last executing test programs: 14m46.276937101s ago: executing program 32 (id=3): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 11m56.233155579s ago: executing program 33 (id=581): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003c6000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) write$UHID_INPUT(r5, &(0x7f0000001a40)={0x8, {"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", 0x1000}}, 0xff6c) 9m23.065860828s ago: executing program 34 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 8m47.419546463s ago: executing program 35 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 4m17.918453328s ago: executing program 4 (id=2885): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x418c0, &(0x7f0000000280)={[{@acl}, {@heartbeat_none}, {@nouser_xattr}, {@localflocks}, {@heartbeat_none}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffe}}, {@acl}, {@noacl}, {@localalloc}]}, 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@acl}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nodatacow}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002) 3m53.635746055s ago: executing program 1 (id=2963): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 3m53.183224956s ago: executing program 1 (id=2966): socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) pipe2(0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x53, 0x2, 0xfadf, 0x40005, 0x1, 0xc00, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m45.505113239s ago: executing program 7 (id=2985): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 3m45.259535645s ago: executing program 1 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}, @TCA_FQ_RATE_ENABLE={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xe, 0x1, 0x2025, 0x2, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0xfffd]}}]}]}, 0x68}}, 0x0) 3m44.665532611s ago: executing program 1 (id=2989): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d894", 0x13}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) 3m44.577315816s ago: executing program 0 (id=2999): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000"], 0xd8}}, 0x0) 3m44.505362625s ago: executing program 7 (id=2991): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 3m44.031598709s ago: executing program 1 (id=2992): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d894", 0x13}], 0x1}}], 0x1, 0x2000c000) 3m43.927586903s ago: executing program 0 (id=2994): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m43.50154279s ago: executing program 1 (id=2995): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) 3m43.279509033s ago: executing program 7 (id=2996): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x5a45, &(0x7f00000002c0)={0x0, 0x100c356, 0x0, 0x8000000, 0x348}) close_range(r0, 0xffffffffffffffff, 0x0) 3m42.027913134s ago: executing program 0 (id=2998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3m42.027597656s ago: executing program 7 (id=3000): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 3m42.027343778s ago: executing program 4 (id=2904): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 3m29.454665611s ago: executing program 4 (id=3001): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 3m29.454408725s ago: executing program 0 (id=3002): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d894", 0x13}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) 3m29.454118602s ago: executing program 7 (id=3003): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x0, 0x20323159, 0x1, 0x0, 0x4, @stepwise={{0x1, 0x5}, {0x4, 0x4c7}, {0xa9}}}) 3m29.453863398s ago: executing program 7 (id=3004): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000"], 0xd8}}, 0x0) 3m29.453618873s ago: executing program 0 (id=3005): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) 3m29.453352259s ago: executing program 4 (id=3006): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d894", 0x13}], 0x1}}], 0x1, 0x2000c000) 3m29.440513026s ago: executing program 0 (id=3007): socket$inet6(0xa, 0x80001, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 3m29.440094173s ago: executing program 4 (id=3008): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 3m29.008643129s ago: executing program 4 (id=3009): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r2}, 0x18) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, 0x0) sendmsg$kcm(r1, 0x0, 0x4000880) 3m27.376382749s ago: executing program 36 (id=2995): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) 3m24.652403203s ago: executing program 37 (id=3004): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000"], 0xd8}}, 0x0) 3m23.241048788s ago: executing program 38 (id=3007): socket$inet6(0xa, 0x80001, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 3m12.795124694s ago: executing program 39 (id=3009): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r2}, 0x18) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, 0x0) sendmsg$kcm(r1, 0x0, 0x4000880) 1m50.146294375s ago: executing program 8 (id=3192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m49.123972511s ago: executing program 8 (id=3195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x80000000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.274513855s ago: executing program 8 (id=3201): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) 1m47.717506412s ago: executing program 8 (id=3206): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='A']) 1m46.094483861s ago: executing program 8 (id=3215): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) 1m45.479869362s ago: executing program 8 (id=3218): socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) pipe2(0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x53, 0x2, 0xfadf, 0x40005, 0x1, 0xc00, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m29.953237983s ago: executing program 40 (id=3218): socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) pipe2(0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x53, 0x2, 0xfadf, 0x40005, 0x1, 0xc00, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.779603071s ago: executing program 5 (id=3535): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='defcontext', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getpeername$inet6(r2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000100), 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x388, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x2e0, 0x1a0, 0x2e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), 0x0}, 0x20) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000180)=""/217, 0xd9}, {0x0}], 0x2, 0x4, 0x9c5) truncate(0x0, 0xffffffff) 7.668246596s ago: executing program 9 (id=3537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x4000, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r5, &(0x7f00000000c0)=0x33482a8d, 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r6, 0x212c}], 0x1, 0xf0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={r7, r3}) syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x30, 0x6000, @fd_index=0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x1}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) syz_emit_ethernet(0xc5, 0x0, &(0x7f0000000340)={0x1, 0x43, [0x4, 0xba, 0xf23, 0xdf4]}) 7.075388018s ago: executing program 5 (id=3540): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.98200162s ago: executing program 2 (id=3541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x4000, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r5, &(0x7f00000000c0)=0x33482a8d, 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r6, 0x212c}], 0x1, 0xf0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={r7, r3}) syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x30, 0x6000, @fd_index=0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x1}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) syz_emit_ethernet(0xc5, 0x0, &(0x7f0000000340)={0x1, 0x43, [0x4, 0xba, 0xf23, 0xdf4]}) 5.738664507s ago: executing program 3 (id=3543): r0 = add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="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", 0x161, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 5.350476849s ago: executing program 5 (id=3545): accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000001440)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 5.319137335s ago: executing program 9 (id=3546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 5.155512382s ago: executing program 3 (id=3547): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0xa1, 0x17, 0x802, 0x0, 0x0, 0x4, 0x0}) 4.675700364s ago: executing program 2 (id=3548): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r0, 0x0, 0x0) 4.577799531s ago: executing program 9 (id=3549): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 4.463223766s ago: executing program 6 (id=3550): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x0, 0x6}, 'syz1\x00', 0xe}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 3.600404796s ago: executing program 3 (id=3551): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 3.339868263s ago: executing program 2 (id=3552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x6}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.277602769s ago: executing program 5 (id=3553): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) 2.271760997s ago: executing program 9 (id=3554): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 2.155940303s ago: executing program 6 (id=3555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) fsopen(0x0, 0x0) syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc, 0x8, 0x0, "96f343", 0x5}]}}}, 0x12) 1.991698889s ago: executing program 3 (id=3556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x4000, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r5, &(0x7f00000000c0)=0x33482a8d, 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r6, 0x212c}], 0x1, 0xf0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={r7, r3}) r8 = syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) io_uring_enter(r8, 0x281c, 0x0, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) syz_emit_ethernet(0xc5, 0x0, &(0x7f0000000340)={0x1, 0x43, [0x4, 0xba, 0xf23, 0xdf4]}) 1.861240096s ago: executing program 2 (id=3557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a", 0xc}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 1.735390495s ago: executing program 9 (id=3558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x4000, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r5, &(0x7f00000000c0)=0x33482a8d, 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r6, 0x212c}], 0x1, 0xf0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={r7, r3}) r8 = syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) io_uring_enter(r8, 0x281c, 0x0, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) syz_emit_ethernet(0xc5, 0x0, &(0x7f0000000340)={0x1, 0x43, [0x4, 0xba, 0xf23, 0xdf4]}) 1.635428372s ago: executing program 6 (id=3559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 1.391136411s ago: executing program 2 (id=3560): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x6, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_remove_blocks\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_remove_blocks\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 1.260260853s ago: executing program 6 (id=3561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x20, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 1.063713791s ago: executing program 6 (id=3562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) shutdown(r0, 0x1) 818.132634ms ago: executing program 5 (id=3563): getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000100)) 574.593088ms ago: executing program 2 (id=3564): accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000001440)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 513.625515ms ago: executing program 3 (id=3565): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1000000065}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 237.082825ms ago: executing program 3 (id=3566): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 219.986605ms ago: executing program 6 (id=3567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x6}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 139.028922ms ago: executing program 9 (id=3568): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 0s ago: executing program 5 (id=3569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x6, 0x1a}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) kernel console output (not intermixed with test programs): process `syz.4.2625'. [ 840.977287][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.566298][T13253] loop7: detected capacity change from 0 to 512 [ 842.578889][T13253] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 842.607513][T13253] EXT4-fs (loop7): invalid journal inode [ 842.613587][T13253] EXT4-fs (loop7): can't get journal size [ 842.650346][T13253] EXT4-fs (loop7): 1 truncate cleaned up [ 842.658627][T13253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.844416][T13259] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2638'. [ 842.987416][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.904345][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 843.904422][ T30] audit: type=1326 audit(1750852259.979:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 843.934427][ T30] audit: type=1326 audit(1750852259.979:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 843.958779][ T30] audit: type=1326 audit(1750852259.979:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 843.981959][ T30] audit: type=1326 audit(1750852259.979:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 844.004917][ T30] audit: type=1326 audit(1750852259.979:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 844.007552][T13276] loop7: detected capacity change from 0 to 128 [ 844.027439][ T30] audit: type=1326 audit(1750852259.979:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 844.056523][ T30] audit: type=1326 audit(1750852259.989:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 844.080801][ T30] audit: type=1326 audit(1750852259.989:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 844.103984][ T30] audit: type=1326 audit(1750852260.019:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 844.126685][ T30] audit: type=1326 audit(1750852260.039:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.7.2642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 