last executing test programs: 2m2.09042729s ago: executing program 0 (id=2948): ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r5, 0x0) 2m1.767922058s ago: executing program 0 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2m0.841566943s ago: executing program 0 (id=2953): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 1m59.886252428s ago: executing program 0 (id=2961): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x611f, &(0x7f00000154c0)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArlFti6XyMIBZBvkRBa+6BoKKv4CEBIlQpSIgj8gBS0dFRWWbCRQKgbN3fP4Zje73nPOt7O+5/ORzrO/eWZ2n7nvzu2uZ2afAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+9/7wdlORFz+eZqxFvGZ6EV0I1bqej0iVtbX8vL9iHgudprj2YgYLEXU6+/883TEqxHx0fGIe/dvb9Szz+2zH9/9499/98Njb/3tD4PT//3Tzd5r05a7detX//nznYNtMwAAAJSmqqqqkz7mn0if77ttdwoAmIv8+l8lef6Rr3/9z7f+skj9UavVarV6DnVTNdmdZhERW8116vcMDscDwBNmKz5uuwu0SP5F60fEsbY7ASy0Ttsd4FDcu397o5Py7TRfD9Z32/O5ICP5b3UeXN8xbTrL+Dkm83p+bUcvnpnSn5U59WGR5Py74/lf3m0fpuUOO/95mZb/cPfSp+Lk/Hvj+Y85Ovl3J+Zfqpx//5Hy78kfAAAAAAAWWP7//7WWj/8uHXxT9uVhx3/X59QHAAAAAAAAAHjcDjr+3wPG/wMAAICFVX9Wr/3m+N68ad/FVs+/1Il4amx5oDDpYpnVtvsBAAAAAAAAAAAAACXp757De6kTMYiIp1ZXq6qqf5rG60d10PWfdKVvP5Ss7T/yAACw66PjY9fydyKWI+JS+q6/werqalUtr6xWq9XKUn4/O1xarlYan2vztJ63NNzHG+L+sKrvbLmxXtOsz8uz2sfvr36sYdXbR8cek0H6bU5pbilsAEh2X43ueUU6Yqrq6WlvPmCE/f/osf+zH20/TwEAAIDDV1VV1Ulf530iHfPvtt0pAGAu8uv/+HGBQ6kjDvf+F71e2vu9L0R/1Gq1Wl1c3VRNdqdZRMRWc536PYPh+AHgCbMVH7fdBVok/6L1I+K5tjsBLLRO2x3gUNy7f3ujk/LtNF8P0vju+VyQkfy3Ojvr5fUnTWcZP8dkXs+v7ejFM1P68+yc+rBIcv7d8fwv77YP03KHnf+8TMu/3s61FvrTtpx/bzz/MUcn/+7E/EuV8+8/Uv49+QMAAAAAwALL//+/5vhv3mQAAAAAAAAAeOLcu397I1/3mo//f27Ccq7/PJpy/h35Fynn3x3L/8tjy/Uat+++uZf/v+/f3vj9zX99Nk/3m/9SvstOemZ10jOikx6p00/TA27gmO1Bb1g/0qDT7fXTOT/V4J24GtdiM86MLNtNv4+99rMj7XVPByPt50ba+59oPz/SPkjfO1Ct5PZTsRE/iWvx9k573bY0Y/uXZ7RXM9pz/j37f5Fy/v3GT53/amrvjE1rdz/sfmK/b04nPc4bVz//yzOHvzkzbUfvwbY11dt3soX+7PxOjg3jZzc2r5+6deXmzetnI01G5p6LNHnMcv6DnZ+lvb//L+y257/7zf317ofDR85/UWxHf2r+LzRu19v70pz71oac/zD95PzfTu2T9/8nOf/p+//LLfQHAAAAAAAAAAAAAAAAHqaqqp1LRN+IiAvp+p+2rs0EAObjeJrm1/8qye1qtVqtVquPXt1UTfZ6s4iIvzbXqd8z/GLSnQEAi+x/EfGPtjtBa+RfsPx9f/X0xbY7A8zVjfc/+NGVa9c2r99ouycAAAAAAAAAwKeVx/9cb4z//GJErI0tNzL+65uxftDxP/v5xoMBRh/zQN9TbHeHvW5juPHnY2d87lPTxv8+GQ8f/7s/4/EGM9qHM9qXZrQvT5y7l9bECz0acv7PN8Y7r/M/MTb8egnjv46PeV+CnP/JxvO5zv9LY8s1869+u3D5b+13we3ojuR/+uZ7Pz194/0PXrn63pV3N9/d/PH5s2fPnL9w4eLFi6ffuXpt88zuv4fT6wWQ889jXzsPtCw5/5y5/MuS8/9CquVflpz/F1Mt/7Lk/PP7PfmXJeefP/vIvyw5/5dSLf+y5Py/kmr5lyXn/3Kq5V+WnP9XUy3/suT8X0m1/MuS8z+VavmXJed/OtX7yN/Xwx8hOf98hMv+X5acfz6zQf5lyfmfS7X8y5LzP59q+Zcl5/9qquVflpz/11It/7Lk/C+kWv5lyfl/PdXyL0vO/2Kq5V+WnP83Ui3/suT8v5lq+Zcl5/9aquVflpz/t1It/7Lk/L+davmXJef/nVTLvyw5/9dTLf+y7H3/vxtuuOFGvtH2XyYAAAAAAAAAAAAAYNw8TiduexsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs3V2MXGd9P/Az+2KvHUIMhODkb2CTmBCSJbu2E7/wr4sJEGiAUiCh0Bds17s2C37Da5dAkWxqKJEwKqqoml7QAkJt1KrCqrigFaW5qPpyVdoLelNRVUJqVAUUkJDairLVzHmexzOzs3PW3vF69jyfjxT/vDtn5pw588zsftf57gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7s43zn2mURRF87/WH1uK4gXNv2+a3NL63Otu9BECAAAAq/W/rT+fvyV94sAKrtS2zd+94h+/vri4uFi8b/R3x7+wuJgumCyK8Y1F0bosuvzv72+0bxNcLCYaI20fj1TsfrTi8rGKy8crLt9QcfnGissnKi5fcgKW2FT+PKZ1Y9tbf91SntLi1mK8ddn2Hte62Ng4MhJ/ltPSaF1ncfxoMV8cL+aKmY7ty20bre2/eWdzX28t4r5G2va1rblCfviJI/EYGuEcb+/Y15XbjL7/hmLyRz/8xJE/Ovvc7b1m5WnouL3yOO+9q3mcnwqfKY+1UWxM5yQe50jbcW7r8ZiMdhxno3W95t+7j/P5FR7n6JXDXFPdj/lEMdL6+7db52ms/cd66TxtC5/7r7uLorhw5bC7t1myr2Kk2NzxmZErj89EuSKbt9FcSi8uxq5qnd65gnXanLPbO9dp93MiPv53huuNLXMM7Q/T9z+5YcnjfrXrNGre6+WeK91rcNDPlWFZg3FdfLt1p5/suQa3h/v/iXuWX4M9106PNZjud9savKtqDY5sGG0dc3oQGq3rXFmDOzq2H23tqdGaz97Tfw1Onz1xenrhYx9/7fyJw8fmjs2d3LVjx8yu3bv37t07fXT++NxM+ec1nu3ht7kYSc+Bu8K5i8+BV3dt275UF788uOfhRJ/n4ZaubQf9PBzrvnONtXlCLl3T5XPjseZJn7g0UizzHGs9Pvet/nmY7nfb83Cs7XnY82tKj+fh2Aqeh81tTt+3su9Zxtr+63UM1+trwZa2Ndj9/Uj3Ghz09yPDsgYnwrr41/uW/1qwLRzvk1NX+/3I6JI1mO5ueO1pfiZ9vz+xtzV6rcs7mhfctKE4tzB35oEnDp89e2ZHEcaaeEnbWuler5vb7lOxZL2OXPV6PTD/iifv6PH5LeFcTby2+cfEso9Vc5sHH+j/WLW+uvU+nx2f3VmEMWBrfT57fTVvns+UJfucz+Y2n5pe/ffiKZe2vf6OL/P6G3P/T8v9pZu6ODo+Vj5/R9PZGe94Pe58qMZar12N1r6fn17Z6/F4+G+tX49v7fN6vLVr20G/Ho9337n4etyo+mnH6nQ/nhNhnRyf6f963Nxm686rXZNjfV+P7w6zEc7/a0JSSLmobe0st27TvsbGxsP9Got76Fynuzq2Hw/ZrLmvp3de2zq99+7ytkbTvbtirdbpZNe2g16n6fVquXXaqPrp27Xpfjwnwrq4dVf/ddrc5pkHV//auSn+te21c0PVGhwf3dA85vG0CMvX+8VNcQ0+UBwpThXHi9nWpRta66nR2tfUQytbgxvCf2v9Wrm1zxq8t2vbQa/B9HVsubXXGFt65weg+/GcCOviqYf6r8HmNm/aM9jvXe8Nn0nbtH3v2v3zteV+5nVH12m6nj/zah7n3+zp/7PZ5jbH915tzux/nu4Pn7mpx3nqfv4u95yaLdbmPG0Nx/nc3uXPU/N4mtt8Yd8K19OBoijOf+Th1s97w7+v/Pm573y9499dev2bzvmPPPyDm4/+7dUcPwDr30/Lsbn8Wtf2L1Mr+fd/AAAAYF2IuX8kzET+BwAAgNqIuT/+X+GJ/A8AAAC1EXP/WJhJJvl/65uem//p+SI18xeDeHk6DY+W28WO60z4eHLxiubnH/7q3I//8vzK9j1SFMVPHv2NnttvfTQeV2kyHOflN3d+fukVz69o/4cev7Jde3/9S+H24/1Z6TLoVcGdKYrim7d8rrWfyfdfas1nHj3Umu++8OTF5jbP7ys/jtd/9iXl9l8M5d8DRw93XP/ZcB6+F+bM23qfj3i9r116zbY9772yv3i9xl0vbN3tpz5Q3m78PTmfv1huH8/zcsf/V599+mvN7Z94Ve/jPz/S+/ifDrf71TD/++Xl9u2PQfPjeL1Ph+OP+4vXe+Ar3+p5/Jc/U25/+pFyu0Nhxv3fGz7e/shz8+3n64nG4Y77Vbyl3C7uf+Y7v926PN5evP3u4584eKnjfHSvj2f+ubyd6a7t4+fjfqK/6Np/83ba12fc/9O/dajjPFft//K7n31583a7939/13ajXdfv/o1Nf/Dpz/XcXzyeA392uuP+HHhXeB6H/T/1gbAew+X/c/lzHfuNDr2r8/Unbv+lLec77k/01h+V+7/8+mOt+R+TP/79m15w8wsvvLJ57ori2+8pb69q/8f+8FTH8X/5tvtaj0e8PHb0u/e/nLj/Mx+dOnlq4dz8bNtZbf3unLeXx7NxYtPm5vHeEl5buz8+eOrsB+fOTM5MzhTFZH1/hd41+0qYPyjHhau9/n2Ph8fzjt/75uZ7/umz8fP/8lj5+UtvK79uvTps9/nw+S3l47fYWOX+n7rzttbzu/FM+XFHj30Atm3/z70r2jDc/+7vC+J6P/3SD7bOQ/Oy1teN+Lxe5fF/d7a8nW+E87oYfjPzXbdd2V/79vF3I1x6T/l8X/X5Cy9z8XH94/B4v+N75e3H44r397vh+5hvbe18vYvr4xvnR7pvv/VbPC6E15PiQnl53Cqe70vP39bz8OLvISku3N76+HfS7dx+VXdzOQsfW5g+Pn/y3BPTZ+cWzk4vfOzjB0+cOnfy7MHW7/I8+KGq6195fdrcen2andv9YDGzqSiKU8XMGrxgXZ/jb/5tZcd/+vEjs3tm7pmdO3r43NGzj5+eO3PsyMLCkbnZhXsOHz0699Gq68/P7t+xc9+uPTunjs3P7t+7b9+ufVPzJ081D6M8qAq7Zz48dfLMwdZVFvY/uG/HQw89ODN14tTs3P49MzNT56qu3/raNNW89q9PnZk7fvjs/Im5qYX5j8/t37Fv9+6dlb8N8MTpowuT02fOnZw+tzB3Zrq8L5NnW59ufu2ruj71tPBv5fez3RrlL+Ir3nn/7vT7WZu++sllb6rcpOsXiD4XfhfNP7zo9N6VfBxz/3iYSSb5HwAAAHIQc/+GMBP5HwAAAGoj5v6NYSbyPwAAANRGzP0TYSaZ5H/9f/3/lfX/y8v1//Pq/5/+SNkrXe/9/9if1//Pww3u/696//r/+v/16/+vvD+/3o9f/1//n6WGrf8fc/+mosgy/wMAAEAOYu7fHGYi/wMAAEBtxNx/U5iJ/A8AAAC1EXP/C8JMMsn/+v8r6v/vrCpc1b//7/3/9f+L9dn/jw+O/n82rrp//97HOj7U/w/0//X/9f/1//X/WbXxZS+5Uf3/mPtvDjPJJP8DAABADmLuf2GYifwPAAAAtRFz/y1hJvI/AAAA1EbM/VvCTDLJ//r/3v9f/1//fx31/zuKtGvy/v9tB6P/vz54///+9P8rXHP/f0L/fz32/8cHe/zD3f+vPHz9f66LYXv//5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAAGoj5v6XhJnI/wAAAFAbMfffGmaSSf7X/9f/X2H//0v6//r/Q9D/77g/a9L/7/v+/+Xf9P+Hi/5/f/r/Fbz/f179/wEf/3D3/wf9/v/jb+6+vv4/vQxb/z/m/peGmWSS/wEAACAHMfffFmYi/wMAAEBtxNz/sjAT+R8AAABqI+b+rWEmmeR//X/9f+//r/+v/997/9X9/5L+/3DR/+9P/7+C/r/+v/7/yvr/Pb751f+nl2Hr/8fcf3uYSSb5HwAAAHIQc/8dYSbyPwAAANRGzP3/L8xE/gcAAIDaiLl/W5hJJvlf/1//X/8/r/7//Rv0//X/603/vz/9/wr6//r/+v8rfP//pa6m/7+x6saojWHr/8fc//Iwk0zyPwAAAOQg5v5XhJnI/wAAAFAbMfe/MsxE/gcAAIDaiLl/Mswkk/yv/1+v/v+f/vVTryz0//X/K/Zf0/5/XAb6/5nT/+9P/7+C/r/+v/7/mvT/ycew9f9j7r8zzCST/A8AAAA5iLn/rjAT+R8AAABqI+b+u8NM5H8AAACojZj7t4eZZJL/9f/r1f+P9P/XsP//xUfS7ej/l7z/f2/6/2tD/7+Htiep/n8F/X/9/+z7//G7X/1/BmPY+v8x978qzCST/A8AAAA5iLn/njAT+R8AAABqI+b+V4eZyP8AAABQGzH33xtmkkn+1//X/9f/9/7/+v+996//vz7p//en/19B/1//P/v+v/f/Z7CGrf8fc/9rwkwyyf8AAACQg5j77wszkf8BAACgNuL/v1n+f6/yPwAAANRRzP1TYSaZ5H/9f/3/nPr/Df1//X/9/9rT/+9P/7+C/r/+v/6//j8DNWz9/5j7Xxtmkkn+BwAAgBzE3P9AmIn8DwAAALURc/90mIn8DwAAALURc/9MmEkm+V//X/8/p/6/9//X/18P/f+G/v+q6P/3p/9fQf9f/79u/f+i0P/nhhq2/n/M/TvCTDLJ/wAAAJCDmPt3hpnI/wAAAFAbMffvCjOR/wEAAKA2Yu5/MMwkk/yv/6//r/+v/6//33v/3v9/fdL/70//v4L+v/5/3fr/3v+fG2zY+v8x9z8UZpJJ/gcAAIAcxNy/O8xE/gcAAIDaiLl/T5iJ/A8AAAC1EXP/3jCTTPK//n9N+v+/+fcd+9b/1//vt//B9P836f+Hqf8/XGra/+9+Wlwz/f8K+v/6//r/+v8M1LD1/2Pu3xdmkkn+BwAAgBzE3P+6MJOO/H/xT9b4sAAAAIABirn//4eZ+Pd/AAAAqI2Y+38mzCST/K//X5P+fxf9f/3/fvv3/v/6/3VW0/7/wOj/V8i1/x9e0G50f361bvTx6//r/7PU9e//x7+trP8fc//+MJNM8j8AAADkIOb+nw0zkf8BAACgNmLuf32YifwPAAAAtRFz/4Ewk0zyv/6//r/+v/7/9en/v77oNoz9/+bi0f+vF/3//vT/K+Ta/w9udH9+vR+//r/+P0sN2/v/x9z/hjCTTPI/AAAA5CDm/ofDTOR/AAAAqI2Y+98YZiL/AwAAQG3E3P+mMJNM8r/+v/6//r/+v/f/771//f/1Sf+/P/3/Cvr/+v/6//r/DNSw9f9j7n9zmEkm+R8AAAByEHP/I2Em8j8AAADURsz9bwkzkf8BAACgNmLuf2uYSSb5X/9f/1//X/9f/7/3/vX/1yf9//70/yvo/+v/dx9/68Ve/1//n2s1bP3/mPt/Lswkk/wPAAAAOYi5/9EwE/kfAAAAaiPm/reFmcj/AAAAUBsx9789zCST/K//r/+v/6//r//fe//6/+uT/n9/+v8V9P/1/73/v/4/AzVs/f+Y+98RZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wwzkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5pX0/7Og/9+f/n+FHv3/jfr/+v/6//r/XLNh6//H3P+uMJNM8j8AAADkIOb+d4eZyP8AAABQGzH3vyfMRP4HAACA2oi5/7Ewk0zyv/5/lv3/dJf1/0v6/xn0/73/fzb0//vT/6/g/f/1//X/9f8ZqGHr/8fc/3iYSSb5HwAAAHIQc/97w0zkfwAAAKiNmPt/McxE/gcAAIDaiLn/fWEmmeR//f8s+//e/3/N+v9jHesjp/7/RNvjmdal/r/+/xrQ/+9P/7+C/r/+/zD3/8Nq3rTM9fX/GUbD1v+Puf/9YSaZ5H8AAADIQcz9vxRmIv8DAABAbcTc/8thJvI/AAAA1EbM/b8SZpJJ/tf/1//X//f+/97/v/f+9f/XJ/3//vT/K+j/6/8Pc/+/gv4/w2jY+v8x9/9qmEkm+R8AAAByEHP/B8JM5H8AAACojZj7D4aZyP8AAABQGzH3HwozyST/6/939//jO6rq/+v/6//r/+v/r0eD6/+/7Oai0P/X/9f/1//X/9f/ZzWGrf8fc//hMJNM8j8AAADkIOb+Xwszkf8BAACgNmLuPxJmIv8DAABAbcTcPxtmkkn+1//3/v+D6v//RP9f/z/Q/+9N/39teP///vT/K+j/6//r/+v/M1DD1v+PuX8uzCST/A8AAAA1ln4cHHP/0TAT+R8AAABqI+b+Y2Em8j8AAADURsz9HwwzyST/6//r/3v//xvR/x/r2F7/v6T/r/8/CPr//en/V9D/1//X/9f/Z6CGrf8fc/98mEkm+R8AAAByEHP/h8JM5H8AAACojZj7PxxmIv8DAABAbcTcfzzMJJP8r/+v/597/79RFBe8/7/+f6/96/+vT/r//en/V9D/1//X/9f/Z6CGrf8fc/+JMJNM8j8AAADkIOb+k2Em8j8AAADURsz9p8JM5H8AAPg/9u6j2a6zyuPwwdiWNIKPQBUzRgxhxFdgyowqJkyoIpgcjMnBBJOTCSbnnJPJOedsco4mGqpE+WqtpXCP9lY4unfvdz3PoFdLjXyu7Nvq+rfrVy/AMHL33zduabL/9f/6/+79/+ZQ3v8//T+v/z9B/6//34V9/f3l5/frz9r/3/kuV91T/6//1/9P0v/r//X/nGlp/X/u/vvFLU32PwAAAHSQu//+cYv9DwAAAMPI3f+AuMX+BwAAgGHk7r8qbmmy//X/+n/9v/7/tP7/Rv3/Ofb/d8yf1/8vi/f/p+n/Z+ym/7/tRv+v/9f/6//Zs7T+P3f/A+OWJvsfAAAAOsjd/6C4xf4HAACAYeTuf3DcYv8DAADAMHL3PyRuabL/9f/6f/2//t/7/9s/3/v/66T/n6b/n+H9f/2//l//z04trf/P3f/QuKXJ/gcAAIAOcvc/LG6x/wEAAGAYufsfHrfY/wAAADCM3P2PiFua7H/9v/5f/6//1/9v/3z9/zrdsDn5Z4L+fz/9/4yZ/n+z0f9POed+fvtvbz1f/1no//X/7Le0/j93/yPjlib7HwAAADrI3f+ouMX+BwAAgGHk7r86brH/AQAAYBi5+x8dtzTZ//p//b/+X/+v/9/++fr/dfL+/7SL7//vdPv73Ktv/+/9/2ne/9f/6/8509L6/9z918QtTfY/AAAAdJC7/zFxi/0PAAAAw8jd/9i4xf4HAACAYeTuf1zc0mT/6//b9P97tYv+X/+v/9f/j07/P837/zP2/pg7Vj/U/+v/9f/6fy7O0vr/3P2Pj1ua7H8AAADoIHf/E+IW+x8AAACGkbv/iXGL/Q8AAADDyN3/pLilyf7X/7fp/73/r//X/+v/W9D/T9P/zxjl/f8L/K457H7+Yh3216//1/+z39L6/9z9T45bmux/AAAA6CB3/1PiFvsfAAAAhpG7/6lxi/0PAAAAw8jdf23c0mT/6/931P9fsf/n9P+77P/zE/T/+n/9v/5/mv5/mv5/xij9/wU67H5+7V+//l//z35L6/9z9z8tbmmy/wEAAKCD3P1Pj1vsfwAAABhG7v5nxC32PwAAAAwjd/8z45Ym+1//7/3/C+n/7+39f/2//l//v1D6/2n6/xn6f/2//l//z04trf/P3X9d3NJk/wMAAEAHufufFbfY/wAAADCM3P3PjlvsfwAAABhG7v7nxC1N9r/+X/+/jvf/9f/6f/2//v/c6P+n6f9n6P/1//p//T87taD+/5RfdXTz3Lilyf4HAACADnL3Py9usf8BAABgGLn7nx+32P8AAAAwjNz9L4hbmux//f9i+v+9nG+s/v/YZrPR/2+a9v/HTvnnWd+X+n/9/wHQ/0/T/8/Q/+v/9f/6f3ZqQf3/3o9z978wbmmy/wEAAKCD3P0vilvsfwAAABhG7v4Xxy32PwAAAAwjd/9L4pah9v+Rs/5P9P+L6f/3jNX/e///zO+PTv2/9//30/8fDP3/NP3/DP2//l//r/9np5bW/+fuv/7WP0OvPfnXufKKC/89AgAAAMty/d5/Pbp5adwy1L//BwAAgN5y978sbrH/AQAAYKWu2/czuftfHrc02f/6/932/1ee8nP6f/3/md8f+n/9v/7/0tP/T9P/z9D/6//1//p/dmpp/X/u/lfELU32PwAAAHSQu/+GuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbmmy//X/3v/X/+v/9f/bP1//v076/2n6/xn6f/3/4fb/R07+t/p/xnAe/f/x48evvuT9f+7+V8ctTfY/AAAAdJC7/zVxi/0PAAAAw8jd/9q4xf4HAACAYeTuf13c0mT/6/+b9v/5ra7/36P/1/9v+3z9/zrp/6fp/2fo//X/3v/X/7NTS3v/P3f/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/9f9N+3/v/+v/9f8H3f/fstH/H4hV9P/Hzv75S+//r9H/6/8ntOv/737X036o/9f/s9/S+v/c/W+OW5rsfwAAAOggd/9b4hb7HwAAAIaRu/+tcYv9DwAAAMPI3f+2uOnyJvtf/6//1//r//X/2z//gN//v3Kz2ej/d2AV/f+Epff/3v/X/09p1/+fQf+v/2e/pfX/ufvfHrc02f8AAADQQe7+d8Qt9j8AAAAMI3f/O+MW+x8AAACGkbv/XXFLk/2v/9f/6//1/8P3/9esov/3/v+O6P+n6f9n6P/1//p//T8H4rD6/9z9745bmux/AAAA6CB3/3viFvsfAAAAhpG7/71xi/0PAAAAw8jd/764pcn+1//r//X/+v8ji+v/j57212vy/r/+f0f0/9OW2P+f+meI/l//v+avf5D+/zr9P7u0tPf/c/e/P25psv8BAACgg9z9H4hb/69b+x8AAACGkbv/g3GL/Q8AAADDyN3/obilyf7X/+v/9f/6/+Hf/9f/t6L/n7bE/v9U+n/9/5q//kH6f+//s1NL6/9z9384bmmy/wEAAKCD3P0fiVvsfwAAABhG7v6Pxi32PwAAAAwjd/+NcUuT/a//1//r//X/+v8T/wz1/2PQ/087mP7/mP5f/1/9/G3ifwv0//r/uV/PmJbW/+fu/1jc0mT/AwAAQAe5+z8et9j/AAAAMIzc/Z+IW+x/AAAAWKXLt/xc7v5Pxi1N9r/+X/+v/9f/6/+3f77+f530/9O8/z9D/3+e/fwdTvvR2t7/P/P/fun/9f/s3tL6/9z9n4pbmux/AAAA6CB3/6fjFvsfAAAAhpG7/zNxi/0PAAAAw8jd/9m4pcn+1//r//X/+n/9//bP1/+vk/5/mv5/hv7/UN/PX/vXr//X/7Pf0vr/3P2fi1ua7H8AAADoIHf/5+MW+x8AAACGkbv/C3GL/Q8AAADD2Nv9GZc13P/6f/2//l//r//f/vn6/3XS/0/T/8/Q/+v/9f/6f3Zqaf3/F/d+1dHNl+KWJvsfAAAAOsjd/+W4xf4HAACAYeTu/0rcYv8DAADAMHL3fzVuabL/9f/6/3X0/8ePH79a/6//P/33c7L/v0n/T9H/T9P/z9D/6//1//p/dmpp/X/u/q/FLU32PwAAAHSQu//rcYv9DwAAAMPI3f+NuMX+BwAAgGHk7v9m3NJk/+v/F9D/H9X/e/9f/7/x/r/+f0f0/9P0/zNG7P+Pnvtv/7D7+Yt12F+//l//z35L6/9z938rbmmy/wEAAKCD3P3fjlvsfwAAABhG7v7vxC32PwAAAAwjd/9345Ym+1//f3D9/61/77q8/39ss/3r1//r//X/+v9LTf8/Tf8/Y8T+/zwcdj+/9q9f/6//Z7+l9f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAAwjd/8P4hb7HwAAAIaRu/+HcUuT/a//X8D7/wP2/97/3/79of9fdP9/mf5/DPr/afr/Gfp//b/+f0f9f3436/+7W1r/n7v/R3FLk/0PAAAAHeTu/3HcYv8DAADAMHL3/yRusf8BAABgGLn7b4pbTtn/29ruUej/9f/6f/2//n/75+v/10n/P+1c+/8jm4vr/5P+X/+v/+/a/3v/nxOW1v/n7v9p3OLf/wMAAMDqXHGWn8/d/7O4xf4HAACAYeTu/3ncYv8DAADAMHL3/yJuufmyw/qSDpT+X/+v/9f/6/+3f77+f530/9O8/z9D/7+Lfv5u+v8x+v/NRv/PxVta/5+7/5dxi3//DwAAAMPI3f+ruMX+BwAAgGHk7v913GL/AwAAwDBy9/8mbmmy//X/+v+L7P/30kz9/wn6/xP0/9vp/w+G/n+a/n+G/t/7//p/7/+zU0vr/3P3/zZuabL/AQAAoIPc/b+LW+x/AAAAGEbu/t/HLfY/AAAADCN3/x/ilib7/9D6//hbrf9fff/v/X/9v/5f/78o+v9p+v8Z+n/9v/5f/89OLa3/z93/x7ilyf4HAACADnL3/ylusf8BAABgGLn7/xy32P8AAAAwjNz9f4lbmux/7//r//X/+n/9//bP1/+vk/5/mv5/u/oHpf/X/+v/9f/s1NL6/9z9f41bmux/AAAA6CB3/9/iFvsfAAAAhpG7/+a4xf4HAACAYeTu/3vc0mT/6//1//p//b/+f/vn6//XSf8/7TD7/3vcbv5jvf9/6P1/fgn6f/2//p+dWFr/n7v/H3FLk/0PAAAAHeTu/2fcYv8DAADAMHL3/ytusf8BAABgGLn7/x23NNn/M/3/kfoP6v8n6f9P//r1/9u/P/T/+n/9/6Wn/5/m/f8Z+n/v/+v/9f/s1NL6/9z9/4lbmux/AAAA6CB3/y1xi/0PAAAAw8jd/9+4xf4HAACAYeTu/1/c0mT/e/9f/6//1//r/7d/vv5/nfT/0/T/M/T/+n/9v/6fnVpa/5+7//8BAAD//wkoXwM=") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m59.633212995s ago: executing program 0 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 1m57.18409714s ago: executing program 0 (id=2972): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r0, &(0x7f0000000040)=""/41, 0x29) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 1m57.132497482s ago: executing program 32 (id=2972): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r0, &(0x7f0000000040)=""/41, 0x29) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 8.456787665s ago: executing program 1 (id=3537): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x25c, 0x10, 0x2, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@sec_ctx={0x16b, 0x8, {0x167, 0x8, 0x1, 0x8, 0x15f, "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"}}]}, 0x25c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8.075104746s ago: executing program 3 (id=3539): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcf7}, 0x1c, 0x0}}], 0x2, 0x0) 7.945183539s ago: executing program 1 (id=3540): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000180)={{0x8000000000000000, 0x1}, {0x8, 0xfffffff9}, 0x0, 0x1}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 7.107724972s ago: executing program 3 (id=3547): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000180)={{0x8000000000000000, 0x1}, {0x8, 0xfffffff9}, 0x0, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcf7}, 0x1c, 0x0}}], 0x2, 0x0) 6.869436518s ago: executing program 1 (id=3548): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x121) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000200)={0x3, 0x10000002000003, 0x0, 0x4}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 5.917310073s ago: executing program 3 (id=3550): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) 5.829356335s ago: executing program 1 (id=3551): r0 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x2f1, 0xdff}, {0x1000b, 0xfffffffb}]}}) 5.192965782s ago: executing program 5 (id=3553): syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec"], 0x28}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000801000370429b57000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b120500000000002c0012800e0001006970366772657461700000001800028014000700200100"/52], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) close(r6) 5.131104674s ago: executing program 4 (id=3554): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000300)=0x2, 0x4) 4.997292617s ago: executing program 4 (id=3555): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r1) close(r1) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 4.8943959s ago: executing program 1 (id=3556): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 4.855382651s ago: executing program 4 (id=3557): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcf7}, 0x1c, 0x0}}], 0x2, 0x0) 4.851219371s