last executing test programs: 44.652532122s ago: executing program 1 (id=93): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2000000000}) 44.496394095s ago: executing program 1 (id=94): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@bsdgroups}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") unlink(&(0x7f0000000000)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 43.951634276s ago: executing program 1 (id=97): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8d43) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 43.617068141s ago: executing program 1 (id=98): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 42.888992335s ago: executing program 1 (id=101): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 42.180394148s ago: executing program 1 (id=104): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="97") 41.733313406s ago: executing program 32 (id=104): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="97") 20.093018267s ago: executing program 3 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x34}}, 0x0) 19.831913412s ago: executing program 3 (id=213): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4807}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8}]]}}}]}, 0x40}}, 0x0) 19.748356624s ago: executing program 3 (id=214): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8018, &(0x7f0000000240)=ANY=[], 0x1, 0x5bd, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8043, 0x26) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 19.528613348s ago: executing program 3 (id=215): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 18.901832509s ago: executing program 3 (id=218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.296402701s ago: executing program 3 (id=224): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRESHEX], 0x2, 0xa8f, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x244) sendfile(r0, r0, 0x0, 0x800000009) 17.977087377s ago: executing program 33 (id=224): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRESHEX], 0x2, 0xa8f, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x244) sendfile(r0, r0, 0x0, 0x800000009) 6.98555984s ago: executing program 0 (id=281): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009040100011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 4.674001203s ago: executing program 0 (id=287): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 4.189311102s ago: executing program 0 (id=293): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3.945176127s ago: executing program 0 (id=295): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 2.991283234s ago: executing program 5 (id=302): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x7, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2, 0x0, 0x0, 0x49c7}]}}]}]}, 0x3c}}, 0x0) 2.742684279s ago: executing program 4 (id=305): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x2000c080) 2.620436821s ago: executing program 5 (id=306): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100), 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 2.412911945s ago: executing program 5 (id=307): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000580)=0x4) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa8e81) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) 2.412187265s ago: executing program 4 (id=308): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000280)={{@hyper, 0x8000}, {}, 0x400, "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"}, 0x418, 0x6}) 2.346453486s ago: executing program 5 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xe}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x7}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 2.14047971s ago: executing program 5 (id=310): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x54fe, &(0x7f0000006000)="$eJzs3MtrY1UcB/CTPqbzciziwt1cGIQWJqHpY9Bd1Rl8YIfiY+FK0yQNmUlyS5OmtSsXLsWF/4kouHLp3+DCtTtxobgTlNxzKlN1QGkmmc58PnD7vffk5pffCaXl3IQbgKfWYvbbL6VwLVwKIcyGEK6GUOyX0lbYjPFCCOF6CGHmga2Uxv8auBBCuBxCuDYqHmuW0kNf3Bze2Pj5rV+//X5h7sqX3/wwvVkD0/ZiCKG7F/cPuzHzVsx7abw2bBfZXR+mjA9076fjPOZhc6eocFg7Oa9W5Fornp/vHfRHudup1UfZau8W43u9+IL9YeukTvGEe7X94rjR3Cmy3c+LbB3Hvo6O49+24/4g1mmkeh8X5cNgcJJxvHnUjPPZu19kvTdI47Fu3mgejXKYMr1cqOedRtHHzlne6cfb2+3ewVE2bO7323kv26hUX6pUb5Wr+3mjOWiul2vdxq31bKnVGZ1WHjRr3c1Wnrc6zUo97y5nS616vVytZku3mzvtWi+rVitrlZXyxnLau5m9fvf9rNPIlkb5art3MGh3+tluvp/FZyxnq5W1l5ezG9Xs3a3tbPudO3e2tt/78PYHd1/ZevO1dNI/2sqWVldWV8vVlfJqdfn8zn/0v/5/zf/T1PQY5w8ATJb1PzAN5339H6z/x8L6/+meP5xJadoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLT/Of/VGsbMYj6+k8WfS0HPpuBRCmAkh/PEvZsOFUzVnU535h5w//7ceviuFosLoNRbSdjmEsJm235991O8CAAAAPLm+/uT653G1Hn8sTrshJiletJm5+tGY6pVCCPOLP42hSkgXm8LzZ+8qGv1+z4WjMVUrLmBdHFOxeMltblzV/pPZU3HxgSjFmJloOwAAwEScXglMdhUCAADAJH027QaYjuKT1vRd/PQF/oUY6QPBS6eOAAAAgHOoNO0GAAAAgEeuWP8/5P5/i+7/BwAAAE+GeP8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JOd+8lJHYriAHxa6Hu8P0ZinLsVZ7AMl+DQoWEBboIl4BbcAGvAmUswYGhLtAYTk962kXxf0l5uQ36cEibnXlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLz8Vq/nh/9dA2Z7trJ83dAAAAAMdsitW8fDGt5v/q62f1pYt6nkVEHhHHevdR/Gpkjuqc4ov3F59qeIooE/af8bs+/kbEdX28nnf9LQAAAMDpWi+Ws6pbr07ToQuiT9WiTf7/JlFeFhHF9CVRWr4/XSYKK3/f47hLlFYuYE0ShVVLbuNUad8yagyTD0NWDXmv5QAAAL1odgL9diEAAAD06XboAhhGFoetzMNecPnP+/cNwT+NGQAAAPADZUMXAAAAAHSu7P89/w8AAABOW/X8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq0KVbz9WI5a5uz3bWT5m4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCN/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3vzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G278BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527t9FjioOAPibnZ2NiYrrKVuciIKFNmaziYlpLZTDwj9BOC6beLrxR3KFCUG8xk62TiNaigjK2d3/kDqBNLFLsUUEQbCIzK+7lzXgmpCZTe7zgTfvO8Mw7/vmjuO+82YXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNrsnf04zTf9Mu5Ux67fubKR9zfm+tzuNAu705ur4a+7pUYzX3ovxzvJoL1EAAAAODjSur4PIdzKdtbyvtMv6v+sPiev+b9/toyT6th83V/3ed1ft99+vf3i3kD9cpz8omc3J+Nj/06l++hmudye+88zusWdL569pMUPpPP+9guzrLifybfXrr3bK8JDTWQLADyIo3VfBfX/Q3k/ajMxAA6MblR41/V/2m83JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm9LbD03WchBBWu/tx7sadKxtFP7e/O725WrdTV69O42vml8hCCGc3J+NjTU3kMXDx0uVP1ieT8YXmg1dCCO2NXgUfLnBOCG1mKHjYoFP9ri9LPo9H0PIfJgAAnjhZ1fK6/la2s5YfS1ZCuPvDvfX/61Ec4vp/ro/r/9sfnboejxXX/6PGZrj8hlvnPx9evHT5zc3z6+fG58afvnV89PboxOmTJ08Pi2clQ09MAAAAeDi9qsX1/9crIczm1v+PRHFYsP7/4rvRV/FYqfr/vvYX/drOBAAA4GB7/tU//0juczzp9cKX61tbF0bldm//eLltIdX/7VDV4vo/XWk7KwAAAKAJs+3knvX/M1EcFlz/f+bHl36Or5mGEA5X6/9HNz6bnGluOi35e6Gzmvg48SOfKgAAAEvtcNWK9f/6S7qK9/87e6885IffeK2Mq68BXKj+T9/75qd4rPj9/xMNzW9ZdQbl/Sj6QQjdQdsZAQAA8CR7qmp5sf97trP28S9HPuh5/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaf8EAAD//6E7RNw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) 2.096243271s ago: executing program 2 (id=311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.006502213s ago: executing program 0 (id=312): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) 2.005896883s ago: executing program 4 (id=313): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000240)={[{@rodir}, {@uni_xlateno}, {@rodir}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@rodir}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@rodir}]}, 0x25, 0x365, &(0x7f0000000640)="$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") setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff0180", 0x41) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) 1.906368374s ago: executing program 2 (id=314): r0 = io_uring_setup(0x6689, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x5e4c, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 1.310941105s ago: executing program 2 (id=315): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 1.193489018s ago: executing program 4 (id=316): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489", 0xa}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 724.019816ms ago: executing program 4 (id=317): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x38) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 640.419768ms ago: executing program 0 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001d122610d118af1e7907010000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="001102000000bb"], 0x0, 0x0, 0x0, 0x0}) 532.14746ms ago: executing program 2 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 231.248786ms ago: executing program 4 (id=320): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x14}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 191.314956ms ago: executing program 2 (id=321): setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setfsgid(r0) 12.369099ms ago: executing program 2 (id=322): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4812987e"}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}, [@mdlm_detail={0x6e, 0x24, 0x13, 0xee, "518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff5"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x401, 0x3, 0x5, 0x7, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 0s ago: executing program 5 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x40, r1, 0x5, 0x70bd2d, 0xffffffec, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 67.462471][ T5773] cgroup: Unknown subsys name 'net' [ 