last executing test programs: 48.065375491s ago: executing program 0 (id=227): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 47.999495445s ago: executing program 0 (id=228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000021, 0x0, 0x9}]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4c033, 0xffffffffffffffff, 0x8000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.548004501s ago: executing program 0 (id=237): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x9) 47.361259732s ago: executing program 0 (id=240): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) close(r0) unlink(&(0x7f0000000580)='./file0\x00') 47.05361639s ago: executing program 0 (id=242): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00', 0x0}) r2 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 46.565771698s ago: executing program 0 (id=246): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0) 46.454787555s ago: executing program 32 (id=246): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0) 43.401469053s ago: executing program 3 (id=263): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180), 0x1, 0x22d, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 43.210611474s ago: executing program 3 (id=264): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000005c0)={0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 42.753024111s ago: executing program 3 (id=266): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) shutdown(r0, 0x1) 42.676074975s ago: executing program 3 (id=267): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x2048c5, &(0x7f0000000380)={[{@fat=@tz_utc}, {@fat=@flush}, {@fat=@tz_utc}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@fat=@errors_continue}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x310f848, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 42.513886564s ago: executing program 3 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) 42.06580072s ago: executing program 3 (id=272): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8) 41.769534408s ago: executing program 33 (id=272): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8) 34.707471619s ago: executing program 5 (id=247): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 34.562250398s ago: executing program 5 (id=321): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x2150, 0x2}) 32.251027502s ago: executing program 5 (id=327): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x1210082, &(0x7f0000000300)={[{@codepage={'codepage', 0x3d, 'koi8-u'}}, {@creator={'creator', 0x3d, "a4b5bda4"}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {@dir_umask={'dir_umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "46bfa88c"}}, {@umask}]}, 0x9, 0x324, &(0x7f00000008c0)="$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") r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) 29.061959227s ago: executing program 5 (id=337): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000006c0)="de415b6bb4307f6b77533d1a5edea62b2bc0519e82f4065813", 0x4}, 0x38) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 28.788926864s ago: executing program 34 (id=337): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000006c0)="de415b6bb4307f6b77533d1a5edea62b2bc0519e82f4065813", 0x4}, 0x38) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 14.368663383s ago: executing program 1 (id=417): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003140), 0x800) r0 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 14.090429749s ago: executing program 1 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000206030000000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a310000000005000500020000000500040000"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015000300686173683a69702c706f72742c6e6574"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 13.817369636s ago: executing program 1 (id=424): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.589479948s ago: executing program 1 (id=428): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{}, {@shortname_winnt}, {@numtail}, {@rodir}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@shortname_mixed}, {@fat=@tz_utc}, {@utf8no}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 13.292919276s ago: executing program 1 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5300000007000046009d4063834609532bbc"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 12.613029336s ago: executing program 1 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) 12.374332399s ago: executing program 35 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) 7.04619152s ago: executing program 4 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002ba1ef40ac0545023a0a0102230109021200010400000009041c0000034a02"], 0x0) timer_create(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) close_range(r1, 0xffffffffffffffff, 0x0) 4.206639325s ago: executing program 2 (id=474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x202, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xb, 0x0, 0x54}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x4, 0x14, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xa000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x9c}, {0x8080000, 0xfe7c0331410c2338, 0x0, 0xff, 0x10, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0xc000}, {0x2}, 0xddf8ffd9, 0x0, 0x1, 0x10, 0x0, 0x0, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0x9]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) 4.091294892s ago: executing program 2 (id=475): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) setresuid(0x0, 0xee00, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x20000000) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.444235629s ago: executing program 2 (id=481): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize}]}}, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2404c000) 3.276761899s ago: executing program 4 (id=483): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x9, 0xf06}}}}]}, 0x44}}, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0xf1c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xef0, 0x2, [@TCA_BPF_NAME={0xeec, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0xf1c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.832448525s ago: executing program 6 (id=486): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_open_procfs(0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000700000000000400020000000000100006000000000020"], 0x24, 0x3) 2.724204051s ago: executing program 2 (id=487): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8", 0x1}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.713427122s ago: executing program 4 (id=488): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x601c2, 0xe6) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) sendfile(r2, r1, 0x0, 0x578410e9) close_range(r0, 0xffffffffffffffff, 0x0) 2.5729438s ago: executing program 6 (id=489): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2000000) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) 2.560412591s ago: executing program 7 (id=490): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/59, 0xfdef}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xd}, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 2.511417644s ago: executing program 4 (id=491): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ftruncate(r0, 0x2000009) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) write$P9_ROPEN(r0, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x3}, 0x3}}, 0x18) 2.4011608s ago: executing program 2 (id=492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) 2.207442502s ago: executing program 6 (id=493): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008007002"], 0x34}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.758739618s ago: executing program 6 (id=494): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r0, &(0x7f0000000bc0)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000180)="8a8d", 0x2}], 0x1, &(0x7f0000000b40)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x3, 0x100, 0xa, r2}}], 0x20, 0x200088c0}, 0x20040055) 1.646924574s ago: executing program 7 (id=495): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) gettid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.574750188s ago: executing program 8 (id=438): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 1.465449605s ago: executing program 4 (id=496): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES8], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.455757235s ago: executing program 7 (id=497): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.427086287s ago: executing program 2 (id=498): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 1.388111649s ago: executing program 6 (id=499): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) 1.261383706s ago: executing program 8 (id=500): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.259450166s ago: executing program 7 (id=501): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) fallocate(r2, 0x0, 0x9, 0x96c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) 1.075607997s ago: executing program 4 (id=502): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x4000000009, &(0x7f0000000380)=0x102) 1.056259339s ago: executing program 6 (id=503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a186dd1275539ebe1290f9fe485bef994029e46888f17e178c7fee7c96eccf5ba47c10a0279e7ca7af27cc9916bd8c60fe999c0c2f044f8333028438bbf945070d290aa78a328d79addc16966ca29b99966324138b25de75739", 0xb1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) 960.181814ms ago: executing program 8 (id=504): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 594.006716ms ago: executing program 8 (id=505): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 502.097071ms ago: executing program 7 (id=506): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000000c0)="fc000000", 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 366.578559ms ago: executing program 8 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x300, 0x3}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}]}}]}, 0x50}}, 0x0) 751.45µs ago: executing program 8 (id=508): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) gettid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 0s ago: executing program 7 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xf, &(0x7f0000000200)={0x5, 0x8000000000000001}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x8001}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): 0) entered blocking state [ 65.369880][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.378397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.386163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.394467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.403348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.412601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.420976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.432839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.442064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.451026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.462065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.499056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.510714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.519578][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.526736][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.536548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.545442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.555084][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.562207][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.570303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.579948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.588673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.597865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.606460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.615218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.623716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.633080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.665377][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.676702][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.694017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.705803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.713300][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 65.713359][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 65.713388][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 65.734166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.743367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.752135][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.759267][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.767935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.777727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.786662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.795373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.803711][ T3521] Bluetooth: hci4: command 0x041b tx timeout [ 65.810003][ T3521] Bluetooth: hci1: command 0x041b tx timeout [ 65.817716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.826126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.835307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.843965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.854184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.863671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.872949][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.883163][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.892226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.899978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.907926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.915810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.926795][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.944080][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.967777][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.990450][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.020384][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.037252][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.071987][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.104313][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.125941][ T4187] device veth0_vlan entered promiscuous mode [ 66.140722][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.152923][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.165610][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.174828][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.211493][ T4187] device veth1_vlan entered promiscuous mode [ 66.238629][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.257071][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.303092][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.337186][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.375198][ T4187] device veth0_macvtap entered promiscuous mode [ 66.394105][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.404138][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.426655][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.437929][ T4187] device veth1_macvtap entered promiscuous mode [ 66.460208][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.482829][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.492907][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.508759][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.532781][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.565428][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.574811][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.583638][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.591571][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.601473][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.620730][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.632188][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.645589][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.655168][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.664330][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.675616][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.689540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.698495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.707975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.717222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.757522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.766254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.780351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.789177][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.837938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.849038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.859318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.868931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.878328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.887120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.895700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.904928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.913931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.922476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.945976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.955854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.972175][ T4186] device veth0_vlan entered promiscuous mode [ 66.985145][ T4185] device veth0_vlan entered promiscuous mode [ 66.999133][ T4193] device veth0_vlan entered promiscuous mode [ 67.008305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.016740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.024468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.034258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.043150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.051353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.074679][ T4193] device veth1_vlan entered promiscuous mode [ 67.084703][ T4190] device veth0_vlan entered promiscuous mode [ 67.110973][ T4186] device veth1_vlan entered promiscuous mode [ 67.122312][ T4185] device veth1_vlan entered promiscuous mode [ 67.153187][ T4190] device veth1_vlan entered promiscuous mode [ 67.174364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.183846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.192787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.201599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.210524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.219386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.228017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.242568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.263400][ T4193] device veth0_macvtap entered promiscuous mode [ 67.279125][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.300120][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.315623][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.325233][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.334750][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.342985][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.352962][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.362573][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.378216][ T4193] device veth1_macvtap entered promiscuous mode [ 67.389857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.398466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.407705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.426046][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.437943][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.450517][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.461207][ T4186] device veth0_macvtap entered promiscuous mode [ 67.482378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.491522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.500888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.512543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.522320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.532540][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.543151][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.555106][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.565554][ T4190] device veth0_macvtap entered promiscuous mode [ 67.585178][ T4186] device veth1_macvtap entered promiscuous mode [ 67.593211][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.602301][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.611756][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.621104][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.633586][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.643227][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652558][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.661501][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.674481][ T4185] device veth0_macvtap entered promiscuous mode [ 67.687603][ T4190] device veth1_macvtap entered promiscuous mode [ 67.705071][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.732775][ T4185] device veth1_macvtap entered promiscuous mode [ 67.735453][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.748294][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.761028][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.771616][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.782527][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.788321][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 67.793768][ T3521] Bluetooth: hci3: command 0x040f tx timeout [ 67.804834][ T3521] Bluetooth: hci2: command 0x040f tx timeout [ 67.813327][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.830269][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.842203][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.852763][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.863683][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.877385][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 67.883727][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 67.887322][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.900703][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.913163][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.930465][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.939081][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.948259][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.956234][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.964562][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.974948][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.984389][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.993748][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.006447][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.020388][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.031387][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.042213][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.053857][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.064749][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.073887][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.083353][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.092370][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.111917][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.124504][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.135902][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.147375][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.157563][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.168278][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.178501][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.190177][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.202652][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.216753][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.230193][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.244338][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.259436][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.283593][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.298843][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.313078][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.323665][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.333650][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.344598][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.357669][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.375001][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.385877][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.396096][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.408694][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.419006][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.430392][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.441720][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.452381][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.464849][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.475863][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.485208][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.495083][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.504143][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.560828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.571309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.580747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.590771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.608760][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.622440][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.632404][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.666800][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.748106][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.756073][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.778458][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.831221][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.842561][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.875271][ T4302] input: syz0 as /devices/virtual/input/input5 [ 68.908858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.934037][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.949057][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.982984][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.075330][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.100013][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.113435][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.131217][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.157334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.176872][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.184951][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.201348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.258958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.343632][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.371898][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.382172][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.411199][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.424794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.454967][ T4315] loop2: detected capacity change from 0 to 1024 [ 69.463227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.745607][ T4315] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.772507][ T4327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.839865][ T4315] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 32: comm syz.2.11: bad entry in directory: inode out of bounds - offset=60, inode=15, rec_len=16, size=1024 fake=0 [ 69.878273][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 