844.391413][T13276] syz.7.2642: attempt to access beyond end of device [ 844.391413][T13276] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 844.438980][T13276] syz.7.2642: attempt to access beyond end of device [ 844.438980][T13276] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 844.537912][T13282] syz.7.2642: attempt to access beyond end of device [ 844.537912][T13282] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 844.694710][T13284] loop0: detected capacity change from 0 to 512 [ 845.328368][T13294] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2649'. [ 845.341362][T13292] loop0: detected capacity change from 0 to 512 [ 845.534893][T13295] loop7: detected capacity change from 0 to 1024 [ 845.611055][T13295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.699249][T13295] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #14: comm syz.7.2648: attempt to clear invalid blocks 1886221359 len 1 [ 845.973631][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.970172][T13318] loop0: detected capacity change from 0 to 128 [ 847.365703][T13327] netlink: 6040 bytes leftover after parsing attributes in process `syz.8.2661'. [ 847.767917][T13328] loop7: detected capacity change from 0 to 512 [ 847.826191][T13328] EXT4-fs: Ignoring removed mblk_io_submit option [ 847.832896][T13328] EXT4-fs: Ignoring removed bh option [ 847.916415][T13336] loop8: detected capacity change from 0 to 512 [ 847.954841][T13336] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 847.969502][T13328] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 848.001059][T13336] EXT4-fs (loop8): invalid journal inode [ 848.007262][T13336] EXT4-fs (loop8): can't get journal size [ 848.076316][T13336] EXT4-fs (loop8): 1 truncate cleaned up [ 848.084388][T13336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.127310][T13328] EXT4-fs (loop7): 1 truncate cleaned up [ 848.135535][T13328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.482175][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.929118][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.631478][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 849.631559][ T30] audit: type=1326 audit(1750852265.709:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.661354][ T30] audit: type=1326 audit(1750852265.709:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.684162][T13365] loop8: detected capacity change from 0 to 128 [ 849.684187][ T30] audit: type=1326 audit(1750852265.709:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.716477][ T30] audit: type=1326 audit(1750852265.719:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.739267][ T30] audit: type=1326 audit(1750852265.749:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.762104][ T30] audit: type=1326 audit(1750852265.749:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.785005][ T30] audit: type=1326 audit(1750852265.749:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.809031][ T30] audit: type=1326 audit(1750852265.749:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.833184][ T30] audit: type=1326 audit(1750852265.749:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 849.856048][ T30] audit: type=1326 audit(1750852265.749:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 850.003800][T13365] syz.8.2675: attempt to access beyond end of device [ 850.003800][T13365] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 850.020983][T13365] syz.8.2675: attempt to access beyond end of device [ 850.020983][T13365] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 850.110294][T13369] loop0: detected capacity change from 0 to 512 [ 850.241184][T13365] syz.8.2675: attempt to access beyond end of device [ 850.241184][T13365] loop8: rw=2049, sector=153, nr_sectors = 16 limit=128 [ 850.525125][T13375] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.2677'. [ 851.322299][T13386] loop4: detected capacity change from 0 to 512 [ 851.992582][T13393] loop8: detected capacity change from 0 to 512 [ 852.039627][T13393] EXT4-fs: Ignoring removed mblk_io_submit option [ 852.048481][T13393] EXT4-fs: Ignoring removed bh option [ 852.085999][T13402] loop0: detected capacity change from 0 to 512 [ 852.173684][T13393] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 852.266694][T13393] EXT4-fs (loop8): 1 truncate cleaned up [ 852.275124][T13393] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.635003][T13409] loop0: detected capacity change from 0 to 128 [ 853.080495][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.086370][T13413] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.2691'. [ 853.836290][T13426] loop7: detected capacity change from 0 to 512 [ 853.870548][T13426] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 853.906513][T13426] EXT4-fs (loop7): invalid journal inode [ 853.912643][T13426] EXT4-fs (loop7): can't get journal size [ 853.952881][T13426] EXT4-fs (loop7): 1 truncate cleaned up [ 853.961163][T13426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.375598][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.385733][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 855.385807][ T30] audit: type=1326 audit(1750852271.469:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.469978][ T30] audit: type=1326 audit(1750852271.519:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.493386][ T30] audit: type=1326 audit(1750852271.519:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.515978][ T30] audit: type=1326 audit(1750852271.519:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.540061][ T30] audit: type=1326 audit(1750852271.519:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.563198][ T30] audit: type=1326 audit(1750852271.519:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.586714][ T30] audit: type=1326 audit(1750852271.519:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.609240][ T30] audit: type=1326 audit(1750852271.519:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.633473][ T30] audit: type=1326 audit(1750852271.529:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.656452][ T30] audit: type=1326 audit(1750852271.529:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 855.902310][T13445] loop7: detected capacity change from 0 to 512 [ 855.943193][T13445] EXT4-fs: Ignoring removed mblk_io_submit option [ 855.950124][T13445] EXT4-fs: Ignoring removed bh option [ 855.970894][T13445] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 856.030061][T13445] EXT4-fs (loop7): 1 truncate cleaned up [ 856.040584][T13445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.680835][T13469] loop8: detected capacity change from 0 to 512 [ 856.703555][T13469] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 856.727546][T13469] EXT4-fs (loop8): invalid journal inode [ 856.733519][T13469] EXT4-fs (loop8): can't get journal size [ 856.786907][T13469] EXT4-fs (loop8): 1 truncate cleaned up [ 856.795342][T13469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.947142][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.422300][T10394] IPVS: starting estimator thread 0... [ 857.548453][T13478] IPVS: using max 240 ests per chain, 12000 per kthread [ 857.754355][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.867385][T13482] loop7: detected capacity change from 0 to 512 [ 857.878232][T13482] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 857.943389][T13482] EXT4-fs (loop7): invalid journal inode [ 857.949898][T13482] EXT4-fs (loop7): can't get journal size [ 858.040871][T13482] EXT4-fs (loop7): 1 truncate cleaned up [ 858.048282][T13482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.547767][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.892362][T13501] loop0: detected capacity change from 0 to 128 [ 860.689187][T13509] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2727'. [ 860.718429][T13511] loop7: detected capacity change from 0 to 512 [ 860.803009][T13511] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 860.904965][T13511] EXT4-fs (loop7): invalid journal inode [ 860.910935][T13511] EXT4-fs (loop7): can't get journal size [ 860.960896][T13511] EXT4-fs (loop7): 1 truncate cleaned up [ 860.969297][T13511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.155366][T13510] loop8: detected capacity change from 0 to 512 [ 861.377235][T13510] EXT4-fs: Ignoring removed mblk_io_submit option [ 861.383940][T13510] EXT4-fs: Ignoring removed bh option [ 861.549652][T13510] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 861.586900][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.861791][T13510] EXT4-fs (loop8): 1 truncate cleaned up [ 861.870340][T13510] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.364262][T13530] loop7: detected capacity change from 0 to 512 [ 862.446383][T13530] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 862.545586][T13530] EXT4-fs (loop7): invalid journal inode [ 862.551573][T13530] EXT4-fs (loop7): can't get journal size [ 862.586318][T13530] EXT4-fs (loop7): 1 truncate cleaned up [ 862.596946][T13530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.877971][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.945704][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.999224][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 863.999298][ T30] audit: type=1326 audit(1750852280.079:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.029987][ T30] audit: type=1326 audit(1750852280.079:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.053243][ T30] audit: type=1326 audit(1750852280.099:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.075819][ T30] audit: type=1326 audit(1750852280.099:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.098483][ T30] audit: type=1326 audit(1750852280.099:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.121154][ T30] audit: type=1326 audit(1750852280.119:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.127020][T13548] loop7: detected capacity change from 0 to 128 [ 864.145095][ T30] audit: type=1326 audit(1750852280.119:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.145316][ T30] audit: type=1326 audit(1750852280.129:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.145529][ T30] audit: type=1326 audit(1750852280.129:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.220195][ T30] audit: type=1326 audit(1750852280.129:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 864.666569][T13549] syz.7.2738: attempt to access beyond end of device [ 864.666569][T13549] loop7: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 864.755981][T13548] syz.7.2738: attempt to access beyond end of device [ 864.755981][T13548] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 864.836613][T13553] loop0: detected capacity change from 0 to 512 [ 865.148806][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 865.169489][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 865.181456][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 865.209926][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 865.227061][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 865.265183][T13560] loop8: detected capacity change from 0 to 512 [ 865.327688][T13560] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 865.431558][T13560] EXT4-fs (loop8): invalid journal inode [ 865.437754][T13560] EXT4-fs (loop8): can't get journal size [ 866.029734][T13560] EXT4-fs (loop8): 1 truncate cleaned up [ 866.038370][T13560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.623484][T13557] chnl_net:caif_netlink_parms(): no params data found [ 866.826899][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.957344][T13578] loop7: detected capacity change from 0 to 512 [ 867.078625][T13578] EXT4-fs: Ignoring removed mblk_io_submit option [ 867.085667][T13578] EXT4-fs: Ignoring removed bh option [ 867.233182][T13578] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 867.316020][ T5813] Bluetooth: hci4: command tx timeout [ 867.430805][T13578] EXT4-fs (loop7): 1 truncate cleaned up [ 867.439892][T13578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.228575][ T4244] bond0 (unregistering): Released all slaves [ 868.503273][T13557] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.511233][T13557] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.522246][T13557] bridge_slave_0: entered allmulticast mode [ 868.523179][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.535416][T13557] bridge_slave_0: entered promiscuous mode [ 868.573073][T13557] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.580934][T13557] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.588752][T13557] bridge_slave_1: entered allmulticast mode [ 868.598498][T13557] bridge_slave_1: entered promiscuous mode [ 868.970845][T13557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.027010][T13557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.048909][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 869.048979][ T30] audit: type=1326 audit(1750852285.129:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.078453][ T30] audit: type=1326 audit(1750852285.129:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.101032][ T30] audit: type=1326 audit(1750852285.129:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.123718][ T30] audit: type=1326 audit(1750852285.199:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.148290][ T30] audit: type=1326 audit(1750852285.199:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.171407][ T30] audit: type=1326 audit(1750852285.199:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.177382][T13600] loop7: detected capacity change from 0 to 128 [ 869.193951][ T30] audit: type=1326 audit(1750852285.199:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.194169][ T30] audit: type=1326 audit(1750852285.209:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.194393][ T30] audit: type=1326 audit(1750852285.209:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.194719][ T30] audit: type=1326 audit(1750852285.219:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.7.2753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 869.419672][ T5813] Bluetooth: hci4: command tx timeout [ 869.490366][ T4244] hsr_slave_0: left promiscuous mode [ 869.499783][ T4244] hsr_slave_1: left promiscuous mode [ 870.046743][T13602] loop0: detected capacity change from 0 to 512 [ 870.072436][T13600] syz.7.2753: attempt to access beyond end of device [ 870.072436][T13600] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 