave_0 left promiscuous mode [ 419.328439][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.359469][ T46] device hsr_slave_0 left promiscuous mode [ 419.368053][ T46] device hsr_slave_1 left promiscuous mode [ 419.375884][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.387492][ T9967] loop2: detected capacity change from 0 to 2048 [ 419.399032][ T9967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.408084][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.429510][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.445720][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.468910][ T46] device bridge_slave_1 left promiscuous mode [ 419.476512][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.496093][ T46] device bridge_slave_0 left promiscuous mode [ 419.503636][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.561206][ T4838] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 419.698223][ T46] device veth1_macvtap left promiscuous mode [ 419.715397][ T46] device veth0_macvtap left promiscuous mode [ 419.725746][ T46] device veth1_vlan left promiscuous mode [ 419.745127][ T46] device veth0_vlan left promiscuous mode [ 419.758627][ T46] device veth1_macvtap left promiscuous mode [ 419.766302][ T46] device veth0_macvtap left promiscuous mode [ 419.773750][ T46] device veth1_vlan left promiscuous mode [ 419.799940][ T4838] usb 4-1: Using ep0 maxpacket: 16 [ 419.919988][ T4838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.931788][ T4838] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 419.943148][ T4838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 419.955160][ T4838] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 419.966785][ T4838] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 420.080058][ T4838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.096613][ T4838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 420.104747][ T4838] usb 4-1: SerialNumber: syz [ 420.140192][ T9964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.160723][ T4838] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 420.367289][ T4838] usb 4-1: USB disconnect, device number 20 [ 420.725159][ T46] team0 (unregistering): Port device team_slave_1 removed [ 420.769345][ T46] team0 (unregistering): Port device team_slave_0 removed [ 420.817041][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.859356][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.000168][ T3645] Bluetooth: hci4: command tx timeout [ 422.047887][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 422.138305][ T46] bond0 (unregistering): Released all slaves [ 422.369036][ T46] team0 (unregistering): Port device geneve0 removed [ 422.713500][ T46] team0 (unregistering): Port device team_slave_1 removed [ 422.756096][ T46] team0 (unregistering): Port device team_slave_0 removed [ 422.800785][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.845166][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.080073][ T3645] Bluetooth: hci4: command tx timeout [ 423.316447][ T46] bond0 (unregistering): Released all slaves [ 423.422729][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'. [ 423.469957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.480936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.536376][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.574784][ T9995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.692500][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.712072][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.727334][T10003] loop2: detected capacity change from 0 to 512 [ 423.769980][T10003] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 423.826361][ T9726] device veth0_vlan entered promiscuous mode [ 423.833837][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.842442][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.871381][ T26] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 423.898680][T10003] loop2: detected capacity change from 0 to 2048 [ 423.911572][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.919605][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.932798][ T9726] device veth1_vlan entered promiscuous mode [ 423.965422][T10003] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 424.009483][T10003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.025748][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 424.150455][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 424.195709][ T9726] device veth0_macvtap entered promiscuous mode [ 424.208527][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.223432][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 424.239776][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.248528][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.280385][ T26] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 424.288480][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.291606][ T9726] device veth1_macvtap entered promiscuous mode [ 424.298775][ T26] usb 4-1: config 0 has no interface number 0 [ 424.311473][ T26] usb 4-1: config 0 interface 52 has no altsetting 0 [ 424.319628][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 424.353997][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 424.443963][ T26] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 424.453358][ T26] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 424.470111][ T26] usb 4-1: Product: syz [ 424.475215][ T26] usb 4-1: SerialNumber: syz [ 424.497719][ T26] usb 4-1: config 0 descriptor?? [ 424.542550][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.549710][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.568200][ T9944] device bridge_slave_0 entered promiscuous mode [ 424.588660][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.602176][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.610493][ T9944] device bridge_slave_1 entered promiscuous mode [ 424.633235][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.644096][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.653982][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.665736][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.670102][ T154] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 424.681928][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.698258][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.708700][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.719348][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.734036][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.744983][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.755065][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.769581][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.781208][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.041180][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.061648][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.075134][ T26] usb 4-1: USB disconnect, device number 21 [ 425.162056][ T3645] Bluetooth: hci4: command tx timeout [ 425.229979][ T154] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 425.239145][ T154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.256272][ T154] usb 3-1: Product: syz [ 425.269008][ T154] usb 3-1: Manufacturer: syz [ 425.273922][ T154] usb 3-1: SerialNumber: syz [ 425.287662][ T154] r8152-cfgselector 3-1: config 0 descriptor?? [ 425.770097][ T154] r8152-cfgselector 3-1: Unknown version 0x0000 [ 425.788828][ T154] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 426.717420][T10048] xt_CT: No such helper "snmp" [ 427.240151][ T3645] Bluetooth: hci4: command tx timeout [ 428.883722][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.892409][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.903847][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.914621][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.937602][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.954200][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.974551][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.989546][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.011322][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.029904][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.040116][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.050915][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.061109][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.072772][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.093917][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.146465][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.155382][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.172990][ T9726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.190243][ T9726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.199041][ T9726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.208410][ T9726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.234232][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.274848][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.449214][ T9944] team0: Port device team_slave_0 added [ 429.497526][ T9944] team0: Port device team_slave_1 added [ 429.596441][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.609141][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.653715][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.694557][T10071] Bluetooth: MGMT ver 1.22 [ 429.700488][ T4831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.708675][ T4831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.709270][T10071] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 429.900416][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.907379][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.937223][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.032229][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.070870][ T3876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.084397][T10083] loop2: detected capacity change from 0 to 512 [ 430.109792][ T3876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.184440][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 430.184603][T10083] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 430.205785][T10083] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 430.217139][T10083] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1619: Corrupt directory, running e2fsck is recommended [ 430.235818][T10083] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 430.235957][ T9944] device hsr_slave_0 entered promiscuous mode [ 430.250818][T10083] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1619: corrupted in-inode xattr [ 430.263353][ T9944] device hsr_slave_1 entered promiscuous mode [ 430.270561][T10083] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1619: couldn't read orphan inode 15 (err -117) [ 430.452259][T10083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 431.101042][ T9944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.108628][ T9944] Cannot create hsr debugfs directory [ 431.218159][ T9472] EXT4-fs (loop2): unmounting filesystem. [ 431.380330][T10099] netlink: 'syz.3.1625': attribute type 30 has an invalid length. [ 431.665681][T10105] loop4: detected capacity change from 0 to 1024 [ 431.675670][ T3637] Bluetooth: hci2: command 0x0406 tx timeout [ 431.740963][T10105] EXT4-fs (loop4): barriers disabled [ 431.747207][T10105] JBD2: no valid journal superblock found [ 431.753103][T10105] EXT4-fs (loop4): error loading journal [ 432.629562][ T9944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.691820][T10114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1629'. [ 432.863860][ T9944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.925964][ T27] audit: type=1326 audit(2000000338.189:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbeb1779f9 code=0x0 [ 432.940415][T10121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.061590][ T9944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.206168][T10097] loop0: detected capacity change from 0 to 32768 [ 433.252113][T10097] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 433.266965][ T9944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.281394][T10097] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 433.442735][T10097] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 433.464568][ T6484] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 433.479895][ T6484] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 433.571728][T10128] netlink: 'syz.4.1634': attribute type 12 has an invalid length. [ 433.579571][T10128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1634'. [ 433.661941][ T6484] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 182ms [ 433.687912][ T6484] gfs2: fsid=syz:syz.0: jid=0: Done [ 433.721946][T10097] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 433.783225][T10138] device wlan0 entered promiscuous mode [ 433.794740][T10140] loop2: detected capacity change from 0 to 8 [ 433.801325][T10138] device macsec1 entered promiscuous mode [ 433.811047][T10140] squashfs: Unknown parameter 'K@' [ 433.817283][T10138] device