ago: executing program 2 (id=3558): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000180)={{0x8000000000000000, 0x1}, {0x8, 0xfffffff9}, 0x0, 0x1}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 4.415426253s ago: executing program 3 (id=3559): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x9, @b={0x9b, 0x2, 0x1, 0x7, {0x7, "580f36f5b278c3"}, 0x2}}, 0x10) 4.12254378s ago: executing program 5 (id=3560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 3.828018518s ago: executing program 2 (id=3561): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000180)={{0x8000000000000000, 0x1}, {0x8, 0xfffffff9}, 0x0, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcf7}, 0x1c, 0x0}}], 0x2, 0x0) 3.150262936s ago: executing program 4 (id=3562): r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) read(r0, 0x0, 0xfffffea1) 2.965210031s ago: executing program 4 (id=3563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8) setuid(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40c4}, 0x24040084) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000030101020000000000000000020000091000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x40004) 2.541181872s ago: executing program 5 (id=3564): syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000040)=0x405, 0x4) keyctl$join(0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000801000370429b57000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b120500000000002c0012800e0001006970366772657461700000001800028014000700200100"/52], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 2.181177302s ago: executing program 2 (id=3565): bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000000000006) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100), 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.583672708s ago: executing program 5 (id=3566): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x24a02, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c1, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macromanian,errors=continue,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="006572726f72733d636f6e74696e6e75652c3030303030303030303066662c756d61736b3d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c6e6f696e74656772697e74792c726573697a652c71756f74612c66736d616769633d3078303030303030303030303030303030382c736d61636b66736465663d7204d30400652c"], 0x1, 0x6172, &(0x7f0000006340)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x242, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x6}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.199784258s ago: executing program 2 (id=3567): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 1.1212574s ago: executing program 3 (id=3568): syz_open_procfs$namespace(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000040)=0x405, 0x4) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000801000370429b57000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b120500000000002c0012800e0001006970366772657461700000001800028014000700200100"/52], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r5 = socket(0x80000000000000a, 0x2, 0x0) close(r5) 1.089543101s ago: executing program 5 (id=3569): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) 1.034855573s ago: executing program 2 (id=3570): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r1) close(r1) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 789.125299ms ago: executing program 2 (id=3571): syz_open_procfs$namespace(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec"], 0x28}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000801000370429b57000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b120500000000002c0012800e0001006970366772657461700000001800028014000700200100"/52], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) close(r6) 557.220965ms ago: executing program 1 (id=3572): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000180)={{0x8000000000000000, 0x1}, {0x8, 0xfffffff9}, 0x0, 0x1}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 525.506816ms ago: executing program 4 (id=3573): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) pipe2(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcf7}, 0x1c, 0x0}}], 0x2, 0x0) 111.111947ms ago: executing program 5 (id=3574): r0 = socket$tipc(0x1e, 0x2, 0x0) memfd_create(0x0, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = socket(0x1e, 0x4, 0x0) unshare(0x30000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r7, 0x0, 0x0, 0x40102, 0x6, 0x3b) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r6], 0x14) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x140}}, 0xdc955a41d9e63ba0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0xfffffffd, 0x2}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r11, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 0s ago: executing program 3 (id=3575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c001080080001400000000008000240000000000800"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): attribute type 6 has an invalid length. [ 164.187929][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1553'. [ 164.200506][ T8327] fuse: Unknown parameter 'grou00000000000000000000' [ 164.239192][ T8336] fuse: Unknown parameter 'use00000000000000000000' [ 164.288054][ T8342] capability: warning: `syz.1.1563' uses 32-bit capabilities (legacy support in use) [ 164.349391][ T8351] xt_hashlimit: size too large, truncated to 1048576 [ 164.552572][ T8359] fuse: Unknown parameter 'grou00000000000000000000' [ 164.724528][ T8373] netlink: 'syz.0.1577': attribute type 4 has an invalid length. [ 164.727311][ T8373] netlink: 'syz.0.1577': attribute type 5 has an invalid length. [ 164.729784][ T8373] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1577'. [ 164.896682][ T8383] fuse: Unknown parameter 'group_i00000000000000000000' [ 165.054473][ T8395] tipc: Started in network mode [ 165.055321][ T8395] tipc: Node identity 0600000000000000010001, cluster identity 4711 [ 165.275846][ T8405] overlayfs: failed to resolve './file0': -2 [ 165.361301][ T8411] fuse: Unknown parameter 'group_i00000000000000000000' [ 165.496220][ T8417] overlayfs: failed to clone lowerpath [ 165.568454][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1600'. [ 165.570753][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1600'. [ 166.212813][ T8439] device bridge0 entered promiscuous mode [ 167.349423][ T8450] syz.4.1613 uses obsolete (PF_INET,SOCK_PACKET) [ 167.649372][ T8464] fuse: Unknown parameter 'use00000000000000000000' [ 167.694710][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1622'. [ 167.696622][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1622'. [ 168.647155][ T8492] ipt_CLUSTERIP: Please specify destination IP [ 170.110708][ T8529] sock: sock_set_timeout: `syz.0.1644' (pid 8529) tries to set negative timeout [ 170.736694][ T8558] fuse: Bad value for 'fd' [ 170.796760][ T8561] fuse: Unknown parameter 'user_id00000000000000000000' [ 171.156381][ T8585] fuse: Bad value for 'fd' [ 171.221332][ T8588] fuse: Bad value for 'fd' [ 172.234624][ T8617] fuse: Bad value for 'fd' [ 172.551268][ T8647] fuse: Bad value for 'fd' [ 173.690254][ T8717] fuse: Unknown parameter '0x0000000000000003' [ 175.656070][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.657518][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.695144][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.697227][ T8859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.698574][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.699629][ T8859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.737024][ T8859] device bridge0 entered promiscuous mode [ 176.851765][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.306034][ T8914] fuse: Bad value for 'fd' [ 177.347728][ T8920] fuse: Unknown parameter 'fd0x0000000000000003' [ 177.846360][ T8943] fuse: Bad value for 'fd' [ 177.877937][ T8948] fuse: Unknown parameter 'fd0x0000000000000003' [ 179.822912][ T8973] fuse: Invalid rootmode [ 180.716926][ T9011] fuse: Invalid rootmode [ 181.878463][ T9027] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 183.587085][ T27] audit: type=1326 audit(187.975:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.4.1870" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd789e8 code=0x0 [ 185.199139][ T9096] xt_CONNSECMARK: invalid mode: 66 [ 185.916858][ T9118] fuse: Bad value for 'rootmode' [ 185.950402][ T9122] device sit1 entered promiscuous mode [ 186.020712][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1896'. [ 186.130506][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1902'. [ 186.132414][ T9141] 8021q: VLANs not supported on ip_vti0 [ 186.677845][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1909'. [ 187.217656][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 187.509003][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'. [ 188.256896][ T27] audit: type=1326 audit(192.046:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.357054][ T27] audit: type=1326 audit(192.046:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.531547][ T27] audit: type=1326 audit(192.055:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.719508][ T27] audit: type=1326 audit(192.055:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.748027][ T9217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.749748][ T9217] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.760234][ T27] audit: type=1326 audit(192.055:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.764000][ T27] audit: type=1326 audit(192.064:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.788367][ T27] audit: type=1326 audit(192.064:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.801119][ T27] audit: type=1326 audit(192.064:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 188.815656][ T27] audit: type=1326 audit(192.074:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1931" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb45789e8 code=0x7ffc0000 [ 191.604975][ T9260] 9pnet_fd: Insufficient options for proto=fd [ 191.606929][ T9260] /dev/loop4: Can't open blockdev [ 191.769978][ T9275] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1954'. [ 192.228836][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 192.228850][ T27] audit: type=1326 audit(196.051:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.1952" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f789e8 code=0x0 [ 192.323500][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 193.356148][ T9323] futex_wake_op: syz.3.1971 tries to shift op by 32; fix this program [ 196.148308][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.154976][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.156893][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.164176][ T9402] device bridge_slave_0 left promiscuous mode [ 196.165893][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.428153][ T9402] device bridge_slave_1 left promiscuous mode [ 196.429959][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.496561][ T9402] bond0: (slave bond_slave_0): Releasing backup interface [ 196.541172][ T9402] bond0: (slave bond_slave_1): Releasing backup interface [ 196.597822][ T9402] team0: Port device team_slave_0 removed [ 196.627228][ T9402] team0: Port device team_slave_1 removed [ 196.631512][ T9402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.633294][ T9402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.953751][ T9402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.955160][ T9402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.977474][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.978588][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.656287][ T9392] overlayfs: failed to clone upperpath [ 198.678888][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2014'. [ 199.176094][ T9443] fuse: Unknown parameter 'user_id00000000000000000000' [ 199.240893][ T9457] netlink: 'syz.3.2023': attribute type 4 has an invalid length. [ 200.473084][ T9480] netlink: 'syz.1.2030': attribute type 1 has an invalid length. [ 200.482296][ T9480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.253257][ T9490] fuse: Unknown parameter 'user_id00000000000000000000' [ 202.316134][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2038'. [ 202.497750][ T9518] fuse: Unknown parameter 'user_id00000000000000000000' [ 203.820105][ T9534] fuse: Unknown parameter '"ó ' [ 203.851433][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2051'. [ 204.069593][ T9548] xt_hashlimit: size too large, truncated to 1048576 [ 205.239351][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2066'. [ 205.263021][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2068'. [ 205.955008][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2079'. [ 207.536725][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2090'. [ 207.779367][ T9656] overlayfs: failed to resolve './file0': -2 [ 208.003217][ T9664] fuse: Bad value for 'fd' [ 208.004926][ T9664] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 208.787717][ T9670] device syz_tun entered promiscuous mode [ 208.790229][ T9670] device macsec1 entered promiscuous mode [ 208.791919][ T9670] device vlan2 entered promiscuous mode [ 208.794128][ T9670] device vlan2 left promiscuous mode [ 208.795334][ T9670] device syz_tun left promiscuous mode [ 209.721762][ T9698] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 210.026290][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2118'. [ 210.327601][ T9716] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 210.336500][ T9716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.605492][ T9748] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2133'. [ 211.261694][ T9785] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2148'. [ 211.499366][ T9800] device vlan0 entered promiscuous mode [ 211.716923][ T9821] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2161'. [ 213.940150][ T9865] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2179'. [ 214.360810][ T9887] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 214.371661][ T9887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.431463][ T9892] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2191'. [ 215.698177][ T9932] netlink: 'syz.2.2202': attribute type 1 has an invalid length. [ 215.703551][ T9932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.150691][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 216.152408][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 216.462107][ T9963] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2213'. [ 216.492677][ T9941] device syz_tun entered promiscuous mode [ 216.494007][ T9941] device macsec1 entered promiscuous mode [ 216.495117][ T9941] device vlan2 entered promiscuous mode [ 216.497330][ T9941] device vlan2 left promiscuous mode [ 216.498392][ T9941] device syz_tun left promiscuous mode [ 216.694572][ T9977] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 216.710123][ T9977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.727507][ T9984] fuse: Unknown parameter '0x0000000000000003' [ 216.884987][ T9998] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2224'. [ 217.045219][T10004] netlink: 'syz.1.2225': attribute type 4 has an invalid length. [ 217.348956][T10014] Illegal XDP return value 4294967274 on prog (id 131) dev syz_tun, expect packet loss! [ 217.392195][T10020] netlink: 'syz.3.2234': attribute type 1 has an invalid length. [ 217.408825][T10020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.447610][T10025] fuse: Unknown parameter '0x0000000000000003' [ 217.557781][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'. [ 217.859739][T10037] netlink: 'syz.1.2238': attribute type 12 has an invalid length. [ 218.076235][T10042] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.077672][T10042] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.443922][T10049] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2243'. [ 218.875169][T10078] fuse: Unknown parameter '0x0000000000000003' [ 219.581151][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2252'. [ 220.286484][T10146] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.584727][T10157] fuse: Unknown parameter 'fd0x0000000000000003' [ 222.214051][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 222.259892][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2272'. [ 222.519791][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2273'. [ 223.206162][T10209] fuse: Unknown parameter 'fd0x0000000000000003' [ 