870.129478][T13600] syz.7.2753: attempt to access beyond end of device [ 870.129478][T13600] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 870.670217][T13607] loop8: detected capacity change from 0 to 512 [ 870.769468][T13607] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 870.819759][T13557] team0: Port device team_slave_0 added [ 870.844116][T13557] team0: Port device team_slave_1 added [ 870.863097][T13607] EXT4-fs (loop8): invalid journal inode [ 870.869857][T13607] EXT4-fs (loop8): can't get journal size [ 870.996618][T13607] EXT4-fs (loop8): 1 truncate cleaned up [ 871.003279][T13557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.005176][T13607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.010503][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.049191][T13557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.067717][T13557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.076695][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.079327][ T4244] IPVS: stop unused estimator thread 0... [ 871.106044][T13557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.445748][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.474974][ T5813] Bluetooth: hci4: command tx timeout [ 871.525242][T13557] hsr_slave_0: entered promiscuous mode [ 871.537111][T13557] hsr_slave_1: entered promiscuous mode [ 871.545951][T13557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.553717][T13557] Cannot create hsr debugfs directory [ 873.029117][T13557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 873.106104][T13557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 873.124833][T13630] loop7: detected capacity change from 0 to 512 [ 873.145418][T13630] EXT4-fs: Ignoring removed mblk_io_submit option [ 873.152244][T13630] EXT4-fs: Ignoring removed bh option [ 873.162086][T13557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 873.177634][T13630] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 873.195794][T13641] loop4: detected capacity change from 0 to 512 [ 873.260028][T13630] EXT4-fs (loop7): 1 truncate cleaned up [ 873.268415][T13630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.282955][T13557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 873.555232][ T5813] Bluetooth: hci4: command tx timeout [ 874.018238][T13646] loop4: detected capacity change from 0 to 128 [ 874.066745][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 874.066826][ T30] audit: type=1326 audit(1750852290.149:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.096788][ T30] audit: type=1326 audit(1750852290.149:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.120756][ T30] audit: type=1326 audit(1750852290.149:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.143679][ T30] audit: type=1326 audit(1750852290.149:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.167737][ T30] audit: type=1326 audit(1750852290.179:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.190878][ T30] audit: type=1326 audit(1750852290.209:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.214078][ T30] audit: type=1326 audit(1750852290.209:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.236767][ T30] audit: type=1326 audit(1750852290.209:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.259410][ T30] audit: type=1326 audit(1750852290.209:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.283659][ T30] audit: type=1326 audit(1750852290.229:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13645 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 874.285457][T13557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.397067][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.544234][T13557] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.602066][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.609797][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.641229][T13649] loop0: detected capacity change from 0 to 512 [ 874.711770][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.719409][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.672019][T13665] netlink: 6068 bytes leftover after parsing attributes in process `syz.8.2774'. [ 876.155380][T13671] loop4: detected capacity change from 0 to 512 [ 876.331677][T13557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.721882][T13557] veth0_vlan: entered promiscuous mode [ 876.829226][T13557] veth1_vlan: entered promiscuous mode [ 877.021195][T13557] veth0_macvtap: entered promiscuous mode [ 877.120148][T13557] veth1_macvtap: entered promiscuous mode [ 877.298376][T13557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.392853][T13557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.466333][T13557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.476243][T13557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.485816][T13557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.494948][T13557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.696343][T13688] loop0: detected capacity change from 0 to 128 [ 877.842291][T13685] loop4: detected capacity change from 0 to 512 [ 877.889903][T13685] EXT4-fs: Ignoring removed mblk_io_submit option [ 877.897167][T13685] EXT4-fs: Ignoring removed bh option [ 878.958318][T13699] loop8: detected capacity change from 0 to 512 [ 879.007162][T13699] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 879.050561][T13699] EXT4-fs (loop8): invalid journal inode [ 879.056928][T13699] EXT4-fs (loop8): can't get journal size [ 879.136839][T13699] EXT4-fs (loop8): 1 truncate cleaned up [ 879.172585][T13699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.658194][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.724914][T13712] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.2786'. [ 881.266800][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 881.266879][ T30] audit: type=1326 audit(1750852297.349:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.296923][ T30] audit: type=1326 audit(1750852297.349:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.309610][T13736] loop7: detected capacity change from 0 to 128 [ 881.319836][ T30] audit: type=1326 audit(1750852297.349:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.350145][ T30] audit: type=1326 audit(1750852297.349:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.373349][ T30] audit: type=1326 audit(1750852297.349:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.396031][ T30] audit: type=1326 audit(1750852297.349:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.418727][ T30] audit: type=1326 audit(1750852297.349:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.442889][ T30] audit: type=1326 audit(1750852297.349:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.466456][ T30] audit: type=1326 audit(1750852297.349:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.489177][ T30] audit: type=1326 audit(1750852297.379:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.7.2792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 881.751599][T13736] syz.7.2792: attempt to access beyond end of device [ 881.751599][T13736] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 881.767107][T13736] syz.7.2792: attempt to access beyond end of device [ 881.767107][T13736] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 882.607755][T13754] loop0: detected capacity change from 0 to 512 [ 882.634032][T13743] loop4: detected capacity change from 0 to 512 [ 882.658262][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.668080][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.752932][T13756] netlink: 6068 bytes leftover after parsing attributes in process `syz.7.2798'. [ 882.769773][ T6500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.778652][ T6500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.807656][T13743] EXT4-fs: Ignoring removed mblk_io_submit option [ 882.814433][T13743] EXT4-fs: Ignoring removed bh option [ 883.551865][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2739'. [ 884.852030][T13782] loop7: detected capacity change from 0 to 128 [ 885.211046][T13782] syz.7.2807: attempt to access beyond end of device [ 885.211046][T13782] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 885.253164][T13785] loop1: detected capacity change from 0 to 512 [ 885.484985][T13790] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.2810'. [ 886.381118][T13800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2815'. [ 886.614039][T13768] loop8: detected capacity change from 0 to 32768 [ 886.859202][T13768] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 886.859347][T13768] allowing incompatible features above 0.0: (unknown version) [ 886.859432][T13768] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 886.908150][T13768] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 886.918120][T13768] bcachefs (loop8): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_keys in superblock: k->u64s 0, fixing [ 886.931856][T13768] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 886.941553][T13768] bcachefs (loop8): Version upgrade required: [ 886.941553][T13768] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 886.941553][T13768] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 886.941553][T13768] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 887.019888][T13768] bcachefs (loop8): dropping and reconstructing all alloc info [ 887.093264][T13798] loop7: detected capacity change from 0 to 512 [ 887.131408][T13798] EXT4-fs: Ignoring removed mblk_io_submit option [ 887.139006][T13798] EXT4-fs: Ignoring removed bh option [ 887.220303][T13768] bcachefs (loop8): btree node read error at btree extents level 0/0 [ 887.220397][T13768] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 887.220495][T13768] loop8 node offset 0/16: incorrect min_key: got 0:0:U32_MAX should be POS_MIN [ 887.220576][T13768] flagging btree extents lost data [ 887.220645][T13768] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 887.220724][T13768] ret btree_node_read_validate_error [ 887.263460][T13798] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 887.269257][T13768] bcachefs (loop8): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 887.400197][T13768] bcachefs (loop8): btree node read error at btree xattrs level 0/0 [ 887.400291][T13768] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 887.400383][T13768] loop8 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 887.400458][T13768] flagging btree xattrs lost data [ 887.400522][T13768] ret btree_node_read_validate_error [ 887.444846][T13768] bcachefs (loop8): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 887.551124][T13768] bcachefs (loop8): check_topology... [ 887.551583][T13768] bcachefs (loop8): btree root extents unreadable, must recover from scan [ 887.567129][T13768] bcachefs (loop8): no nodes found for btree extents, continuing [ 887.588891][T13798] EXT4-fs (loop7): 1 truncate cleaned up [ 887.597492][T13798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.707028][T13768] bcachefs (loop8): btree root xattrs unreadable, must recover from scan [ 887.716436][T13768] bcachefs (loop8): no nodes found for btree xattrs, continuing [ 887.770830][T13768] done [ 887.773805][T13768] bcachefs (loop8): accounting_read... done [ 887.794460][T13768] bcachefs (loop8): alloc_read... done [ 887.823307][T13768] bcachefs (loop8): snapshots_read... done [ 887.849686][T13768] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean [ 887.861435][T13768] bcachefs (loop8): done starting filesystem [ 888.266453][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.289519][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.305131][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.312801][T10390] bcachefs (loop8): shutting down [ 888.369780][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.385817][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 888.425307][T10390] bcachefs (loop8): shutdown complete [ 888.450667][T13824] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2821'. [ 888.462351][T13824] 0ªX¹¦D: renamed from gretap0 (while UP) [ 888.520249][T13824] 0ªX¹¦D: entered allmulticast mode [ 888.528269][T13824] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 889.373488][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.646035][T13828] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.2823'. [ 889.806114][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 889.806185][ T30] audit: type=1326 audit(1750852305.889:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 889.923288][ T30] audit: type=1326 audit(1750852305.919:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 889.950593][ T30] audit: type=1326 audit(1750852305.919:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 889.979372][ T30] audit: type=1326 audit(1750852305.919:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 889.986267][T13833] loop7: detected capacity change from 0 to 128 [ 890.004951][ T30] audit: type=1326 audit(1750852305.929:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 890.031057][ T30] audit: type=1326 audit(1750852305.929:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 890.055717][ T30] audit: type=1326 audit(1750852305.929:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 890.079252][ T30] audit: type=1326 audit(1750852305.939:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 890.101887][ T30] audit: type=1326 audit(1750852305.939:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 890.124705][ T30] audit: type=1326 audit(1750852305.949:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.7.