67.624877][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.318395][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.318384][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.335475][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.336120][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.344981][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.351918][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.365239][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.368585][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.373930][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.388427][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.395938][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.398536][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.410656][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.418984][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.425298][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.435382][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.437376][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.444905][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.450911][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.465531][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.472460][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.487545][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.495097][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.503482][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.511224][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.713003][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.727681][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.999594][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 72.109516][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 72.126596][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 72.194630][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 72.266946][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.275185][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.283068][ T5787] bridge_slave_0: entered allmulticast mode [ 72.290458][ T5787] bridge_slave_0: entered promiscuous mode [ 72.326842][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.334144][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.341984][ T5787] bridge_slave_1: entered allmulticast mode [ 72.349304][ T5787] bridge_slave_1: entered promiscuous mode [ 72.404068][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.411972][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.419641][ T5789] bridge_slave_0: entered allmulticast mode [ 72.427538][ T5789] bridge_slave_0: entered promiscuous mode [ 72.445066][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.455082][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.462865][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.470276][ T5789] bridge_slave_1: entered allmulticast mode [ 72.477182][ T5789] bridge_slave_1: entered promiscuous mode [ 72.512614][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.555389][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.563326][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.570782][ T5784] bridge_slave_0: entered allmulticast mode [ 72.577930][ T5784] bridge_slave_0: entered promiscuous mode [ 72.621723][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.629188][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.636351][ T5784] bridge_slave_1: entered allmulticast mode [ 72.645525][ T5784] bridge_slave_1: entered promiscuous mode [ 72.655589][ T5787] team0: Port device team_slave_0 added [ 72.665511][ T5787] team0: Port device team_slave_1 added [ 72.673937][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.684266][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.692267][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.699715][ T5783] bridge_slave_0: entered allmulticast mode [ 72.706782][ T5783] bridge_slave_0: entered promiscuous mode [ 72.755402][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.776121][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.783685][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.791091][ T5783] bridge_slave_1: entered allmulticast mode [ 72.799819][ T5783] bridge_slave_1: entered promiscuous mode [ 72.816318][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.823749][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.850308][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.892644][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.902891][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.911015][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.937093][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.951208][ T5789] team0: Port device team_slave_0 added [ 72.961437][ T5789] team0: Port device team_slave_1 added [ 72.978681][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.025773][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.050213][ T5784] team0: Port device team_slave_0 added [ 73.084744][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.096174][ T5784] team0: Port device team_slave_1 added [ 73.125222][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.132604][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.159647][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.198804][ T5787] hsr_slave_0: entered promiscuous mode [ 73.205298][ T5787] hsr_slave_1: entered promiscuous mode [ 73.213555][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.221121][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.247972][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.272054][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.279226][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.306026][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.319612][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.326876][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.353353][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.386149][ T5783] team0: Port device team_slave_0 added [ 73.436432][ T5784] hsr_slave_0: entered promiscuous mode [ 73.443493][ T5784] hsr_slave_1: entered promiscuous mode [ 73.450378][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.458812][ T5784] Cannot create hsr debugfs directory [ 73.466689][ T5783] team0: Port device team_slave_1 added [ 73.473121][ T5796] Bluetooth: hci2: command tx timeout [ 73.548080][ T5796] Bluetooth: hci3: command tx timeout [ 73.548098][ T5791] Bluetooth: hci1: command tx timeout [ 73.548339][ T5791] Bluetooth: hci0: command tx timeout [ 73.586562][ T5789] hsr_slave_0: entered promiscuous mode [ 73.593756][ T5789] hsr_slave_1: entered promiscuous mode [ 73.601279][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.609002][ T5789] Cannot create hsr debugfs directory [ 73.620840][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.629563][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.656702][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.669953][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.677018][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.703611][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.906142][ T5783] hsr_slave_0: entered promiscuous mode [ 73.913755][ T5783] hsr_slave_1: entered promiscuous mode [ 73.920403][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.928272][ T5783] Cannot create hsr debugfs directory [ 74.097075][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.122809][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.132944][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.154778][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.252615][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.267744][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.292007][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.322671][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.366504][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.390171][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.413400][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.446076][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.495325][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.506605][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.529068][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.545016][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.630859][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.706235][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.751421][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.758902][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.770736][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.778079][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.811241][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.873271][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.892808][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.924002][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.966335][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.980015][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.996782][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.003996][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.040355][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.047562][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.065318][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.072563][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.093314][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.100528][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.138825][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.146113][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.163599][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.170923][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.321281][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.369261][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.526170][ T5787] veth0_vlan: entered promiscuous mode [ 75.548588][ T5791] Bluetooth: hci2: command tx timeout [ 75.569195][ T5787] veth1_vlan: entered promiscuous mode [ 75.627801][ T5791] Bluetooth: hci3: command tx timeout [ 75.627823][ T5788] Bluetooth: hci1: command tx timeout [ 75.633331][ T5791] Bluetooth: hci0: command tx timeout [ 75.680566][ T5787] veth0_macvtap: entered promiscuous mode [ 75.712451][ T5787] veth1_macvtap: entered promiscuous mode [ 