last executing test programs: 8.911314037s ago: executing program 2 (id=1303): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) 8.289434589s ago: executing program 2 (id=1305): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="cd", 0x1}], 0x1}, 0x40051) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0) 8.077505396s ago: executing program 2 (id=1309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="0400000000000000f7fb7f1100000000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.925311439s ago: executing program 2 (id=1313): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000680)='*', 0x1}], 0x1) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x7f, 0x0) write$binfmt_script(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.05149133s ago: executing program 4 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='consume_skb\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 6.989502726s ago: executing program 2 (id=1316): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 6.905003163s ago: executing program 2 (id=1318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.548133882s ago: executing program 4 (id=1320): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(r3, &(0x7f0000000300)=""/246, 0xf6, 0x0) 5.081149103s ago: executing program 3 (id=1324): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score\x00') r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.490383801s ago: executing program 4 (id=1325): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='iocharset=cp936,iocharset=iso8859-15,errors=remount-ro,errors=remount-ro,nodiscard,noquota,discard=0x00000000000005aa\x00integrity,discard=0x0000000000000009,umask=0x0000000000000bfe,usrquota,grpquota,resize=0x0000000000000001,umask=0x0000000000000641,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c646566636f6e746578743d73797374656d5f752c736d61636b6673666c6f6ff51d4efed78a40087ab75f18d7723d63000000e93e034f"], 0xfe, 