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 890.213641][T13821] chnl_net:caif_netlink_parms(): no params data found [ 890.318248][T13833] syz.7.2824: attempt to access beyond end of device [ 890.318248][T13833] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 890.367077][T13833] syz.7.2824: attempt to access beyond end of device [ 890.367077][T13833] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 890.514267][T13837] loop4: detected capacity change from 0 to 512 [ 890.521245][ T5803] Bluetooth: hci2: command tx timeout [ 890.713629][ T5800] syz_tun (unregistering): left allmulticast mode [ 890.721304][ T5800] syz_tun (unregistering): left promiscuous mode [ 890.728440][ T5800] bridge0: port 1(syz_tun) entered disabled state [ 891.270649][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2828'. [ 892.151387][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.225256][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.277179][ T64] bond0 (unregistering): Released all slaves [ 892.351710][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.359667][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.368020][T13821] bridge_slave_0: entered allmulticast mode [ 892.377292][T13821] bridge_slave_0: entered promiscuous mode [ 892.463775][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.472004][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.479899][T13821] bridge_slave_1: entered allmulticast mode [ 892.489576][T13821] bridge_slave_1: entered promiscuous mode [ 892.506790][ T64] tipc: Disabling bearer [ 892.512779][ T64] tipc: Left network mode [ 892.583072][T13860] loop8: detected capacity change from 0 to 512 [ 892.599258][ T5803] Bluetooth: hci2: command tx timeout [ 892.629073][T13860] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 892.689606][T13860] EXT4-fs (loop8): invalid journal inode [ 892.695908][T13860] EXT4-fs (loop8): can't get journal size [ 892.725356][T13860] EXT4-fs (loop8): 1 truncate cleaned up [ 892.733405][T13860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.835913][T13821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.932601][T13821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.122530][T13856] loop7: detected capacity change from 0 to 512 [ 893.235329][T13856] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.242053][T13856] EXT4-fs: Ignoring removed bh option [ 893.373374][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.391178][T13856] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 893.500029][ T64] hsr_slave_0: left promiscuous mode [ 893.512900][ T64] hsr_slave_1: left promiscuous mode [ 893.524225][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.537359][T13867] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.2835'. [ 893.553367][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.568397][T13856] EXT4-fs (loop7): 1 truncate cleaned up [ 893.580436][T13856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.516174][ T64] team0 (unregistering): Port device team_slave_1 removed [ 894.559443][ T64] team0 (unregistering): Port device team_slave_0 removed [ 894.676328][ T5803] Bluetooth: hci2: command tx timeout [ 894.795551][T13877] loop1: detected capacity change from 0 to 512 [ 894.863609][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.927616][T13821] team0: Port device team_slave_0 added [ 895.004205][T13821] team0: Port device team_slave_1 added [ 895.399060][T13821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.406454][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.433115][T13821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.513073][ T64] IPVS: stop unused estimator thread 0... [ 895.535162][T13821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.542458][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.573415][T13821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.666289][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 895.669257][ T30] audit: type=1326 audit(1750852311.749:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.719399][ T30] audit: type=1326 audit(1750852311.789:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.742447][ T30] audit: type=1326 audit(1750852311.789:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.765280][ T30] audit: type=1326 audit(1750852311.789:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.790173][ T30] audit: type=1326 audit(1750852311.789:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.803836][T13884] loop4: detected capacity change from 0 to 128 [ 895.813540][ T30] audit: type=1326 audit(1750852311.789:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.842296][ T30] audit: type=1326 audit(1750852311.829:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.864887][ T30] audit: type=1326 audit(1750852311.829:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.889708][ T30] audit: type=1326 audit(1750852311.829:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 895.913098][ T30] audit: type=1326 audit(1750852311.829:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13882 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 896.116761][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2840'. [ 896.177172][T13821] hsr_slave_0: entered promiscuous mode [ 896.191944][T13821] hsr_slave_1: entered promiscuous mode [ 896.200866][T13821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.208779][T13821] Cannot create hsr debugfs directory [ 896.687745][T13894] loop1: detected capacity change from 0 to 512 [ 896.757557][ T5803] Bluetooth: hci2: command tx timeout [ 897.610340][T13909] netlink: 384 bytes leftover after parsing attributes in process `syz.4.2848'. [ 897.689808][T13821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 897.751372][T13821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 897.827757][T13821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 897.906296][T13821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 898.130936][T13912] loop4: detected capacity change from 0 to 512 [ 898.371228][T13916] loop1: detected capacity change from 0 to 512 [ 898.420243][T13916] EXT4-fs: Ignoring removed mblk_io_submit option [ 898.430475][T13916] EXT4-fs: Ignoring removed bh option [ 898.797369][T13920] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2852'. [ 899.055622][T13821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.206535][T13821] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.307116][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.314715][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.416868][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.424390][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.492852][T13928] loop4: detected capacity change from 0 to 512 [ 899.697049][T13821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 899.708548][T13821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.135959][T13936] netlink: 384 bytes leftover after parsing attributes in process `syz.1.2858'. [ 900.228218][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.235654][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.871630][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2860'. [ 901.637487][T13948] loop7: detected capacity change from 0 to 512 [ 901.701411][T13948] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 901.779987][T13948] EXT4-fs (loop7): invalid journal inode [ 901.787536][T13948] EXT4-fs (loop7): can't get journal size [ 901.805304][T13821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.893601][T13948] EXT4-fs (loop7): 1 truncate cleaned up [ 901.902059][T13948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.312443][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.334396][T13821] veth0_vlan: entered promiscuous mode [ 902.432107][T13821] veth1_vlan: entered promiscuous mode [ 902.858366][T13821] veth0_macvtap: entered promiscuous mode [ 902.961154][T13821] veth1_macvtap: entered promiscuous mode [ 903.154095][T13821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.237878][T13821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.363099][T13821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.372417][T13821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.382471][T13821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.391898][T13821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.458264][T13963] netlink: 384 bytes leftover after parsing attributes in process `syz.7.2869'. [ 903.536399][T13964] loop4: detected capacity change from 0 to 512 [ 904.526392][T13975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 904.729886][T13965] loop1: detected capacity change from 0 to 512 [ 904.990052][T13965] EXT4-fs: Ignoring removed mblk_io_submit option [ 904.998281][T13965] EXT4-fs: Ignoring removed bh option [ 905.260937][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'. [ 906.513680][T13989] loop4: detected capacity change from 0 to 512 [ 907.425489][T14002] netlink: 5992 bytes leftover after parsing attributes in process `syz.1.2879'. [ 907.485119][T14004] loop8: detected capacity change from 0 to 512 [ 907.583990][T14004] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 907.664864][T14004] EXT4-fs (loop8): invalid journal inode [ 907.670889][T14004] EXT4-fs (loop8): can't get journal size [ 907.863919][T14004] EXT4-fs (loop8): 1 truncate cleaned up [ 907.879137][T14004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.371764][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.056995][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 909.077700][T14028] loop7: detected capacity change from 0 to 512 [ 909.122294][T14028] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 909.145028][T14028] EXT4-fs (loop7): invalid journal inode [ 909.151007][T14028] EXT4-fs (loop7): can't get journal size [ 909.174231][T14028] EXT4-fs (loop7): 1 truncate cleaned up [ 909.182632][T14028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.239308][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.250571][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.260705][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.274069][ T42] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 909.283658][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.518410][ T42] usb 5-1: config 0 descriptor?? [ 909.628169][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.637510][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.694221][ T9992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.843689][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.852226][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.001700][ T42] hid-udraw 0003:20D6:CB17.0002: unknown main item tag 0x0 [ 910.033617][ T42] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input5 [ 910.184589][ T42] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input6 [ 910.230467][T14038] netlink: 5992 bytes leftover after parsing attributes in process `syz.8.2891'. [ 910.348637][ T42] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input7 [ 910.474783][ T42] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0002/input/input8 [ 910.609771][ T42] hid-udraw 0003:20D6:CB17.0002: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 911.639438][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2897'. [ 912.070081][T14064] loop1: detected capacity change from 0 to 512 [ 912.527238][ T42] usb 5-1: USB disconnect, device number 2 [ 912.944916][T14076] loop8: detected capacity change from 0 to 512 [ 913.050597][T14076] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 913.063825][T14076] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.787502][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 914.107244][T14090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.133113][T14090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 914.148130][T14090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 914.161825][T14090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 914.173414][T14090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 915.149691][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2911'. [ 916.191748][ T5801] syz_tun (unregistering): left allmulticast mode [ 916.276732][T14090] Bluetooth: hci0: command tx timeout [ 916.336251][T14089] chnl_net:caif_netlink_parms(): no params data found [ 917.375047][ T3931] bridge_slave_1: left allmulticast mode [ 917.387255][ T3931] bridge_slave_1: left promiscuous mode [ 917.394102][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.431916][ T3931] bridge_slave_0: left allmulticast mode [ 917.438780][ T3931] bridge_slave_0: left promiscuous mode [ 917.445585][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.787892][T14090] Bluetooth: hci0: command tx timeout [ 919.375299][T14137] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2925'. [ 919.451224][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 920.188848][ T3931] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 920.216403][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.231043][ T3931] bond0 (unregistering): Released all slaves [ 920.498842][ T3931] tipc: Left network mode [ 920.843049][T14090] Bluetooth: hci0: command tx timeout [ 921.252929][T14089] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.263058][T14089] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.276172][T14089] bridge_slave_0: entered allmulticast mode [ 921.285226][T14089] bridge_slave_0: entered promiscuous mode [ 921.637731][T14089] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.645582][T14089] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.653314][T14089] bridge_slave_1: entered allmulticast mode [ 921.662940][T14089] bridge_slave_1: entered promiscuous mode [ 921.894321][ T3931] hsr_slave_0: left promiscuous mode [ 921.945012][ T3931] hsr_slave_1: left promiscuous mode [ 921.952833][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.066788][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.843442][ T3931] team0 (unregistering): Port device team_slave_1 removed [ 922.914773][T14090] Bluetooth: hci0: command tx timeout [ 922.937299][ T3931] team0 (unregistering): Port device team_slave_0 removed [ 923.651822][T14089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.737248][T14089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.967467][ T3931] IPVS: stop unused estimator thread 0... [ 924.079364][T14089] team0: Port device team_slave_0 added [ 924.132209][T14089] team0: Port device team_slave_1 added [ 924.278196][T14173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2937'. [ 924.382969][T14089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.390208][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.416499][T14089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.523256][T14089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.531257][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.560894][T14089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.936528][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2939'. [ 925.076061][T14089] hsr_slave_0: entered promiscuous mode [ 925.085296][T14089] hsr_slave_1: entered promiscuous mode [ 928.180206][T14089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 928.273325][T14089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 928.385644][T14089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 