75.771053][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.826455][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.852541][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.863717][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.873393][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882242][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.926607][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.978534][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.040085][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.067191][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.077000][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.155277][ T2876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.171399][ T2876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.193171][ T5784] veth0_vlan: entered promiscuous mode [ 76.241790][ T5789] veth0_vlan: entered promiscuous mode [ 76.280483][ T5783] veth0_vlan: entered promiscuous mode [ 76.295961][ T5789] veth1_vlan: entered promiscuous mode [ 76.323876][ T5784] veth1_vlan: entered promiscuous mode [ 76.380356][ T5783] veth1_vlan: entered promiscuous mode [ 76.441166][ T5784] veth0_macvtap: entered promiscuous mode [ 76.465956][ T5784] veth1_macvtap: entered promiscuous mode [ 76.515468][ T5789] veth0_macvtap: entered promiscuous mode [ 76.540492][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.551690][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.566842][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.576089][ T5783] veth0_macvtap: entered promiscuous mode [ 76.589850][ T5789] veth1_macvtap: entered promiscuous mode [ 76.602172][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.613012][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.630635][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.644820][ T5783] veth1_macvtap: entered promiscuous mode [ 76.668737][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.679911][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.690094][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.701483][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.713777][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.725514][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.734491][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743938][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.753428][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.770961][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.781769][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.791937][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.802501][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.813940][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.834788][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.844595][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.853898][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.863092][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.883549][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.894582][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.905231][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.917609][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.928017][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.938681][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.950087][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.009947][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.020907][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.031338][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.042505][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.052604][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.063173][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.075605][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.107069][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.116900][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.127080][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.136379][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.194645][ T2876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.209311][ T2876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.253484][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.265794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.306076][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.322633][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.387007][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.428924][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.486967][ T2876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.519497][ T2876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.532127][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.578522][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.627468][ T5791] Bluetooth: hci2: command tx timeout [ 77.708498][ T5791] Bluetooth: hci1: command tx timeout [ 77.709306][ T5796] Bluetooth: hci3: command tx timeout [ 77.720169][ T5788] Bluetooth: hci0: command tx timeout [ 77.893266][ T5883] syz.2.3[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.924106][ T5883] loop2: detected capacity change from 0 to 128 [ 77.986496][ T5883] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.064809][ T5883] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.100611][ T5883] EXT4-fs (loop2): shut down requested (1) [ 78.157999][ T5892] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8'. [ 78.180040][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.518018][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.933861][ T5904] loop3: detected capacity change from 0 to 4096 [ 79.042959][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.581072][ T5917] sctp: Trying to GSO but underlying device doesn't support it. [ 79.709027][ T5788] Bluetooth: hci2: command tx timeout [ 79.777093][ T5905] loop1: detected capacity change from 0 to 32768 [ 79.787532][ T5788] Bluetooth: hci1: command tx timeout [ 79.799904][ T5788] Bluetooth: hci0: command tx timeout [ 79.805409][ T5796] Bluetooth: hci3: command tx timeout [ 79.817894][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.917100][ T5905] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 80.024304][ T5905] XFS (loop1): Ending clean mount [ 80.047508][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 80.082770][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.115710][ T5905] XFS (loop1): Quotacheck needed: Please wait. [ 80.124194][ T5853] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.155114][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.218308][ T5853] usb 3-1: config 0 descriptor?? [ 80.228977][ T5905] XFS (loop1): Quotacheck: Done. [ 80.379265][ T28] audit: type=1800 audit(1757474174.641:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 80.560477][ T5787] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 80.673551][ T5853] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 80.849813][ T5796] Bluetooth: hci3: Dropping invalid advertising data [ 80.856938][ T5796] Bluetooth: hci3: Malformed LE Event: 0x02 [ 80.967994][ T5954] capability: warning: `syz.0.33' uses 32-bit capabilities (legacy support in use) [ 81.303524][ T5853] usb 3-1: USB disconnect, device number 2 [ 81.690763][ T5972] loop3: detected capacity change from 0 to 128 [ 81.774162][ T28] audit: type=1800 audit(1757474176.031:3): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.40" name="file2" dev="loop3" ino=1048592 res=0 errno=0 [ 82.191734][ T5977] loop3: detected capacity change from 0 to 64 [ 82.230234][ T5977] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 82.256210][ T5970] loop0: detected capacity change from 0 to 32768 [ 82.467007][ T5970] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 82.467007][ T5970] [ 82.522915][ T5970] xtLookup: xtSearch returned -5 [ 82.540211][ T5970] free_index: error reading directory table [ 82.783937][ T5983] loop2: detected capacity change from 0 to 4096 [ 82.924111][ T5992] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.954329][ T5991] loop0: detected capacity change from 0 to 128 [ 83.052191][ T5991] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.127887][ T5991] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.499990][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.756069][ T6001] loop2: detected capacity change from 0 to 2048 [ 83.797845][ T6001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.287411][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.479892][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.491244][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.501864][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.514528][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.528022][ T6005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.551758][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 84.781045][ T5853] usb 2-1: USB disconnect, device number 2 [ 85.305553][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 85.614331][ T6040] loop1: detected capacity change from 0 to 64 [ 85.726267][ T6040] hfs: request for non-existent node 1280 in B*Tree [ 85.744814][ T6040] hfs: request for non-existent node 1280 in B*Tree [ 85.767421][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.987494][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 86.013295][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.021834][ T6034] loop0: detected capacity change from 0 to 40427 [ 86.033681][ T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.053890][ T6034] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 86.057602][ T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.086758][ T6034] F2FS-fs (loop0): invalid crc value [ 86.114546][ T6034] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.121256][ T23] usb 4-1: Product: syz [ 