69.885265][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 69.909436][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 69.950457][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 69.958952][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 70.604810][ T26] audit: type=1326 audit(1770342546.495:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4343 comm="syz.2.18" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a762a3eb9 code=0x0 [ 70.958476][ T4354] loop4: detected capacity change from 0 to 256 [ 71.231619][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.241035][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.413430][ T4364] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.779192][ T4381] Zero length message leads to an empty skb [ 71.980780][ T4391] loop0: detected capacity change from 0 to 256 [ 72.075702][ T4391] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 72.347222][ T4235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.566897][ T1325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.766692][ T4235] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 72.780530][ T4235] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 72.818088][ T4235] usb 3-1: config 220 has no interface number 2 [ 72.832979][ T4235] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 72.857248][ T4235] usb 3-1: config 220 interface 0 has no altsetting 0 [ 72.880748][ T4235] usb 3-1: config 220 interface 76 has no altsetting 0 [ 72.893929][ T4235] usb 3-1: config 220 interface 1 has no altsetting 0 [ 72.989964][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 73.006358][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 227, changing to 7 [ 73.027876][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41954, setting to 1024 [ 73.122102][ T4235] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 73.137167][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.173131][ T4235] usb 3-1: Product: syz [ 73.182356][ T4235] usb 3-1: Manufacturer: syz [ 73.196191][ T4235] usb 3-1: SerialNumber: syz [ 73.242202][ T1325] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.262249][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.298353][ T1325] usb 1-1: Product: syz [ 73.304060][ T1325] usb 1-1: Manufacturer: syz [ 73.328147][ T1325] usb 1-1: SerialNumber: syz [ 73.347806][ T1325] usb 1-1: config 0 descriptor?? [ 73.412729][ T1325] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress e2 [ 73.658451][ T4235] uvcvideo 3-1:220.1: Unknown video format 418f0709-3b03-009a-0000-000000270c00 [ 73.696542][ T4235] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 73.717071][ T4423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 73.726759][ T4235] usb 3-1: No valid video chain found. [ 73.732594][ T4235] usb 3-1: selecting invalid altsetting 0 [ 73.773245][ T4423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 73.781938][ T1325] usb 1-1: USB disconnect, device number 2 [ 73.878779][ T4235] usb 3-1: selecting invalid altsetting 0 [ 73.888430][ T4235] usbtest: probe of 3-1:220.1 failed with error -22 [ 73.950660][ T4235] usb 3-1: USB disconnect, device number 2 [ 74.208204][ T4426] udevd[4426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.599073][ T4446] loop1: detected capacity change from 0 to 2048 [ 74.635923][ T4446] ======================================================= [ 74.635923][ T4446] WARNING: The mand mount option has been deprecated and [ 74.635923][ T4446] and is ignored by this kernel. Remove the mand [ 74.635923][ T4446] option from the mount to silence this warning. [ 74.635923][ T4446] ======================================================= [ 74.671027][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.827285][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 74.862940][ T4446] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 74.864657][ T4455] netlink: 'syz.4.61': attribute type 14 has an invalid length. [ 74.903889][ T4446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.005893][ T4455] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.015371][ T4455] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.024154][ T4455] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.033004][ T4455] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.067375][ T4455] device vxlan0 entered promiscuous mode [ 75.103555][ T4463] process 'syz.2.64' launched '/dev/fd/6' with NULL argv: empty string added [ 75.315096][ T4469] loop1: detected capacity change from 0 to 128 [ 75.359680][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 75.383586][ T4469] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.554466][ T4477] loop2: detected capacity change from 0 to 256 [ 75.627564][ T4477] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 76.069583][ T4482] loop3: detected capacity change from 0 to 8192 [ 76.121193][ T4490] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 76.174751][ T4482] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 76.247882][ T4482] REISERFS (device loop3): using ordered data mode [ 76.254488][ T4482] reiserfs: using flush barriers [ 76.263272][ T4482] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.280952][ T4482] REISERFS (device loop3): checking transaction log (loop3) [ 76.551621][ T4503] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.656567][ T4482] REISERFS (device loop3): Using tea hash to sort names [ 76.667854][ T4507] Illegal XDP return value 4294967274, expect packet loss! [ 76.688601][ T4482] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 77.465568][ T4536] netlink: 'syz.4.96': attribute type 5 has an invalid length. [ 77.580343][ T3521] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.674064][ T4547] netlink: 172 bytes leftover after parsing attributes in process `syz.4.100'. [ 77.728792][ T4549] loop3: detected capacity change from 0 to 256 [ 77.770042][ T4551] netlink: 156 bytes leftover after parsing attributes in process `syz.2.102'. [ 77.815701][ T4549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4a55fa7b, utbl_chksum : 0xe619d30d) [ 77.828038][ T3521] usb 2-1: Using ep0 maxpacket: 16 [ 77.950107][ T3521] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 77.968683][ T3521] usb 2-1: config 0 has no interface number 0 [ 77.979889][ T3521] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 78.010478][ T3521] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 78.197269][ T3521] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 78.216941][ T3521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.225011][ T3521] usb 2-1: Product: syz [ 78.236729][ T3521] usb 2-1: Manufacturer: syz [ 78.241393][ T3521] usb 2-1: SerialNumber: syz [ 78.293868][ T3521] usb 2-1: config 0 descriptor?? [ 78.336840][ T4529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.346818][ T4529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.569248][ T4529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.582764][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 78.606547][ T4529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.612662][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 78.899770][ T3521] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 79.116694][ T3521] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 72 [ 79.266459][ T4235] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 79.353883][ T4242] usb 2-1: USB disconnect, device number 2 [ 79.505144][ T4607] loop4: detected capacity change from 0 to 256 [ 79.594843][ T4607] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 79.687895][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 79.730449][ T4235] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 79.759250][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.786774][ T4613] loop3: detected capacity change from 0 to 64 [ 79.805661][ T4235] usb 1-1: config 0 descriptor?? [ 79.847116][ T4591] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 79.878797][ T4613] BFS-fs: bfs_fill_super(): Impossible last inode number 144386 > 513 on loop3 [ 80.319677][ T4235] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 80.343945][ T4235] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 80.352389][ T4235] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 80.360047][ T4235] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 80.371477][ T4235] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 80.417209][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.437662][ T4235] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 80.558833][ T4300] usb 1-1: USB disconnect, device number 3 [ 80.628595][ T4632] fido_id[4632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 80.831923][ T13] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.853074][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.874723][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.895093][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.058959][ T4645] loop3: detected capacity change from 0 to 32768 [ 81.102597][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 81.119750][ T4178] Dev loop3 SGI disklabel: csum bad, label corrupted [ 81.143619][ T13] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 81.185231][ T13] usb 5-1: Manufacturer: syz [ 81.215162][ T13] usb 5-1: config 0 descriptor?? [ 81.237711][ T4645] Dev loop3 SGI disklabel: csum bad, label corrupted [ 81.262342][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.299734][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.313991][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.323124][ T4636] loop2: detected capacity change from 0 to 32768 [ 81.369963][ T4651] device bridge_slave_0 left promiscuous mode [ 81.410459][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.475985][ T4651] device bridge_slave_1 left promiscuous mode [ 81.495872][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.589180][ T4651] bond0: (slave bond_slave_0): Releasing backup interface [ 81.658419][ T4651] bond0: (slave bond_slave_1): Releasing backup interface [ 81.732764][ T13] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 81.744966][ T13] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 81.763422][ T4651] team0: Port device team_slave_0 removed [ 81.807449][ T13] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 81.879959][ T4651] team0: Port device team_slave_1 removed [ 81.902577][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.933757][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.966888][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.983599][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.062419][ T4654] netlink: 'syz.0.144': attribute type 10 has an invalid length. [ 82.134191][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.203830][ T4654] team0: Port device bond0 added [ 83.116741][ T4690] syz.0.157 sent an empty control message without MSG_MORE. [ 83.256578][ T4242] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 84.010082][ T4731] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.030590][ T4729] loop4: detected capacity change from 0 to 256 [ 84.097378][ T4733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525290536 (5050581072 ns) > initial count (447779868 ns). Using initial count to start timer. [ 84.128374][ T4729] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.140974][ T4300] usb 5-1: USB disconnect, device number 2 [ 84.165943][ T4729] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 84.212513][ T4729] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d) [ 84.355255][ T4740] loop2: detected capacity change from 0 to 4096 [ 84.672330][ T4740] overlayfs: upper fs does not support tmpfile. [ 84.722641][ T4759] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 84.758469][ T4760] loop3: detected capacity change from 0 to 1024 [ 84.777007][ T4740] overlayfs: workdir/#f already exists [ 84.854186][ T4760] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000008001,max_dir_size_kb=0x0000000038858e1c,nombcache,nobarrier,dax=never,errors=remount-ro,. Quota mode: none. [ 84.953969][ T4754] loop1: detected capacity change from 0 to 8192 [ 84.992788][ T4767] loop0: detected capacity change from 0 to 512 [ 85.066723][ T4754] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 85.117342][ T4754] REISERFS (device loop1): using ordered data mode [ 85.124219][ T4754] reiserfs: using flush barriers [ 85.144336][ T4754] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.169253][ T4754] REISERFS (device loop1): checking transaction log (loop1) [ 85.215583][ T4767] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.241438][ T4767] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.295906][ T4767] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.335432][ T4767] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.189: bad orphan inode 131083 [ 85.348398][ T4767] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 85.472592][ T4754] REISERFS (device loop1): Using tea hash to sort names [ 85.507640][ T4754] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 85.527981][ T4754] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 85.646837][ T4785] xt_hashlimit: max too large, truncated to 1048576 [ 85.747944][ T4787] netlink: 'syz.4.195': attribute type 2 has an invalid length. [ 85.773511][ T4767] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 85.805832][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 85.885501][ T4792] netlink: 'syz.4.195': attribute type 2 has an invalid length. [ 85.921536][ T4767] overlayfs: upper fs needs to support d_type. [ 85.937181][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 85.980852][ T4797] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 86.141705][ T26] audit: type=1800 audit(1770342562.035:3): pid=4797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.185" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 86.172476][ T4767] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 86.206727][ T4767] overlayfs: upper fs does not support tmpfile. [ 86.227556][ T4767] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 86.274606][ T4767] overlayfs: failed index dir cleanup (-512) [ 86.291216][ T4767] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 86.595320][ T23] cfg80211: failed to load regulatory.db [ 86.943374][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.975608][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.512929][ T4838] loop1: detected capacity change from 0 to 512 [ 87.551969][ T4838] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 87.693488][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 87.718485][ T4838] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.816851][ T26] audit: type=1800 audit(1770342563.715:4): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.212" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 88.371006][ T4863] loop0: detected capacity change from 0 to 256 [ 88.455753][ T4863] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 88.611393][ T4870] fuse: root generation should be zero [ 88.763939][ T4872] device batadv_slave_1 entered promiscuous mode [ 88.787291][ T4872] device bridge0 entered promiscuous mode [ 88.803679][ T4871] device bridge0 left promiscuous mode [ 88.815794][ T4871] device batadv_slave_1 left promiscuous mode [ 89.110436][ T4887] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 89.135351][ T4887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.185104][ T4887] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 89.410448][ T4903] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.545803][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 89.572071][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 89.622839][ T4911] loop0: detected capacity change from 0 to 512 [ 89.646910][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 89.690570][ T4911] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.708284][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 89.775936][ T4911] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.854790][ T4187] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 89.887182][ T4187] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 90.346208][ T4275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.436406][ T4300] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.463277][ T4275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.518193][ T4275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.589879][ T4275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.687246][ T4300] usb 2-1: Using ep0 maxpacket: 16 [ 90.806580][ T4300] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 90.818504][ T4300] usb 2-1: config 1 has no interface number 0 [ 90.831420][ T4300] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 90.847106][ T4300] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 90.857523][ T4300] usb 2-1: config 1 interface 105 has no altsetting 0 [ 91.018435][ T4300] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 91.037957][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.072651][ T4300] usb 2-1: Product: syz [ 91.077016][ T4300] usb 2-1: Manufacturer: syz [ 91.081642][ T4300] usb 2-1: SerialNumber: syz [ 91.156841][ T4927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.171681][ T4927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.264681][ T4947] loop4: detected capacity change from 0 to 2048 [ 91.298783][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 91.327832][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 91.334577][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 91.341075][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 91.347600][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 91.354051][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 91.360591][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.368455][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.376423][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.384259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.392214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.400263][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.408208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.416043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.423975][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.431849][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.439788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.447651][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.455559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.463425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.471353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.479239][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.487175][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.495027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.503093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.510970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.518904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.526768][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.534766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.542654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.550591][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.558464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.566427][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.574266][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.582233][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.590123][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.598073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.605907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.613842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.621706][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.629826][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.637827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.645775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.653658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.661599][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.669506][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.677448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.685287][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.687330][ T4927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.693539][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.707955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.715859][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.723744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.731689][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.739587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.747521][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.755368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.761668][ T4927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.763533][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.778073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.785987][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.793964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.801916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.809900][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.817860][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.825704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.833651][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.841676][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.849628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.857670][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.865585][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.873470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.881412][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.889297][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.897251][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.905121][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.913074][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.920933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.928910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.936769][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.944672][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.952557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.960494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.968376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.976492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 91.984336][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 91.992491][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.000367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.008353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.016204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.123276][ T4947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.219398][ T4932] chnl_net:caif_netlink_parms(): no params data found [ 92.258517][ T4300] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 92.307024][ T4300] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 92.460551][ T4300] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 56:64:dd:c8:d4:4e [ 92.549610][ T4960] netlink: 56 bytes leftover after parsing attributes in process `syz.2.254'. [ 92.614089][ T4235] usb 2-1: USB disconnect, device number 3 [ 92.630962][ T4235] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 92.747101][ T4242] Bluetooth: hci2: command 0x0409 tx timeout [ 92.853986][ T4235] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 92.854478][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.899321][ T4235] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 92.941828][ T4235] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 92.972730][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.030779][ T4932] device bridge_slave_0 entered promiscuous mode [ 93.050572][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.074657][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.093562][ T4932] device bridge_slave_1 entered promiscuous mode [ 93.156446][ T4300] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.283544][ T4932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.316070][ T4932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.421450][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 93.442848][ T4994] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.455920][ T4994] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.464702][ T4994] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.473943][ T4994] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.485310][ T4997] overlayfs: failed to resolve './file0': -2 [ 93.576592][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.597047][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 93.607923][ T5001] loop3: detected capacity change from 0 to 512 [ 93.623641][ T4932] team0: Port device team_slave_0 added [ 93.654938][ T4932] team0: Port device team_slave_1 added [ 93.686853][ T4300] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 93.724689][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.733211][ T4300] usb 3-1: Product: syz [ 93.754059][ T4300] usb 3-1: Manufacturer: syz [ 93.768605][ T4300] usb 3-1: SerialNumber: syz [ 93.790898][ T4275] device hsr_slave_0 left promiscuous mode [ 93.799303][ T4275] device hsr_slave_1 left promiscuous mode [ 93.819245][ T4275] device veth1_macvtap left promiscuous mode [ 93.825732][ T4275] device veth0_macvtap left promiscuous mode [ 93.832704][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 93.855177][ T4275] device veth1_vlan left promiscuous mode [ 93.862430][ T4275] device veth0_vlan left promiscuous mode [ 94.116573][ T21] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 94.132678][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.154468][ T21] usb 5-1: Product: syz [ 94.164394][ T21] usb 5-1: Manufacturer: syz [ 94.194071][ T21] usb 5-1: SerialNumber: syz [ 94.231724][ T21] usb 5-1: config 0 descriptor?? [ 94.259123][ T4300] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 94.304852][ T5013] loop3: detected capacity change from 0 to 128 [ 94.398127][ T4275] team0 (unregistering): Port device bond0 removed [ 94.421492][ T4275] bond0 (unregistering): Released all slaves [ 94.638804][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.645930][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.707236][ T21] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 94.723341][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.733389][ T4932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.746081][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.755169][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.782810][ T21] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 94.792730][ T21] usb 5-1: media controller created [ 94.812332][ T4932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.824368][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.901878][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 94.945422][ T4932] device hsr_slave_0 entered promiscuous mode [ 94.967660][ T21] zl10353_read_register: readreg error (reg=127, ret==0) [ 94.974805][ T21] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 94.989501][ T4932] device hsr_slave_1 entered promiscuous mode [ 95.014147][ T21] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 95.087316][ T21] usb 5-1: USB disconnect, device number 3 [ 95.192630][ T21] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 95.226668][ T4300] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 95.264187][ T4300] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 95.287287][ T4300] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 95.311028][ T4300] lan78xx: probe of 3-1:1.0 failed with error -71 [ 95.376624][ T4300] usb 3-1: USB disconnect, device number 3 [ 95.443601][ T4932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.477263][ T4932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.508663][ T4932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.602464][ T4932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.170589][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.196653][ T5065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.282'. [ 96.261094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.283161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.325022][ T4932] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.370667][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.395608][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.404133][ T4174] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.448820][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.455965][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.466460][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.518612][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.558067][ T5039] chnl_net:caif_netlink_parms(): no params data found [ 96.589246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.659020][ T4174] usb 5-1: Using ep0 maxpacket: 16 [ 96.668953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.721063][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.728272][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.791967][ T4174] usb 5-1: config 0 has no interfaces? [ 96.798080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.807328][ T4174] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 96.832691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.845603][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.879553][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.905018][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.917094][ T4174] usb 5-1: config 0 descriptor?? [ 96.948826][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.976492][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.987136][ T4174] Bluetooth: hci2: command 0x040f tx timeout [ 97.001774][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.026404][ T4234] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.038518][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.066156][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.068561][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.089704][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.108822][ T4234] usb 2-1: config 0 descriptor?? [ 97.124640][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.162194][ T4300] usb 5-1: USB disconnect, device number 4 [ 97.217921][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.258787][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.297130][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.402188][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.499555][ T5039] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.517493][ T5039] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.534903][ T5039] device bridge_slave_0 entered promiscuous mode [ 97.566804][ T5085] syz.2.283 uses obsolete (PF_INET,SOCK_PACKET) [ 97.573757][ T5039] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.595936][ T5039] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.607713][ T4234] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 97.626135][ T4234] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 97.645574][ T5039] device bridge_slave_1 entered promiscuous mode [ 97.675382][ T4234] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 97.706681][ T4300] Bluetooth: hci4: command 0x0409 tx timeout [ 97.817850][ T5039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.961763][ T1325] usb 2-1: USB disconnect, device number 4 [ 98.000942][ T5094] fido_id[5094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 98.049987][ T5039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.166955][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.182459][ T5039] team0: Port device team_slave_0 added [ 98.221601][ T5039] team0: Port device team_slave_1 added [ 98.239425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.276679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.348721][ T5039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.361232][ T5039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.463821][ T5039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.504756][ T5039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.526402][ T5039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.626037][ T5114] loop2: detected capacity change from 0 to 2048 [ 98.703411][ T5039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.736207][ T5114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.780501][ T5121] netlink: 27 bytes leftover after parsing attributes in process `syz.4.292'. [ 98.920535][ T5039] device hsr_slave_0 entered promiscuous mode [ 98.967712][ T5039] device hsr_slave_1 entered promiscuous mode [ 99.006383][ T5039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.014006][ T5039] Cannot create hsr debugfs directory [ 99.033393][ T5131] loop4: detected capacity change from 0 to 1024 [ 99.076615][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 99.129494][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.151919][ T5131] EXT4-fs (loop4): Ignoring removed orlov option [ 99.235680][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.297397][ T5131] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 99.427523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.446153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.480936][ T4932] device veth0_vlan entered promiscuous mode [ 99.516010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.538148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.580707][ T4932] device veth1_vlan entered promiscuous mode [ 99.752517][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.774235][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.784208][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.803039][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.824469][ T4932] device veth0_macvtap entered promiscuous mode [ 99.844243][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.858260][ T4932] device veth1_macvtap entered promiscuous mode [ 99.900008][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 99.948102][ T5039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.972542][ T5039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.996216][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.036494][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.061118][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.077915][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.088188][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.098861][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.108834][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.119913][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.152947][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.179822][ T5039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.206214][ T5039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.245924][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.263656][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.291881][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.316418][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.345141][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.374697][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.394091][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.419768][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.457568][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.475661][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.497247][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.505942][ T5169] netlink: 7 bytes leftover after parsing attributes in process `syz.2.303'. [ 100.596015][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.628837][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.689272][ T4932] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.725313][ T4932] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.746547][ T4932] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.755402][ T4932] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.871702][ T5196] loop4: detected capacity change from 0 to 16 [ 100.975880][ T5196] erofs: (device loop4): mounted with root inode @ nid 36. [ 101.090097][ T26] audit: type=1800 audit(1770342576.985:5): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.309" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 101.115324][ T5039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.134849][ T5196] attempt to access beyond end of device [ 101.134849][ T5196] loop4: rw=0, want=34359738367, limit=16 [ 101.187369][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.216477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.227874][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.248816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.313513][ T5039] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.346696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.393675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.451875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.478174][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.485456][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.605694][ T5225] loop4: detected capacity change from 0 to 2048 [ 101.646771][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 101.653483][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.677946][ T5214] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 101.706923][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.727409][ T5225] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.863612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.880814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.889937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.899100][ T26] audit: type=1800 audit(1770342577.795:6): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.316" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 101.912533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.949057][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.956511][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.957516][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 101.983226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.049930][ T4275] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.085879][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.113387][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.125658][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.142298][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.154191][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.204397][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.291209][ T4275] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.340789][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.357057][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.384321][ T5244] loop4: detected capacity change from 0 to 1024 [ 102.403661][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.422466][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.447858][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.472283][ T4275] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.524901][ T5244] EXT4-fs (loop4): Ignoring removed nobh option [ 102.585689][ T4275] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.596576][ T5244] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.625433][ T5244] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.320: bad orphan inode 32767 [ 102.650832][ T5244] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,lazytime,dioread_lock,dioread_lock,resgid=0x0000000000000000,jqfmt=vfsv0,dioread_nolock,nobh,user_xattr,mb_optimize_scan=0x0000000000000000,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 103.123880][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.141077][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.252451][ T5039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.300335][ T5261] loop1: detected capacity change from 0 to 32768 [ 103.397585][ T5261] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.323 (5261) [ 103.426050][ T5261] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 103.435207][ T5261] BTRFS info (device loop1): using free space tree [ 103.441863][ T5261] BTRFS info (device loop1): has skinny extents [ 103.623842][ T5246] loop5: detected capacity change from 0 to 40427 [ 103.720317][ T5246] F2FS-fs (loop5): invalid crc value [ 103.790080][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.798021][ T5261] BTRFS info (device loop1): enabling ssd optimizations [ 103.820327][ T5246] F2FS-fs (loop5): Found nat_bits in checkpoint [ 104.036753][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 104.066573][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 104.090703][ T5246] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 104.156212][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.194130][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.314336][ T5039] device veth0_vlan entered promiscuous mode [ 104.352302][ T5246] loop5: detected capacity change from 40427 to 0 [ 104.380673][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.397650][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.406859][ T13] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 104.441933][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.461158][ C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.487146][ T13] usb 5-1: Product: syz [ 104.491377][ T13] usb 5-1: Manufacturer: syz [ 104.496008][ T13] usb 5-1: SerialNumber: syz [ 104.501238][ C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.517072][ C1] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.529779][ C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.549520][ T13] usb 5-1: config 0 