wlan0 left promiscuous mode [ 433.931795][ T9944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.987464][ T9944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.041354][ T9944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.061850][ T9944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.316413][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.353429][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.370544][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.423871][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.463912][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.494580][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.564516][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.571663][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.590038][ T4838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 434.665656][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.674305][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.694701][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.714688][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.721839][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.901862][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.919789][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.940067][ T4838] usb 5-1: Using ep0 maxpacket: 16 [ 435.041961][T10158] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 435.338069][ T4838] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 435.501633][ T4838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.602164][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.632076][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.650340][T10161] 9pnet_fd: Insufficient options for proto=fd [ 435.656640][ T4838] usb 5-1: Product: syz [ 435.690460][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 435.699100][ T4838] usb 5-1: Manufacturer: syz [ 435.719299][ T4838] usb 5-1: SerialNumber: syz [ 435.744167][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.755602][ T4838] usb 5-1: config 0 descriptor?? [ 435.766007][T10165] loop2: detected capacity change from 0 to 512 [ 435.774408][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.810856][ T4838] usb-storage 5-1:0.0: USB Mass Storage device detected [ 435.818557][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.840657][ T4838] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 435.848062][ T4838] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.103-syzkaller) [ 435.848062][ T4838] Please send a copy of this message to and [ 435.850646][T10165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 435.880415][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.891117][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.901535][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.920858][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 435.997346][T10171] hugetlbfs: Bad value 't' for mount option 'size' [ 435.997346][T10171] [ 436.061867][T10174] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 436.104249][T10174] CIFS mount error: No usable UNC path provided in device string! [ 436.104249][T10174] [ 436.117626][ T3712] usb 5-1: USB disconnect, device number 16 [ 436.139147][T10165] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1648: bg 0: block 144: padding at end of block bitmap is not set [ 436.156026][T10174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 436.294209][ T9472] EXT4-fs (loop2): unmounting filesystem. [ 436.426550][T10182] loop0: detected capacity change from 0 to 512 [ 436.484251][T10182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.492550][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.525653][T10182] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 436.525789][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.548996][T10182] EXT4-fs (loop0): orphan cleanup on readonly fs [ 436.557608][T10183] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 436.574532][T10182] EXT4-fs (loop0): 1 truncate cleaned up [ 436.597314][T10183] ptrace attach of "./syz-executor exec"[8932] was attempted by "./syz-executor exec"[10183] [ 436.616876][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.625675][ T7005] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 436.665691][ T7005] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:16: Failed to release dquot type 1 [ 436.714142][T10182] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 436.724498][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.748417][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.750060][T10182] EXT4-fs (loop0): unmounting filesystem. [ 437.080814][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.096879][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.126514][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.281046][T10206] loop4: detected capacity change from 0 to 256 [ 437.841510][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.858941][ T9944] device veth0_vlan entered promiscuous mode [ 437.869022][ T4069] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 438.078676][ T9944] device veth1_vlan entered promiscuous mode [ 438.310856][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.319402][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.347151][T10221] netlink: 'syz.0.1667': attribute type 10 has an invalid length. [ 438.439467][ T9944] device veth0_macvtap entered promiscuous mode [ 438.461716][ T9944] device veth1_macvtap entered promiscuous mode [ 438.494239][T10226] loop2: detected capacity change from 0 to 512 [ 438.560838][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.580518][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.613217][T10226] EXT4-fs (loop2): 1 orphan inode deleted [ 438.641729][T10226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 438.680453][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.700023][T10226] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 438.757652][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.836641][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.311460][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.321868][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.354361][ T39] Bluetooth: hci6: Frame reassembly failed (-84) [ 439.383616][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.730949][ T27] audit: type=1804 audit(2000000344.729:155): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1670" name="/newroot/36/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 439.820633][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.827758][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.035744][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.066818][ T27] audit: type=1804 audit(2000000344.939:156): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1670" name="/newroot/36/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 440.072073][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.102703][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.114494][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.125216][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.135765][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.148391][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.164105][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 440.175207][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.180745][ T9472] EXT4-fs (loop2): unmounting filesystem. [ 440.183596][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.197101][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.269584][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.286665][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.306704][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.343389][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.366823][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.396945][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.407048][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.417847][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.428263][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.441321][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.457647][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.477150][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.484168][T10239] loop4: detected capacity change from 0 to 32768 [ 440.488104][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.506254][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.512931][T10239] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1675 (10239) [ 440.524575][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.552058][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.571143][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.573587][T10239] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 440.607928][T10239] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 440.628128][T10239] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 440.647502][T10239] BTRFS info (device loop4): use zstd compression, level 3 [ 440.655839][T10239] BTRFS info (device loop4): using free space tree [ 440.684500][T10253] loop2: detected capacity change from 0 to 256 [ 440.723696][ T9944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.747084][ T9944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.768503][T10253] FAT-fs (loop2): Directory bread(block 64) failed [ 440.777865][ T9944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.795646][T10253] FAT-fs (loop2): Directory bread(block 65) failed [ 440.800923][ T9944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.809066][T10253] FAT-fs (loop2): Directory bread(block 66) failed [ 440.818050][T10253] FAT-fs (loop2): Directory bread(block 67) failed [ 440.825978][T10253] FAT-fs (loop2): Directory bread(block 68) failed [ 440.832799][T10253] FAT-fs (loop2): Directory bread(block 69) failed [ 440.836712][T10239] BTRFS info (device loop4): enabling ssd optimizations [ 440.841649][T10253] FAT-fs (loop2): Directory bread(block 70) failed [ 440.854090][T10253] FAT-fs (loop2): Directory bread(block 71) failed [ 440.860718][T10253] FAT-fs (loop2): Directory bread(block 72) failed [ 440.867251][T10253] FAT-fs (loop2): Directory bread(block 73) failed [ 441.005750][T10239] BTRFS info (device loop4): resizing devid 73709551615 [ 441.028006][T10239] BTRFS info (device loop4): resizer unable to find device 73709551615 [ 441.135734][ T3877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.161992][ T3877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.191170][ T9493] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.224272][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 441.485920][ T3637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 441.494108][ T3645] Bluetooth: hci6: command 0x1003 tx timeout [ 442.021349][ T3813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.104930][ T3813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.189440][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 442.596341][T10283] loop1: detected capacity change from 0 to 8192 [ 442.667406][T10283] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.721273][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.731949][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.740520][ T3645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.764794][ T3645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.782066][ T3645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 442.799012][ T3645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.064370][ T46] device hsr_slave_0 left promiscuous mode [ 443.079009][ T46] device hsr_slave_1 left promiscuous mode [ 443.101188][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.108605][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.163245][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.180003][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.190788][ T46] device bridge_slave_0 left promiscuous mode [ 443.210194][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.298258][ T46] device veth1_macvtap left promiscuous mode [ 443.318289][ T46] device veth0_macvtap left promiscuous mode [ 443.334418][T10280] loop0: detected capacity change from 0 to 40427 [ 443.340156][ T46] device veth1_vlan left promiscuous mode [ 443.359621][T10280] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 443.386859][T10280] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 443.462787][T10280] F2FS-fs (loop0): invalid crc value [ 443.487148][T10280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 443.493635][ T6481] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 443.636364][T10280] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 443.654107][T10280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 443.903359][ T9726] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 443.903386][ T9726] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 443.915693][ T6481] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 443.932219][ T6481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.936682][ T9726] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 443.943234][ T6481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.959951][ T9726] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 443.960545][ T9726] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 443.989466][ T9726] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 444.005187][ T9726] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 444.051118][ T6481] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 444.080446][ T6481] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 444.088542][ T6481] usb 2-1: Manufacturer: syz [ 444.121649][ T6481] usb 2-1: config 0 descriptor?? [ 444.172207][ T6481] igorplugusb 2-1:0.0: endpoint incorrect [ 444.398692][ T3681] usb 2-1: USB disconnect, device number 23 [ 444.466490][ T46] team0 (unregistering): Port device team_slave_1 removed [ 444.518685][ T46] team0 (unregistering): Port device team_slave_0 removed [ 444.578812][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.617194][T10309] vhci_hcd: invalid port number 0 [ 444.681963][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.840927][ T3637] Bluetooth: hci5: command tx timeout [ 445.428056][T10322] loop1: detected capacity change from 0 to 32768 [ 445.488457][ T46] bond0 (unregistering): Released all slaves [ 445.495713][T10322] XFS (loop1): Mounting V5 Filesystem [ 445.575311][T10322] XFS (loop1): Ending clean mount [ 445.739720][T10334] usb usb8: usbfs: process 10334 (syz.4.1699) did not claim interface 0 before use [ 445.826780][ T9944] XFS (loop1): Unmounting Filesystem [ 445.924855][T10288] chnl_net:caif_netlink_parms(): no params data found [ 446.987965][T10364] loop2: detected capacity change from 0 to 256 [ 446.994948][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.050798][T10288] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.075887][ T3637] Bluetooth: hci5: command tx timeout [ 447.098038][T10288] device bridge_slave_0 entered promiscuous mode [ 447.106751][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.113930][T10288] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.122055][T10288] device bridge_slave_1 entered promiscuous mode [ 447.177330][T10288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.224201][T10288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.376779][T10288] team0: Port device team_slave_0 added [ 447.457698][T10288] team0: Port device team_slave_1 added [ 447.585563][ T6479] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 447.733298][ T6479] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 448.081990][ T6479] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 448.285051][T10288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.316858][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.393308][T10288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.444770][T10288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.479979][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.506856][ C1] eth0: bad gso: type: 1, size: 1408 [ 448.581265][T10288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.728232][T10396] loop0: detected capacity change from 0 to 1764 [ 448.770370][T10288] device hsr_slave_0 entered promiscuous mode [ 448.791332][T10288] device hsr_slave_1 entered promiscuous mode [ 448.819012][T10393] loop1: detected capacity change from 0 to 4096 [ 448.893571][T10393] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 448.907882][T10393] ntfs3: loop1: Failed to load $Extend. [ 449.023933][T10402] loop0: detected capacity change from 0 to 128 [ 449.159949][ T3637] Bluetooth: hci5: command tx timeout [ 449.263155][T10378] loop4: detected capacity change from 0 to 40427 [ 449.351799][T10378] F2FS-fs (loop4): Found nat_bits in checkpoint [ 449.448668][T10288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.516766][T10378] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 449.604080][T10378] syz.4.1716: attempt to access beyond end of device [ 449.604080][T10378] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 449.665672][T10288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.906459][T10288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.917600][ T9493] syz-executor: attempt to access beyond end of device [ 449.917600][ T9493] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 449.970543][T10423] Bluetooth: MGMT ver 1.22 [ 450.515042][T10288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.791602][T10430] loop1: detected capacity change from 0 to 2048 [ 450.818604][T10430] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 450.859214][T10430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.160145][ T3712] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 451.176031][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 451.200092][T10435] netlink: 'syz.2.1736': attribute type 30 has an invalid length. [ 451.240033][ T3637] Bluetooth: hci5: command tx timeout [ 451.278373][T10288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 451.317726][T10438] loop4: detected capacity change from 0 to 2048 [ 451.337430][T10288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 451.363874][T10288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 451.412560][T10288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 451.458022][T10441] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.550491][ T3712] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.565237][ T3712] usb 2-1: config 0 has no interface number 0 [ 451.597835][ T3712] usb 2-1: config 0 interface 1 has no altsetting 0 [ 451.618172][ T3712] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 451.633315][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.636668][ T3712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.686569][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 451.690854][ T3712] usb 2-1: config 0 descriptor?? [ 451.694781][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.728271][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.741244][ T3712] cp210x 2-1:0.1: cp210x converter detected [ 451.761569][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 451.781402][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.800939][ T6481] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.808066][ T6481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.874466][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.883079][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 451.896351][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.914772][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.921918][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.932875][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 451.948512][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 452.016671][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 452.043471][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 452.082585][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 452.086262][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 452.086946][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 452.087468][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.092545][T10288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.093291][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 452.112688][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 452.113340][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 452.113858][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.180283][ T3712] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 452.429029][T10462] loop2: detected capacity change from 0 to 256 [ 452.452182][ T3712] usb 2-1: cp210x converter now attached to ttyUSB0 [ 452.467889][T10462] exfat: Deprecated parameter 'utf8' [ 452.474770][T10462] exfat: Deprecated parameter 'utf8' [ 452.534182][T10462] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 452.618403][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.628286][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.696491][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.697365][ T4838] usb 2-1: USB disconnect, device number 24 [ 452.734953][ T4838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 452.760805][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.764954][ T4838] cp210x 2-1:0.1: device disconnected [ 452.769407][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.803019][T10465] loop0: detected capacity change from 0 to 512 [ 452.889254][T10465] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 452.916630][T10465] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 452.933472][T10288] device veth0_vlan entered promiscuous mode [ 452.944080][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.959402][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.022423][T10288] device veth1_vlan entered promiscuous mode [ 453.035175][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.060777][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.068443][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 453.081329][ T27] audit: type=1804 audit(2000000614.344:157): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1746" name="/newroot/30/file0/cgroup.controllers" dev="loop0" ino=18 res=1 errno=0 [ 453.104084][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.121196][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 453.149185][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.170859][T10476] loop4: detected capacity change from 0 to 128 [ 453.236241][ T9726] EXT4-fs (loop0): unmounting filesystem. [ 453.261729][T10288] device veth0_macvtap entered promiscuous mode [ 453.276984][T10477] FAT-fs (loop4): FAT read failed (blocknr 234) [ 453.277695][T10288] device veth1_macvtap entered promiscuous mode [ 453.394276][T10478] FAT-fs (loop4): FAT read failed (blocknr 234) [ 453.431855][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.447368][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.458421][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.469079][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.479308][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.512375][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.542812][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.563680][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.584305][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.597506][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.617710][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.659873][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.679945][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.699872][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.721567][T10288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.786130][T10472] loop2: detected capacity change from 0 to 32768 [ 453.820178][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 453.848592][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 453.891011][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.901035][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.923940][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.941350][T10472] XFS (loop2): Mounting V5 Filesystem [ 453.941803][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.957407][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.968635][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.978639][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.989120][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.999360][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.010370][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.020694][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.031340][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.043527][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.055379][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.065799][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.076465][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.088223][T10288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.146679][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.165509][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.175303][T10472] XFS (loop2): Ending clean mount [ 454.181688][T10288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.193389][T10288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.195079][T10472] XFS (loop2): Quotacheck needed: Please wait. [ 454.202313][T10288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.217943][T10288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.309062][T10508] tipc: Enabling of bearer rejected, failed to enable media [ 454.324211][T10472] XFS (loop2): Quotacheck: Done. [ 454.397782][ T27] audit: type=1800 audit(2000000615.654:158): pid=10472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1747" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 454.418286][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.525302][ T27] audit: type=1800 