86.157356][ T23] usb 4-1: Manufacturer: syz [ 86.162024][ T23] usb 4-1: SerialNumber: syz [ 86.199494][ T23] usb 4-1: config 0 descriptor?? [ 86.209797][ T6034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.223151][ T6038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.261894][ T23] hub 4-1:0.0: bad descriptor, ignoring hub [ 86.268817][ T23] hub: probe of 4-1:0.0 failed with error -5 [ 86.343948][ T5784] syz-executor: attempt to access beyond end of device [ 86.343948][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.393661][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 86.659287][ T23] usb 4-1: USB disconnect, device number 3 [ 86.878114][ T6064] loop2: detected capacity change from 0 to 512 [ 86.948795][ T6064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.987758][ T6064] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.094338][ T54] cfg80211: failed to load regulatory.db [ 87.097597][ T6070] Bluetooth: MGMT ver 1.22 [ 87.448200][ T6079] syz.1.84 (6079) used greatest stack depth: 19472 bytes left [ 87.705366][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.319512][ T6088] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 88.385070][ T6091] netem: change failed [ 88.546942][ T6095] loop3: detected capacity change from 0 to 512 [ 88.565781][ T6095] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.585940][ T6095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.633109][ T6095] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.647983][ T6095] EXT4-fs (loop3): 1 truncate cleaned up [ 88.656187][ T6095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.695046][ T6095] fscrypt (loop3, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 89.080345][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.093682][ T6102] loop1: detected capacity change from 0 to 512 [ 89.147665][ T5788] Bluetooth: hci2: command 0x0401 tx timeout [ 89.154668][ T5796] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 89.236385][ T6102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.285336][ T6102] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.507504][ T54] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.600581][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.732405][ T54] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 89.758220][ T54] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.787391][ T54] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.804394][ T54] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 89.824641][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.856207][ T6110] loop0: detected capacity change from 0 to 32768 [ 89.865957][ T54] usb 3-1: config 0 descriptor?? [ 89.890625][ T6110] XFS: attr2 mount option is deprecated. [ 89.891722][ T6105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.946698][ T6110] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 89.956706][ T6118] loop1: detected capacity change from 0 to 512 [ 90.007918][ T6118] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.062791][ T6110] XFS (loop0): Ending clean mount [ 90.104866][ T6110] XFS (loop0): Quotacheck needed: Please wait. [ 90.156510][ T6108] loop3: detected capacity change from 0 to 32768 [ 90.205029][ T6118] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 90.223822][ T6110] XFS (loop0): Quotacheck: Done. [ 90.263522][ T6108] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.276662][ T6118] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 90.276755][ T6118] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.98: Failed to acquire dquot type 0 [ 90.340236][ T6118] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 90.367710][ T54] elo 0003:04E7:0030.0002: unknown main item tag 0x0 [ 90.402588][ T54] elo 0003:04E7:0030.0002: unknown main item tag 0x0 [ 90.420722][ T54] elo 0003:04E7:0030.0002: hidraw0: USB HID v1.01 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 90.465506][ T6108] XFS (loop3): Ending clean mount [ 90.496952][ T6108] XFS (loop3): Quotacheck needed: Please wait. [ 90.558556][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.570011][ T5787] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /24/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 90.596461][ T5775] usb 3-1: USB disconnect, device number 3 [ 90.599108][ T6108] XFS (loop3): Quotacheck: Done. [ 90.687677][ T28] audit: type=1800 audit(1757474184.941:4): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.92" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 90.797676][ T6133] fido_id[6133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 90.869062][ T5789] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.476130][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.520754][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 91.597440][ T965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.671781][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.787679][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 91.817583][ T965] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 91.824479][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.825782][ T965] usb 1-1: config 0 has no interface number 0 [ 91.842869][ T6135] loop3: detected capacity change from 0 to 32768 [ 91.859927][ T6135] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.102 (6135) [ 91.907530][ T965] usb 1-1: config 0 interface 46 has no altsetting 0 [ 91.933555][ T965] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=f3.33 [ 91.961362][ T6135] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 91.987001][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.017915][ T6135] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 92.027972][ T965] usb 1-1: Product: syz [ 92.031050][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.032170][ T965] usb 1-1: Manufacturer: syz [ 92.052380][ T6135] BTRFS info (device loop3): using free space tree [ 92.120503][ T965] usb 1-1: SerialNumber: syz [ 92.138454][ T965] usb 1-1: config 0 descriptor?? [ 92.366502][ T6135] BTRFS info (device loop3): enabling ssd optimizations [ 92.399216][ T965] f81534a_ctrl 1-1:0.46: failed to set register 0x116: -5 [ 92.406417][ T965] f81534a_ctrl 1-1:0.46: failed to enable ports: -5 [ 92.417649][ T6135] BTRFS info (device loop3): auto enabling async discard [ 92.427501][ T965] f81534a_ctrl: probe of 1-1:0.46 failed with error -5 [ 92.442176][ T965] usb 1-1: USB disconnect, device number 2 [ 93.050592][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.076738][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.086276][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.103712][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.113676][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.128200][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.242225][ T5789] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.910228][ T6163] loop2: detected capacity change from 0 to 32768 [ 94.010335][ T6163] (syz.2.106,6163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 94.041538][ T965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.062393][ T6163] (syz.2.106,6163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 94.236877][ T6163] JBD2: Ignoring recovery information on journal [ 94.257881][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 94.266322][ T965] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.286779][ T965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.297651][ T965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.307932][ T965] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.321315][ T965] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.354295][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.466746][ T6163] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.627472][ T965] usb 1-1: GET_CAPABILITIES returned 0 [ 94.633239][ T965] usbtmc 1-1:16.0: can't read capabilities [ 94.757619][ T6166] chnl_net:caif_netlink_parms(): no params data found [ 94.914145][ T54] usb 1-1: USB disconnect, device number 3 [ 94.999045][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 95.235821][ T5788] Bluetooth: hci2: command tx timeout [ 95.466511][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.495531][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.508067][ T6166] bridge_slave_0: entered allmulticast mode [ 95.527860][ T6166] bridge_slave_0: entered promiscuous mode [ 95.550567][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.575009][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.597553][ T6166] bridge_slave_1: entered allmulticast mode [ 95.618844][ T6166] bridge_slave_1: entered promiscuous mode [ 95.800972][ T42] hsr_slave_0: left promiscuous mode [ 95.813507][ T42] hsr_slave_1: left promiscuous mode [ 95.831218][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.845769][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.869137][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.897521][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.911240][ T42] bridge_slave_1: left allmulticast mode [ 95.930377][ T42] bridge_slave_1: left promiscuous mode [ 95.948611][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.995677][ T42] bridge_slave_0: left allmulticast mode [ 96.016553][ T42] bridge_slave_0: left promiscuous mode [ 96.034100][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.090788][ T6232] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.105940][ T42] veth1_macvtap: left promiscuous mode [ 96.127684][ T42] veth0_macvtap: left promiscuous mode [ 96.134725][ T42] veth1_vlan: left promiscuous mode [ 96.150021][ T42] veth0_vlan: left promiscuous mode [ 96.265194][ T6237] loop3: detected capacity change from 0 to 8 [ 97.302814][ T6253] loop3: detected capacity change from 0 to 512 [ 97.311071][ T5788] Bluetooth: hci2: command tx timeout [ 97.377335][ T6253] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.130: casefold flag without casefold feature [ 97.401505][ T6253] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.130: couldn't read orphan inode 15 (err -117) [ 97.432628][ T6253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.590655][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.610355][ T42] team0 (unregistering): Port device team_slave_1 removed [ 97.704283][ T42] team0 (unregistering): Port device team_slave_0 removed [ 97.784652][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.840813][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.338602][ T42] bond0 (unregistering): Released all slaves [ 98.437005][ T6166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.492944][ T6166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.706928][ T6166] team0: Port device team_slave_0 added [ 98.753330][ T6166] team0: Port device team_slave_1 added [ 99.070299][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.105855][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.183274][ T6166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.242128][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.264454][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.335030][ T6166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.387714][ T5788] Bluetooth: hci2: command tx timeout [ 99.635560][ T6166] hsr_slave_0: entered promiscuous mode [ 99.654231][ T6166] hsr_slave_1: entered promiscuous mode [ 99.857542][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.927771][ T6286] loop0: detected capacity change from 0 to 32768 [ 99.967773][ T6286] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.140 (6286) [ 100.026598][ T6286] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.047635][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 100.071532][ T23] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 100.091098][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.099324][ T6166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.099438][ T6286] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 100.138373][ T23] usb 4-1: Product: syz [ 100.142615][ T23] usb 4-1: Manufacturer: syz [ 100.155272][ T6166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.164872][ T23] usb 4-1: SerialNumber: syz [ 100.188140][ T6286] BTRFS info (device loop0): use no compression [ 100.212507][ T6286] BTRFS info (device loop0): using free space tree [ 100.217910][ T6166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.228577][ T23] usb 4-1: config 0 descriptor?? [ 100.246898][ T23] gspca_main: sq930x-2.14.0 probing 2770:930c [ 100.253266][ T6166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.403647][ T6286] BTRFS info (device loop0): enabling ssd optimizations [ 100.410884][ T6286] BTRFS info (device loop0): auto enabling async discard [ 100.663899][ T6166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.717181][ T6166] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.743154][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.750469][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.804867][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.812155][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.883809][ T6166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.894714][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 100.946527][ T5784] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.122317][ T23] gspca_sq930x: ucbus_write failed -71 [ 101.148573][ T8] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 101.164082][ T8] usb 3-1: config 0 has no interface number 0 [ 101.190926][ T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 101.207681][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.223075][ T8] usb 3-1: Product: syz [ 101.255106][ T8] usb 3-1: Manufacturer: syz [ 101.260518][ T8] usb 3-1: SerialNumber: syz [ 101.288510][ T8] usb 3-1: config 0 descriptor?? [ 101.387494][ T23] gspca_sq930x: Sensor ov9630 not yet treated [ 101.393822][ T23] sq930x: probe of 4-1:0.0 failed with error -22 [ 101.417778][ T23] usb 4-1: USB disconnect, device number 4 [ 101.469308][ T5788] Bluetooth: hci2: command tx timeout [ 101.490060][ T6166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.745793][ T8] usb 3-1: Firmware: major: 0, minor: 64, hardware type: ATUSB (0) [ 101.947073][ T8] usb 3-1: failed to fetch extended address, random address set [ 102.054516][ T8] usb 3-1: USB disconnect, device number 4 [ 102.193108][ T6166] veth0_vlan: entered promiscuous mode [ 102.222511][ T6166] veth1_vlan: entered promiscuous mode [ 102.262348][ T6166] veth0_macvtap: entered promiscuous mode [ 102.288194][ T6166] veth1_macvtap: entered promiscuous mode [ 102.321468][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.332721][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.343970][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.355126][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.365865][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.376919][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.398567][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.447752][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.466803][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.481295][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.501048][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.512264][ T6166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.524376][ T6166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.536768][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.560009][ T6166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.579708][ T6166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.613616][ T6166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.653019][ T6166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.903507][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.947341][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.042197][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.058867][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.648163][ T6388] program syz.3.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.692009][ T6390] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.699234][ T6390] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.026061][ T6366] loop2: detected capacity change from 0 to 32768 [ 104.139885][ T6366] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.171397][ T6410] loop3: detected capacity change from 0 to 2048 [ 104.197923][ T6410] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.270767][ T6417] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.345478][ T6366] XFS (loop2): Ending clean mount [ 104.459246][ T6366] XFS (loop2): Quotacheck needed: Please wait. [ 104.632485][ T6366] XFS (loop2): Quotacheck: Done. [ 104.674387][ T6426] capability: warning: `syz.3.161' uses deprecated v2 capabilities in a way that may be insecure [ 104.719425][ T28] audit: type=1800 audit(1757474198.981:5): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.146" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 105.002724][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.288751][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.487396][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 105.500349][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.527418][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.578964][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.585662][ T8] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 105.615806][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.658204][ T8] usb 4-1: config 0 descriptor?? [ 105.674712][ T6446] program syz.2.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.780303][ T6430] loop0: detected capacity change from 0 to 32768 [ 105.855524][ T6430] (syz.0.163,6430,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.908416][ T6430] (syz.0.163,6430,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.975936][ T6430] JBD2: Ignoring recovery information on journal [ 106.155173][ T8] cougar 0003:060B:500A.0003: unexpected long global item [ 106.180117][ T8] cougar 0003:060B:500A.0003: parse failed [ 106.180915][ T6430] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.207962][ T8] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 106.389646][ T8] usb 4-1: USB disconnect, device number 5 [ 106.453719][ T6460] loop2: detected capacity change from 0 to 256 [ 106.473692][ T6460] ======================================================= [ 106.473692][ T6460] WARNING: The mand mount option has been deprecated and [ 106.473692][ T6460] and is ignored by this kernel. Remove the mand [ 106.473692][ T6460] option from the mount to silence this warning. [ 106.473692][ T6460] ======================================================= [ 106.550518][ T6430] syz.0.163: attempt to access beyond end of device [ 106.550518][ T6430] loop0: rw=2051, sector=28680, nr_sectors = 28664 limit=32768 [ 106.579768][ T6460] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 106.607609][ T6430] (syz.0.163,6430,0):ocfs2_trim_group:7511 ERROR: status = -5 [ 106.638562][ T6430] (syz.0.163,6430,0):ocfs2_trim_mainbm:7622 ERROR: status = -5 [ 106.711433][ T6460] exFAT-fs (loop2): error, invalid size(size(1) > aligned(9223372036854777344) [ 106.711433][ T6460] [ 106.730954][ T6443] loop4: detected capacity change from 0 to 32768 [ 106.750671][ T6460] exFAT-fs (loop2): Filesystem has been set read-only [ 106.778009][ T6443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.168 (6443) [ 106.808842][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 106.878193][ T6443] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.935256][ T6443] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 106.995705][ T6443] BTRFS info (device loop4): using free space tree [ 