descriptor?? [ 104.564157][ C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.587882][ C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.600520][ C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.614688][ C1] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.626997][ C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 104.684833][ C0] blk_update_request: I/O error, dev loop5, sector 45064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.705352][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4178) [ 104.725561][ T5039] device veth1_vlan entered promiscuous mode [ 104.764356][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.782051][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.817626][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.831045][ T13] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 005 [ 105.020553][ T5039] device veth0_macvtap entered promiscuous mode [ 105.040851][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.077003][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.127059][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.151276][ T5039] device veth1_macvtap entered promiscuous mode [ 105.185813][ T4275] device hsr_slave_0 left promiscuous mode [ 105.225409][ T4275] device hsr_slave_1 left promiscuous mode [ 105.243245][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.278065][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.314070][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.336479][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.364753][ T4275] device bridge_slave_1 left promiscuous mode [ 105.393116][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.445138][ T4275] device bridge_slave_0 left promiscuous mode [ 105.470968][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.483844][ T5322] loop1: detected capacity change from 0 to 32768 [ 105.505402][ T4275] device veth1_macvtap left promiscuous mode [ 105.535842][ T4275] device veth0_macvtap left promiscuous mode [ 105.556926][ T4275] device veth1_vlan left promiscuous mode [ 105.570742][ T4275] device veth0_vlan left promiscuous mode [ 105.592187][ T5322] XFS (loop1): Mounting V5 Filesystem [ 105.703008][ T5325] loop2: detected capacity change from 0 to 32768 [ 105.719506][ T5325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.328 (5325) [ 105.754461][ T5322] XFS (loop1): Ending clean mount [ 105.773461][ T5325] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 105.808569][ T5325] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 105.817855][ T4264] usb 5-1: USB disconnect, device number 5 [ 105.840608][ T5325] BTRFS info (device loop2): force zstd compression, level 3 [ 105.858927][ T5322] XFS (loop1): Quotacheck needed: Please wait. [ 105.878395][ T5325] BTRFS info (device loop2): turning on sync discard [ 105.885156][ T5325] BTRFS info (device loop2): force clearing of disk cache [ 105.923209][ T5325] BTRFS info (device loop2): enabling disk space caching [ 105.962377][ T5325] BTRFS info (device loop2): turning off discard [ 105.985107][ T5325] BTRFS info (device loop2): disk space caching is enabled [ 106.006504][ T5325] BTRFS info (device loop2): has skinny extents [ 106.057641][ T5322] XFS (loop1): Quotacheck: Done. [ 106.164476][ T5322] overlayfs: refusing to follow metacopy origin for (/file1) [ 106.215900][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 106.233307][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 106.255705][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.275016][ T5325] BTRFS info (device loop2): enabling ssd optimizations [ 106.294776][ T5325] BTRFS info (device loop2): clearing free space tree [ 106.331491][ T5325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 106.355014][ T4185] XFS (loop1): Unmounting Filesystem [ 106.377758][ T5325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.425860][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.761358][ T4275] bond0 (unregistering): Released all slaves [ 106.943883][ T5365] loop4: detected capacity change from 0 to 512 [ 106.953482][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.989550][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.999972][ T5365] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.028431][ T5365] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 107.105459][ T5365] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 107.156110][ T5365] System zones: 0-2, 18-18, 34-35 [ 107.194732][ T5365] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.338427][ T5365] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (20000) [ 107.523754][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.558606][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.590014][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.636831][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.666586][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.701468][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.722276][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.732897][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.777854][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.817995][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.847370][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.937042][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.972425][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.982955][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.993889][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.004221][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.015568][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.037637][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.059401][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.091660][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.111987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.145066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.175701][ T5039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.217998][ T5039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.236333][ T5039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.255359][ T5039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.504824][ T5218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.523096][ T5218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.536077][ T5393] loop2: detected capacity change from 0 to 32768 [ 108.596485][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.623352][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.663095][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.697173][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.718377][ T5393] XFS (loop2): Mounting V5 Filesystem [ 108.981427][ T5393] XFS (loop2): Ending clean mount [ 109.028134][ T5393] XFS (loop2): Quotacheck needed: Please wait. [ 109.074347][ T5420] loop4: detected capacity change from 0 to 8192 [ 109.217282][ T5393] XFS (loop2): Quotacheck: Done. [ 109.313587][ T5420] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 109.374316][ T5420] REISERFS (device loop4): using ordered data mode [ 109.385309][ T5426] loop6: detected capacity change from 0 to 40427 [ 109.416380][ T5420] reiserfs: using flush barriers [ 109.421753][ T5393] XFS (loop2): Unmounting Filesystem [ 109.451855][ T5415] chnl_net:caif_netlink_parms(): no params data found [ 109.484709][ T5426] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 109.492528][ T5426] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 109.507386][ T5426] F2FS-fs (loop6): invalid crc value [ 109.517178][ T5420] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.572928][ T5426] F2FS-fs (loop6): Found nat_bits in checkpoint [ 109.602744][ T5420] REISERFS (device loop4): checking transaction log (loop4) [ 109.640788][ T5426] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 109.648364][ T5426] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 109.682586][ T5420] REISERFS (device loop4): Using r5 hash to sort names [ 109.717016][ T5420] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 110.022948][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.030645][ T5415] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.038965][ T5415] device bridge_slave_0 entered promiscuous mode [ 110.060645][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.068086][ T5415] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.077541][ T5415] device bridge_slave_1 entered promiscuous mode [ 110.079027][ T5443] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3542, free_space(entry_count) 2 [ 110.109548][ T5426] F2FS-fs (loop6): Corrupted max_depth of 3: 255 [ 110.119949][ T5426] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 110.190930][ T5415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.200369][ T5443] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 110.229430][ T5415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.246026][ T5443] REISERFS (device loop4): Remounting filesystem read-only [ 110.278013][ T5443] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 110.409848][ T5415] team0: Port device team_slave_0 added [ 110.447988][ T5415] team0: Port device team_slave_1 added [ 110.601613][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.626578][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.746780][ T5415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.784362][ T5389] Bluetooth: hci2: command 0x0409 tx timeout [ 110.842981][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.888750][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.973456][ T5415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.141507][ T5415] device hsr_slave_0 entered promiscuous mode [ 111.185584][ T5415] device hsr_slave_1 entered promiscuous mode [ 111.208203][ T5415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.237533][ T5415] Cannot create hsr debugfs directory [ 111.761435][ T5415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 111.868820][ T5468] loop6: detected capacity change from 0 to 8 [ 111.879089][ T5415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 111.950868][ T5415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 111.979989][ T5415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 111.996782][ T5468] SQUASHFS error: xz decompression failed, data probably corrupt [ 112.043735][ T5468] SQUASHFS error: Failed to read block 0x108: -5 [ 112.085037][ T5468] SQUASHFS error: Unable to read metadata cache entry [106] [ 112.123099][ T5468] SQUASHFS error: Unable to read inode 0x11f [ 112.719761][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.825002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.860209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.940546][ T5415] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.989183][ T5488] device syzkaller1 entered promiscuous mode [ 113.009598][ T5478] loop4: detected capacity change from 0 to 131072 [ 113.020969][ T5391] Bluetooth: hci2: command 0x041b tx timeout [ 113.023564][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.048993][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.350'. [ 113.069849][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.105498][ T5478] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 113.113744][ T5478] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.123613][ T5478] F2FS-fs (loop4): invalid crc value [ 113.139053][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.146215][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.170565][ T5478] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.215162][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.275413][ T5478] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.282658][ T5478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 113.452830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.475022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.506528][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.513669][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.577687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.620543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.652603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.688004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.712033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.755483][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.800814][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.822216][ T4303] kernel write not supported for file bpf-prog (pid: 4303 comm: kworker/1:8) [ 113.840066][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.866979][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.907169][ T5415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.939644][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.978034][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.999940][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.453299][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 114.481114][ T5532] bridge_slave_0: default FDB implementation only supports local addresses [ 114.515995][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.539819][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.554669][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.582566][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 114.879187][ T4275] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.964811][ T4275] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.067529][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 115.118744][ T4275] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.215085][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.247545][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.275685][ T4275] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.327989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.348489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.375962][ T5415] device veth0_vlan entered promiscuous mode [ 