audit(2000000615.694:159): pid=10472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1747" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 454.569644][ T9472] XFS (loop2): Unmounting Filesystem [ 454.801888][ T3872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.862890][ T3872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.889356][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 455.216762][ T7421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 455.467711][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.507458][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.760762][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 455.877034][T10535] netlink: 'syz.2.1764': attribute type 29 has an invalid length. [ 455.922639][ T46] device hsr_slave_0 left promiscuous mode [ 455.944903][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 455.974471][ T46] device hsr_slave_1 left promiscuous mode [ 456.002642][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.023722][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.042367][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.050255][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.082277][ T46] device bridge_slave_1 left promiscuous mode [ 456.088520][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.112015][ T46] device bridge_slave_0 left promiscuous mode [ 456.118262][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.274082][ T46] device veth1_macvtap left promiscuous mode [ 456.287071][ T46] device veth0_macvtap left promiscuous mode [ 456.318983][ T46] device veth1_vlan left promiscuous mode [ 456.333547][ T46] device veth0_vlan left promiscuous mode [ 457.314461][T10585] loop0: detected capacity change from 0 to 2048 [ 457.333291][T10583] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 457.391011][T10585] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 457.417854][T10585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.467187][T10588] loop1: detected capacity change from 0 to 128 [ 457.766697][ T46] team0 (unregistering): Port device team_slave_1 removed [ 457.795744][T10595] loop4: detected capacity change from 0 to 4096 [ 457.853495][ T46] team0 (unregistering): Port device team_slave_0 removed [ 457.862953][T10595] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 457.891957][T10595] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 457.925051][T10595] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 457.942587][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.015226][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.518554][ T46] bond0 (unregistering): Released all slaves [ 458.650177][T10535] netlink: 'syz.2.1764': attribute type 29 has an invalid length. [ 458.823940][T10604] loop4: detected capacity change from 0 to 16 [ 458.833532][ T9944] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 458.864685][ T9944] FAT-fs (loop1): Filesystem has been set read-only [ 458.871343][T10604] erofs: (device loop4): mounted with root inode @ nid 36. [ 458.902659][ T27] audit: type=1326 audit(2000000620.164:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 458.924973][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.928822][T10604] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 458.978509][T10604] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 458.995335][ T27] audit: type=1326 audit(2000000620.164:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 459.052320][T10604] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 459.099237][ T27] audit: type=1326 audit(2000000620.164:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 459.216059][T10615] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1802'. [ 459.340157][ T3683] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 459.504566][ T27] audit: type=1326 audit(2000000620.164:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f473f976297 code=0x7ffc0000 [ 459.642039][ T3683] usb 5-1: Using ep0 maxpacket: 16 [ 459.770888][ T3683] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 459.819397][ T27] audit: type=1326 audit(2000000620.164:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 459.871092][ T27] audit: type=1326 audit(2000000620.164:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 459.893428][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.900438][ T27] audit: type=1326 audit(2000000620.164:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 459.922757][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.003627][ T27] audit: type=1326 audit(2000000620.164:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 460.025954][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.098021][ T3683] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 460.131559][ T3683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.149740][ T3683] usb 5-1: Product: syz [ 460.165012][ T3683] usb 5-1: Manufacturer: syz [ 460.169629][ T3683] usb 5-1: SerialNumber: syz [ 460.186971][ T3683] usb 5-1: config 0 descriptor?? [ 460.241167][ T3683] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 460.267362][ T3683] usb 5-1: Detected FT232R [ 460.450073][ T3683] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 460.563270][ T3645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.567233][T10613] loop0: detected capacity change from 0 to 32768 [ 460.578373][ T3645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.586620][ T3645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.601154][ T3645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.609485][ T3645] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 460.618130][ T3645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.710550][T10604] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 460.731775][T10613] XFS (loop0): Mounting V5 Filesystem [ 460.735810][T10604] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 460.752242][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.763109][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.772788][T10604] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 460.797855][ T3645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.812070][ T3645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.819688][ T3645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 460.828083][ T3645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.843999][T10609] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 460.856321][T10609] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 460.871475][T10609] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 460.881273][T10613] XFS (loop0): Ending clean mount [ 460.897367][T10613] XFS (loop0): Quotacheck needed: Please wait. [ 460.910313][ T3683] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 460.931190][ T3683] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 460.980776][ T3683] usb 5-1: USB disconnect, device number 17 [ 461.016363][ T3762] udevd[3762]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 461.027687][ T3683] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 461.057955][ T3683] ftdi_sio 5-1:0.0: device disconnected [ 461.059763][ T3762] udevd[3762]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 461.103792][T10621] chnl_net:caif_netlink_parms(): no params data found [ 461.154475][T10613] XFS (loop0): Quotacheck: Done. [ 461.244639][ T9726] XFS (loop0): Unmounting Filesystem [ 461.390138][T10640] loop2: detected capacity change from 0 to 256 [ 461.397581][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.459359][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.521003][T10621] device bridge_slave_0 entered promiscuous mode [ 461.556997][T10628] chnl_net:caif_netlink_parms(): no params data found [ 461.574555][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.583593][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.602175][T10621] device bridge_slave_1 entered promiscuous mode [ 461.749482][T10647] loop4: detected capacity change from 0 to 2048 [ 461.815591][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.900753][T10647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 461.903963][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.929076][T10647] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 461.968455][T10656] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 462.719285][ T3637] Bluetooth: hci4: command tx timeout [ 462.751773][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1812'. [ 462.911911][T10628] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.919008][T10628] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.926655][ T3637] Bluetooth: hci5: command tx timeout [ 462.941802][T10628] device bridge_slave_0 entered promiscuous mode [ 463.005968][T10621] team0: Port device team_slave_0 added [ 463.020213][T10628] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.027337][T10628] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.112066][T10628] device bridge_slave_1 entered promiscuous mode [ 463.123254][T10621] team0: Port device team_slave_1 added [ 463.260176][T10628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.279781][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.287869][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.313744][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.399958][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.422559][T10628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.435285][T10675] loop2: detected capacity change from 0 to 512 [ 463.467067][T10675] EXT4-fs: Ignoring removed bh option [ 463.491219][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.498583][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.524490][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.552781][T10675] EXT4-fs error (device loop2): __ext4_iget:5044: inode #15: block 1803188595: comm syz.2.1818: invalid block [ 463.630329][T10675] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1818: couldn't read orphan inode 15 (err -117) [ 463.663910][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.666512][T10678] loop0: detected capacity change from 0 to 1024 [ 463.692860][T10675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 463.712273][T10628] team0: Port device team_slave_0 added [ 463.805732][T10628] team0: Port device team_slave_1 added [ 463.871240][T10621] device hsr_slave_0 entered promiscuous mode [ 464.100328][T10621] device hsr_slave_1 entered promiscuous mode [ 464.171013][T10621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.239516][T10621] Cannot create hsr debugfs directory [ 464.285998][ T102] hfsplus: b-tree write err: -5, ino 4 [ 464.471653][T10628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.478643][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.508220][ T9472] EXT4-fs (loop2): unmounting filesystem. [ 464.579964][T10628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.593819][ T9493] EXT4-fs (loop4): unmounting filesystem. [ 464.699127][T10628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.740279][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.741503][T10691] loop0: detected capacity change from 0 to 8 [ 464.770383][ T3637] Bluetooth: hci4: command tx timeout [ 464.806177][T10691] unable to read id index table [ 464.821790][T10628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.919039][T10691] loop0: detected capacity change from 0 to 128 [ 464.974887][ T27] audit: type=1800 audit(2000000626.234:168): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1825" name="bus" dev="loop0" ino=1048738 res=0 errno=0 [ 465.010122][ T3637] Bluetooth: hci5: command tx timeout [ 465.112334][T10628] device hsr_slave_0 entered promiscuous mode [ 465.126535][ T27] audit: type=1804 audit(2000000626.264:169): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1825" name="/newroot/57/file1/bus" dev="loop0" ino=1048738 res=1 errno=0 [ 465.128667][T10628] device hsr_slave_1 entered promiscuous mode [ 467.819412][T10628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.829357][T10628] Cannot create hsr debugfs directory [ 467.870075][ T3650] Bluetooth: hci5: command tx timeout [ 467.900665][ T3637] Bluetooth: hci4: command tx timeout [ 468.216954][T10621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.262864][T10711] loop2: detected capacity change from 0 to 256 [ 468.290984][T10711] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 468.382526][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.494463][T10621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.576679][T10721] loop0: detected capacity change from 0 to 256 [ 468.587217][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.638222][T10721] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 468.751907][T10621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.871541][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.944816][T10725] loop2: detected capacity change from 0 to 4096 [ 468.945587][T10621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.995614][T10725] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 469.027368][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.068248][T10725] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 