0x6170, &(0x7f0000009940)="$eJzs3c1vHGcdB/Df7JtfSlurh6pUCLlpeSmlSZyUECjQ9gAHLj2gXFEi160iUkBJQGllEVe+cODEXwBC4ogQR8SBP6AHrtw4cSKSjQTqiUFjP088u9ntOnG8s/Z8PpIz85tn1vuMvzv7kpnZJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+P73frBWRMTVn6cFKxGfiW5EJ2KpqlcjYml1Ja/fi4jnYq85no2I/kJEdfu9f56OeC0iPn4qYmd3c71afOGQ/fjuH//+ux8+8fbf/tA/998/3e6+Pmm9O3d+9Z8/3z3aNgMAAEDblGVZFulj/vPp832n6U4BADORX//LJC8/9fWv//n2X+apP2q1Wq2e47qYs/48el1Xjne3XkTEVv021XsGh+MB4ITZik+a7gINkn+r9SLiiaY7Acy1oukOcCx2djfXi5RvUX89WN1vz+eCDOW/Vdy/vmPSdJrRc0xm9fjajm48M6E/SzPqwzzJ+XdG87+63z5I6x13/rMyKf/B/qVPrZPz747mP+L05N8Zm39b5fx7D5V/V/4AAAAAADDH8v//rzR8/Hfh6JtyKJ92/Hd1Rn0AAAAAAAAAgMftqOP/3Wf8PwAAAJhb1Wf1ym+eOlg26bvYquVXiognR9YHWiZdLLPcdD8AAAAAAAAAAAAAoE16++fwXiki+hHx5PJyWZbVT91o/bCOevuTru3bD23W9JM8AADs+/ipkWv5i4jFiLiSvuuvv7y8XJaLS8vlcrm0kN/PDhYWy6Xa59o8rZYtDA7xhrg3KKtftli7Xd20z8vT2kd/X3Vfg7J7iI49Jv3015zQ3FDYAJDsvxrteEU6Zcry6UlvPmCI/f8UWomVph9XzL+mH6YAAADA8SvLsizS13k/n475d5ruFAAwE/n1f/S4wJHqzoT2iMfz+9VqtVqtVj9SXVeOd7deRMRW/TbVewbD8QPACbMVnzTdBRok/1brRcRzTXcCmGtF0x3gWOzsbq4XKd+i/nqQxnfP54IM5b9V7N0u337cdJrRc0xm9fjajm48M6E/z86oD/Mk598Zzf/qfvsgrXfc+c/KpPwHe5fMtU/Ovzua/4jTk39nbP5tlfPvPVT+XfkDAAAAAMAcy///v+L4b95kAAAAAAAAADhxdnY31/N1r/n4/+fGrOf6z9Mp5188bP5LaV7+J1rOvzOS/5dH1uvW5u+9dbD//3t3c/33t//12Tw9bP4LeaZIj6wiPSKKdE9FL02PsnUP2u53B9U99YtOt5fO+Sn778b1uBEbcX5o3U76exy0rw21Vz3tD7VfGGrvPdB+cai9n753oFzK7WdjPX4SN+KdvfaqbWHK9i9OaS+ntOf8u57/Wynn36v9VPkvp/ZiZFq591Hngf2+Ph13P29e//wvzx//5ky1Hd3721ZXbd+ZBvqz9zd5YhA/u7Vx8+yda7dv31yLNBlaeiHS5DHL+ff3fhYOnv9f3G/Pz/v1/fXeR4OHzn9ebEdvYv4v1uar7X15xn1rQs5/kH5y/u+k9vH7/0nOf/L+/0oD/QEAAAAAAAAAAAAAAIBPU5bl3iWib0bEpXT9T1PXZgIAs5Vf/8skL1er1Wq1Wn366rpyvDfqRUT8tX6b6j3DL8b9MgBgnv0vIv7RdCdojPxbLH/fXzV9qenOADN164MPf3Ttxo2Nm7ea7gkAAAAAAAAA8Kjy+J+rtfGfX4qIlZH1hsZ/fStWjzr+Zy/P3B9g9DEP9D3BdmfQ7dSGG38h9sbnPjtp/O8z8eD433lM3G59OyboT2kfTGlfmNK+OHbpQVpjL/Soyfm/UBvvvMr/+ZHh19sw/uvomPdtkPM/U3s8V/l/aWS9ev7lb+cu/63DrrgdnaH8z91+/6fnbn3w4avX37/23sZ7Gz++uLZ2/uKlS5cvXz737vUbG+f3/z2eXs+BnH8e+9p5oO2S88+Zy79dcv5fSLX82yXn/8VUy79dcv75/Z782yXnnz/7yL9dcv4vp1r+7ZLz/0qq5d8uO7ubC1X+r6Ra/u2S9/+vplr+7ZLzfzXV8m+XnP/ZVMu/XXL+51J9iPx9PfwpkvPPR7js/+2S819LtfzbJed/IdXyb5ec/8VUy79dcv6vpVr+7ZLz/1qq5d8uOf9LqZZ/u+T8v55q+bdLzv9yquXfLjn/b6Ra/u2S8/9mquXfLjn/11Mt/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/G6mWf7scfP+/GTPHP7M1H90wM3Wm6WcmAAAAAAAAAAAAAGDULE4nbnobAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg/O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3r3FyHXXdwA/sxd77RBiIAQnNbBJTAjJkl3biS+0KSZcG6AUSCj0gu1612bBN7x2CRTJpoESCaOiiqrpQ1tAqI1UVVgVD7SiNA9VL0+lfaAvFVUlpEZVQAEVqa1otpo5///fM7OzM7ve8frs+X8+kv3bnTkz58yZM7P7Xfu7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABod/sb5z7bKIqi+af117aieEHz4y2T21qXve56byEAAACwVv/X+vu5m9IFB1dwo7Zl/u4V//j1xcXFxeL9o787/sXFxXTFZFGMby6K1nXR5X//QKN9meDxYqIx0vb5yIDVjw64fmzA9eMDrt804PrNA66fGHD9kh2wxJby5zGtO9vZ+nBbuUuLm4vx1nU7e9zq8cbmkZH4s5yWRus2i+PHivniRDFXzHQsXy7baC3/zdub63pbEdc10rauHc0j5IefPBq3oRH28c6OdV25z+j7bygmf/TDTx7943PP3tprDtwNHfdXbufddzS389PhknJbG8XmtE/ido60beeOHs/JaMd2Nlq3a37cvZ3PrXA7R69s5rrqfs4nipHWx99u7aex9h/rpf20I1z233cWRXHxymZ3L7NkXcVIsbXjkpErz89EeUQ276N5KL24GFvVcXr7Co7T5pzd2Xmcdr8m4vN/e7jd2DLb0P40ff9Tm5Y876s9TqPmo17utdJ9DA77tVKVYzAeF99uPegneh6DO8Pj/+Rdyx+DPY+dHsdgetxtx+Adg47BkU2jrW1OT0KjdZsrx+CujuVHW2tqtOYzd/U/BqfPnTwzvfDxT7x2/uSR43PH507t2bVrZs/evfv3758+Nn9ibqb8+yr3dvVtLUbSa+COsO/ia+DVXcu2H6qLXx7e63Ciz+twW9eyw34djnU/uMb6vCCXHtPla+OR5k6fuDRSLPMaaz0/96z9dZged9vrcKztddjza0qP1+HYCl6HzWXO3LOy71nG2v702oZr9bVgW9sx2P39SPcxOOzvR6pyDE6E4+Jf71n+a8GOsL1PTK32+5HRJcdgerjhvad5Sfp+f2J/a/Q6Lm9rXnHDpuL8wtzZ+x47cu7c2V1FGOviJW3HSvfxurXtMRVLjteRVR+vB+df8cRtPS7fFvbVxGubf00s+1w1l7n/vv7PVeurW+/92XHp7iKMIVvv/dnrq3lzf6Ys2Wd/Npf59PTavxdPubTt/Xd8mfffmPufL9eX7urx0fGx8vU7mvbOeMf7cedTNdZ672q01v3c9Mrej8fDn/V+P765z/vx9q5lh/1+PN794OL7cWPQTzvWpvv5nAjHyYmZ/u/HzWW2717tMTnW9/34zjAbYf+/JiSFlIvajp3ljtu0rrGx8fC4xuIaOo/TPR3Lj4ds1lzXU7uv7ji9+87yvkbTo7tivY7Tya5lh32cpver5Y7TxqCfvl2d7udzIhwXN+/pf5w2l3n6/rW/d26JH7a9d24adAyOj25qbvN4OgjL9/vFLfEYvK84WpwuThSzrWs3tY6nRmtdUw+s7BjcFP6s93vl9j7H4N1dyw77GExfx5Y79hpjSx/8EHQ/nxPhuHjygf7HYHOZN+0b7veud4dL0jJt37t2/3xtuZ953da1m67lz7ya2/k3+/r/bLa5zIn9q82Z/ffTveGSG3rsp+7X73KvqdliffbT9rCdz+5ffj81t6e5zBcPrPB4OlgUxYWPPtT6eW/495U/P/+dr3f8u0uvf9O58NGHfnDjsb9dzfYDsPE9X46t5de6tn+ZWsm//wMAAAAbQsz9I2Em8j8AAADURsz98X+FJ/I/AAAA1EbM/WNhJpnk/+1venb++QtFauYvBvH6tBseLpeLHdeZ8Pnk4hXNyx/66tyP//LCytY9UhTFTx7+jZ7Lb384bldpMmzn5Td3Xr70hhdWtP7Dj15Zrr2//qVw//HxrPQw6FXBnSmK4ps3fb61nskPXGrNpx8+3JrvufjE481lnjtQfh5v/8xLyuX/IJR/Dx470nH7Z8J++F6YM2/vvT/i7b526TU79r3vyvri7Rp3vLD1sJ/8YHm/8ffkfOHxcvm4n5fb/r/63FNfay7/2Kt6b/+Fkd7b/1S436+G+T8vL5dvfw6an8fbfSZsf1xfvN19X/lWz+2//Nly+TNvKZc7HGZc/93h851veXa+fX891jjS8biKt5bLxfXPfOe3W9fH+4v33739E4cudeyP7uPj6X8u72e6a/