928.500913][T14089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 928.551490][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2949'. [ 929.582825][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 929.848709][T14089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.108296][T14089] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.215729][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.223440][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.356865][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.364380][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.205644][T14089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.476650][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2961'. [ 933.974398][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2967'. [ 934.836142][T14089] veth0_vlan: entered promiscuous mode [ 934.961625][T14089] veth1_vlan: entered promiscuous mode [ 935.343770][T14089] veth0_macvtap: entered promiscuous mode [ 935.426646][T14089] veth1_macvtap: entered promiscuous mode [ 935.635169][T14089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.723218][T14089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.782135][T14089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.791626][T14089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.800888][T14089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.813390][T14089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.251072][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2973'. [ 938.498283][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2980'. [ 941.377269][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2985'. [ 942.200639][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2991'. [ 942.620601][T14145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.629466][T14145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.860984][T14145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.870165][T14145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.197421][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3001'. [ 960.375951][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.389677][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.399250][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.413001][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 960.425705][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 961.798894][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.805825][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.551307][ T5803] Bluetooth: hci1: command tx timeout [ 963.491920][T14422] chnl_net:caif_netlink_parms(): no params data found [ 963.995969][T14090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 964.005896][T14090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 964.015793][T14090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 964.030319][T14090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 964.047888][T14090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 964.508771][ T5803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 964.523645][ T5803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 964.547035][ T5803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 964.565556][ T5803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 964.578885][ T5803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 964.595405][ T5803] Bluetooth: hci1: command tx timeout [ 964.698381][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3017'. [ 966.129133][ T5813] Bluetooth: hci5: command tx timeout [ 966.675150][ T5813] Bluetooth: hci7: command tx timeout [ 966.680902][ T5803] Bluetooth: hci1: command tx timeout [ 968.195224][ T5813] Bluetooth: hci5: command tx timeout [ 968.755151][ T5813] Bluetooth: hci7: command tx timeout [ 968.760788][ T5813] Bluetooth: hci1: command tx timeout [ 970.278357][ T5813] Bluetooth: hci5: command tx timeout [ 970.834933][ T5813] Bluetooth: hci7: command tx timeout [ 972.375012][ T5813] Bluetooth: hci5: command tx timeout [ 972.918851][ T5813] Bluetooth: hci7: command tx timeout [ 973.050303][T14448] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3018'. [ 973.059658][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3018'. [ 975.002961][T14422] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.010438][T14422] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.020010][T14422] bridge_slave_0: entered allmulticast mode [ 975.034453][T14422] bridge_slave_0: entered promiscuous mode [ 975.214361][T14438] chnl_net:caif_netlink_parms(): no params data found [ 975.295264][T14422] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.302993][T14422] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.312218][T14422] bridge_slave_1: entered allmulticast mode [ 975.320967][T14422] bridge_slave_1: entered promiscuous mode [ 975.888512][T14422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.105626][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.105649][T14422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.135793][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.151411][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.266956][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.366697][T14090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 976.407380][T14431] chnl_net:caif_netlink_parms(): no params data found [ 976.439662][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.557170][T14422] team0: Port device team_slave_0 added [ 976.673483][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.796694][T14422] team0: Port device team_slave_1 added [ 977.523338][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.311113][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.463473][T14422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.470649][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.497030][T14422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.517279][T14438] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.524871][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.532883][T14438] bridge_slave_0: entered allmulticast mode [ 978.540613][ T5803] Bluetooth: hci2: command tx timeout [ 978.543021][T14438] bridge_slave_0: entered promiscuous mode [ 978.655481][ T64] bridge_slave_1: left allmulticast mode [ 978.661370][ T64] bridge_slave_1: left promiscuous mode [ 978.669423][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.799977][ T64] bridge_slave_0: left allmulticast mode [ 978.806086][ T64] bridge_slave_0: left promiscuous mode [ 978.812706][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.316221][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.386572][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.439441][ T64] bond0 (unregistering): Released all slaves [ 979.530774][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.546038][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.553652][T14438] bridge_slave_1: entered allmulticast mode [ 979.563251][T14438] bridge_slave_1: entered promiscuous mode [ 979.587099][T14422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.594251][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.620716][T14422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.366531][T14438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.523997][T14438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.548296][T14431] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.559783][T14431] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.567585][T14431] bridge_slave_0: entered allmulticast mode [ 980.576837][T14431] bridge_slave_0: entered promiscuous mode [ 980.615394][ T5803] Bluetooth: hci2: command tx timeout [ 981.238354][T14431] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.246185][T14431] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.253871][T14431] bridge_slave_1: entered allmulticast mode [ 981.263465][T14431] bridge_slave_1: entered promiscuous mode [ 981.389526][T14422] hsr_slave_0: entered promiscuous mode [ 981.398169][T14422] hsr_slave_1: entered promiscuous mode [ 981.406184][T14422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.413878][T14422] Cannot create hsr debugfs directory [ 981.475016][ T64] hsr_slave_0: left promiscuous mode [ 981.510679][ T64] hsr_slave_1: left promiscuous mode [ 981.518400][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.526167][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.556303][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.563969][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.596026][ T64] veth1_macvtap: left promiscuous mode [ 981.601827][ T64] veth0_macvtap: left promiscuous mode [ 981.608345][ T64] veth1_vlan: left promiscuous mode [ 981.613933][ T64] veth0_vlan: left promiscuous mode [ 982.172027][ T64] team0 (unregistering): Port device team_slave_1 removed [ 982.266430][ T64] team0 (unregistering): Port device team_slave_0 removed [ 982.492082][T14438] team0: Port device team_slave_0 added [ 982.703386][ T5803] Bluetooth: hci2: command tx timeout [ 982.730284][T14462] chnl_net:caif_netlink_parms(): no params data found [ 982.757284][T14438] team0: Port device team_slave_1 added [ 982.816219][T14431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.065449][T14431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.400365][T14438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.407849][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.437445][T14438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.650691][T14438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.658623][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.685109][T14438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.742334][T14431] team0: Port device team_slave_0 added [ 983.841419][T14431] team0: Port device team_slave_1 added [ 983.914079][T14144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.218431][T14144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.299437][T14431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.306706][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.333309][T14431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.377114][T14144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.507579][T14431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.514852][T14431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.541498][T14431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.631040][T14144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.696013][T14438] hsr_slave_0: entered promiscuous mode [ 984.706627][T14438] hsr_slave_1: entered promiscuous mode [ 984.715793][T14438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.723660][T14438] Cannot create hsr debugfs directory [ 984.774997][ T5803] Bluetooth: hci2: command tx timeout [ 984.990102][T14462] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.997934][T14462] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.005627][T14462] bridge_slave_0: entered allmulticast mode [ 985.015031][T14462] bridge_slave_0: entered promiscuous mode [ 985.132300][T14462] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.142878][T14462] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.150719][T14462] bridge_slave_1: entered allmulticast mode [ 985.160259][T14462] bridge_slave_1: entered promiscuous mode [ 985.332195][T14431] hsr_slave_0: entered promiscuous mode [ 985.342748][T14431] hsr_slave_1: entered promiscuous mode [ 985.351612][T14431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 985.359557][T14431] Cannot create hsr debugfs directory [ 985.735747][T14144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.763777][T14462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.863121][T14475] loop8: detected capacity change from 0 to 32768 [ 985.907955][T14462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.947391][T14144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.021858][T14475] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 986.021990][T14475] allowing incompatible features above 0.0: (unknown version) [ 986.022090][T14475] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 986.062846][T14475] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 986.072505][T14475] bcachefs (loop8): initializing new filesystem [ 986.103465][T14475] bcachefs (loop8): going read-write [ 986.209482][T14475] bcachefs (loop8): marking superblocks [ 986.222266][T14144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.275109][T14475] bcachefs (loop8): initializing freespace [ 986.326006][T14475] bcachefs (loop8): done initializing freespace [ 986.359928][T14462] team0: Port device team_slave_0 added [ 986.370837][T14475] bcachefs (loop8): reading snapshots table [ 986.376783][T14422] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 986.387515][T14475] bcachefs (loop8): reading snapshots done [ 986.462506][T14422] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 986.506041][T14144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.568569][T14475] bcachefs (loop8): loop8: Superblock write was silently dropped! (seq 0 expected 42) [ 986.593049][T14475] bcachefs (loop8): done starting filesystem [ 986.594014][T14462] team0: Port device team_slave_1 added [ 986.654826][T14422] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 986.827997][T14422] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 986.991754][T14462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.999178][T14462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.028481][T14462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.204206][T14475] syz.8.3021 (14475) used greatest stack depth: 1232 bytes left [ 987.254184][T14462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.266059][T14462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.292580][T14462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.369614][T10390] bcachefs (loop8): shutting down [ 987.375144][T10390] bcachefs (loop8): going read-only [ 987.380635][T10390] bcachefs (loop8): finished waiting for writes to stop [ 987.393998][T14144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.404066][T10390] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3 [ 987.515380][T14144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.568932][T10390] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 4 [ 987.583137][T10390] bcachefs (loop8): clean shutdown complete, journal seq 5 [ 987.592974][T10390] bcachefs (loop8): marking filesystem clean [ 