469.568460][T10621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.917585][ T3637] Bluetooth: hci5: command tx timeout [ 469.962022][ T3650] Bluetooth: hci4: command tx timeout [ 469.980462][T10621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.994902][ T9472] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 470.065838][T10621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.091544][T10621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.959439][T10749] loop4: detected capacity change from 0 to 256 [ 471.324854][ T3637] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 471.343110][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.592055][T10761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.604676][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.614438][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.638051][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.757812][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.768257][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.791462][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.798571][ T3712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.806627][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.821252][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.860165][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.867289][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.944979][T10767] loop2: detected capacity change from 0 to 32768 [ 472.968395][T10767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1850 (10767) [ 473.007544][T10767] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.039833][T10628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.049383][T10767] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 473.078426][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.088394][T10767] BTRFS info (device loop2): using free space tree [ 473.095633][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.096335][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.131277][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.151104][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.169825][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.179916][ T6342] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 473.190834][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.199239][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.228631][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.249387][T10628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.273975][T10621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.286170][T10773] loop4: detected capacity change from 0 to 32768 [ 473.295611][T10621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.303090][T10773] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1851 (10773) [ 473.344529][ T4069] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 473.409959][ T3637] Bluetooth: hci3: command tx timeout [ 473.420147][ T6342] usb 1-1: Using ep0 maxpacket: 8 [ 473.431767][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.449825][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.457338][T10767] BTRFS info (device loop2): enabling ssd optimizations [ 473.458608][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.474350][T10628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.550047][ T6342] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.570137][ T6342] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.595981][ T6342] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 473.608592][ T6342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.633665][T10628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.746730][T10810] loop4: detected capacity change from 0 to 128 [ 473.882880][T10810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 473.925227][T10628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.925316][T10810] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038 (0x7fffffff) [ 473.942009][ T9472] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.108885][ T6342] uclogic 0003:28BD:0075.0015: interface is invalid, ignoring [ 474.229287][ T9493] EXT4-fs (loop4): unmounting filesystem. [ 474.247307][T10628] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.309390][ T4844] usb 1-1: USB disconnect, device number 19 [ 474.317906][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.337959][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 474.400956][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 474.419768][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 474.450121][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.457217][ T4949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.494721][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 474.523812][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.554015][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.561153][ T4949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.589335][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 474.713487][T10830] loop4: detected capacity change from 0 to 4096 [ 474.732959][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 474.752251][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 474.761374][T10830] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 474.772171][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 474.790947][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.799194][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.808470][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.816962][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.825494][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.833942][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.842155][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.853751][T10628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.868151][T10830] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 474.869370][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.883381][T10828] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1855'. [ 474.915535][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.949177][T10833] loop0: detected capacity change from 0 to 256 [ 474.956450][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 474.976192][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 475.010847][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.019228][T10833] syz.0.1859: attempt to access beyond end of device [ 475.019228][T10833] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 475.087696][ T9493] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 475.110210][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.122917][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.163444][T10836] loop2: detected capacity change from 0 to 1024 [ 475.319004][ T4605] hfsplus: b-tree write err: -5, ino 4 [ 475.383404][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 475.402236][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.431263][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.438992][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.514750][T10621] device veth0_vlan entered promiscuous mode [ 475.558767][ T46] device hsr_slave_0 left promiscuous mode [ 475.570740][ T46] device hsr_slave_1 left promiscuous mode [ 475.604693][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.620144][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.641928][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.649439][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.670790][ T46] device bridge_slave_1 left promiscuous mode [ 475.676997][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.716013][ T46] device bridge_slave_0 left promiscuous mode [ 475.734948][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.773485][ T46] device hsr_slave_0 left promiscuous mode [ 475.800589][ T46] device hsr_slave_1 left promiscuous mode [ 475.807027][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.829936][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.847847][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.859996][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.897999][ T46] device bridge_slave_1 left promiscuous mode [ 475.921555][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.939705][ T46] device bridge_slave_0 left promiscuous mode [ 475.965685][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.052491][T10848] loop2: detected capacity change from 0 to 32768 [ 476.095176][T10848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1865 (10848) [ 476.157679][ T46] device veth1_macvtap left promiscuous mode [ 476.169462][T10848] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.170232][ T46] device veth0_macvtap left promiscuous mode [ 476.202257][T10848] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 476.219988][T10848] BTRFS info (device loop2): using free space tree [ 476.239387][ T46] device veth1_vlan left promiscuous mode [ 476.251309][ T46] device veth0_vlan left promiscuous mode [ 476.279530][T10852] loop0: detected capacity change from 0 to 32768 [ 476.298779][T10852] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1864 (10852) [ 476.322317][ T46] device veth1_macvtap left promiscuous mode [ 476.341163][ T46] device veth0_macvtap left promiscuous mode [ 476.347276][ T46] device veth1_vlan left promiscuous mode [ 476.375760][ T4069] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4069) [ 476.416854][ T46] device veth0_vlan left promiscuous mode [ 476.499005][T10848] BTRFS info (device loop2): enabling ssd optimizations [ 476.608705][ T9472] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.782154][T10875] loop4: detected capacity change from 0 to 164 [ 476.932872][T10877] loop4: detected capacity change from 0 to 1024 [ 477.035689][T10877] hfsplus: request for non-existent node 3 in B*Tree [ 477.054419][T10877] hfsplus: request for non-existent node 3 in B*Tree [ 477.366757][T10886] loop2: detected capacity change from 0 to 256 [ 477.396761][T10886] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 477.607515][T10890] loop2: detected capacity change from 0 to 4096 [ 477.618281][T10890] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 477.675562][T10890] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 477.763744][ T9472] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 477.916372][ T27] audit: type=1326 audit(2000000639.174:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 477.919628][ T46] team0 (unregistering): Port device team_slave_1 removed [ 477.966614][ T3637] Bluetooth: hci1: adv larger than maximum supported [ 477.966666][ T3637] Bluetooth: hci1: Malformed LE Event: 0x0d [ 477.989303][ T27] audit: type=1326 audit(2000000639.204:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.033571][ T46] team0 (unregistering): Port device team_slave_0 removed [ 478.041067][ T27] audit: type=1326 audit(2000000639.204:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.069701][ T27] audit: type=1326 audit(2000000639.204:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.099969][ T27] audit: type=1326 audit(2000000639.204:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.127683][ T27] audit: type=1326 audit(2000000639.204:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.150309][ T27] audit: type=1326 audit(2000000639.214:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.182168][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.190981][ T27] audit: type=1326 audit(2000000639.214:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.215882][ T27] audit: type=1326 audit(2000000639.214:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.241204][ T27] audit: type=1326 audit(2000000639.214:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f149c3779f9 code=0x7ffc0000 [ 478.284511][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.784570][ T46] bond0 (unregistering): Released all slaves [ 479.229387][ T46] team0 (unregistering): Port device team_slave_1 removed [ 479.278048][ T46] team0 (unregistering): Port device team_slave_0 removed [ 479.323306][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.367664][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.874758][ T46] bond0 (unregistering): Released all slaves [ 479.955016][T10621] device veth1_vlan entered promiscuous mode [ 479.962816][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.989955][T10888] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1871'. [ 480.023177][T10621] device veth0_macvtap entered promiscuous mode [ 480.038609][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.064828][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.084110][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.109140][T10628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.134607][T10621] device veth1_macvtap entered promiscuous mode [ 480.159732][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.173951][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.187427][T10903] loop0: detected capacity change from 0 to 256 [ 