224.341078][ T27] audit: type=1326 audit(225.940:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.2.2289" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f789e8 code=0x0 [ 230.410815][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.412312][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.193519][T10322] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2318'. [ 234.166048][T10374] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2335'. [ 234.277266][T10382] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 234.288943][T10382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.317810][ T27] audit: type=1326 audit(235.448:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.1.2337" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45789e8 code=0x0 [ 234.383439][T10391] netlink: 'syz.3.2340': attribute type 12 has an invalid length. [ 234.653511][T10406] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2344'. [ 234.670010][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 234.938017][T10411] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2346'. [ 235.583898][T10448] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2360'. [ 236.594605][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2370'. [ 238.080028][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'. [ 238.387413][T10511] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2379'. [ 239.506985][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2391'. [ 240.010748][T10560] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2393'. [ 240.281305][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 240.283982][T10570] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 240.359380][T10578] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2399'. [ 242.052979][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'. [ 242.556455][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2408'. [ 243.793600][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 244.501169][T10657] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 244.511236][T10657] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.911130][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 246.176065][T10704] netlink: 'syz.1.2439': attribute type 1 has an invalid length. [ 246.241860][T10704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.020578][T10808] netlink: 'syz.4.2479': attribute type 12 has an invalid length. [ 249.500996][T10819] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2483'. [ 249.970398][T10836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2487'. [ 251.232722][T10859] netlink: 'syz.4.2495': attribute type 1 has an invalid length. [ 251.257129][T10859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.483110][T10864] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2497'. [ 253.617875][T10913] netlink: 'syz.4.2512': attribute type 12 has an invalid length. [ 253.784506][T10926] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2513'. [ 255.011239][T10964] netlink: 'syz.4.2527': attribute type 12 has an invalid length. [ 255.166234][T10971] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2530'. [ 256.169997][T11001] netlink: 'syz.2.2539': attribute type 12 has an invalid length. [ 256.627241][T11013] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2541'. [ 258.793892][ T27] audit: type=1326 audit(258.356:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.3.2547" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff847789e8 code=0x0 [ 259.652776][T11058] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2555'. [ 259.984070][T11080] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2564'. [ 261.295119][T11102] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2568'. [ 263.429613][T11138] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2580'. [ 263.526062][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.527227][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.720772][T11151] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2583'. [ 263.883058][T11161] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 263.902331][T11161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.070009][T11173] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2591'. [ 264.756569][T11189] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2595'. [ 264.876624][T11198] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 264.894317][T11198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.142921][T11212] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2603'. [ 266.481848][T11252] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2617'. [ 268.263917][T11286] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2630'. [ 268.392528][T11290] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2632'. [ 269.686869][T11327] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2643'. [ 270.136138][T11335] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2646'. [ 270.147434][T11343] netlink: 484 bytes leftover after parsing attributes in process `syz.2.2648'. [ 271.189639][T11373] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2657'. [ 271.891171][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2662'. [ 272.711963][T11412] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2667'. [ 275.125121][ T27] audit: type=1326 audit(272.945:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.2.2677" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f789e8 code=0x0 [ 275.383328][T11464] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2681'. [ 275.509615][T11473] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2685'. [ 277.279813][T11508] netlink: 'syz.0.2699': attribute type 1 has an invalid length. [ 277.296621][T11508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.324845][T11491] overlayfs: failed to clone upperpath [ 277.327228][T11491] overlayfs: failed to clone upperpath [ 277.345292][T11514] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2698'. [ 277.397973][T11518] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2701'. [ 278.295952][T11548] netlink: 'syz.2.2710': attribute type 1 has an invalid length. [ 278.311640][T11548] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.721078][T11619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'. [ 291.116476][T11760] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2776'. [ 294.728811][T11820] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2791'. [ 294.969283][T11818] 8021q: VLANs not supported on ip6gre0 [ 295.440873][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2797'. [ 296.267363][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2815'. [ 298.659524][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2816'. [ 299.147349][T11911] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2823'. [ 300.837201][ T4337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.840451][ T4337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.843786][ T4337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.848184][ T4337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.849827][ T4337] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 300.851287][ T4337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.136220][T11962] chnl_net:caif_netlink_parms(): no params data found [ 301.235007][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.236328][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.238276][T11962] device bridge_slave_0 entered promiscuous mode [ 301.349211][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.350452][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.352033][T11962] device bridge_slave_1 entered promiscuous mode [ 301.359169][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.362128][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.385439][T11962] team0: Port device team_slave_0 added [ 301.391715][T11962] team0: Port device team_slave_1 added [ 301.427470][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.432025][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.449843][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.460611][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.468740][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.486584][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.819011][T11986] raw_sendmsg: syz.1.2847 forgot to set AF_INET. Fix it! [ 301.858964][ T4377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.900447][T11962] device hsr_slave_0 entered promiscuous mode [ 301.922745][T11962] device hsr_slave_1 entered promiscuous mode [ 301.976748][T11962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.978231][T11962] Cannot create hsr debugfs directory [ 302.063141][ T4377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.372598][ T4377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.478546][T11999] xt_CT: No such helper "pptp" [ 302.596625][ T4377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.021321][ T4337] Bluetooth: hci5: command 0x0409 tx timeout [ 303.464134][T12017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2856'. [ 303.830298][T12038] 8021q: VLANs not supported on ip6gre0 [ 304.670270][T11962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.877087][T11962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.982801][ T4322] Bluetooth: hci5: command 0x041b tx timeout [ 307.128774][T11962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.724840][T12105] overlayfs: failed to clone upperpath [ 307.734981][T11962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.842858][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.848866][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 308.861035][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.864964][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.878812][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.885946][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.887836][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.892310][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.894358][T11370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.898143][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.229079][ T4322] Bluetooth: hci5: command 0x040f tx timeout [ 311.372199][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.384025][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.386463][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.387677][T11370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.399310][ T4322] Bluetooth: hci5: command 0x0419 tx timeout [ 311.459712][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.393879][ T7520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.433308][ T7520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.439863][ T7520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.445130][ T7520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.624117][ T4377] device hsr_slave_0 left promiscuous mode [ 313.080829][ T4377] device hsr_slave_1 left promiscuous mode [ 313.723364][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.724759][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.727012][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.728390][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.730733][ T4377] device bridge_slave_1 left promiscuous mode [ 313.732483][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.793954][ T4377] device bridge_slave_0 left promiscuous mode [ 313.795418][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.029122][ T4377] device veth1_macvtap left promiscuous mode [ 314.031578][ T4377] device veth0_macvtap left promiscuous mode [ 314.036261][ T4377] device veth1_vlan left promiscuous mode [ 314.123850][ T4377] device veth0_vlan left promiscuous mode [ 314.926911][ T4377] bond6 (unregistering): Released all slaves [ 315.622582][ T4377] bond5 (unregistering): Released all slaves [ 316.326581][ T4377] bond4 (unregistering): Released all slaves [ 317.031891][ T4377] bond3 (unregistering): Released all slaves [ 317.727871][ T4377] bond2 (unregistering): Released all slaves [ 318.431669][ T4377] bond1 (unregistering): Released all slaves [ 320.590952][ T4377] team0 (unregistering): Port device team_slave_1 removed [ 320.771222][ T4377] team0 (unregistering): Port device team_slave_0 removed [ 320.945558][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.177497][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.781039][ T4377] bond0 (unregistering): Released all slaves [ 323.784234][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2898'. [ 323.806043][T11962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.807883][T11962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.823965][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.826444][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.829786][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.835504][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.837176][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.842823][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.845389][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 323.854200][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.717543][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.719460][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.723883][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.788682][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.790632][T11370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.808374][T11962] device veth0_vlan entered promiscuous mode [ 324.812067][T11962] device veth1_vlan entered promiscuous mode [ 324.819973][T11962] device veth0_macvtap entered promiscuous mode [ 324.823133][T11962] device veth1_macvtap entered promiscuous mode [ 324.827689][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.829389][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.831068][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.849011][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.850739][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.852452][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.860302][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.870610][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.872824][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.875670][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.877408][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.881695][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.883426][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.888498][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.906215][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.908005][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.909511][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.910936][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.912454][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.921364][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.923015][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.924553][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.926557][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.930535][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.932155][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.936647][T11962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.946930][T11962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.948436][T11962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.952558][T11962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.962222][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.964068][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.965708][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.865217][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.866742][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.897348][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.920048][T10482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.921682][T10482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.923071][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.944711][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2918'. [ 326.167126][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 326.363925][T12281] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2839'. [ 326.387423][T12281] device syzkaller0 entered promiscuous mode [ 327.240316][ T4337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.243183][ T4337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.245256][ T4337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.247581][ T4337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.249498][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.250889][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.858619][T12295] 8021q: VLANs not supported on ip6gre0 [ 327.861011][T12290] chnl_net:caif_netlink_parms(): no params data found [ 327.893224][T12290] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.894539][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.902210][T12290] device bridge_slave_0 entered promiscuous mode [ 327.904824][T12309] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2930'. [ 327.912846][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.915280][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.918805][T12290] device bridge_slave_1 entered promiscuous mode [ 327.937902][T12290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.940696][T12290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.951117][T12290] team0: Port device team_slave_0 added [ 328.308239][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.313026][T12290] team0: Port device team_slave_1 added [ 328.320118][T12290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.321512][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.326714][T12290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.331419][T12290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.332705][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.337836][T12290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.381320][T12290] device hsr_slave_0 entered promiscuous mode [ 328.461831][T12290] device hsr_slave_1 entered promiscuous mode [ 328.499633][T12290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.501761][T12290] Cannot create hsr debugfs directory [ 329.428684][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.428999][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.437436][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 329.440294][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.208139][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.225708][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 331.011919][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.118962][T12357] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2946'. [ 331.135411][T12363] loop0: detected capacity change from 0 to 2048 [ 331.515344][T12363] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 331.591942][T11962] EXT4-fs (loop0): unmounting filesystem. [ 331.662456][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 333.191503][T12428] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2958'. [ 333.892510][T12290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.894005][ T4322] Bluetooth: hci4: command 0x040f tx timeout [ 333.972887][T12441] loop0: detected capacity change from 0 to 32768 [ 333.989341][T12290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.006197][T12441] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.006197][T12441] [ 334.008730][T12441] xtLookup: xtSearch returned -5 [ 334.009968][T12441] add_index: get/read_metapage failed! [ 334.011696][T12441] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.011696][T12441] [ 334.013608][T12441] xtLookup: xtSearch returned -5 [ 334.014399][T12441] free_index: error reading directory table [ 334.015523][T12441] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.015523][T12441] [ 334.017296][T12441] xtLookup: xtSearch returned -5 [ 334.018201][T12441] free_index: error reading directory table [ 334.019735][T12441] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.019735][T12441] [ 334.022161][T12441] xtLookup: xtSearch returned -5 [ 334.023113][T12441] free_index: error reading directory table [ 334.024034][T12441] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.024034][T12441] [ 334.025901][T12441] xtLookup: xtSearch returned -5 [ 334.026739][T12441] free_index: error reading directory table [ 334.027828][T12441] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.027828][T12441] [ 334.029490][T12441] xtLookup: xtSearch returned -5 [ 334.030228][T12441] free_index: error reading directory table [ 334.035493][T12290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.039915][T12441] ialloc: diAlloc returned -5! [ 334.041465][T12441] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 334.061000][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.061000][T11962] [ 334.063136][T11962] xtLookup: xtSearch returned -5 [ 334.065201][T11962] add_index: get/read_metapage failed! [ 334.067886][T11962] find_entry called with index = 0 [ 334.069271][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.069271][T11962] [ 334.071684][T11962] xtLookup: xtSearch returned -5 [ 334.072649][T11962] free_index: error reading directory table [ 334.073583][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.073583][T11962] [ 334.079459][T11962] xtLookup: xtSearch returned -5 [ 334.080407][T11962] free_index: error reading directory table [ 334.081448][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.081448][T11962] [ 334.083247][T11962] xtLookup: xtSearch returned -5 [ 334.083992][T11962] free_index: error reading directory table [ 334.085077][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.085077][T11962] [ 334.087612][T11962] xtLookup: xtSearch returned -5 [ 334.090576][T11962] free_index: error reading directory table [ 334.091652][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.091652][T11962] [ 334.093347][T11962] xtLookup: xtSearch returned -5 [ 334.094149][T11962] free_index: error reading directory table [ 334.100690][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.100690][T11962] [ 334.103024][T11962] xtLookup: xtSearch returned -5 [ 334.103801][T11962] free_index: error reading directory table [ 334.104950][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.104950][T11962] [ 334.106707][T11962] xtLookup: xtSearch returned -5 [ 334.108076][T11962] free_index: error reading directory table [ 334.109123][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.109123][T11962] [ 334.110842][T11962] xtLookup: xtSearch returned -5 [ 334.111661][T11962] free_index: error reading directory table [ 334.112772][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.112772][T11962] [ 334.114677][T11962] xtLookup: xtSearch returned -5 [ 334.115455][T11962] free_index: error reading directory table [ 334.116518][T11962] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 334.116518][T11962] [ 334.121772][T11962] xtLookup: xtSearch returned -5 [ 334.122628][T11962] free_index: error reading directory table [ 335.733986][T12290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.892620][T12459] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2968'. [ 335.917886][T12290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.931762][T12290] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.947067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.948854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.950538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.952137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.953869][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.955091][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.970335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.974612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.978636][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.979882][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.985101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.993234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.366252][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 336.610537][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.613759][ T4337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.615646][ T4337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.617768][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.620560][ T4337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.621958][ T4337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.674772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.676514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.678534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.680320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.682907][T12469] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2971'. [ 336.696267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.700547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.708211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.712244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.722819][T12290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.728400][T12290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.731103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.732973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.801705][ T11] device hsr_slave_0 left promiscuous mode [ 336.876154][ T11] device hsr_slave_1 left promiscuous mode [ 337.166518][ T11] device veth1_macvtap left promiscuous mode [ 337.167967][ T11] device veth0_macvtap left promiscuous mode [ 337.169144][ T11] device veth1_vlan left promiscuous mode [ 337.170309][ T11] device veth0_vlan left promiscuous mode [ 338.596000][ T11] bond4 (unregistering): Released all slaves [ 338.840786][ T4322] Bluetooth: hci3: command 0x0409 tx timeout [ 339.516542][ T11] bond3 (unregistering): Released all slaves [ 340.188977][ T11] bond2 (unregistering): Released all slaves [ 340.872140][ T11] bond1 (unregistering): Released all slaves [ 341.074097][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 343.286714][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 345.062213][ T11] bond0 (unregistering): Released all slaves [ 345.508806][ T4322] Bluetooth: hci3: command 0x0419 tx timeout [ 346.065132][T12503] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2982'. [ 346.075529][T12522] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2987'. [ 346.201465][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.202895][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.208925][T12290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.215899][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.219537][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.226460][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.228180][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.242358][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.248962][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.609396][T12290] device veth0_vlan entered promiscuous mode [ 346.633370][T12471] chnl_net:caif_netlink_parms(): no params data found [ 346.649220][T12290] device veth1_vlan entered promiscuous mode [ 346.678874][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.680260][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.681955][T12471] device bridge_slave_0 entered promiscuous mode [ 346.692248][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.695098][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.699075][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.700715][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.702760][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.704078][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.707976][T12471] device bridge_slave_1 entered promiscuous mode [ 346.712644][T12290] device veth0_macvtap entered promiscuous mode [ 346.718318][T12471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.721406][T12471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.614598][T12290] device veth1_macvtap entered promiscuous mode [ 347.619606][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.621406][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.623136][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.625292][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.627032][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.628840][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.630426][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.632449][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.634922][T12290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.637496][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.639295][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.641241][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.642773][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.644336][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.646320][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.647905][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.649543][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.651936][T12290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.654399][T12290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.655875][T12290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.657505][T12290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.658851][T12290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.723595][T11411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.725023][T11411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.948471][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.950306][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.953504][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.956142][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.957878][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.959502][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.961049][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.964263][T12471] team0: Port device team_slave_0 added [ 347.968794][T12471] team0: Port device team_slave_1 added [ 347.976785][T11411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.981353][T12471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.982544][T11411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.984066][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.989005][T12471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.991279][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.003245][T12471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.004571][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.009237][T12471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.086111][T12471] device hsr_slave_0 entered promiscuous mode [ 348.106804][T12471] device hsr_slave_1 entered promiscuous mode [ 348.113600][T12570] loop3: detected capacity change from 0 to 4096 [ 348.141846][T12570] ntfs3: Unknown parameter 'windows_names' [ 348.169941][T12471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.171900][T12471] Cannot create hsr debugfs directory [ 348.311349][T12471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.663316][T12471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.680628][T12570] loop3: detected capacity change from 0 to 32768 [ 348.752014][T12570] XFS (loop3): Mounting V5 Filesystem [ 348.845542][T12570] XFS (loop3): Ending clean mount [ 350.410024][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.626320][T12471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.690187][T12471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.800485][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.909924][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.015549][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.059255][T12471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.074244][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.079700][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.098072][T12471] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.112820][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.114600][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.116176][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.117469][T11411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.119658][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.124582][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.127112][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.143661][T11411] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.145071][T11411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.155149][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.157042][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.165333][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.174507][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.186971][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.188840][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.217139][T12471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.219038][T12471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.221996][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.223619][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.225253][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.228413][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.237347][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.242547][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.733161][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.734724][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.743240][T12471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.999367][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.001291][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.265366][T12471] device