987.639611][T10390] bcachefs (loop8): shutdown complete [ 987.855769][T14144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.937876][T14462] hsr_slave_0: entered promiscuous mode [ 987.948058][T14462] hsr_slave_1: entered promiscuous mode [ 987.956715][T14462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.964567][T14462] Cannot create hsr debugfs directory [ 988.095914][T14144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.615013][T14144] bridge_slave_1: left allmulticast mode [ 988.620934][T14144] bridge_slave_1: left promiscuous mode [ 988.627992][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.643926][T14144] bridge_slave_0: left allmulticast mode [ 988.653450][T14144] bridge_slave_0: left promiscuous mode [ 988.660127][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.674102][T14144] bridge_slave_1: left allmulticast mode [ 988.680078][T14144] bridge_slave_1: left promiscuous mode [ 988.686826][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.701055][T14144] bridge_slave_0: left allmulticast mode [ 988.707193][T14144] bridge_slave_0: left promiscuous mode [ 988.713443][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.738548][T14144] bridge_slave_1: left allmulticast mode [ 988.744411][T14144] bridge_slave_1: left promiscuous mode [ 988.754943][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.768825][T14144] bridge_slave_0: left allmulticast mode [ 988.774881][T14144] bridge_slave_0: left promiscuous mode [ 988.781478][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.498939][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.526010][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.553020][T14144] bond0 (unregistering): Released all slaves [ 989.815683][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.832135][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.846172][T14144] bond0 (unregistering): Released all slaves [ 990.153470][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.201783][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.228353][T14144] bond0 (unregistering): Released all slaves [ 990.478428][T14422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.703541][T14422] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.743467][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.751056][ T6500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.999449][ T3931] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.007073][ T3931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.840819][T14498] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3025'. [ 993.067990][T14144] hsr_slave_0: left promiscuous mode [ 993.141608][T14144] hsr_slave_1: left promiscuous mode [ 993.149817][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.158758][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.208555][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.217918][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.261251][T14144] hsr_slave_0: left promiscuous mode [ 993.270526][T14144] hsr_slave_1: left promiscuous mode [ 993.278529][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.286426][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.297116][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.306657][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.510355][T14144] hsr_slave_0: left promiscuous mode [ 993.519142][T14144] hsr_slave_1: left promiscuous mode [ 993.527979][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.535791][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.547683][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.556308][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.648477][T14144] veth1_macvtap: left promiscuous mode [ 993.654226][T14144] veth0_macvtap: left promiscuous mode [ 993.662717][T14144] veth1_vlan: left promiscuous mode [ 993.669602][T14144] veth0_vlan: left promiscuous mode [ 993.694924][T14144] veth1_macvtap: left promiscuous mode [ 993.700864][T14144] veth0_macvtap: left promiscuous mode [ 993.719324][T14144] veth1_macvtap: left promiscuous mode [ 993.725245][T14144] veth0_macvtap: left promiscuous mode [ 994.974869][T14144] team0 (unregistering): Port device team_slave_1 removed [ 995.056463][T14144] team0 (unregistering): Port device team_slave_0 removed [ 995.741398][T14144] team0 (unregistering): Port device team_slave_1 removed [ 995.772805][T14144] team0 (unregistering): Port device team_slave_0 removed [ 996.274086][T14144] team0 (unregistering): Port device team_slave_1 removed [ 996.335266][T14144] team0 (unregistering): Port device team_slave_0 removed [ 997.030349][T14462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 997.099964][T14462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 997.175863][T14462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 997.249417][T14462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 997.420018][T14431] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 997.562806][T14438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 997.636745][T14431] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 997.691326][T14438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 997.741775][T14438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 997.808383][T14431] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 997.847140][T14438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 997.909690][T14422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.919205][T14431] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 998.654698][T14462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.843755][T14462] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.923928][ T3931] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.931543][ T3931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.049181][ T3931] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.056836][ T3931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.300108][T14431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.389423][T14438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.481921][T14508] loop8: detected capacity change from 0 to 32768 [ 999.525412][T14431] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.560188][T14508] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3028 (14508) [ 999.598036][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.605643][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.627915][T14438] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.683889][T14508] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 999.696081][T14508] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 999.707658][T14508] BTRFS info (device loop8): disk space caching is enabled [ 999.714124][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.715508][T14508] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 999.722521][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.962469][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.970121][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.980698][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 999.981921][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 999.995551][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1000.005735][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1000.006987][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.016736][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1000.023872][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.032130][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1000.048742][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1000.058556][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1000.069048][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1000.080670][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1000.091816][T14508] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1000.156922][T14508] BTRFS error (device loop8): open_ctree failed: -12 [ 1000.820755][T14422] veth0_vlan: entered promiscuous mode [ 1000.966023][T14422] veth1_vlan: entered promiscuous mode [ 1001.371564][T14422] veth0_macvtap: entered promiscuous mode [ 1001.439987][T14422] veth1_macvtap: entered promiscuous mode [ 1001.535402][T14462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.664160][T14422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.771885][T14422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.863149][T14422] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.873924][T14422] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.883163][T14422] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.892400][T14422] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.198826][T14431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.507166][T14438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.786730][T14431] veth0_vlan: entered promiscuous mode [ 1002.914096][T14431] veth1_vlan: entered promiscuous mode [ 1003.136261][T14438] veth0_vlan: entered promiscuous mode [ 1003.297070][T14438] veth1_vlan: entered promiscuous mode [ 1003.346102][T14431] veth0_macvtap: entered promiscuous mode [ 1003.432126][T14431] veth1_macvtap: entered promiscuous mode [ 1003.602258][T14431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.675981][T14431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.728158][T14431] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.737411][T14431] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.746645][T14431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.755837][T14431] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.818315][T14438] veth0_macvtap: entered promiscuous mode [ 1003.924132][T14438] veth1_macvtap: entered promiscuous mode [ 1004.140958][T14438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.291302][T14438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.410525][T14462] veth0_vlan: entered promiscuous mode [ 1004.420790][T14438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.431407][T14438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.441674][T14438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.451218][T14438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.578118][T14462] veth1_vlan: entered promiscuous mode [ 1004.884065][T14462] veth0_macvtap: entered promiscuous mode [ 1004.968529][T14462] veth1_macvtap: entered promiscuous mode [ 1005.087909][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3032'. [ 1005.197128][T14462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.279195][T14462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.411388][T14462] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.421740][T14462] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.431288][T14462] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.441631][T14462] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.820602][T14144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.829813][T14144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.011459][ T3931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.020626][ T3931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.861212][ T3709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.872842][ T3709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.079425][ T6500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.087643][ T6500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.270497][T14055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.282578][T14055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.288538][ T3931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.299493][ T3931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.098132][T14644] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.3012'. [ 1012.536807][T14055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.545001][T14055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.770333][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.779082][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.194209][T14659] bridge0: port 3(syz_tun) entered blocking state [ 1014.201423][T14659] bridge0: port 3(syz_tun) entered disabled state [ 1014.208924][T14659] syz_tun: entered allmulticast mode [ 1014.217558][T14659] syz_tun: entered promiscuous mode [ 1014.225260][T14659] bridge0: port 3(syz_tun) entered blocking state [ 1014.232317][T14659] bridge0: port 3(syz_tun) entered forwarding state [ 1015.100964][T14669] netlink: 6048 bytes leftover after parsing attributes in process `syz.6.3045'. [ 1017.793608][T14666] loop8: detected capacity change from 0 to 32768 [ 1018.941014][ T5803] Bluetooth: Fragment is too long (len 14, expected 2) [ 1019.456047][T14689] netlink: 6048 bytes leftover after parsing attributes in process `syz.9.3056'. [ 1019.743632][T14677] loop6: detected capacity change from 0 to 32768 [ 1022.158070][T14713] netlink: 'syz.9.3064': attribute type 10 has an invalid length. [ 1022.267367][T14713] team0: Port device macvlan0 added [ 1022.579796][T14721] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.3068'. [ 1023.105053][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.111781][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.254955][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1023.527133][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 1023.557391][ T24] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1023.573553][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1023.655968][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1023.662890][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1023.677066][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.734918][T14726] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1025.416360][T14747] bridge0: port 3(syz_tun) entered blocking state [ 1025.423476][T14747] bridge0: port 3(syz_tun) entered disabled state [ 1025.430891][T14747] syz_tun: entered allmulticast mode [ 1025.439554][T14747] syz_tun: entered promiscuous mode [ 1025.446993][T14747] bridge0: port 3(syz_tun) entered blocking state [ 1025.453777][T14747] bridge0: port 3(syz_tun) entered forwarding state [ 1026.190635][T14754] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1030.337779][T14782] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1030.824887][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1030.912762][T13985] usb 7-1: USB disconnect, device number 2 [ 