107.222481][ T6443] BTRFS info (device loop4): enabling ssd optimizations [ 107.257482][ T6443] BTRFS info (device loop4): auto enabling async discard [ 107.530977][ T6166] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.651710][ T6493] loop3: detected capacity change from 0 to 128 [ 107.715052][ T5786] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (5786) [ 107.774861][ T6493] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.883679][ T6493] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.119699][ T6493] EXT4-fs warning (device loop3): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 108.331138][ T5789] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.217067][ T6505] loop4: detected capacity change from 0 to 32768 [ 109.308902][ T6510] loop0: detected capacity change from 0 to 32768 [ 109.331934][ T6505] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.432913][ T6510] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 109.530354][ T6505] XFS (loop4): Ending clean mount [ 109.576583][ T6505] XFS (loop4): Quotacheck needed: Please wait. [ 109.596729][ T6510] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.824574][ T6505] XFS (loop4): Quotacheck: Done. [ 109.997385][ T28] audit: type=1800 audit(1757474204.241:6): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 110.194423][ T6510] syz.0.179 (6510) used greatest stack depth: 19216 bytes left [ 110.255660][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 110.357894][ T6166] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.571882][ T6525] loop3: detected capacity change from 0 to 32768 [ 110.609641][ T6525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.183 (6525) [ 110.652066][ T6525] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.679158][ T6525] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 110.700511][ T54] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.711423][ T6525] BTRFS info (device loop3): using free space tree [ 110.846824][ T6565] netlink: 884 bytes leftover after parsing attributes in process `syz.0.187'. [ 110.921498][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 110.950885][ T54] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.973001][ T6525] BTRFS info (device loop3): enabling ssd optimizations [ 110.997435][ T6525] BTRFS info (device loop3): auto enabling async discard [ 110.999516][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.052737][ T54] usb 3-1: Product: syz [ 111.056979][ T54] usb 3-1: Manufacturer: syz [ 111.092911][ T54] usb 3-1: SerialNumber: syz [ 111.127063][ T54] r8152-cfgselector 3-1: config 0 descriptor?? [ 111.311466][ T6583] loop4: detected capacity change from 0 to 1024 [ 111.325591][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.359324][ T6583] EXT4-fs: Ignoring removed bh option [ 111.480177][ T6583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.580028][ T54] r8152-cfgselector 3-1: Unknown version 0x0000 [ 111.596878][ T54] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 111.806141][ T5786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5786) [ 111.907741][ T6166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.021070][ T6600] bond0: entered allmulticast mode [ 112.072534][ T6600] bond_slave_0: entered allmulticast mode [ 112.098642][ T6600] bond_slave_1: entered allmulticast mode [ 112.638417][ T5775] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.849290][ T5775] usb 1-1: Using ep0 maxpacket: 32 [ 112.883350][ T5775] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 112.893369][ T5775] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 112.913909][ T5775] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 112.933334][ T5775] usb 1-1: config 1 has no interface number 0 [ 112.947424][ T5775] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.981122][ T5775] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 112.995158][ T5775] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 113.010362][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.044308][ T5775] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 113.107399][ T965] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.258429][ T5775] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 113.300038][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.332188][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.350350][ T965] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 113.367613][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.418950][ T965] usb 5-1: config 0 descriptor?? [ 113.806245][ T8] usb 1-1: USB disconnect, device number 4 [ 113.808670][ T6649] loop3: detected capacity change from 0 to 512 [ 113.824139][ T6649] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 113.829109][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 113.875712][ T965] uclogic 0003:5543:0522.0004: No inputs registered, leaving [ 113.906636][ T965] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 113.927774][ T5775] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.113557][ T6652] loop3: detected capacity change from 0 to 1024 [ 114.130609][ T6652] EXT4-fs: Ignoring removed bh option [ 114.132362][ T5858] usb 5-1: USB disconnect, device number 2 [ 114.151255][ T6652] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 114.163156][ T5775] usb 3-1: Using ep0 maxpacket: 16 [ 114.173450][ T5775] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.201028][ T5775] usb 3-1: config 0 has no interface number 0 [ 114.208234][ T5775] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.218917][ T6652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.219550][ T5775] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 114.245648][ T5775] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.254958][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.263366][ T5775] usb 3-1: Product: syz [ 114.268191][ T5775] usb 3-1: SerialNumber: syz [ 114.277430][ T5775] usb 3-1: config 0 descriptor?? [ 114.289422][ T5775] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 114.300928][ T5775] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 114.375781][ T6652] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.215: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 114.404683][ T6652] EXT4-fs (loop3): Remounting filesystem read-only [ 114.438595][ T6652] overlayfs: cleanup of 'index/#8' failed (-5) [ 114.658446][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 114.890881][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.901662][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.909292][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.916959][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.924284][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.933054][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.940442][ T965] usb 3-1: USB disconnect, device number 6 [ 114.947485][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.954549][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 114.995008][ T965] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 115.029682][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.179840][ T1006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.274362][ T6674] xt_recent: Unsupported userspace flags (000000de) [ 115.361183][ T1006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.451751][ T1006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.597959][ T1006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.217509][ T6691] loop0: detected capacity change from 0 to 256 [ 116.250297][ T6691] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 116.533215][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.543842][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.560826][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.598290][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.615100][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.624725][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.938664][ T5775] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.117379][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 117.137799][ T5775] usb 5-1: Using ep0 maxpacket: 32 [ 117.153311][ T5775] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 117.177738][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.185832][ T5775] usb 5-1: Product: syz [ 117.197733][ T5775] usb 5-1: Manufacturer: syz [ 117.202494][ T5775] usb 5-1: SerialNumber: syz [ 117.221147][ T5775] usb 5-1: config 0 descriptor?? [ 117.259887][ T5775] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 117.365473][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.409135][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.479455][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.540823][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 117.588590][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.625632][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.659645][ T23] usb 3-1: Manufacturer: syz [ 117.680661][ T23] usb 3-1: config 0 descriptor?? [ 117.867136][ T6702] chnl_net:caif_netlink_parms(): no params data found [ 118.089279][ T5775] gspca_stk1135: reg_w 0x5 err -71 [ 118.095450][ T1006] hsr_slave_0: left promiscuous mode [ 118.096458][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.118615][ T5775] gspca_stk1135: Sensor write failed [ 118.124210][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.132051][ T1006] hsr_slave_1: left promiscuous mode [ 118.137378][ T5775] gspca_stk1135: Sensor write failed [ 118.137410][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.137422][ T5775] gspca_stk1135: Sensor read failed [ 118.137446][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.137456][ T5775] gspca_stk1135: Sensor read failed [ 118.137464][ T5775] gspca_stk1135: Detected sensor type unknown (0x0) [ 118.137493][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.137503][ T5775] gspca_stk1135: Sensor read failed [ 118.143253][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.193668][ T23] rc_core: IR keymap rc-hauppauge not found [ 118.200035][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.206831][ T23] Registered IR keymap rc-empty [ 118.213480][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.229453][ T5775] gspca_stk1135: Sensor read failed [ 118.234834][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.234906][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.241644][ T5775] gspca_stk1135: Sensor write failed [ 118.254476][ T5775] gspca_stk1135: serial bus timeout: status=0x00 [ 118.261089][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.268738][ T5775] gspca_stk1135: Sensor write failed [ 118.274291][ T5775] stk1135: probe of 5-1:0.0 failed with error -71 [ 118.287557][ T5775] usb 5-1: USB disconnect, device number 3 [ 118.302684][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.309130][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 118.340598][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.378270][ T1006] bridge_slave_1: left allmulticast mode [ 118.382519][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 118.388555][ T1006] bridge_slave_1: left promiscuous mode [ 118.424015][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.447658][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.466370][ T1006] bridge_slave_0: left allmulticast mode [ 118.472718][ T1006] bridge_slave_0: left promiscuous mode [ 118.486658][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.501031][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.567995][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.577687][ T1006] veth1_macvtap: left promiscuous mode [ 118.584559][ T1006] veth0_macvtap: left promiscuous mode [ 118.597315][ T1006] veth1_vlan: left promiscuous mode [ 118.609894][ T1006] veth0_vlan: left promiscuous mode [ 118.628764][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.645959][ T6753] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.652506][ T6753] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.677480][ T5796] Bluetooth: hci3: command tx timeout [ 118.690833][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.757432][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.792354][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.858701][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.899252][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.957680][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 119.008316][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 119.059860][ T23] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 119.110200][ T23] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 119.155269][ T23] usb 3-1: USB disconnect, device number 7 [ 120.135128][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 120.207192][ T6784] loop2: detected capacity change from 0 to 256 [ 120.248808][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 120.259925][ T6784] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 120.378470][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.460565][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.623994][ T6786] loop2: detected capacity change from 0 to 8192 [ 120.757581][ T5796] Bluetooth: hci3: command tx timeout [ 120.851553][ T6791] loop0: detected capacity change from 0 to 128 [ 121.444275][ T6792] loop2: detected capacity change from 0 to 32768 [ 121.470251][ T6792] XFS: attr2 mount option is deprecated. [ 121.562001][ T6792] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.706723][ T6792] XFS (loop2): Ending clean mount [ 122.000319][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.164839][ T1006] bond0 (unregistering): Released all slaves [ 122.361414][ T6810] loop0: detected capacity change from 0 to 4096 [ 122.392014][ T6810] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 122.575636][ T6810] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 122.820327][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.829053][ T5796] Bluetooth: hci3: command tx timeout [ 122.857523][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.903924][ T6702] bridge_slave_0: entered allmulticast mode [ 122.936089][ T6702] bridge_slave_0: entered promiscuous mode [ 122.975666][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.007786][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.034623][ T6702] bridge_slave_1: entered allmulticast mode [ 123.063824][ T6702] bridge_slave_1: entered promiscuous mode [ 123.241258][ T6702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.301221][ T6702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.396692][ T6814] loop2: detected capacity change from 0 to 32768 [ 123.415303][ T6814] XFS: ikeep mount option is deprecated. [ 123.424809][ T6814] XFS: ikeep mount option is deprecated. [ 123.438047][ T965] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.449603][ T6702] team0: Port device team_slave_0 added [ 123.456567][ T6814] XFS: noikeep mount option is deprecated. [ 123.483741][ T6702] team0: Port device team_slave_1 added [ 123.513758][ T6814] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.568662][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.576244][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.604236][ T6702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.618980][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.626255][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.652602][ T965] usb 5-1: Using ep0 maxpacket: 16 [ 123.660223][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.673403][ T965] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.683960][ T6702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.700440][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.727513][ T965] usb 5-1: config 0 descriptor?? [ 123.754830][ T6814] XFS (loop2): Ending clean mount [ 123.820161][ T6702] hsr_slave_0: entered promiscuous mode [ 123.827392][ T8] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 123.838110][ T6702] hsr_slave_1: entered promiscuous mode [ 123.845448][ T6702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.855040][ T6702] Cannot create hsr debugfs directory [ 124.045756][ T6842] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 124.050102][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.109161][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 124.116878][ T8] usb 1-1: can't read configurations, error -71 [ 124.180204][ T965] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 124.409963][ T6702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.454479][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.486631][ T6702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.502416][ T6702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.513782][ T6702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.690240][ T5775] usb 5-1: USB disconnect, device number 4 [ 124.907852][ T5796] Bluetooth: hci3: command tx timeout [ 124.918007][ T6702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.005128][ T6702] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.061711][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.068984][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.114708][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.122084][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.015797][ T6702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.795122][ T6917] loop2: detected capacity change from 0 to 256 [ 126.857398][ T5853] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.885424][ T6702] veth0_vlan: entered promiscuous mode [ 126.940307][ T6702] veth1_vlan: entered promiscuous mode [ 127.057561][ T6702] veth0_macvtap: entered promiscuous mode [ 127.074948][ T6702] veth1_macvtap: entered promiscuous mode [ 127.083683][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 127.094294][ T5853] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.116125][ T5853] usb 1-1: config 0 has no interface number 0 [ 127.143001][ T5853] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.155632][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.174094][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.179646][ T6921] ptrace attach of "./syz-executor exec"[6924] was attempted by "./syz-executor exec"[6921] [ 127.193838][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.204202][ T5853] usb 1-1: Product: syz [ 127.209093][ T5853] usb 1-1: Manufacturer: syz [ 127.213750][ T5853] usb 1-1: SerialNumber: syz [ 127.219027][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.233030][ T5853] usb 1-1: config 0 descriptor?? [ 127.243468][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.258825][ T5853] quatech2 1-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 127.269481][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.285013][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.299162][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.347986][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.383813][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.403694][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.462765][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.505200][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.533850][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.553962][ T5853] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 127.612286][ T5853] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 127.619399][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.701586][ T6702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.745051][ T6702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.804270][ T6702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.878529][ T6702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.131551][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.137487][ T23] usb 1-1: USB disconnect, device number 7 [ 128.204389][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.275692][ T2876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.304975][ T2876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.334905][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.375329][ T23] quatech2 1-1:0.1: device disconnected [ 128.440817][ T2876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.486553][ T2876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.791165][ T6949] loop5: detected capacity change from 0 to 512 [ 128.875162][ T6949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.983147][ T6955] warning: `syz.0.287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.983986][ T6949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.048672][ T6949] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.065846][ T6955] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.110870][ T6956] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 129.338382][ T6702] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.408093][ T6968] netlink: 176 bytes leftover after parsing attributes in process `syz.4.292'. [ 129.423147][ T6968] ip6gretap0: entered promiscuous mode [ 129.435385][ T6968] netlink: 176 bytes leftover after parsing attributes in process `syz.4.292'. [ 129.477584][ T6968] Zero length message leads to an empty skb [ 129.610156][ T6974] loop5: detected capacity change from 0 to 64 [ 129.714566][ T6974] hfs: request for non-existent node 131072 in B*Tree [ 129.755341][ T6974] hfs: request for non-existent node 131072 in B*Tree [ 130.089956][ T6984] netlink: 68 bytes leftover after parsing attributes in process `syz.5.297'. [ 130.106512][ T6986] Bluetooth: MGMT ver 1.22 [ 130.647441][ T6999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.963128][ T6976] loop0: detected capacity change from 0 to 32768 [ 131.082618][ T6976] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.233505][ T48] wlan1: Trigger new scan to find an IBSS to join [ 131.548735][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 131.664674][ T7029] loop4: detected capacity change from 0 to 256 [ 131.772572][ T7029] FAT-fs (loop4): Directory bread(block 64) failed [ 131.789588][ T7029] FAT-fs (loop4): Directory bread(block 65) failed [ 131.796389][ T7029] FAT-fs (loop4): Directory bread(block 66) failed [ 131.848890][ T7029] FAT-fs (loop4): Directory bread(block 67) failed [ 131.856600][ T7029] FAT-fs (loop4): Directory bread(block 68) failed [ 131.877510][ T7029] FAT-fs (loop4): Directory bread(block 69) failed [ 131.907707][ T7029] FAT-fs (loop4): Directory bread(block 70) failed [ 131.915167][ T7029] FAT-fs (loop4): Directory bread(block 71) failed [ 131.937637][ T7029] FAT-fs (loop4): Directory bread(block 72) failed [ 131.944241][ T7029] FAT-fs (loop4): Directory bread(block 73) failed [ 132.224530][ T7041] loop0: detected capacity change from 0 to 512 [ 132.304538][ T7043] netlink: 'syz.2.315': attribute type 10 has an invalid length. [ 132.342957][ T7041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.457726][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.474519][ T7041] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.500281][ T7043] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 132.594497][ T7048] netlink: 'syz.2.315': attribute type 10 has an invalid length. [ 132.598168][ T7051] program syz.4.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.612233][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.315'. [ 132.651550][ T7048] batadv0: entered promiscuous mode [ 132.656843][ T7048] batadv0: entered allmulticast mode [ 132.698004][ T7048] bond0: (slave batadv0): Releasing backup interface [ 132.715458][ T7025] loop5: detected capacity change from 0 to 40427 [ 132.768230][ T7048] bridge0: port 3(batadv0) entered blocking state [ 132.774970][ T7048] bridge0: port 3(batadv0) entered disabled state [ 132.787840][ T7025] F2FS-fs (loop5): invalid crc value [ 132.867901][ T7025] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.897173][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.917697][ T7062] process 'syz.4.317' launched './file0' with NULL argv: empty string added [ 133.108817][ T7025] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 133.153286][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.172693][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.309200][ T7070] F2FS-fs (loop5): Corrupted max_depth of 3: 4294967295 [ 133.323161][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 133.333089][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 133.457429][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.499797][ T6702] ------------[ cut here ]------------ [ 133.505376][ T6702] kernel BUG at fs/f2fs/inode.c:936! [ 133.526004][ T6702] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 133.532141][ T6702] CPU: 1 PID: 6702 Comm: syz-executor Not tainted syzkaller #0 [ 133.539720][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 133.549803][ T6702] RIP: 0010:f2fs_evict_inode+0x17e3/0x1800 [ 133.555752][ T6702] Code: c5 40 0f 94 c6 bf 02 00 00 00 e8 f8 85 d9 fd 40 84 ed 75 24 e8 5e 83 d9 fd e9 1b ea ff ff e8 54 83 d9 fd 0f 0b e8 4d 83 d9 fd <0f> 0b e8 46 83 d9 fd 0f 0b e9 04 ff ff ff e8 3a 83 d9 fd e8 55 8f [ 133.575411][ T6702] RSP: 0018:ffffc9000502f948 EFLAGS: 00010293 [ 133.581610][ T6702] RAX: ffffffff83ac0cb3 RBX: ffff8880624d91b0 RCX: ffff88802c830000 [ 133.589617][ T6702] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 133.597976][ T6702] RBP: 1ffff1100c49b240 R08: ffff8880624d9667 R09: 1ffff1100c49b2cc [ 133.605986][ T6702] R10: dffffc0000000000 R11: ffffed100c49b2cd R12: ffff88807b65a084 [ 133.614166][ T6702] R13: 1ffff1100c49b2cc R14: 0000000000000002 R15: ffff8880624d9660 [ 133.622172][ T6702] FS: 000055556bd09500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 133.631222][ T6702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.637814][ T6702] CR2: 000055555df52808 CR3: 000000006d05d000 CR4: 00000000003506e0 [ 133.646320][ T6702] Call Trace: [ 133.649776][ T6702] [ 133.652713][ T6702] ? do_raw_spin_lock+0x121/0x2c0 [ 133.657767][ T6702] ? bit_waitqueue+0x30/0x30 [ 133.662370][ T6702] ? do_raw_spin_unlock+0x121/0x230 [ 133.667588][ T6702] ? f2fs_write_inode+0x4b0/0x4b0 [ 133.672712][ T6702] evict+0x486/0x870 [ 133.677160][ T6702] ? proc_nr_inodes+0x230/0x230 [ 133.682014][ T6702] ? do_raw_spin_unlock+0x121/0x230 [ 133.687315][ T6702] ? do_raw_spin_unlock+0x121/0x230 [ 133.692782][ T6702] evict_inodes+0x5fe/0x690 [ 133.697293][ T6702] ? __dentry_kill+0x530/0x650 [ 133.702191][ T6702] ? clear_inode+0x150/0x150 [ 133.706781][ T6702] ? dput+0x3b/0x1e0 [ 133.710752][ T6702] generic_shutdown_super+0x97/0x2b0 [ 133.716049][ T6702] kill_block_super+0x44/0x90 [ 133.720728][ T6702] kill_f2fs_super+0x30a/0x3c0 [ 133.725502][ T6702] ? unregister_shrinker+0x24b/0x300 [ 133.730818][ T6702] ? f2fs_mount+0x40/0x40 [ 133.735164][ T6702] ? unregister_shrinker+0x24b/0x300 [ 133.740453][ T6702] ? kfree+0x31/0x1a0 [ 133.744536][ T6702] ? unregister_shrinker+0x24b/0x300 [ 133.749837][ T6702] deactivate_locked_super+0x97/0x100 [ 133.755247][ T6702] cleanup_mnt+0x429/0x4c0 [ 133.759669][ T6702] task_work_run+0x1ce/0x250 [ 133.764355][ T6702] ? task_work_cancel+0x240/0x240 [ 133.769387][ T6702] ? exit_to_user_mode_loop+0x3b/0x110 [ 133.774856][ T6702] exit_to_user_mode_loop+0xe6/0x110 [ 133.780149][ T6702] exit_to_user_mode_prepare+0xb1/0x140 [ 133.785700][ T6702] syscall_exit_to_user_mode+0x1a/0x50 [ 133.791222][ T6702] do_syscall_64+0x61/0xb0 [ 133.795661][ T6702] ? clear_bhb_loop+0x40/0x90 [ 133.800430][ T6702] ? clear_bhb_loop+0x40/0x90 [ 133.805120][ T6702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.811024][ T6702] RIP: 0033:0x7faecfd8fed7 [ 133.815452][ T6702] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 133.835066][ T6702] RSP: 002b:00007fff87b91088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 133.843484][ T6702] RAX: 0000000000000000 RBX: 00007faecfe11c05 RCX: 00007faecfd8fed7 [ 133.851460][ T6702] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff87b91140 [ 133.859435][ T6702] RBP: 00007fff87b91140 R08: 0000000000000000 R09: 0000000000000000 [ 133.867409][ T6702] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff87b921d0 [ 133.875468][ T6702] R13: 00007faecfe11c05 R14: 00000000000208f9 R15: 00007fff87b92210 [ 133.883475][ T6702] [ 133.886499][ T6702] Modules linked in: [ 133.902908][ T6702] ---[ end trace 0000000000000000 ]--- [ 133.908839][ T6702] RIP: 0010:f2fs_evict_inode+0x17e3/0x1800 [ 133.921570][ T6702] Code: c5 40 0f 94 c6 bf 02 00 00 00 e8 f8 85 d9 fd 40 84 ed 75 24 e8 5e 83 d9 fd e9 1b ea ff ff e8 54 83 d9 fd 0f 0b e8 4d 83 d9 fd <0f> 0b e8 46 83 d9 fd 0f 0b e9 04 ff ff ff e8 3a 83 d9 fd e8 55 8f [ 133.950923][ T6702] RSP: 0018:ffffc9000502f948 EFLAGS: 00010293 [ 133.960494][ T6702] RAX: ffffffff83ac0cb3 RBX: ffff8880624d91b0 RCX: ffff88802c830000 [ 133.969028][ T6702] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 133.977124][ T6702] RBP: 1ffff1100c49b240 R08: ffff8880624d9667 R09: 1ffff1100c49b2cc [ 133.985719][ T6702] R10: dffffc0000000000 R11: ffffed100c49b2cd R12: ffff88807b65a084 [ 133.994223][ T6702] R13: 1ffff1100c49b2cc R14: 0000000000000002 R15: ffff8880624d9660 [ 134.002524][ T6702] FS: 000055556bd09500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 134.012834][ T6702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.020492][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 134.026269][ T6702] CR2: 000000110c421115 CR3: 000000006d05d000 CR4: 00000000003506e0 [ 134.036282][ T6702] Kernel panic - not syncing: Fatal exception [ 134.042528][ T6702] Kernel Offset: disabled [ 134.046852][ T6702] Rebooting in 86400 seconds..