veth0_vlan entered promiscuous mode [ 353.270805][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.272825][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.274978][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.276490][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.289219][T12471] device veth1_vlan entered promiscuous mode [ 353.393958][T12471] device veth0_macvtap entered promiscuous mode [ 353.415570][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.417861][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.419504][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.421163][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.495311][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.498157][T12471] device veth1_macvtap entered promiscuous mode [ 353.520939][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.522890][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.609389][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.611493][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.615796][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.617780][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.626117][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.628375][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.066841][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.069190][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.090622][T12471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.146837][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.149928][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.152509][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.201592][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.221951][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.297433][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.363690][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.484977][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.494830][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.510799][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.512666][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.514241][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.515935][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.565697][T12471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.585054][T12471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.595183][T12471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.596891][T12471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.603711][T12471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.767839][T12779] gfs2: path_lookup on c::: returned error -2 [ 355.120091][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.121920][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.362041][ T5779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.363449][ T5779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.370307][T11411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.388598][T11411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.390053][T11411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.391450][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.960770][ T4322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.963931][ T4322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.965868][ T4322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.967570][ T4322] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.969206][ T4322] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 356.970697][ T4322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.095438][T12863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2973'. [ 357.152368][T12888] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3102'. [ 357.256750][ T11] device hsr_slave_0 left promiscuous mode [ 357.308047][ T11] device hsr_slave_1 left promiscuous mode [ 357.402493][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.403905][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.413776][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.415174][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.416760][ T11] device bridge_slave_1 left promiscuous mode [ 357.417904][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.468364][ T11] device bridge_slave_0 left promiscuous mode [ 357.469594][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.524385][T12894] loop5: detected capacity change from 0 to 40427 [ 357.536066][T12894] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 357.541020][T12894] F2FS-fs (loop5): invalid crc value [ 357.561001][T12894] F2FS-fs (loop5): Found nat_bits in checkpoint [ 357.580158][T12894] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 357.602870][T12471] syz-executor: attempt to access beyond end of device [ 357.602870][T12471] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.616407][ T11] device veth1_macvtap left promiscuous mode [ 357.617581][ T11] device veth0_macvtap left promiscuous mode [ 357.620000][ T11] device veth1_vlan left promiscuous mode [ 357.621193][ T11] device veth0_vlan left promiscuous mode [ 357.689334][T12912] gfs2: path_lookup on c::: returned error -2 [ 359.187004][ T4322] Bluetooth: hci5: command 0x0409 tx timeout [ 360.258121][ T11] team0 (unregistering): Port device team_slave_1 removed [ 360.428697][ T11] team0 (unregistering): Port device team_slave_0 removed [ 360.598037][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.822419][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.410696][ T4322] Bluetooth: hci5: command 0x041b tx timeout [ 363.270189][ T11] bond0 (unregistering): Released all slaves [ 363.633192][ T4337] Bluetooth: hci5: command 0x040f tx timeout [ 363.774060][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3112'. [ 363.818128][T12988] loop5: detected capacity change from 0 to 64 [ 363.893935][T12874] chnl_net:caif_netlink_parms(): no params data found [ 363.968870][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.981440][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.989456][T12874] device bridge_slave_0 entered promiscuous mode [ 364.004557][T12874] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.014062][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.032369][T12874] device bridge_slave_1 entered promiscuous mode [ 364.114139][T12874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.118043][T13002] loop5: detected capacity change from 0 to 4096 [ 364.130659][T12874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.144742][T13002] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 364.173721][T12874] team0: Port device team_slave_0 added [ 364.184179][T12874] team0: Port device team_slave_1 added [ 364.201597][T12874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.202867][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.231215][T12874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.236379][T12874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.237752][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.271339][T12874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.418361][T13034] loop5: detected capacity change from 0 to 8 [ 364.419370][T12874] device hsr_slave_0 entered promiscuous mode [ 364.477391][T12874] device hsr_slave_1 entered promiscuous mode [ 364.512290][T12874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.513593][T12874] Cannot create hsr debugfs directory [ 364.799758][T12874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.946158][T13051] loop5: detected capacity change from 0 to 32768 [ 364.969400][T13051] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3153 (13051) [ 365.008025][T13051] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.009936][T13051] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 365.014737][T13051] BTRFS info (device loop5): using free space tree [ 365.194063][T12874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.290683][T12874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.349722][T13092] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3156'. [ 365.356368][T13051] BTRFS info (device loop5): enabling ssd optimizations [ 365.468931][T12471] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.559518][T12874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.886246][ T4337] Bluetooth: hci5: command 0x0419 tx timeout [ 365.956705][T12874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.170782][T12874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.253176][T12874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.354730][T12874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.675208][T12874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.681879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.683606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.686626][T12874] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.691964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.693662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.701980][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.703139][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.719511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.727045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.729321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.735180][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.736343][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.843516][T12874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.845551][T12874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.857759][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.866731][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.880658][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.900444][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.906509][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.910500][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.915776][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.918964][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.922802][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.928390][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.974407][T13157] loop5: detected capacity change from 0 to 2048 [ 367.023661][T13157] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 367.249532][T13166] loop5: detected capacity change from 0 to 8192 [ 367.336970][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.338909][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.346968][T12874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.357887][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.359394][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.506209][T13176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.517876][T13176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.895449][ T5311] device hsr_slave_0 left promiscuous mode [ 367.941068][ T5311] device hsr_slave_1 left promiscuous mode [ 368.024414][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.025822][ T5311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.027440][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.028886][ T5311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.030395][ T5311] device bridge_slave_1 left promiscuous mode [ 368.031382][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.090793][ T5311] device bridge_slave_0 left promiscuous mode [ 368.091912][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.244085][ T5311] device veth1_macvtap left promiscuous mode [ 368.245218][ T5311] device veth0_macvtap left promiscuous mode [ 368.246370][ T5311] device veth1_vlan left promiscuous mode [ 369.150357][ T5311] bond4 (unregistering): Released all slaves [ 370.022914][T13233] loop5: detected capacity change from 0 to 32768 [ 370.033217][T13233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3195 (13233) [ 370.050178][T13233] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.056638][T13233] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 370.058997][T13233] BTRFS info (device loop5): using free space tree [ 370.141332][ T5311] bond3 (unregistering): Released all slaves [ 370.184039][T13233] BTRFS info (device loop5): enabling ssd optimizations [ 370.282180][T12471] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.529525][T13268] loop5: detected capacity change from 0 to 256 [ 370.629838][T13270] loop5: detected capacity change from 0 to 4096 [ 370.656942][T13270] ntfs3: loop5: ino=3, Correct links count -> 2. [ 371.977336][T13285] loop5: detected capacity change from 0 to 40427 [ 371.984736][T13285] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 371.985848][T13285] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 371.987938][T13285] F2FS-fs (loop5): invalid crc value [ 372.028199][T13285] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 372.066050][T13285] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 372.067314][T13285] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 372.280214][ T5311] bond2 (unregistering): Released all slaves [ 372.322458][ T5311] bond1 (unregistering): (slave geneve2): Releasing active interface [ 373.360836][ T5311] bond1 (unregistering): Released all slaves [ 374.055094][T13318] overlayfs: failed to clone upperpath [ 376.207323][ T5311] team0 (unregistering): Port device team_slave_1 removed [ 376.413729][ T5311] team0 (unregistering): Port device team_slave_0 removed [ 376.573643][ T5311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.648976][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'. [ 378.839808][ T5311] bond0 (unregistering): Released all slaves [ 379.354085][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.357121][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.392004][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.394068][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.397995][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.399669][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.408458][T12874] device veth0_vlan entered promiscuous mode [ 379.417070][T12874] device veth1_vlan entered promiscuous mode [ 379.441087][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.443425][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 379.445116][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.446894][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.450972][T12874] device veth0_macvtap entered promiscuous mode [ 379.456946][T12874] device veth1_macvtap entered promiscuous mode [ 