1031.066621][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1031.078073][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.089404][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.099527][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1031.207046][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1031.216553][ T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1031.225235][ T24] usb 9-1: Manufacturer: syz [ 1031.310402][ T24] usb 9-1: config 0 descriptor?? [ 1031.773284][ T24] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 1031.833205][ T24] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 1031.894299][ T24] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1032.838529][T14801] loop6: detected capacity change from 0 to 524287999 [ 1035.040542][ T24] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 1035.214979][ T24] usb 9-1: device descriptor read/64, error -32 [ 1036.140918][T13985] usb 9-1: USB disconnect, device number 2 [ 1036.393596][T14821] netlink: 6012 bytes leftover after parsing attributes in process `syz.8.3107'. [ 1038.376557][T14845] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3118'. [ 1038.756355][T14852] netlink: 6012 bytes leftover after parsing attributes in process `syz.9.3122'. [ 1039.365827][T14860] loop8: detected capacity change from 0 to 1024 [ 1039.481362][T14860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.566373][T14860] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #14: comm syz.8.3124: attempt to clear invalid blocks 1886221359 len 1 [ 1039.924054][T10390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.885082][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3133'. [ 1041.224949][T14892] netlink: 6012 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1041.592227][T14895] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1041.820260][T14898] loop6: detected capacity change from 0 to 1024 [ 1041.981943][T14898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.171893][T14898] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #14: comm syz.6.3138: attempt to clear invalid blocks 1886221359 len 1 [ 1042.433766][T14462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.907827][T14921] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3147'. [ 1042.933143][ T5803] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1042.941909][ T5803] Bluetooth: hci5: Injecting HCI hardware error event [ 1042.956150][ T5803] Bluetooth: hci5: hardware error 0x00 [ 1043.062386][T14923] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.3148'. [ 1043.722877][T14937] input: syz1 as /devices/virtual/input/input9 [ 1043.758649][T14936] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3153'. [ 1043.768418][T14936] 0ªX¹¦D: renamed from gretap0 (while UP) [ 1043.818985][T14936] 0ªX¹¦D: entered allmulticast mode [ 1043.826610][T14936] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1044.759192][T13985] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1044.984670][T13985] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1044.996223][T13985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.007646][T13985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.013789][ T5803] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1045.017639][T13985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1045.128815][T13985] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1045.128879][T14954] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3162'. [ 1045.147531][T13985] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1045.156123][T13985] usb 4-1: Manufacturer: syz [ 1045.250131][T13985] usb 4-1: config 0 descriptor?? [ 1045.315181][T14959] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.3163'. [ 1046.335283][T13985] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 1046.389013][T13985] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 1046.425359][T13985] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1047.770691][T14972] loop6: detected capacity change from 0 to 524287999 [ 1049.555045][T13985] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 1050.064661][T13985] usb 4-1: device descriptor read/64, error -32 [ 1051.066524][T14982] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3167'. [ 1051.076521][T14982] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 1051.117716][ T24] usb 4-1: USB disconnect, device number 2 [ 1051.124986][T14982] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1052.601751][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3174'. [ 1053.273381][T15001] loop6: detected capacity change from 0 to 1024 [ 1053.444915][T15001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.647889][T15001] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #14: comm syz.6.3176: attempt to clear invalid blocks 1886221359 len 1 [ 1054.137468][T14462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.391677][T15022] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3180'. [ 1054.401857][T15022] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 1054.422964][T15022] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1055.155886][T15028] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3758424113 (240539143232 ns) > initial count (196541296192 ns). Using initial count to start timer. [ 1055.835661][T15036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3187'. [ 1057.143350][T15053] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3193'. [ 1057.162081][T15053] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 1057.231732][T15053] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1058.104050][T15069] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3199'. [ 1059.036021][T15080] syzkaller0: entered promiscuous mode [ 1059.041810][T15080] syzkaller0: entered allmulticast mode [ 1059.062468][ T3709] syzkaller0: tun_net_xmit 48 [ 1059.276590][T15088] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1059.366929][T15080] syzkaller0: create flow: hash 4212488094 index 2 [ 1059.412804][T15078] syzkaller0: delete flow: hash 4212488094 index 2 [ 1060.631160][T15107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1061.275447][ T5852] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1061.535148][ T5852] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1061.546430][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.561028][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.572224][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1061.713710][ T5852] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1061.723344][ T5852] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1061.731847][ T5852] usb 3-1: Manufacturer: syz [ 1063.187337][ T5852] usb 3-1: config 0 descriptor?? [ 1064.242943][ T5852] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 1064.295697][ T5852] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 1064.327394][ T5852] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1065.103434][T15134] loop6: detected capacity change from 0 to 524287999 [ 1070.398046][T14424] usb 3-1: USB disconnect, device number 2 [ 1071.735771][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3229'. [ 1072.263085][T15157] loop7: detected capacity change from 0 to 16384 [ 1072.690629][T15160] delete_channel: no stack [ 1076.746649][T15187] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3243'. [ 1078.138606][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.161476][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.170568][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.200781][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.223048][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1079.845408][T15195] chnl_net:caif_netlink_parms(): no params data found [ 1080.289459][ T5813] Bluetooth: hci0: command tx timeout [ 1081.929660][T15195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.942181][T15195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.949819][T15195] bridge_slave_0: entered allmulticast mode [ 1081.959767][T15195] bridge_slave_0: entered promiscuous mode [ 1082.154233][T15195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.162549][T15195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.170218][T15195] bridge_slave_1: entered allmulticast mode [ 1082.178496][T15195] bridge_slave_1: entered promiscuous mode [ 1082.356174][ T5813] Bluetooth: hci0: command tx timeout [ 1082.387242][T14145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.612143][T14145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.697284][T15195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.762097][T15195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.825288][T14145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.550100][T14145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.021069][T15233] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1084.030927][T15233] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1084.146330][T15195] team0: Port device team_slave_0 added [ 1084.233334][T15195] team0: Port device team_slave_1 added [ 1084.435705][ T5813] Bluetooth: hci0: command tx timeout [ 1084.547228][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.554060][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.709006][T14145] bridge_slave_1: left allmulticast mode [ 1084.715155][T14145] bridge_slave_1: left promiscuous mode [ 1084.721458][T14145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.775849][T14145] bridge_slave_0: left allmulticast mode [ 1084.782180][T14145] bridge_slave_0: left promiscuous mode [ 1084.788440][T14145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.326531][T14804] smc: removing ib device syz0 [ 1085.353022][T14145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.442667][T14145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.472137][T14145] bond0 (unregistering): Released all slaves [ 1085.513150][T15195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.526368][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.555567][T15195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.756598][T15195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.763696][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.790159][T15195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.523039][ T5803] Bluetooth: hci0: command tx timeout [ 1086.670697][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 1088.017767][T15253] input: syz1 as /devices/virtual/input/input13 [ 1089.626358][T15195] hsr_slave_0: entered promiscuous mode [ 1089.641678][T15195] hsr_slave_1: entered promiscuous mode [ 1089.719507][T14145] hsr_slave_0: left promiscuous mode [ 1089.751730][T14145] hsr_slave_1: left promiscuous mode [ 1089.759721][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.767673][T14145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.883940][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.892102][T14145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.014962][T14145] veth1_macvtap: left promiscuous mode [ 1090.020751][T14145] veth0_macvtap: left promiscuous mode [ 1090.587453][T14145] team0 (unregistering): Port device team_slave_1 removed [ 1090.616261][T14145] team0 (unregistering): Port device team_slave_0 removed [ 1090.984203][T15272] netlink: 'syz.3.3269': attribute type 10 has an invalid length. [ 1091.055854][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 1091.718825][ T5813] Bluetooth: hci7: command 0x0406 tx timeout [ 1092.961680][T15195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1093.037296][T15195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1093.085565][T15195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1093.149045][T15195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1094.103118][T15195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.306205][T15195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.411195][T14804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.418849][T14804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.508824][T14804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.516442][T14804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.929605][T15195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.076313][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'. [ 1097.320824][T15327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3288'. [ 1097.330509][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3288'. [ 1098.694855][ T11] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1098.854917][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 1098.881715][ T11] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1098.891177][ T11] usb 7-1: config 179 has no interface number 0 [ 1098.897843][ T11] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1098.909673][ T11] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1098.922378][ T11] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1098.936774][ T11] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1098.949537][ T11] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1098.963267][ T11] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1098.970577][ T11] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1098.980009][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.115097][ T11] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input16 [ 1099.207273][ T5138] input input16: unable to receive magic message: -110 [ 1099.295701][ T5138] input input16: unable to receive magic message: -32 [ 1099.309040][T15195] veth0_vlan: entered promiscuous mode [ 1099.454401][T15195] veth1_vlan: entered promiscuous mode [ 1099.498674][ T24] usb 7-1: USB disconnect, device number 3 [ 1099.498951][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1099.513306][ T24] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1099.548620][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1099.548689][ T30] audit: type=1326 audit(1750852515.569:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.6.3292" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 1099.800019][T15195] veth0_macvtap: entered promiscuous mode [ 1099.865904][T15195] veth1_macvtap: entered promiscuous mode [ 1100.026657][T15195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.193077][T15195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.269760][T15195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.279114][T15195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.288330][T15195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.297470][T15195] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.576213][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1100.636162][T15362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3299'. [ 