480.190137][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.239720][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.255723][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.266559][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.277456][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.287595][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.298258][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.309338][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.320468][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.330327][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.342657][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.353892][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.379518][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.399138][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.444635][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.467502][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.478817][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.489749][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.509217][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.537485][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.548654][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.570688][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.591542][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.610128][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.621667][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.628994][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.667881][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.687687][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.696326][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.705050][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.719294][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.727155][T10907] loop4: detected capacity change from 0 to 64 [ 480.730534][T10628] device veth0_vlan entered promiscuous mode [ 480.774182][T10621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.799955][T10621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.818829][T10621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.837904][T10621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.859120][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.860728][T10905] loop0: detected capacity change from 0 to 32768 [ 480.882796][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.908142][T10628] device veth1_vlan entered promiscuous mode [ 480.921341][T10905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1879 (10905) [ 480.969994][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.984529][T10905] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.995929][ T3637] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 481.037197][T10905] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 481.145687][T10913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 481.339131][T10905] BTRFS info (device loop0): using free space tree [ 481.897358][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.909205][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.945134][T10628] device veth0_macvtap entered promiscuous mode [ 481.973658][T10628] device veth1_macvtap entered promiscuous mode [ 481.992827][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.006859][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.025278][ T3877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.066527][ T3877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.087443][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.109481][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.132765][T10905] BTRFS info (device loop0): enabling ssd optimizations [ 482.138002][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.150687][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.160735][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.171241][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.181765][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.192311][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.202181][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.212999][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.223050][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.233525][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.250894][T10628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.278905][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.311854][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.334578][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.352099][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.353707][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.377415][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.414789][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.459952][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.485341][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.519927][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.548335][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.578715][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.603821][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.627773][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.638324][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.648204][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.658713][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.669185][ T9726] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 482.672147][T10628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.729523][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 482.751016][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.759690][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.810718][T10628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.819692][T10628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.839881][T10628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.848587][T10628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.008101][ T3650] Bluetooth: hci1: command tx timeout [ 483.265857][T10939] loop4: detected capacity change from 0 to 32768 [ 483.277664][T10939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1885 (10939) [ 483.293970][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.302897][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.319356][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.338847][T10939] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.383919][T10939] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 483.402842][ T7005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.422574][T10939] BTRFS info (device loop4): using free space tree [ 483.438590][ T7005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.468042][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.829580][T10939] BTRFS info (device loop4): enabling ssd optimizations [ 484.167728][ T9493] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 484.619649][ T3637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.632077][ T3637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.647494][ T3637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.657677][ T3637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.665377][ T3637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 484.673725][ T3637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.931818][T10998] loop2: detected capacity change from 0 to 164 [ 485.080057][T11001] loop4: detected capacity change from 0 to 512 [ 485.088144][T11003] loop2: detected capacity change from 0 to 1024 [ 485.144038][T11001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 485.144142][T11005] IPVS: length: 8 != 1152 [ 485.144224][T11003] hfsplus: request for non-existent node 3 in B*Tree [ 485.310171][T11003] hfsplus: request for non-existent node 3 in B*Tree [ 485.456104][T11001] EXT4-fs (loop4): 1 truncate cleaned up [ 485.478040][T11001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 485.613799][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1892'. [ 485.640302][T10991] chnl_net:caif_netlink_parms(): no params data found [ 485.750136][ T3678] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 485.923768][T10991] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.994567][T11028] rdma_op ffff88805366f1f0 conn xmit_rdma 0000000000000000 [ 486.627470][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.636540][T10991] device bridge_slave_0 entered promiscuous mode [ 486.665128][T10991] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.674094][ T9493] EXT4-fs (loop4): unmounting filesystem. [ 486.681306][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.760036][ T3650] Bluetooth: hci4: command tx timeout [ 486.770004][ T3678] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 486.803703][ T3678] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 486.823160][T10991] device bridge_slave_1 entered promiscuous mode [ 486.850099][ T3678] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 486.889565][ T3678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 487.083928][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.198112][T11040] loop2: detected capacity change from 0 to 512 [ 487.436583][T11040] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 487.448171][T11040] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 487.458352][T11040] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1904: Corrupt directory, running e2fsck is recommended [ 487.578041][T11040] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 487.591124][T11040] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1904: corrupted in-inode xattr [ 487.609458][T11040] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1904: couldn't read orphan inode 15 (err -117) [ 487.623590][T11040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 487.698500][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.730112][ T3678] usb 2-1: string descriptor 0 read error: -22 [ 487.736361][ T3678] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 487.752367][ T3678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.763046][ T3678] usb 2-1: config 0 descriptor?? [ 487.780134][T11016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 487.804803][ T3678] hub 2-1:0.0: bad descriptor, ignoring hub [ 487.895094][ T3678] hub: probe of 2-1:0.0 failed with error -5 [ 487.903649][ T3678] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 487.984146][ T9472] EXT4-fs (loop2): unmounting filesystem. [ 488.044773][T10991] team0: Port device team_slave_0 added [ 488.053954][ T6342] usb 2-1: USB disconnect, device number 25 [ 488.088548][T10991] team0: Port device team_slave_1 added [ 488.231789][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.238757][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.295523][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1909'. [ 488.346805][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.396541][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.429734][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.476079][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.591009][T10991] device hsr_slave_0 entered promiscuous mode [ 488.591118][T11058] loop4: detected capacity change from 0 to 1024 [ 488.604477][T10991] device hsr_slave_1 entered promiscuous mode [ 488.704438][T11058] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 488.725792][T11058] EXT4-fs (loop4): orphan cleanup on readonly fs [ 488.737379][T11064] loop1: detected capacity change from 0 to 128 [ 488.741634][T11066] loop2: detected capacity change from 0 to 8 [ 488.763136][T11058] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.1912: Freeing blocks not in datazone - block = 0, count = 4096 [ 488.769200][T11066] unable to read id index table [ 488.806312][T11058] EXT4-fs (loop4): 1 orphan inode deleted [ 488.815376][T11058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 488.840180][ T3650] Bluetooth: hci4: command tx timeout [ 488.881567][T11064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 488.894909][ T9493] EXT4-fs (loop4): unmounting filesystem. [ 488.900066][T11066] loop2: detected capacity change from 0 to 128 [ 488.930810][T11064] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 488.960627][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 488.960638][ T27] audit: type=1800 audit(2000000650.224:187): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1916" name="bus" dev="loop2" ino=1048755 res=0 errno=0 [ 489.166891][ T27] audit: type=1804 audit(2000000650.254:188): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1916" name="/newroot/105/file1/bus" dev="loop2" ino=1048755 res=1 errno=0 [ 489.169091][T10628] EXT4-fs (loop1): unmounting filesystem. [ 489.822535][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.040033][ T3696] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 490.290017][ T3696] usb 1-1: Using ep0 maxpacket: 16 [ 490.368177][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.407317][T11079] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 490.808704][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.975506][ T3650] Bluetooth: hci4: command tx timeout [ 491.490168][ T3696] usb 1-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 7.00 [ 491.508032][ T3696] usb 1-1: New USB device strings: Mfr=51, Product=2, SerialNumber=3 [ 491.521435][ T3696] usb 1-1: Product: syz [ 491.525613][ T3696] usb 1-1: Manufacturer: syz [ 491.554103][ C1] eth0: bad gso: type: 1, size: 1408 [ 491.577812][ T3696] usb 1-1: SerialNumber: syz [ 491.620237][ T4838] libceph: connect (1)[c::]:6789 error -101 [ 491.624096][ T3696] usb 1-1: config 0 descriptor?? [ 491.626283][ T4838] libceph: mon0 (1)[c::]:6789 connect error [ 491.668835][ T3683] libceph: connect (1)[c::]:6789 error -101 [ 491.677972][ T3683] libceph: mon0 (1)[c::]:6789 connect error [ 491.701207][ T3696] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 491.709382][ T3696] usb 1-1: Detected FT2232H [ 491.728553][T11102] x_tables: unsorted entry at hook 3 [ 491.920146][ T3696] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 491.921803][ T4838] libceph: connect (1)[c::]:6789 error -101 [ 491.947369][ T4838] libceph: mon0 (1)[c::]:6789 connect error [ 491.948406][ T3696] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 491.990592][ T3696] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 492.174648][ T3696] usb 1-1: USB disconnect, device number 20 [ 492.358511][ T3696] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 492.424566][T11098] ceph: No mds server is up or the cluster is laggy [ 492.525709][T11095] ceph: No mds server is up or the cluster is laggy [ 492.553212][ T3696] ftdi_sio 1-1:0.0: device disconnected [ 492.691819][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.709769][ T3654] libceph: connect (1)[c::]:6789 error -101 [ 492.726327][ T3654] libceph: mon0 (1)[c::]:6789 connect error [ 492.999962][ T3650] Bluetooth: hci4: command tx timeout [ 493.532102][ T6483] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 493.757728][T11139] loop0: detected capacity change from 0 to 2048 [ 493.849197][ T6483] usb 5-1: Using ep0 maxpacket: 16 [ 494.091543][ T6483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.193412][ T6483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.243165][ C1] eth0: bad gso: type: 1, size: 1408 [ 494.251254][T11139] loop0: p1 < > p4 [ 494.256196][T11139] loop0: p4 size 8388608 extends beyond EOD, truncated [ 494.282389][ T6483] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 494.301842][ T6483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.345108][ T6483] usb 5-1: config 0 descriptor?? [ 494.347787][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 494.363744][ T4069] udevd[4069]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 494.727631][ C1] eth0: bad gso: type: 1, size: 1408 [ 494.824977][ T6483] uclogic 0003:2179:0053.0016: interface is invalid, ignoring [ 495.223704][T11171] loop0: detected capacity change from 0 to 64 [ 495.290112][ T6342] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 495.426649][T10991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.507839][ T3679] usb 5-1: USB disconnect, device number 18 [ 495.600053][ T6342] usb 2-1: Using ep0 maxpacket: 8 [ 495.720654][ T6342] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.797503][ T6342] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.874248][ T6342] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 495.890358][ T3637] Bluetooth: hci0: command tx timeout [ 495.895177][ T6342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.087985][T10991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 496.110839][T10991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 496.152412][T10991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.220763][ T27] audit: type=1326 audit(2000000657.484:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.4.1949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1b87779f9 code=0x0 [ 496.280122][ T3679] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 496.414244][ T46] device hsr_slave_0 left promiscuous mode [ 496.421518][ T46] device hsr_slave_1 left promiscuous mode [ 496.432131][ T6342] uclogic 0003:28BD:0075.0017: interface is invalid, ignoring [ 496.445697][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.464775][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.479488][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.491000][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.498961][ T46] device bridge_slave_1 left promiscuous mode [ 496.516273][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.529913][ T3679] usb 3-1: Using ep0 maxpacket: 16 [ 496.536302][ T46] device bridge_slave_0 left promiscuous mode [ 496.548002][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.579150][T11187] loop0: detected capacity change from 0 to 40427 [ 496.592690][ T46] device veth1_macvtap left promiscuous mode [ 496.601912][ T46] device veth0_macvtap left promiscuous mode [ 496.610946][ T46] device veth1_vlan left promiscuous mode [ 496.617919][T11187] F2FS-fs (loop0): invalid crc value [ 496.623554][ T46] device veth0_vlan left promiscuous mode [ 496.649087][ T3696] usb 2-1: USB disconnect, device number 26 [ 496.669464][T11187] F2FS-fs (loop0): Found nat_bits in checkpoint [ 496.738010][T11187] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 496.774752][T11187] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 496.814254][ T3679] usb 3-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 7.00 [ 496.823676][ T3679] usb 3-1: New USB device strings: Mfr=51, Product=2, SerialNumber=3 [ 496.838620][ T3679] usb 3-1: Product: syz [ 496.846093][ T3679] usb 3-1: Manufacturer: syz [ 496.850993][ T3679] usb 3-1: SerialNumber: syz [ 496.858106][ T3679] usb 3-1: config 0 descriptor?? [ 496.909768][ T3679] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 496.918057][ T3679] usb 3-1: Detected FT2232H [ 497.104458][T11199] loop4: detected capacity change from 0 to 2048 [ 497.265325][T11193] f2fs_ckpt-7:0: attempt to access beyond end of device [ 497.265325][T11193] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 497.780014][ T3679] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 497.809745][ T3679] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 497.825585][ T3679] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 497.847372][ T3679] usb 3-1: USB disconnect, device number 17 [ 497.876772][T11199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 497.921798][ T3679] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 497.950931][ T3679] ftdi_sio 3-1:0.0: device disconnected [ 498.300090][ T6341] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 498.528191][ T46] team0 (unregistering): Port device team_slave_1 removed [ 498.650241][ T3679] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 498.663372][ T46] team0 (unregistering): Port device team_slave_0 removed [ 498.865801][T11216] loop2: detected capacity change from 0 to 2048 [ 499.413832][T11216] loop2: p1 < > p4 [ 499.420455][T11216] loop2: p4 size 8388608 extends beyond EOD, truncated [ 499.421960][ T6341] usb 5-1: config 27 has an invalid descriptor of length 27, skipping remainder of the config [ 499.446751][ T6341] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 76, changing to 10 [ 499.458175][ T6341] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49661, setting to 1024 [ 499.469926][ T6341] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.483092][ T6341] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.492350][ T6341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.505206][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.529337][ T4069] udevd[4069]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 499.554050][ T6341] usb 5-1: invalid MIDI out EP 0 [ 499.555514][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 499.590097][ T3679] usb 2-1: Using ep0 maxpacket: 8 [ 499.666871][ T6341] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 499.710131][ T3679] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 499.718246][ T3679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.747388][ T3679] usb 2-1: config 0 has no interface number 0 [ 499.755071][ T3679] usb 2-1: config 0 interface 52 has no altsetting 0 [ 499.806861][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.817086][ T3625] udevd[3625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.872126][ C1] eth0: bad gso: type: 1, size: 1408 [ 499.895782][ T3679] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 499.920121][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 499.945357][ T3679] usb 2-1: Product: syz [ 499.951647][ T3679] usb 2-1: SerialNumber: syz [ 499.971911][ T3679] usb 2-1: config 0 descriptor?? [ 500.099380][ T3683] usb 5-1: USB disconnect, device number 19 [ 500.117594][ T27] audit: type=1326 audit(2000000661.364:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.142056][ T27] audit: type=1326 audit(2000000661.384:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.159788][T11223] loop0: detected capacity change from 0 to 2048 [ 500.187558][ T27] audit: type=1326 audit(2000000661.384:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.214052][ T27] audit: type=1326 audit(2000000661.384:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.240482][ T27] audit: type=1326 audit(2000000661.384:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.264252][ T27] audit: type=1326 audit(2000000661.384:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.264374][ T4069] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 500.292440][ T27] audit: type=1326 audit(2000000661.384:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.327351][ T27] audit: type=1326 audit(2000000661.384:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.350345][ T27] audit: type=1326 audit(2000000661.384:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11222 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473f9779f9 code=0x7ffc0000 [ 500.508831][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.527782][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.541190][ T3683] usb 2-1: USB disconnect, device number 27 [ 501.250741][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.257175][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.569886][ T3650] Bluetooth: hci1: command tx timeout [ 501.606460][T11230] xt_CT: No such helper "snmp" [ 502.046404][ T46] bond0 (unregistering): Released all slaves [ 502.099486][T11241] loop1: detected capacity change from 0 to 1024 [ 502.280096][ T3813] hfsplus: b-tree write err: -5, ino 4 [ 502.352331][T10991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.377150][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 502.393393][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.410315][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.422239][T10991] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.431193][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.439779][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.449490][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.456596][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.470003][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.470273][ T9493] EXT4-fs (loop4): unmounting filesystem. [ 502.498944][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.512373][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.520542][ T28] INFO: task syz.3.1250:8781 blocked for more than 143 seconds. [ 502.520573][ T28] Not tainted 6.1.103-syzkaller #0 [ 502.520583][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.520604][ T28] task:syz.3.1250 state:D stack:25376 pid:8781 ppid:7952 flags:0x00004004 [ 502.520641][ T28] Call Trace: [ 502.520652][ T28] [ 502.520665][ T28] __schedule+0x143f/0x4570 [ 502.520719][ T28] ? release_firmware_map_entry+0x186/0x186 [ 502.520746][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 502.537377][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.581652][ T6483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.590214][ T28] ? print_irqtrace_events+0x210/0x210 [ 502.595775][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 502.601545][ T28] schedule+0xbf/0x180 [ 502.605703][ T28] io_schedule+0x88/0x100 [ 502.610438][ T28] folio_wait_bit_common+0x878/0x1290 [ 502.615922][ T28] ? folio_wait_bit+0x20/0x20 [ 502.620705][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 502.621250][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.627263][ T28] ? jfs_error+0x219/0x2e0 [ 502.635954][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.647275][ T28] ? __get_metapage+0x551/0x1040 [ 502.653286][ T28] release_metapage+0x88/0x9b0 [ 502.658954][ T28] ? PageHeadHuge+0x8e/0x1c0 [ 502.659019][T10991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.676620][ T28] __get_metapage+0xb15/0x1040 [ 502.678691][T10991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.689934][ T28] jfs_readdir+0x2907/0x4620 [ 502.696892][ T28] ? dtInitRoot+0x690/0x690 [ 