379.489622][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.514426][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.519673][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.536062][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.541252][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.555083][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.559682][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.563945][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.573448][T12874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.582225][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.584023][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.586421][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.594396][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.600790][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.605215][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.609580][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.615483][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.624077][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.628740][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.632961][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.635972][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.645819][T12874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.648545][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.650670][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.657149][T12874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.661212][T12874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.664394][T12874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.668285][T12874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.786413][T10701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.787614][T10701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.789426][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.822837][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.824188][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.825569][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.265244][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3252'. [ 380.449624][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.454433][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.456999][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.458985][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.461268][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 380.463664][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.695783][T13447] chnl_net:caif_netlink_parms(): no params data found [ 380.717739][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.719208][T13447] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.723877][T13447] device bridge_slave_0 entered promiscuous mode [ 380.726425][T13447] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.727740][T13447] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.729402][T13447] device bridge_slave_1 entered promiscuous mode [ 380.761675][T13447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.182672][T13447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.198815][T13447] team0: Port device team_slave_0 added [ 381.206637][T13447] team0: Port device team_slave_1 added [ 381.226700][T13447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.231422][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.244216][T13447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.249283][T13447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.252769][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.264441][T13447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.308310][T13447] device hsr_slave_0 entered promiscuous mode [ 381.316468][T13460] loop5: detected capacity change from 0 to 40427 [ 381.325848][T13460] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 381.333402][T13460] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 381.336003][T13460] F2FS-fs (loop5): invalid crc value [ 381.351093][T13447] device hsr_slave_1 entered promiscuous mode [ 381.358474][T13460] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 381.385896][T13460] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 381.387198][T13460] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 381.403351][T13447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.405428][T13447] Cannot create hsr debugfs directory [ 381.636930][T13447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.527644][T13447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.610873][ T4322] Bluetooth: hci2: command 0x0409 tx timeout [ 382.742381][T13447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.926258][T13447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.261126][T13447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.319950][T13447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 383.360101][T13447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 383.394912][T13447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.398143][T13482] loop5: detected capacity change from 0 to 32768 [ 383.512683][T13447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.525878][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.527574][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.529141][T13491] netlink: 'syz.4.3264': attribute type 10 has an invalid length. [ 383.591366][T13491] team0: Port device macvlan1 added [ 383.597303][T13447] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.600843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.602547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.604218][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.605520][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.612584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.614577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.625881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.630664][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.631937][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.649769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.651686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.653937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.675765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.677515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.677856][T13494] loop4: detected capacity change from 0 to 1024 [ 383.679120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.687392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.690400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.696356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.700871][T13447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.703514][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.707081][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.708840][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.710556][T13494] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 383.740034][T13492] loop5: detected capacity change from 0 to 32768 [ 383.756886][T13492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3265 (13492) [ 383.779000][T13492] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 383.782395][T13492] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 383.783921][T13492] BTRFS info (device loop5): using free space tree [ 383.936075][T13447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.938970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.940319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.956295][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.959465][T10701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.273922][T13492] BTRFS info (device loop5): enabling ssd optimizations [ 384.291070][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.292964][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.295380][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.297639][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.329297][T13447] device veth0_vlan entered promiscuous mode [ 384.339053][T13447] device veth1_vlan entered promiscuous mode [ 384.356080][T12471] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.426353][T13447] device veth0_macvtap entered promiscuous mode [ 384.433636][T13447] device veth1_macvtap entered promiscuous mode [ 384.436732][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 384.466828][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 384.469370][T13402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (13402) [ 384.494261][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.500576][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.504531][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 384.510679][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 384.518346][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.520097][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.520105][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3272'. [ 384.521923][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.541228][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.542943][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.544738][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.560656][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.563001][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.564569][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.585424][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.593588][T13447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.596687][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.598555][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 384.613825][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.620493][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.622126][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.631515][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.633320][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.646862][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.648680][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.650506][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.663371][T13447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.669413][T13447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.677188][T13447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.691171][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.693023][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.700961][T13447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.702541][T13447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.711010][T13447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.712695][T13447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.836614][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 384.840256][ T4560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.841666][ T4560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.852142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.860533][ T5374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.861995][ T5374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.863477][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 385.259243][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3281'. [ 385.487111][T13590] loop5: detected capacity change from 0 to 4096 [ 385.488816][T13590] EXT4-fs: Ignoring removed bh option [ 385.495498][T13590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 385.561976][T13596] loop1: detected capacity change from 0 to 512 [ 385.563497][T13596] EXT4-fs: Ignoring removed oldalloc option [ 385.568348][T13596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 385.580535][T13596] EXT4-fs (loop1): 1 truncate cleaned up [ 385.581813][T13596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 385.807754][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.810656][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.812746][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.815092][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.821958][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 385.822491][T12471] EXT4-fs (loop5): unmounting filesystem. [ 385.824485][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.540472][T13630] loop4: detected capacity change from 0 to 1024 [ 386.580762][T13610] chnl_net:caif_netlink_parms(): no params data found [ 386.639361][T13630] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 386.677900][T13610] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.689167][T13610] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.698265][T13610] device bridge_slave_0 entered promiscuous mode [ 386.718273][T13610] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.720781][T13610] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.737237][T13610] device bridge_slave_1 entered promiscuous mode [ 386.783250][T13610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.851012][T13610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.920941][T13610] team0: Port device team_slave_0 added [ 386.926699][T13610] team0: Port device team_slave_1 added [ 386.965963][T13610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.967200][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.988647][T13610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.996835][T13610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.000592][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.011565][T13610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.056170][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 387.185337][T13447] EXT4-fs (loop1): unmounting filesystem. [ 387.212757][T13610] device hsr_slave_0 entered promiscuous mode [ 387.241801][T13610] device hsr_slave_1 entered promiscuous mode [ 387.282180][T13610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.283521][T13610] Cannot create hsr debugfs directory [ 388.000399][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 388.247111][ T6523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.611037][T13707] loop5: detected capacity change from 0 to 512 [ 388.631175][ T6523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.701659][T13707] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 388.757813][ T6523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.778372][T12471] EXT4-fs (loop5): unmounting filesystem. [ 388.949655][ T6523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.323545][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 390.070847][T13741] loop1: detected capacity change from 0 to 1024 [ 390.073747][T13741] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 390.219458][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 390.220892][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.227799][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.263609][T13748] device syzkaller0 entered promiscuous mode [ 390.281066][T13757] loop1: detected capacity change from 0 to 512 [ 390.291319][T13757] EXT4-fs: Ignoring removed oldalloc option [ 390.306524][T13757] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 390.321837][T13757] EXT4-fs (loop1): 1 truncate cleaned up [ 390.322787][T13757] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 392.159375][T13447] EXT4-fs (loop1): unmounting filesystem. [ 392.415684][T13789] loop1: detected capacity change from 0 to 1024 [ 392.426069][T13789] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 392.442047][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 394.664689][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 394.836183][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.837322][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.978404][T13839] random: crng reseeded on system resumption [ 394.992740][T13839] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3343'. [ 405.276750][T13867] tipc: Started in network mode [ 405.277835][T13867] tipc: Node identity aa0def971255, cluster identity 4711 [ 405.279046][T13867] tipc: Enabled bearer , priority 0 [ 405.280877][T13868] device syzkaller0 entered promiscuous mode [ 405.283489][T13865] tipc: Resetting bearer [ 405.386685][T13865] tipc: Disabling bearer [ 405.700307][T13610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.816875][T13610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.624860][T13610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.674934][T13889] loop4: detected capacity change from 0 to 32768 [ 406.696838][T13889] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 406.930171][T13881] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.998712][T13610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.377183][T13610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.379090][T13914] loop1: detected capacity change from 0 to 40427 [ 407.387435][T13914] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 407.388706][T13914] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 407.390746][T13914] F2FS-fs (loop1): invalid crc value [ 407.419275][T13914] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 407.438402][T13914] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 407.439815][T13914] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 407.464267][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.466213][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.469900][T13610] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.557492][T13914] device