115.397622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.412851][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.450391][ T5415] device veth1_vlan entered promiscuous mode [ 115.573762][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.595199][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.603937][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.630166][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.652727][ T5415] device veth0_macvtap entered promiscuous mode [ 115.685372][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.712364][ T5415] device veth1_macvtap entered promiscuous mode [ 115.773731][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.810861][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.847560][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.893286][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.923949][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.950865][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.974697][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.005997][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.035798][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.084048][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.117044][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.139339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.152528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.199119][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.248426][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.258734][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.273056][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.275603][ T5595] overlayfs: failed to resolve './bus': -2 [ 116.285154][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.299710][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.311353][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.322242][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.332481][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.343472][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.349378][ T5561] loop6: detected capacity change from 0 to 32768 [ 116.360502][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.399626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.413060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.447571][ T5415] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.457461][ T5415] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.467444][ T5415] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.476209][ T5415] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.495693][ T5561] XFS (loop6): Mounting V5 Filesystem [ 116.501519][ T5389] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.659481][ T5561] XFS (loop6): Ending clean mount [ 116.766655][ T5389] usb 2-1: Using ep0 maxpacket: 8 [ 116.784475][ T5039] XFS (loop6): Unmounting Filesystem [ 116.826902][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.835049][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.973726][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.045108][ T5613] overlayfs: failed to clone upperpath [ 117.057366][ T5218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.092141][ T5218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.117842][ T5389] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 117.150581][ T5389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.173936][ T5389] usb 2-1: Product: syz [ 117.178513][ T5389] usb 2-1: Manufacturer: syz [ 117.183147][ T5389] usb 2-1: SerialNumber: syz [ 117.199732][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 117.208657][ T5389] usb 2-1: config 0 descriptor?? [ 117.214557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.528688][ T5389] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 117.838866][ T4275] device hsr_slave_0 left promiscuous mode [ 117.852853][ T4275] device hsr_slave_1 left promiscuous mode [ 117.891470][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.909265][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.930724][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.959857][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.997202][ T4275] device bridge_slave_1 left promiscuous mode [ 118.009912][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.038557][ T4275] device bridge_slave_0 left promiscuous mode [ 118.055567][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.066099][ T5391] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 118.087598][ T4275] device veth1_macvtap left promiscuous mode [ 118.093738][ T4275] device veth0_macvtap left promiscuous mode [ 118.110243][ T4275] device veth1_vlan left promiscuous mode [ 118.116089][ T4275] device veth0_vlan left promiscuous mode [ 118.356077][ T5637] loop6: detected capacity change from 0 to 32768 [ 118.362958][ T5391] usb 8-1: Using ep0 maxpacket: 16 [ 118.457752][ T5637] XFS (loop6): Mounting V5 Filesystem [ 118.507421][ T5391] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 118.515735][ T5391] usb 8-1: config 0 has no interface number 0 [ 118.545300][ T5391] usb 8-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 118.563827][ T5391] usb 8-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 118.574418][ T5391] usb 8-1: config 0 interface 251 has no altsetting 0 [ 118.611784][ T5637] XFS (loop6): Ending clean mount [ 118.631183][ T5637] XFS (loop6): Quotacheck needed: Please wait. [ 118.658406][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 118.688578][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 118.697702][ T5637] XFS (loop6): Quotacheck: Done. [ 118.730095][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.766766][ T5391] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 118.782504][ T5391] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.791051][ T5391] usb 8-1: Product: syz [ 118.795249][ T5391] usb 8-1: Manufacturer: syz [ 118.806948][ T5389] gspca_sunplus: reg_w_riv err -71 [ 118.812163][ T5389] sunplus: probe of 2-1:0.0 failed with error -71 [ 118.822379][ T5391] usb 8-1: SerialNumber: syz [ 118.853884][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.873651][ T5391] usb 8-1: config 0 descriptor?? [ 118.879216][ T5389] usb 2-1: USB disconnect, device number 5 [ 118.916839][ T5638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.923943][ T5638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.028735][ T5039] XFS (loop6): Unmounting Filesystem [ 119.171690][ T4275] bond0 (unregistering): Released all slaves [ 119.184621][ T5638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.202764][ T5638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.668616][ T5391] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 119.705333][ T5391] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 119.749682][ T5391] asix: probe of 8-1:0.251 failed with error -71 [ 119.757566][ T5658] syz.4.385 (5658): /proc/5659/oom_adj is deprecated, please use /proc/5659/oom_score_adj instead. [ 119.790242][ T5391] usb 8-1: USB disconnect, device number 2 [ 119.874914][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 119.988314][ T5678] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 120.026538][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 120.243365][ T5684] loop1: detected capacity change from 0 to 2048 [ 120.427275][ T5684] hpfs: filesystem error: improperly stopped; already mounted read-only [ 120.536548][ T5684] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 120.638983][ T5695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.903428][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 121.120178][ T5707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.400'. [ 121.166292][ C0] sched: RT throttling activated [ 121.188927][ T5707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.400'. [ 121.897035][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.7.408'. [ 121.960327][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.7.408'. [ 122.183550][ T5741] loop7: detected capacity change from 0 to 2048 [ 122.335253][ T5741] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.377855][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop7 [ 122.533798][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop7 [ 122.584203][ T5754] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.794250][ T5765] capability: warning: `syz.6.418' uses deprecated v2 capabilities in a way that may be insecure [ 123.399412][ T5785] loop6: detected capacity change from 0 to 1764 [ 123.425142][ T5793] loop1: detected capacity change from 0 to 128 [ 124.774213][ T5802] loop7: detected capacity change from 0 to 32768 [ 124.795777][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'. [ 124.869984][ T5830] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 124.905219][ T5802] (syz.7.429,5802,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.966843][ T5830] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 125.031515][ T5802] (syz.7.429,5802,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.175957][ T5802] JBD2: Ignoring recovery information on journal [ 125.202546][ T5847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.345022][ T5852] loop4: detected capacity change from 0 to 128 [ 125.407627][ T5802] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 126.008767][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 126.354576][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.477529][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.527675][ T5845] device bridge_slave_0 entered promiscuous mode [ 126.566709][ T5415] ocfs2: Unmounting device (7,7) on (node local) [ 126.583897][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.689114][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.764386][ T5845] device bridge_slave_1 entered promiscuous mode [ 126.833683][ T4275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.875006][ T4275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.976100][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.033337][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.187683][ T5845] team0: Port device team_slave_0 added [ 127.228744][ T5845] team0: Port device team_slave_1 added [ 127.325740][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.360641][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.398353][ T5391] Bluetooth: hci1: command 0x0409 tx timeout [ 127.496493][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.674037][ T4275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.782963][ T4275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.887225][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.894510][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.094779][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.205054][ T4275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.239764][ T4275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.297473][ T5845] device hsr_slave_0 entered promiscuous mode [ 128.335318][ T5845] device hsr_slave_1 entered promiscuous mode [ 128.388184][ T4275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.427717][ T4275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.921790][ T5881] loop4: detected capacity change from 0 to 32768 [ 129.016919][ T5881] XFS: attr2 mount option is deprecated. [ 129.068922][ T5845] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 129.086945][ T5845] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 129.105681][ T5845] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 129.170521][ T5845] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 129.269406][ T5881] XFS (loop4): Mounting V5 Filesystem [ 129.424925][ T5881] XFS (loop4): Ending clean mount [ 129.468825][ T5391] Bluetooth: hci1: command 0x041b tx timeout [ 129.485144][ T5881] XFS (loop4): Quotacheck needed: Please wait. [ 129.588787][ T5881] XFS (loop4): Quotacheck: Done. [ 129.876110][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.886520][ T4186] XFS (loop4): Unmounting Filesystem [ 130.003673][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.013309][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.040309][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.065122][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.097832][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.119423][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.126614][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.229348][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.242108][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.314276][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.347361][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.354578][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.391697][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.420909][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.441525][ T26] audit: type=1326 audit(1770342606.335:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.7.460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49c5662eb9 code=0x0 [ 130.489276][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.524348][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.615559][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.651164][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.663619][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.673178][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.697805][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.717002][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.750240][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.767352][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.780464][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.789836][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.253152][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.298357][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.322551][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.557138][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 