1100.645801][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'. [ 1102.748498][ T5813] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 1103.240579][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3315'. [ 1105.707137][T15451] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1105.714406][T15451] overlayfs: failed to set xattr on upper [ 1105.724190][T15451] overlayfs: ...falling back to redirect_dir=nofollow. [ 1105.731466][T15451] overlayfs: ...falling back to index=off. [ 1105.737728][T15451] overlayfs: ...falling back to uuid=null. [ 1106.228620][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 1106.495445][T14145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.503725][T14145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.582193][T14145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.591158][T14145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.754826][ T5813] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1106.763429][ T5813] Bluetooth: hci1: Injecting HCI hardware error event [ 1106.772366][ T5803] Bluetooth: hci1: hardware error 0x00 [ 1108.445234][T15495] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1108.452660][T15495] overlayfs: failed to set xattr on upper [ 1108.465846][T15495] overlayfs: ...falling back to redirect_dir=nofollow. [ 1108.472921][T15495] overlayfs: ...falling back to index=off. [ 1108.482876][T15495] overlayfs: ...falling back to uuid=null. [ 1108.512759][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3344'. [ 1108.841279][ T5803] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1109.085383][ T5803] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1109.094015][ T5803] Bluetooth: hci2: Injecting HCI hardware error event [ 1109.101806][ T5813] Bluetooth: hci2: hardware error 0x00 [ 1111.154857][ T5813] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1111.408126][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1111.893012][T15539] loop2: detected capacity change from 0 to 512 [ 1111.922708][T15544] 0ªX¹¦D: left allmulticast mode [ 1111.947756][T15539] EXT4-fs: Ignoring removed mblk_io_submit option [ 1111.956167][T15539] EXT4-fs: Ignoring removed bh option [ 1111.987667][ T5813] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1111.997496][ T5813] Bluetooth: hci0: Injecting HCI hardware error event [ 1112.005597][ T5803] Bluetooth: hci0: hardware error 0x00 [ 1112.150547][T15539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1112.189765][T15544] bridge0: port 3(syz_tun) entered disabled state [ 1112.214549][T15544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.223602][T15544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.365212][T15539] EXT4-fs (loop2): 1 truncate cleaned up [ 1112.373510][T15539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.605223][T15544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.685566][T15544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.969236][T15544] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.978845][T15544] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.988182][T15544] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.997446][T15544] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.638425][T14431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.125269][ T5803] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1117.484934][ T5852] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1117.686849][ T5852] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.697407][ T5852] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1117.704304][ T5852] usb 7-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 1117.713871][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.815395][ T5852] usb 7-1: config 0 descriptor?? [ 1118.105251][ T5852] usbhid 7-1:0.0: can't add hid device: -71 [ 1118.112108][ T5852] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1118.165921][ T5852] usb 7-1: USB disconnect, device number 4 [ 1118.234211][T15621] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1118.241730][T15621] overlayfs: failed to set xattr on upper [ 1118.248058][T15621] overlayfs: ...falling back to redirect_dir=nofollow. [ 1118.255211][T15621] overlayfs: ...falling back to index=off. [ 1118.261206][T15621] overlayfs: ...falling back to uuid=null. [ 1127.038974][T15723] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3432'. [ 1130.946794][T15761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3447'. [ 1133.226209][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3458'. [ 1133.435418][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3458'. [ 1133.530139][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3458'. [ 1135.044119][T15809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3462'. [ 1136.640104][T15828] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1136.648358][T15828] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1136.657018][T15828] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1136.665543][T15828] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1136.755117][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1136.764673][T15829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1136.773757][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1136.782982][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1139.537976][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3476'. [ 1142.920368][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3488'. [ 1146.006298][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.013009][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.698977][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3501'. [ 1147.364096][T15950] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1147.379664][T15950] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1155.043994][T16000] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1155.055454][T16000] overlayfs: failed to set xattr on upper [ 1155.062581][T16000] overlayfs: ...falling back to redirect_dir=nofollow. [ 1155.069861][T16000] overlayfs: ...falling back to index=off. [ 1155.076068][T16000] overlayfs: ...falling back to uuid=null. [ 1161.336817][T16077] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1161.875285][T16080] usb usb9: usbfs: process 16080 (syz.3.3547) did not claim interface 0 before use [ 1163.049044][T16089] input: syz1 as /devices/virtual/input/input23 [ 1165.343729][T16123] loop2: detected capacity change from 0 to 1024 [ 1165.437332][T16123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.556908][T16123] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.3560: attempt to clear invalid blocks 1886221359 len 1 [ 1165.846382][T14431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.171362][T16151] ===================================================== [ 1167.179025][T16151] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1167.186620][T16151] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1167.191794][T16151] sctp_inq_push+0x2a6/0x350 [ 1167.196765][T16151] sctp_backlog_rcv+0x3c7/0xda0 [ 1167.201884][T16151] sk_backlog_rcv+0x142/0x420 [ 1167.206908][T16151] __release_sock+0x1d3/0x330 [ 1167.211840][T16151] release_sock+0x6b/0x270 [ 1167.216602][T16151] sctp_wait_for_connect+0x458/0x820 [ 1167.222107][T16151] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1167.228472][T16151] sctp_sendmsg+0x3910/0x49f0 [ 1167.237722][T16151] inet_sendmsg+0x269/0x2a0 [ 1167.242497][T16151] __sock_sendmsg+0x278/0x3d0 [ 1167.249027][T16151] __sys_sendto+0x593/0x720 [ 1167.253790][T16151] __ia32_sys_sendto+0x12f/0x200 [ 1167.259083][T16151] ia32_sys_call+0x1397/0x42c0 [ 1167.264030][T16151] __do_fast_syscall_32+0xb0/0x150 [ 1167.269468][T16151] do_fast_syscall_32+0x38/0x80 [ 1167.275125][T16151] do_SYSENTER_32+0x1f/0x30 [ 1167.279827][T16151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1167.286440][T16151] [ 1167.288879][T16151] Uninit was created at: [ 1167.293378][T16151] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1167.300158][T16151] kmalloc_reserve+0x22f/0x4b0 [ 1167.305226][T16151] __alloc_skb+0x347/0x7d0 [ 1167.309886][T16151] sctp_packet_transmit+0x18a1/0x46d0 [ 1167.315634][T16151] sctp_outq_flush+0x1c7d/0x67c0 [ 1167.320774][T16151] sctp_outq_uncork+0x9e/0xc0 [ 1167.325734][T16151] sctp_do_sm+0x8c8e/0x9720 [ 1167.330483][T16151] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 1167.339600][T16151] sctp_inq_push+0x2a6/0x350 [ 1167.345541][T16151] sctp_backlog_rcv+0x3c7/0xda0 [ 1167.350600][T16151] sk_backlog_rcv+0x142/0x420 [ 1167.355571][T16151] __release_sock+0x1d3/0x330 [ 1167.360458][T16151] release_sock+0x6b/0x270 [ 1167.365211][T16151] sctp_wait_for_connect+0x458/0x820 [ 1167.370717][T16151] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1167.376493][T16151] sctp_sendmsg+0x3910/0x49f0 [ 1167.381351][T16151] inet_sendmsg+0x269/0x2a0 [ 1167.386103][T16151] __sock_sendmsg+0x278/0x3d0 [ 1167.390981][T16151] __sys_sendto+0x593/0x720 [ 1167.395796][T16151] __ia32_sys_sendto+0x12f/0x200 [ 1167.400903][T16151] ia32_sys_call+0x1397/0x42c0 [ 1167.405900][T16151] __do_fast_syscall_32+0xb0/0x150 [ 1167.411201][T16151] do_fast_syscall_32+0x38/0x80 [ 1167.416306][T16151] do_SYSENTER_32+0x1f/0x30 [ 1167.421006][T16151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1167.427637][T16151] [ 1167.430118][T16151] CPU: 1 UID: 0 PID: 16151 Comm: syz.2.3564 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1167.446737][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.458127][T16151] ===================================================== [ 1167.465396][T16151] Disabling lock debugging due to kernel taint [ 1167.471692][T16151] Kernel panic - not syncing: kmsan.panic set ... [ 1167.478314][T16151] CPU: 1 UID: 0 PID: 16151 Comm: syz.2.3564 Tainted: G B 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1167.492307][T16151] Tainted: [B]=BAD_PAGE [ 1167.496603][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.506817][T16151] Call Trace: [ 1167.510221][T16151] [ 1167.513273][T16151] __dump_stack+0x26/0x30 [ 1167.517816][T16151] dump_stack_lvl+0x53/0x270 [ 1167.522634][T16151] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1167.528743][T16151] dump_stack+0x1e/0x25 [ 1167.533111][T16151] panic+0x4bd/0xd50 [ 1167.537271][T16151] kmsan_report+0x31c/0x320 [ 1167.542026][T16151] ? stack_depot_save_flags+0x35/0x7b0 [ 1167.547743][T16151] ? __msan_warning+0x1b/0x30 [ 1167.552685][T16151] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1167.558063][T16151] ? sctp_inq_push+0x2a6/0x350 [ 1167.563051][T16151] ? sctp_backlog_rcv+0x3c7/0xda0 [ 1167.568302][T16151] ? sk_backlog_rcv+0x142/0x420 [ 1167.573416][T16151] ? __release_sock+0x1d3/0x330 [ 1167.578471][T16151] ? release_sock+0x6b/0x270 [ 1167.583297][T16151] ? sctp_wait_for_connect+0x458/0x820 [ 1167.588977][T16151] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1167.594724][T16151] ? sctp_sendmsg+0x3910/0x49f0 [ 1167.599757][T16151] ? inet_sendmsg+0x269/0x2a0 [ 1167.604626][T16151] ? __sock_sendmsg+0x278/0x3d0 [ 1167.609690][T16151] ? __sys_sendto+0x593/0x720 [ 1167.614627][T16151] ? __ia32_sys_sendto+0x12f/0x200 [ 1167.619927][T16151] ? ia32_sys_call+0x1397/0x42c0 [ 1167.625072][T16151] ? __do_fast_syscall_32+0xb0/0x150 [ 1167.630573][T16151] ? do_fast_syscall_32+0x38/0x80 [ 1167.635812][T16151] ? do_SYSENTER_32+0x1f/0x30 [ 1167.640675][T16151] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1167.647428][T16151] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1167.653544][T16151] ? load_gs_index+0x51/0x100 [ 1167.658458][T16151] ? kmsan_get_metadata+0xfb/0x160 [ 1167.663891][T16151] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1167.669951][T16151] ? kmsan_get_metadata+0xfb/0x160 [ 1167.675300][T16151] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1167.681379][T16151] ? sctp_inq_pop+0x15ea/0x19e0 [ 1167.686444][T16151] ? kmsan_get_metadata+0xfb/0x160 [ 1167.691816][T16151] __msan_warning+0x1b/0x30 [ 1167.696571][T16151] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1167.701796][T16151] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 1167.707524][T16151] sctp_inq_push+0x2a6/0x350 [ 1167.712389][T16151] sctp_backlog_rcv+0x3c7/0xda0 [ 1167.717484][T16151] ? kmsan_get_metadata+0xfb/0x160 [ 1167.722859][T16151] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1167.728506][T16151] sk_backlog_rcv+0x142/0x420 [ 1167.733427][T16151] __release_sock+0x1d3/0x330 [ 1167.738325][T16151] release_sock+0x6b/0x270 [ 1167.742984][T16151] sctp_wait_for_connect+0x458/0x820 [ 1167.748522][T16151] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1167.754864][T16151] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1167.760470][T16151] ? kmsan_get_metadata+0xfb/0x160 [ 1167.765837][T16151] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1167.771960][T16151] sctp_sendmsg+0x3910/0x49f0 [ 1167.776858][T16151] ? kmsan_save_stack_with_flags+0x10/0x60 [ 1167.782986][T16151] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1167.788232][T16151] inet_sendmsg+0x269/0x2a0 [ 1167.792989][T16151] __sock_sendmsg+0x278/0x3d0 [ 1167.797895][T16151] __sys_sendto+0x593/0x720 [ 1167.802675][T16151] ? do_futex+0x3a1/0x480 [ 1167.807310][T16151] ? kmsan_get_metadata+0xfb/0x160 [ 1167.812718][T16151] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1167.818869][T16151] __ia32_sys_sendto+0x12f/0x200 [ 1167.824073][T16151] ia32_sys_call+0x1397/0x42c0 [ 1167.829057][T16151] __do_fast_syscall_32+0xb0/0x150 [ 1167.834428][T16151] do_fast_syscall_32+0x38/0x80 [ 1167.839486][T16151] do_SYSENTER_32+0x1f/0x30 [ 1167.844185][T16151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1167.850755][T16151] RIP: 0023:0xf7fd1539 [ 1167.855026][T16151] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1167.874941][T16151] RSP: 002b:00000000f50b455c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1167.883566][T16151] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080847fff [ 1167.891732][T16151] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 1167.899886][T16151] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1167.908027][T16151] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1167.916190][T16151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1167.924352][T16151] [ 1167.927873][T16151] Kernel Offset: disabled [ 1167.932296][T16151] Rebooting in 86400 seconds..