geneve1 entered promiscuous mode [ 407.559124][T13914] device macsec1 entered promiscuous mode [ 407.561594][T13914] device geneve1 left promiscuous mode [ 407.640480][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.642232][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.643636][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.644876][ T5779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.646368][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.647940][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.657919][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.659137][ T5779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.667585][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.672973][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.731338][T13610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.733161][T13610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.741770][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.743244][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.750191][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.752765][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.767289][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.775776][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.783558][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.789111][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.805250][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.812621][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.818856][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.532667][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.534161][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.542717][T13610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.566389][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.572091][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.638586][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.640441][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.644172][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.646305][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.650249][T13610] device veth0_vlan entered promiscuous mode [ 408.661225][T13610] device veth1_vlan entered promiscuous mode [ 408.678190][T13955] loop5: detected capacity change from 0 to 32768 [ 408.689243][T13955] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.691113][T13955] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 408.694421][T13955] BTRFS info (device loop5): using free space tree [ 408.815534][T13955] BTRFS info (device loop5): enabling ssd optimizations [ 408.909078][T12471] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.048432][T13610] device veth0_macvtap entered promiscuous mode [ 409.050777][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.052484][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 409.054113][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.056152][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.059455][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.068752][ T4476] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.071804][ T4476] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 409.072428][T13610] device veth1_macvtap entered promiscuous mode [ 409.178553][T13988] fido_id[13988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 409.181638][ T6523] device hsr_slave_0 left promiscuous mode [ 409.241797][ T6523] device hsr_slave_1 left promiscuous mode [ 409.311906][T13980] loop4: detected capacity change from 0 to 40427 [ 409.323879][T13980] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 409.337005][T13980] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 409.340928][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.342286][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.344070][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.346177][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.349184][T13980] F2FS-fs (loop4): invalid crc value [ 409.349460][ T6523] device bridge_slave_1 left promiscuous mode [ 409.352394][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.362959][T13980] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 409.374186][T13980] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 409.375332][T13980] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 409.390760][ T6523] device bridge_slave_0 left promiscuous mode [ 409.391906][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.452907][T14003] loop1: detected capacity change from 0 to 32768 [ 409.508090][T14003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3387 (14003) [ 409.511916][T14003] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.514972][T14003] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 409.516942][T14003] BTRFS info (device loop1): using free space tree [ 409.630047][T14003] BTRFS info (device loop1): enabling ssd optimizations [ 409.653537][T13447] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.669529][ T6523] device veth1_macvtap left promiscuous mode [ 409.671877][ T6523] device veth0_macvtap left promiscuous mode [ 409.674204][ T6523] device veth1_vlan left promiscuous mode [ 409.675926][ T6523] device veth0_vlan left promiscuous mode [ 410.523861][ T6523] bond8 (unregistering): Released all slaves [ 411.230424][ T6523] bond7 (unregistering): Released all slaves [ 411.926269][ T6523] bond6 (unregistering): Released all slaves [ 412.607799][ T6523] bond5 (unregistering): Released all slaves [ 413.304551][ T6523] bond4 (unregistering): Released all slaves [ 414.095856][ T6523] bond3 (unregistering): Released all slaves [ 414.799305][ T6523] bond2 (unregistering): Released all slaves [ 415.525566][ T6523] bond1 (unregistering): Released all slaves [ 417.695758][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 417.875508][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 418.067566][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.281723][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.928173][ T6523] bond0 (unregistering): Released all slaves [ 420.904418][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.906220][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.907828][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.910102][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.911833][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.913597][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.915389][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.917191][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.918813][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.920734][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.923079][T13610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.930287][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.932220][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.933798][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.935521][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.937188][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.938967][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.940578][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.942457][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.944166][T13610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.946433][T13610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.948912][T13610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.964139][T13980] device macsec1 entered promiscuous mode [ 421.061878][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.063808][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.065736][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.067427][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.081991][T13610] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.083633][T13610] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.085199][T13610] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.086712][T13610] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.187899][ T5871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.189208][ T5871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.203952][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.207795][T10880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.209757][T10880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.211696][T10880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.839952][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3398'. [ 422.370282][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'. [ 422.527349][T14081] loop4: detected capacity change from 0 to 32768 [ 423.541775][ T27] audit: type=1326 audit(412.529:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.545763][ T27] audit: type=1326 audit(412.529:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.557134][ T27] audit: type=1326 audit(412.539:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.569730][ T27] audit: type=1326 audit(412.539:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.629209][ T27] audit: type=1326 audit(412.539:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.636735][ T27] audit: type=1326 audit(412.539:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.640633][ T27] audit: type=1326 audit(412.539:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.644547][ T27] audit: type=1326 audit(412.539:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.680394][ T27] audit: type=1326 audit(412.539:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 423.684106][ T27] audit: type=1326 audit(412.539:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffffb37789e8 code=0x7ffc0000 [ 424.404273][T14116] loop1: detected capacity change from 0 to 32768 [ 425.017358][T14120] loop4: detected capacity change from 0 to 32768 [ 425.028632][T14137] loop2: detected capacity change from 0 to 256 [ 425.034619][T14120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3414 (14120) [ 425.050407][T14120] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.052170][T14120] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 425.053581][T14120] BTRFS info (device loop4): using free space tree [ 425.060285][T14137] FAT-fs (loop2): Directory bread(block 64) failed [ 425.061431][T14137] FAT-fs (loop2): Directory bread(block 65) failed [ 425.062585][T14137] FAT-fs (loop2): Directory bread(block 66) failed [ 425.063639][T14137] FAT-fs (loop2): Directory bread(block 67) failed [ 425.069678][T14137] FAT-fs (loop2): Directory bread(block 68) failed [ 425.070970][T14137] FAT-fs (loop2): Directory bread(block 69) failed [ 425.072092][T14137] FAT-fs (loop2): Directory bread(block 70) failed [ 425.073203][T14137] FAT-fs (loop2): Directory bread(block 71) failed [ 425.082220][T14137] FAT-fs (loop2): Directory bread(block 72) failed [ 425.083430][T14137] FAT-fs (loop2): Directory bread(block 73) failed [ 425.162149][T14120] BTRFS info (device loop4): enabling ssd optimizations [ 425.212047][T14130] loop5: detected capacity change from 0 to 40427 [ 425.236591][T14159] loop2: detected capacity change from 0 to 1024 [ 425.243028][T14130] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 425.244209][T14130] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 425.246844][T14130] F2FS-fs (loop5): invalid crc value [ 425.256121][T14159] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.3422: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 425.267295][T14159] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.3422: Bad quota inode: 3, type: 0 [ 425.270289][T14130] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 425.270435][T14159] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 425.278100][T12874] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.294695][T14159] EXT4-fs (loop2): mount failed [ 425.370215][T14167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3423'. [ 425.461947][T14130] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 425.463371][T14130] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 425.584955][T14175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3425'. [ 427.265132][T14195] loop2: detected capacity change from 0 to 512 [ 429.315702][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3442'. [ 430.216107][T14239] loop2: detected capacity change from 0 to 512 [ 430.236423][T14239] EXT4-fs: Ignoring removed oldalloc option [ 430.240613][T14239] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 430.363732][T14239] EXT4-fs (loop2): 1 truncate cleaned up [ 430.364824][T14239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 430.608551][ T27] kauditd_printk_skb: 553 callbacks suppressed [ 430.608561][ T27] audit: type=1326 audit(419.136:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.4.3451" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff993789e8 code=0x0 [ 431.209540][T14251] loop1: detected capacity change from 0 to 32768 [ 431.227971][T14251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3452 (14251) [ 431.248913][T14251] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 431.257379][T14251] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 431.261037][T14251] BTRFS info (device loop1): using free space tree [ 431.336280][T14251] BTRFS info (device loop1): enabling ssd optimizations [ 431.365979][T13447] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 431.497822][T14056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (14056) [ 432.649191][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3463'. [ 433.752677][T14305] loop1: detected capacity change from 0 to 32768 [ 433.800898][ T27] audit: type=1326 audit(422.121:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.4.3467" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff993789e8 code=0x0 [ 433.817427][T14310] loop5: detected capacity change from 0 to 32768 [ 433.824851][T14310] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 433.922623][T14057] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 435.590875][T13610] EXT4-fs (loop2): unmounting filesystem. [ 435.681943][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 436.670145][ T27] audit: type=1326 audit(424.807:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.5.3483" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb29789e8 code=0x0 [ 437.116138][T14348] loop4: detected capacity change from 0 to 32768 [ 437.116690][T14350] loop2: detected capacity change from 0 to 32768 [ 437.121472][T14350] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 437.425902][T14057] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 437.542955][T14381] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3492'. [ 437.556032][T14379] loop1: detected capacity change from 0 to 512 [ 437.571451][T14379] EXT4-fs: Ignoring removed oldalloc option [ 437.624515][T14379] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 437.678539][T14379] EXT4-fs (loop1): 1 truncate cleaned up [ 437.679996][T14379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 437.779630][T13447] EXT4-fs (loop1): unmounting filesystem. [ 438.036444][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 439.220709][ T27] audit: type=1326 audit(427.193:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.1.3500" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff845789e8 code=0x0 [ 439.272020][T14400] loop5: detected capacity change from 0 to 32768 [ 439.277462][T14400] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 439.318498][T14057] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 439.811006][T14418] loop2: detected capacity change from 0 to 512 [ 439.814884][T14418] EXT4-fs: Ignoring removed oldalloc option [ 439.817244][T14418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 439.836575][T14418] EXT4-fs (loop2): 1 truncate cleaned up [ 439.839882][T14418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 440.036903][T13610] EXT4-fs (loop2): unmounting filesystem. [ 440.564985][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'. [ 440.627363][T14442] loop5: detected capacity change from 0 to 32768 [ 441.317630][T14442] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 442.004188][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3513'. [ 442.061378][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3515'. [ 442.174497][T14056] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 442.332496][T14469] loop1: detected capacity change from 0 