502.709115][ T28] ? down_write_killable_nested+0x90/0x90 [ 502.715153][ T28] ? end_current_label_crit_section+0x147/0x170 [ 502.721851][ T28] ? common_file_perm+0x17d/0x1d0 [ 502.726904][ T28] ? iterate_dir+0x131/0x560 [ 502.732846][ T28] iterate_dir+0x224/0x560 [ 502.733780][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.737276][ T28] __se_sys_getdents64+0x209/0x4f0 [ 502.737303][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 502.755101][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.776193][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.794843][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.799998][ T28] ? __x64_sys_getdents64+0x80/0x80 [ 502.809910][ T28] ? filldir+0x6f0/0x6f0 [ 502.813015][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.814160][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 502.814185][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 502.832452][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.851199][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.869530][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.871474][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 502.887221][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.896748][ T28] do_syscall_64+0x3b/0xb0 [ 502.904245][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.920146][ T28] ? clear_bhb_loop+0x45/0xa0 [ 502.924859][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.950373][ T28] RIP: 0033:0x7f4d35f779f9 [ 502.954813][ T28] RSP: 002b:00007f4d35dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 502.967295][ T28] RAX: ffffffffffffffda RBX: 00007f4d36106058 RCX: 00007f4d35f779f9 [ 502.983972][ T28] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000006 [ 502.995576][ T28] RBP: 00007f4d35fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 503.014300][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.026805][ T28] R13: 0000000000000001 R14: 00007f4d36106058 R15: 00007ffda1cbfbe8 [ 503.039427][ T28] [ 503.048138][ T28] [ 503.048138][ T28] Showing all locks held in the system: [ 503.065625][ T28] 1 lock held by rcu_tasks_kthre/12: [ 503.076104][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 503.086937][ T28] 1 lock held by rcu_tasks_trace/13: [ 503.092565][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 503.104662][ T28] 1 lock held by khungtaskd/28: [ 503.109524][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 503.119714][ T28] 5 locks held by kworker/u4:3/46: [ 503.125769][ T28] #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.136415][ T28] #1: ffffc90000b77d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.146159][T10991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.151534][ T28] #2: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 503.172856][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.179390][ T28] #3: ffff888077fdd3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x10c/0x2f0 [ 503.180873][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.197846][ T28] #4: ffffffff8d330480 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 503.209203][ T28] 2 locks held by getty/3392: [ 503.214236][ T28] #0: ffff88802900a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 503.224281][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 503.235582][ T28] 3 locks held by kworker/0:5/3679: [ 503.241216][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.251888][ T28] #1: ffffc90004887d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.266990][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 503.269958][ T28] #2: ffff88807b58c240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 503.285535][ T28] 3 locks held by kworker/0:16/6341: [ 503.290390][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.291131][ T28] #0: ffff8880287a1938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.316387][T10991] device veth0_vlan entered promiscuous mode [ 503.323416][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.332562][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.340593][ T28] #1: ffffc90004b17d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.356886][T10991] device veth1_vlan entered promiscuous mode [ 503.364992][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.372568][ T28] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 503.382432][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.390117][ T28] 3 locks held by kworker/0:17/6342: [ 503.395412][ T28] #0: ffff8880287a1938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.407128][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.421640][ T28] #1: ffff8880b9827788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 503.433427][ T28] #2: ffff888021b9c598 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xad/0x12e0 [ 503.442932][ T28] 2 locks held by syz.3.1250/8781: [ 503.448255][ T28] #0: ffff888077cfa368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 503.453008][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.466749][ T28] #1: ffff88806f712a80 (&type->i_mutex_dir_key#16){++++}-{3:3}, at: iterate_dir+0x131/0x560 [ 503.477893][ T28] 1 lock held by syz-executor/10991: [ 503.480384][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 503.493028][ T28] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 503.500226][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.508357][ T28] [ 503.516166][ T28] ============================================= [ 503.516166][ T28] [ 503.532362][T10991] device veth0_macvtap entered promiscuous mode [ 503.549948][ T28] NMI backtrace for cpu 0 [ 503.553938][T10991] device veth1_macvtap entered promiscuous mode [ 503.554272][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 503.568386][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 503.578451][ T28] Call Trace: [ 503.581735][ T28] [ 503.584666][ T28] dump_stack_lvl+0x1e3/0x2cb [ 503.589357][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 503.590500][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.594809][ T28] ? panic+0x764/0x764 [ 503.609264][ T28] ? vprintk_emit+0x622/0x740 [ 503.613952][ T28] ? printk_sprint+0x490/0x490 [ 503.618706][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 503.623808][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 503.628737][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 503.634879][ T28] ? _printk+0xd1/0x111 [ 503.639027][ T28] ? panic+0x764/0x764 [ 503.643087][ T28] ? __wake_up_klogd+0xcc/0x100 [ 503.647931][ T28] ? panic+0x764/0x764 [ 503.651987][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 503.658043][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 503.664098][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 503.670071][ T28] watchdog+0xf88/0xfd0 [ 503.674216][ T28] ? watchdog+0x1f8/0xfd0 [ 503.678535][ T28] kthread+0x28d/0x320 [ 503.682585][ T28] ? hungtask_pm_notify+0x50/0x50 [ 503.687593][ T28] ? kthread_blkcg+0xd0/0xd0 [ 503.692170][ T28] ret_from_fork+0x1f/0x30 [ 503.696582][ T28] [ 503.700593][ T28] Sending NMI from CPU 0 to CPUs 1: [ 503.705827][ C1] NMI backtrace for cpu 1 [ 503.705837][ C1] CPU: 1 PID: 3623 Comm: syz-executor Not tainted 6.1.103-syzkaller #0 [ 503.705853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 503.705862][ C1] RIP: 0010:check_preemption_disabled+0x4/0x110 [ 503.705882][ C1] Code: 48 89 de e8 ce bf be f9 e9 6d ff ff ff cc cc cc cc cc cc cc cc cc 48 c7 c7 80 5d 5d 8b 48 c7 c6 c0 5d 5d 8b eb 00 41 57 41 56 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 503.705895][ C1] RSP: 0018:ffffc90003a2f768 EFLAGS: 00000283 [ 503.705908][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff816a72bb [ 503.705919][ C1] RDX: 0000000000000000 RSI: ffffffff8b5d5dc0 RDI: ffffffff8b5d5d80 [ 503.705930][ C1] RBP: ffffc90003a2f8f8 R08: dffffc0000000000 R09: fffffbfff1d33896 [ 503.705941][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000745efc [ 503.705951][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90003a2fbc0 [ 503.705962][ C1] FS: 0000555555f0b500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 503.705975][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.705986][ C1] CR2: 00007ff4ecea9440 CR3: 000000007be69000 CR4: 00000000003506e0 [ 503.706000][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.706009][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.706019][ C1] Call Trace: [ 503.706024][ C1] [ 503.706029][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 503.706050][ C1] ? read_lock_is_recursive+0x10/0x10 [ 503.706073][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 503.706095][ C1] ? nmi_handle+0x25/0x440 [ 503.706123][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 503.706146][ C1] ? nmi_handle+0x12e/0x440 [ 503.706167][ C1] ? nmi_handle+0x25/0x440 [ 503.706188][ C1] ? check_preemption_disabled+0x4/0x110 [ 503.706204][ C1] ? default_do_nmi+0x62/0x150 [ 503.706226][ C1] ? exc_nmi+0xa8/0x100 [ 503.706246][ C1] ? end_repeat_nmi+0x16/0x31 [ 503.706269][ C1] ? lock_acquire+0xeb/0x5a0 [ 503.706289][ C1] ? check_preemption_disabled+0x4/0x110 [ 503.706306][ C1] ? check_preemption_disabled+0x4/0x110 [ 503.706323][ C1] ? check_preemption_disabled+0x4/0x110 [ 503.706339][ C1] [ 503.706344][ C1] [ 503.706350][ C1] rcu_is_watching+0x11/0xb0 [ 503.706364][ C1] lock_acquire+0xfa/0x5a0 [ 503.706387][ C1] ? read_lock_is_recursive+0x10/0x10 [ 503.706415][ C1] ? __local_bh_disable_ip+0x183/0x210 [ 503.706438][ C1] ? release_sock+0x2c/0x1c0 [ 503.706452][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 503.706476][ C1] ? tcp_recvmsg+0x920/0x920 [ 503.706490][ C1] ? tcp_recvmsg+0x237/0x920 [ 503.706504][ C1] ? release_sock+0x2c/0x1c0 [ 503.706519][ C1] _raw_spin_lock_bh+0x31/0x40 [ 503.706534][ C1] ? release_sock+0x2c/0x1c0 [ 503.706547][ C1] release_sock+0x2c/0x1c0 [ 503.706563][ C1] tcp_recvmsg+0x264/0x920 [ 503.706581][ C1] ? tcp_recv_timestamp+0x710/0x710 [ 503.706601][ C1] ? sock_rps_record_flow+0x1a/0x3f0 [ 503.706620][ C1] ? inet_recvmsg+0xda/0x250 [ 503.706640][ C1] inet_recvmsg+0x13b/0x250 [ 503.706661][ C1] ? inet_sendpage+0x360/0x360 [ 503.706682][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 503.706700][ C1] ? security_socket_recvmsg+0x86/0xb0 [ 503.706718][ C1] ? inet_sendpage+0x360/0x360 [ 503.706738][ C1] sock_read_iter+0x3b2/0x4b0 [ 503.706762][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 503.706790][ C1] ? common_file_perm+0x17d/0x1d0 [ 503.706813][ C1] vfs_read+0x88d/0xbf0 [ 503.706832][ C1] ? kernel_read+0x1f0/0x1f0 [ 503.706847][ C1] ? __rseq_handle_notify_resume+0x3b7/0x1500 [ 503.706873][ C1] ? __fdget_pos+0x1db/0x360 [ 503.706889][ C1] ksys_read+0x19c/0x2c0 [ 503.706903][ C1] ? print_irqtrace_events+0x210/0x210 [ 503.706925][ C1] ? vfs_write+0xbc0/0xbc0 [ 503.706939][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 503.706954][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 503.706969][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 503.706986][ C1] do_syscall_64+0x3b/0xb0 [ 503.707005][ C1] ? clear_bhb_loop+0x45/0xa0 [ 503.707024][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.707042][ C1] RIP: 0033:0x7f6574d763fd [ 503.707053][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 78 47 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 11 16 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 503.707065][ C1] RSP: 002b:00007ffc72104958 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.707079][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6574d763fd [ 503.707090][ C1] RDX: 0000000000000004 RSI: 00007ffc7210496c RDI: 0000000000000003 [ 503.707099][ C1] RBP: 0000000000000000 R08: 00007ffc721230b0 R09: 0000000000000010 [ 503.707108][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc72104d60 [ 503.707118][ C1] R13: 0000000000000004 R14: 00007ffc7210496c R15: 00007ffc72104a00 [ 503.707136][ C1] [ 503.725124][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.054692][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 504.054705][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 504.054722][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 504.054730][ T28] Call Trace: [ 504.054736][ T28] [ 504.054743][ T28] dump_stack_lvl+0x1e3/0x2cb [ 504.054768][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 504.054789][ T28] ? panic+0x764/0x764 [ 504.054804][ T28] ? llist_add_batch+0x160/0x1d0 [ 504.054828][ T28] ? vscnprintf+0x59/0x80 [ 504.054846][ T28] panic+0x318/0x764 [ 504.054862][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 504.054883][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 504.054903][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 504.054923][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 504.054945][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 504.054968][ T28] watchdog+0xfc7/0xfd0 [ 504.054992][ T28] ? watchdog+0x1f8/0xfd0 [ 504.055014][ T28] kthread+0x28d/0x320 [ 504.055028][ T28] ? hungtask_pm_notify+0x50/0x50 [ 504.055045][ T28] ? kthread_blkcg+0xd0/0xd0 [ 504.055061][ T28] ret_from_fork+0x1f/0x30 [ 504.055091][ T28] [ 504.055434][ T28] Kernel Offset: disabled [ 504.322814][ T28] Rebooting in 86400 seconds..