131.571186][ T4275] device hsr_slave_0 left promiscuous mode [ 131.594701][ T4275] device hsr_slave_1 left promiscuous mode [ 131.615023][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.634003][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.649847][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.662414][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.676097][ T4275] device bridge_slave_1 left promiscuous mode [ 131.689777][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.705503][ T4275] device bridge_slave_0 left promiscuous mode [ 131.720457][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.761307][ T4275] device veth1_macvtap left promiscuous mode [ 131.789050][ T4275] device veth0_macvtap left promiscuous mode [ 131.795298][ T4275] device veth1_vlan left promiscuous mode [ 131.802311][ T4275] device veth0_vlan left promiscuous mode [ 131.819502][ T5389] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.887182][ T5993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.195220][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 132.221772][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 132.244421][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.256760][ T5389] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 132.269778][ T5389] usb 5-1: config 4 has no interface number 0 [ 132.289699][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.496681][ T5389] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 132.506104][ T5389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 132.515041][ T5389] usb 5-1: Product: syz [ 132.519628][ T5389] usb 5-1: Manufacturer: syz [ 132.524253][ T5389] usb 5-1: SerialNumber: syz [ 132.548662][ T4275] bond0 (unregistering): Released all slaves [ 132.590130][ T5389] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input7 [ 132.686688][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.693049][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.829740][ T6011] bridge0: port 3(vlan2) entered blocking state [ 132.866945][ T3546] bcm5974 5-1:4.28: could not read from device [ 132.876003][ T6011] bridge0: port 3(vlan2) entered disabled state [ 132.888643][ T6011] device vlan2 entered promiscuous mode [ 132.910947][ T6011] bridge0: mtu less than device minimum [ 132.926569][ T5389] usb 5-1: USB disconnect, device number 6 [ 133.163697][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.184462][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.204867][ T4427] udevd[4427]: Error opening device "/dev/input/event4": No such file or directory [ 133.245642][ T4427] udevd[4427]: Unable to EVIOCGABS device "/dev/input/event4" [ 133.270786][ T4427] udevd[4427]: Unable to EVIOCGABS device "/dev/input/event4" [ 133.285737][ T4427] udevd[4427]: Unable to EVIOCGABS device "/dev/input/event4" [ 133.290900][ T5845] device veth0_vlan entered promiscuous mode [ 133.295244][ T4427] udevd[4427]: Unable to EVIOCGABS device "/dev/input/event4" [ 133.314694][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.324635][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.353574][ T5845] device veth1_vlan entered promiscuous mode [ 133.388295][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.397340][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.408937][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.512602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.522783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.547424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.561968][ T5845] device veth0_macvtap entered promiscuous mode [ 133.608222][ T5845] device veth1_macvtap entered promiscuous mode [ 133.642519][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 133.666068][ T6045] loop7: detected capacity change from 0 to 256 [ 133.690260][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.713752][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.748736][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.798347][ T6045] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 133.827494][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.866839][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.912126][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.933966][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.969721][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.996322][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.032934][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.078207][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.114716][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.137688][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.149038][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.166333][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.245677][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.269718][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.484'. [ 134.289990][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.336760][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.371850][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.386419][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.425898][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.463569][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.529258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.552272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.588275][ T5845] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.631548][ T6068] cgroup: Setting release_agent not allowed [ 134.636476][ T5845] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.646254][ T5845] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.686356][ T5845] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.711823][ T6065] loop4: detected capacity change from 0 to 8192 [ 134.828605][ T6065] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 134.843421][ T6065] REISERFS (device loop4): using ordered data mode [ 134.852160][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.881919][ T6065] reiserfs: using flush barriers [ 134.902310][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.945610][ T6065] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.982812][ T6075] netlink: 63 bytes leftover after parsing attributes in process `syz.6.493'. [ 134.997137][ T6065] REISERFS (device loop4): checking transaction log (loop4) [ 135.009924][ T6065] REISERFS (device loop4): Using r5 hash to sort names [ 135.028324][ T6065] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 135.062137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.090554][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.116825][ T6065] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3257, free_space(entry_count) 2 [ 135.136430][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.179281][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.188119][ T6065] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 135.261495][ T6065] REISERFS (device loop4): Remounting filesystem read-only [ 135.296831][ T6065] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 135.447049][ T6085] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 135.749967][ T6101] loop7: detected capacity change from 0 to 512 [ 135.862732][ T6101] EXT4-fs (loop7): Ignoring removed bh option [ 136.018150][ T6101] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 136.096513][ T6101] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.188951][ T6116] IPVS: nq: FWM 3 0x00000003 - no destination available [ 207.846468][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 207.858738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 207.876298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 207.886575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 207.896565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 207.906550][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 207.916553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 207.926551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 207.936538][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 207.946551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 244.736259][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 244.742920][ C0] rcu: 0-...!: (1 GPs behind) idle=4cb/1/0x4000000000000000 softirq=14987/14988 fqs=323 [ 244.754030][ C0] (t=10501 jiffies g=18977 q=383) [ 244.759165][ C0] rcu: rcu_preempt kthread starved for 9854 jiffies! g18977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 244.770291][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 244.780269][ C0] rcu: RCU grace-period kthread stack dump: [ 244.786268][ C0] task:rcu_preempt state:R running task stack:28112 pid: 15 ppid: 2 flags:0x00004000 [ 244.797061][ C0] Call Trace: [ 244.800334][ C0] [ 244.803260][ C0] __schedule+0x11ef/0x43c0 [ 244.807785][ C0] ? rcu_is_watching+0x11/0xa0 [ 244.812549][ C0] ? release_firmware_map_entry+0x190/0x190 [ 244.818452][ C0] schedule+0x11b/0x1e0 [ 244.822615][ C0] schedule_timeout+0x184/0x2d0 [ 244.827461][ C0] ? console_conditional_schedule+0x40/0x40 [ 244.833350][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 244.839260][ C0] ? update_process_times+0x200/0x200 [ 244.844631][ C0] ? prepare_to_swait_event+0x331/0x350 [ 244.850186][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 244.855053][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 244.861201][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 244.865966][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.871163][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 244.876361][ C0] rcu_gp_kthread+0x9b/0x370 [ 244.880947][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 244.886850][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.891995][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 244.897912][ C0] ? __kthread_parkme+0x157/0x1b0 [ 244.902949][ C0] kthread+0x436/0x520 [ 244.907016][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.912126][ C0] ? kthread_blkcg+0xd0/0xd0 [ 244.916744][ C0] ret_from_fork+0x1f/0x30 [ 244.921177][ C0] [ 244.924192][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 244.930516][ C0] Sending NMI from CPU 0 to CPUs 1: [ 244.935761][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 244.936741][ C0] NMI backtrace for cpu 0 [ 244.948523][ C0] CPU: 0 PID: 6146 Comm: syz.7.518 Not tainted syzkaller #0 [ 244.955808][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.965858][ C0] Call Trace: [ 244.969134][ C0] [ 244.971976][ C0] dump_stack_lvl+0x188/0x250 [ 244.976663][ C0] ? show_regs_print_info+0x20/0x20 [ 244.981862][ C0] ? load_image+0x400/0x400 [ 244.986402][ C0] ? try_to_wake_up+0x3d4/0x1050 [ 244.991358][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 244.996307][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 245.002497][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 245.007965][ C0] ? _raw_spin_lock+0x40/0x40 [ 245.012641][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 245.018728][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 245.024711][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 245.029825][ C0] print_cpu_stall+0x31d/0x5f0 [ 245.034607][ C0] rcu_sched_clock_irq+0x6ea/0x1120 [ 245.039802][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 245.044649][ C0] ? account_process_tick+0x22a/0x3a0 [ 245.050024][ C0] update_process_times+0x193/0x200 [ 245.055237][ C0] tick_sched_timer+0x37d/0x560 [ 245.060097][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 245.065635][ C0] __hrtimer_run_queues+0x4ad/0xb70 [ 245.070854][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 245.075963][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 245.082027][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 245.086975][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 245.092957][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 245.098604][ C0] [ 245.101549][ C0] [ 245.104487][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 245.110646][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 245.116552][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e 2c 98 f7 48 89 df e8 86 04 99 f7 e8 11 f3 b9 f7 fb bf 01 00 00 00 06 0b 8d f7 65 8b 05 87 17 3d 76 85 c0 74 02 5b c3 e8 d4 24 3b [ 245.136162][ C0] RSP: 0018:ffffc9000344fbc0 EFLAGS: 00000282 [ 245.142236][ C0] RAX: 13a9ab9906bf8600 RBX: ffff88807a4a1bc0 RCX: 13a9ab9906bf8600 [ 245.150206][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 245.158180][ C0] RBP: 0000000000000000 R08: ffff88807a4a1bc3 R09: 1ffff1100f494378 [ 245.166169][ C0] R10: dffffc0000000000 R11: ffffed100f494379 R12: ffff88807a4a1bc0 [ 245.174146][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 245.182214][ C0] get_signal+0x11d6/0x12c0 [ 245.186744][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 245.192391][ C0] ? _copy_from_user+0x111/0x170 [ 245.197349][ C0] ? load_gs_index+0x130/0x130 [ 245.202113][ C0] ? get_sigframe_size+0x10/0x10 [ 245.207064][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 245.212518][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 245.217810][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 245.223364][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 245.228913][ C0] do_syscall_64+0x58/0xa0 [ 245.233340][ C0] ? clear_bhb_loop+0x30/0x80 [ 245.238007][ C0] ? clear_bhb_loop+0x30/0x80 [ 245.242684][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.248569][ C0] RIP: 0033:0x7f49c5662eb9 [ 245.252998][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.272606][ C0] RSP: 002b:00007f49c38be0e8 EFLAGS: 00000246 [ 245.278667][ C0] RAX: 0000000000000000 RBX: 00007f49c58ddfa8 RCX: 00007f49c5662eb9 [ 245.286643][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49c58ddfac [ 245.294608][ C0] RBP: 00007f49c58ddfa0 R08: 002112424bbd813a R09: 0000000000000000 [ 245.302574][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.310542][ C0] R13: 00007f49c58de038 R14: 00007fff6cc204f0 R15: 00007fff6cc205d8 [ 245.318518][ C0]