to 512 [ 442.332946][T14456] loop5: detected capacity change from 0 to 32768 [ 442.333926][T14469] EXT4-fs: Ignoring removed oldalloc option [ 442.366360][T14469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 442.386608][T14469] EXT4-fs (loop1): 1 truncate cleaned up [ 442.387558][T14469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 442.456446][ T27] audit: type=1326 audit(430.225:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.2.3520" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa65789e8 code=0x0 [ 442.491929][T13447] EXT4-fs (loop1): unmounting filesystem. [ 443.094643][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3527'. [ 445.150294][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3533'. [ 445.313133][T14527] device syzkaller0 entered promiscuous mode [ 445.513195][T14518] loop4: detected capacity change from 0 to 32768 [ 445.543047][ T27] audit: type=1326 audit(433.117:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.5.3538" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb29789e8 code=0x0 [ 446.058124][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'. [ 446.910577][T14557] loop1: detected capacity change from 0 to 1024 [ 447.614223][T14557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 447.631927][T14557] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.3548: lblock 2 mapped to illegal pblock 2 (length 1) [ 447.637271][T14567] loop4: detected capacity change from 0 to 512 [ 447.638921][T14567] EXT4-fs: Ignoring removed oldalloc option [ 447.640374][T14567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 447.642084][T14557] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 447.646906][T14557] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.3548: lblock 0 mapped to illegal pblock 48 (length 1) [ 447.659371][T14567] EXT4-fs (loop4): 1 truncate cleaned up [ 447.660373][T14567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 447.660378][T14557] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 447.680123][T14557] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3548: Failed to acquire dquot type 0 [ 447.692838][T14557] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 447.704806][T14557] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.3548: mark_inode_dirty error [ 447.717884][T14557] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 447.726969][T14557] EXT4-fs (loop1): 1 orphan inode deleted [ 447.728238][T14557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 447.738641][T14557] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 16: comm syz.1.3548: lblock 262144 mapped to illegal pblock 16 (length 8) [ 447.746708][T11370] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 447.755741][T11370] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 447.757610][T11370] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:36: Failed to release dquot type 0 [ 447.854614][T13447] EXT4-fs (loop1): unmounting filesystem. [ 447.856045][T13447] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 447.859470][T13447] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 447.870674][T13447] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 448.409932][T14574] loop5: detected capacity change from 0 to 32768 [ 448.563038][T12874] EXT4-fs (loop4): unmounting filesystem. [ 448.768884][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3553'. [ 449.820615][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3560'. [ 450.018647][ T5779] tipc: Left network mode [ 451.355119][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3563'. [ 451.542768][T14625] loop2: detected capacity change from 0 to 512 [ 451.556097][T14625] EXT4-fs: Ignoring removed oldalloc option [ 451.570053][T14625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 451.584044][T14625] EXT4-fs (loop2): 1 truncate cleaned up [ 451.584974][T14625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 452.496274][T13610] EXT4-fs (loop2): unmounting filesystem. [ 452.498145][T14601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.536173][T14631] loop5: detected capacity change from 0 to 32768 [ 452.588196][T14635] loop2: detected capacity change from 0 to 512 [ 452.595449][T14635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 452.608237][T14635] EXT4-fs (loop2): 1 truncate cleaned up [ 452.609235][T14635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 452.720848][T13610] EXT4-fs (loop2): unmounting filesystem. [ 453.183866][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 453.764682][T14659] loop5: detected capacity change from 0 to 512 [ 453.773967][T14659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 453.795500][T14659] [ 453.795947][T14659] ====================================================== [ 453.797186][T14659] WARNING: possible circular locking dependency detected [ 453.798507][T14659] syzkaller #0 Not tainted [ 453.799305][T14659] ------------------------------------------------------ [ 453.800533][T14659] syz.5.3574/14659 is trying to acquire lock: [ 453.801611][T14659] ffff0000c428ec18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 453.803429][T14659] [ 453.803429][T14659] but task is already holding lock: [ 453.804711][T14659] ffff0001026a3cf8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x784 [ 453.806490][T14659] [ 453.806490][T14659] which lock already depends on the new lock. [ 453.806490][T14659] [ 453.808274][T14659] [ 453.808274][T14659] the existing dependency chain (in reverse order) is: [ 453.809821][T14659] [ 453.809821][T14659] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 453.811149][T14659] down_write+0x5c/0x88 [ 453.811987][T14659] ext4_destroy_inline_data+0x30/0x114 [ 453.812978][T14659] ext4_writepages+0x430/0x28b4 [ 453.813908][T14659] do_writepages+0x2b0/0x504 [ 453.814763][T14659] filemap_fdatawrite_wbc+0x124/0x174 [ 453.815840][T14659] file_write_and_wait_range+0x11c/0x1f4 [ 453.816918][T14659] ext4_sync_file+0x210/0xc70 [ 453.817843][T14659] vfs_fsync_range+0x168/0x188 [ 453.818760][T14659] ext4_buffered_write_iter+0x47c/0x528 [ 453.819741][T14659] ext4_file_write_iter+0x18c/0x1574 [ 453.820717][T14659] do_iter_write+0x53c/0x940 [ 453.821623][T14659] do_pwritev+0x1e8/0x338 [ 453.822454][T14659] __arm64_sys_pwritev2+0xd4/0x108 [ 453.823499][T14659] invoke_syscall+0x98/0x2b4 [ 453.824403][T14659] el0_svc_common+0x138/0x258 [ 453.825273][T14659] do_el0_svc+0x58/0x130 [ 453.826065][T14659] el0_svc+0x58/0x128 [ 453.826839][T14659] el0t_64_sync_handler+0x84/0xf0 [ 453.827850][T14659] el0t_64_sync+0x18c/0x190 [ 453.828657][T14659] [ 453.828657][T14659] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 453.830070][T14659] __lock_acquire+0x2880/0x6800 [ 453.830984][T14659] lock_acquire+0x20c/0x63c [ 453.831945][T14659] percpu_down_read+0x70/0x2a8 [ 453.832859][T14659] ext4_writepages+0x1b8/0x28b4 [ 453.833730][T14659] do_writepages+0x2b0/0x504 [ 453.834591][T14659] __writeback_single_inode+0x164/0x1554 [ 453.835697][T14659] writeback_single_inode+0x1cc/0x740 [ 453.836734][T14659] write_inode_now+0x150/0x1cc [ 453.837681][T14659] iput+0x5bc/0x7e4 [ 453.838429][T14659] ext4_xattr_block_set+0x1e9c/0x2880 [ 453.839437][T14659] ext4_expand_extra_isize_ea+0xe5c/0x17ac [ 453.840507][T14659] __ext4_expand_extra_isize+0x298/0x358 [ 453.841602][T14659] __ext4_mark_inode_dirty+0x3e4/0x784 [ 453.842595][T14659] ext4_evict_inode+0xb64/0x1278 [ 453.843543][T14659] evict+0x3e0/0x828 [ 453.844348][T14659] iput+0x754/0x7e4 [ 453.845054][T14659] ext4_process_orphan+0x240/0x2b4 [ 453.846038][T14659] ext4_orphan_cleanup+0x920/0x1060 [ 453.847058][T14659] ext4_fill_super+0x594c/0x61b0 [ 453.848022][T14659] get_tree_bdev+0x358/0x544 [ 453.848906][T14659] ext4_get_tree+0x28/0x38 [ 453.849775][T14659] vfs_get_tree+0x90/0x274 [ 453.850624][T14659] do_new_mount+0x228/0x810 [ 453.851480][T14659] path_mount+0x5bc/0xe80 [ 453.852317][T14659] __arm64_sys_mount+0x49c/0x59c [ 453.853270][T14659] invoke_syscall+0x98/0x2b4 [ 453.854113][T14659] el0_svc_common+0x138/0x258 [ 453.854923][T14659] do_el0_svc+0x58/0x130 [ 453.855732][T14659] el0_svc+0x58/0x128 [ 453.856461][T14659] el0t_64_sync_handler+0x84/0xf0 [ 453.857442][T14659] el0t_64_sync+0x18c/0x190 [ 453.858305][T14659] [ 453.858305][T14659] other info that might help us debug this: [ 453.858305][T14659] [ 453.860005][T14659] Possible unsafe locking scenario: [ 453.860005][T14659] [ 453.861234][T14659] CPU0 CPU1 [ 453.862172][T14659] ---- ---- [ 453.863084][T14659] lock(&ei->xattr_sem); [ 453.863834][T14659] lock(&sbi->s_writepages_rwsem); [ 453.865148][T14659] lock(&ei->xattr_sem); [ 453.866314][T14659] lock(&sbi->s_writepages_rwsem); [ 453.867207][T14659] [ 453.867207][T14659] *** DEADLOCK *** [ 453.867207][T14659] [ 453.868586][T14659] 3 locks held by syz.5.3574/14659: [ 453.869544][T14659] #0: ffff0000ebd0e0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x800 [ 453.871356][T14659] #1: ffff0000ebd0e650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3e0/0x1278 [ 453.872996][T14659] #2: ffff0001026a3cf8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x784 [ 453.874725][T14659] [ 453.874725][T14659] stack backtrace: [ 453.875678][T14659] CPU: 1 PID: 14659 Comm: syz.5.3574 Not tainted syzkaller #0 [ 453.876983][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 453.878734][T14659] Call trace: [ 453.879268][T14659] dump_backtrace+0x1c0/0x1ec [ 453.880043][T14659] show_stack+0x2c/0x3c [ 453.880865][T14659] __dump_stack+0x30/0x40 [ 453.881653][T14659] dump_stack_lvl+0xf4/0x15c [ 453.882475][T14659] dump_stack+0x1c/0x5c [ 453.883192][T14659] print_circular_bug+0x148/0x1b0 [ 453.884048][T14659] check_noncircular+0x264/0x2f8 [ 453.884916][T14659] __lock_acquire+0x2880/0x6800 [ 453.885772][T14659] lock_acquire+0x20c/0x63c [ 453.886569][T14659] percpu_down_read+0x70/0x2a8 [ 453.887357][T14659] ext4_writepages+0x1b8/0x28b4 [ 453.888177][T14659] do_writepages+0x2b0/0x504 [ 453.889023][T14659] __writeback_single_inode+0x164/0x1554 [ 453.889945][T14659] writeback_single_inode+0x1cc/0x740 [ 453.890807][T14659] write_inode_now+0x150/0x1cc [ 453.891619][T14659] iput+0x5bc/0x7e4 [ 453.892252][T14659] ext4_xattr_block_set+0x1e9c/0x2880 [ 453.893150][T14659] ext4_expand_extra_isize_ea+0xe5c/0x17ac [ 453.894061][T14659] __ext4_expand_extra_isize+0x298/0x358 [ 453.895000][T14659] __ext4_mark_inode_dirty+0x3e4/0x784 [ 453.895883][T14659] ext4_evict_inode+0xb64/0x1278 [ 453.896768][T14659] evict+0x3e0/0x828 [ 453.897454][T14659] iput+0x754/0x7e4 [ 453.898036][T14659] ext4_process_orphan+0x240/0x2b4 [ 453.898827][T14659] ext4_orphan_cleanup+0x920/0x1060 [ 453.899682][T14659] ext4_fill_super+0x594c/0x61b0 [ 453.900515][T14659] get_tree_bdev+0x358/0x544 [ 453.901366][T14659] ext4_get_tree+0x28/0x38 [ 453.902143][T14659] vfs_get_tree+0x90/0x274 [ 453.902965][T14659] do_new_mount+0x228/0x810 [ 453.903796][T14659] path_mount+0x5bc/0xe80 [ 453.904577][T14659] __arm64_sys_mount+0x49c/0x59c [ 453.905355][T14659] invoke_syscall+0x98/0x2b4 [ 453.906109][T14659] el0_svc_common+0x138/0x258 [ 453.906885][T14659] do_el0_svc+0x58/0x130 [ 453.907581][T14659] el0_svc+0x58/0x128 [ 453.908219][T14659] el0t_64_sync_handler+0x84/0xf0 [ 453.909039][T14659] el0t_64_sync+0x18c/0x190 [ 453.980317][T14659] ------------[ cut here ]------------ [ 453.981416][T14659] EA inode 11 i_nlink=0 [ 453.981606][T14659] WARNING: CPU: 0 PID: 14659 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x474/0x4b8 [ 453.984146][T14659] Modules linked in: [ 453.984874][T14659] CPU: 0 PID: 14659 Comm: syz.5.3574 Not tainted syzkaller #0 [ 453.986136][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 453.988030][T14659] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 453.989533][T14659] pc : ext4_xattr_inode_update_ref+0x474/0x4b8 [ 453.990622][T14659] lr : ext4_xattr_inode_update_ref+0x474/0x4b8 [ 453.991777][T14659] sp : ffff8000214d6dc0 [ 453.992558][T14659] x29: ffff8000214d6e70 x28: 0000000000000000 x27: dfff800000000000 [ 453.993980][T14659] x26: ffff8000214d6de0 x25: ffff70000429adbc x24: 0000000000000000 [ 453.995390][T14659] x23: ffff800017beb000 x22: ffff0000e26c5330 x21: 0000000000000000 [ 453.996824][T14659] x20: 0000000000000001 x19: ffff0000e26c52f0 x18: ffff800011b9bf60 [ 453.998233][T14659] x17: 1fffe00033ea637e x16: ffff80000804309c x15: ffff80001521d000 [ 453.999672][T14659] x14: 0000000000000001 x13: 1fffe00033ea8a30 x12: 0000000000ff0100 [ 454.001074][T14659] x11: ff00800008048348 x10: 0000000040000002 x9 : 18866f1f8209f500 [ 454.002500][T14659] x8 : 18866f1f8209f500 x7 : 0000000000000004 x6 : ffff800008257984 [ 454.003910][T14659] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 454.005330][T14659] x2 : ffff8000214d6960 x1 : 0000000000000000 x0 : ffff800008257a18 [ 454.006805][T14659] Call trace: [ 454.007371][T14659] ext4_xattr_inode_update_ref+0x474/0x4b8 [ 454.008436][T14659] ext4_xattr_set_entry+0x918/0x15a0 [ 454.009337][T14659] ext4_xattr_ibody_set+0x204/0x5f8 [ 454.010263][T14659] ext4_expand_extra_isize_ea+0xea4/0x17ac [ 454.011273][T14659] __ext4_expand_extra_isize+0x298/0x358 [ 454.012280][T14659] __ext4_mark_inode_dirty+0x3e4/0x784 [ 454.013222][T14659] ext4_evict_inode+0xb64/0x1278 [ 454.014078][T14659] evict+0x3e0/0x828 [ 454.014764][T14659] iput+0x754/0x7e4 [ 454.015432][T14659] ext4_process_orphan+0x240/0x2b4 [ 454.016301][T14659] ext4_orphan_cleanup+0x920/0x1060 [ 454.017187][T14659] ext4_fill_super+0x594c/0x61b0 [ 454.018013][T14659] get_tree_bdev+0x358/0x544 [ 454.018837][T14659] ext4_get_tree+0x28/0x38 [ 454.019629][T14659] vfs_get_tree+0x90/0x274 [ 454.020448][T14659] do_new_mount+0x228/0x810 [ 454.021264][T14659] path_mount+0x5bc/0xe80 [ 454.022030][T14659] __arm64_sys_mount+0x49c/0x59c [ 454.022920][T14659] invoke_syscall+0x98/0x2b4 [ 454.023715][T14659] el0_svc_common+0x138/0x258 [ 454.024546][T14659] do_el0_svc+0x58/0x130 [ 454.025303][T14659] el0_svc+0x58/0x128 [ 454.026020][T14659] el0t_64_sync_handler+0x84/0xf0 [ 454.026868][T14659] el0t_64_sync+0x18c/0x190 [ 454.027676][T14659] irq event stamp: 3377 [ 454.028430][T14659] hardirqs last enabled at (3377): [] __find_get_block+0x1c4/0xddc [ 454.030159][T14659] hardirqs last disabled at (3376): [] __find_get_block+0x9c/0xddc [ 454.031862][T14659] softirqs last enabled at (2734): [] handle_softirqs+0xaec/0xc60 [ 454.033530][T14659] softirqs last disabled at (2525): [] __do_softirq+0x14/0x20 [ 454.035136][T14659] ---[ end trace 0000000000000000 ]--- [ 454.535824][T14659] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.3574: bit already cleared for inode 11 [ 454.538152][T14659] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 454.540222][T14659] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 454.541706][T14659] EXT4-fs (loop5): 1 orphan inode deleted [ 454.542723][T14659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 454.576845][T12471] EXT4-fs (loop5): unmounting filesystem. [ 454.961709][ T5779] device hsr_slave_0 left promiscuous mode [ 455.020193][ T5779] device hsr_slave_1 left promiscuous mode [ 455.115708][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.117156][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.118657][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.119952][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.121475][ T5779] device bridge_slave_1 left promiscuous mode [ 455.122519][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.159185][ T5779] device bridge_slave_0 left promiscuous mode [ 455.160341][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.286692][ T5779] device veth1_macvtap left promiscuous mode [ 455.287875][ T5779] device veth0_macvtap left promiscuous mode [ 455.288918][ T5779] device veth1_vlan left promiscuous mode [ 455.290019][ T5779] device veth0_vlan left promiscuous mode [ 456.048222][ T5779] bond5 (unregistering): Released all slaves [ 456.742410][ T5779] bond4 (unregistering): Released all slaves [ 457.566181][ T5779] bond3 (unregistering): Released all slaves [ 458.269288][ T5779] bond2 (unregistering): Released all slaves [ 458.975044][ T5779] bond1 (unregistering): Released all slaves [ 460.501885][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.502935][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.164887][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 461.346987][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 461.528837][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.752472][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.713445][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 463.324120][ T5779] bond0 (unregistering): Released all slaves