l4eVxP9Bdd62/eT/vxGdf/1G8d7tjPg9Z/+T3PvLx5v93rv7drudGu23f/xqY//Mzne64vbs/BPzvT8XgOvju8jsP6n/xgOB7D9f97+fMd640Ov7vz/Scu/6VtFzoeT/S2H5Xrv/z64635H5M//v0bXnDjCy++srnviuLb7y3vb9D6j//R6Y7t//It97Sej3h97Oh3r385cf1nPzZ16vTC+fnZtr3a+t057yi3Z/PElq3N7b0pvLd2f37o9LkPzZ2dnJmcKYrJ+v4Kvav2lTB/UI6Lq739PY+G5/O23/vm1rv+6XPx8n95pLz80tvLr1uvDst9IVy+rXz+FhtrXP+Tt9/Sen03ni4/7+ixD8GOnf+5f0ULhsff/X1BPN7PvPRDrf3QvK71dSO+rte4/d+dLe/nG2G/LobfzHzHLVfW1758/N0Il95bvt7XvP/C21x8Xv8kPN/v/F55/3G74uP9bvg+5lvbO9/v4vHxjQsj3fff+i0eF8P7SXGxvD4uFff3pedu6bl58feQFBdvbX3+O+l+bl3Vw1zOwscXpk/Mnzr/2PS5uYVz0wsf/8Shk6fPnzp3qPW7PA99eNDtr7w/bW29P83O7b2/mNlSFMXpYmYd3rCuzfY3P1rZ9p959Ojsvpm7ZueOHTl/7NyjZ+bOHj+6sHB0bnbhriPHjs19bNDt52cf3LX7wJ59u6eOz88+uP/AgT0HpuZPnW5uRrlRA+yd+cjUqbOHWjdZePD+A7seeOD+mamTp2fnHtw3MzN1ftDtW1+bppq3/vWps3MnjpybPzk3tTD/ibkHdx3Yu3f3wN8GePLMsYXJ6bPnT02fX5g7O10+lslzrYubX/sG3Z56Wvi38vvZbo3yF/EV77p3b/r9rE1f/dSyd1Uu0vULRJ8Nv4vmH150Zv9KPo+5fzzMJJP8DwAAADmIuX9TmIn8DwAAALURc//mMBP5HwAAAGoj5v6JMJNM8r/+v/7/yvr/5fX6/3n1/898tOyVbvT+f+zP6//n4Tr3/9e8fv1//f/69f9X3p/f6Nuv/6//z1JV6//H3L+lKLLM/wAAAJCDmPu3hpnI/wAAAFAbMfffEGYi/wMAAEBtxNz/gjCTTPK//v+K+v+7BxWu6t//d/5//f9iY/b/45Oj/5+NVffv3/dIx6f6/4H+v/6//r/+v/4/aza+7DXXq/8fc/+NYSaZ5H8AAADIQcz9Lwwzkf8BAACgNmLuvynMRP4HAACA2oi5f1uYSSb5X//f+f/1//X/a93/X+v5/9s2Rv9/Y3D+//70/we46v7/hP7/Ruz/jw93+6vd/x+4+fr/XBNVO/9/zP0vCjPJJP8DAABADmLuf3GYifwPAAAAtRFz/0vCTOR/AAAAqI2Y+28OM8kk/+v/6//r/1e//1+Edyf9/87Hsy79/77n/y8/0v+vFv3//vT/B3D+/7z6/0Pe/mr3/4d9/v/xN3ffXv+fXqrW/4+5/6VhJpnkfwAAAMhBzP23hJnI/wAAAFAbMfe/LMxE/gcAAIDaiLl/e5hJJvlf/1//X/+/+v1/5/+vav+/pP9fLfr//en/D6D/r/+v/7+y/n+Pb371/+mlav3/mPtvDTPJJP8DAABADmLuvy3MRP4HAACA2oi5/6fCTOR/AAAAqI2Y+3eEmWSS//X/9f/1//Pq/9+7Sf9f/7/e9P/70/8fQP9f/1//f4Xn/19qNf3/zYPujNqoWv8/5v6Xh5lkkv8BAAAgBzH3vyLMRP4HAACA2oi5/5VhJvI/AAAA1EbM/ZNhJpnkf/3/evX///Svn3xlof+v/z9g/TXt/8fDQP8/c/r//en/D6D/r/+v/78u/X/yUbX+f8z9t4eZZJL/AQAAIAcx998RZiL/AwAAQG3E3H9nmIn8DwAAALURc//OMJNM8r/+f736/5H+v/5/v/XXtP+f6P/nTf+/h7YXqf7/APr/+v/Z9//jd7/6/wxH1fr/Mfe/Kswkk/wPAAAAOYi5/64wE/kfAAAAaiPm/leHmcj/AAAAUBsx998dZpJJ/tf/1//X/9f/1//vvX79/41J/7+/1fb/N+n/6//r/2fW/3f+f4arav3/mPtfE2aSSf4HAACAHMTcf0+YifwPAAAAtRH//2b5/17lfwAAAKijmPunwkwyyf/6//r/OfX/G/r/+v/6/7Wn/9+f8/8PoP+v/6//r//PUFWt/x9z/2vDTDLJ/wAAAJCDmPvvCzOR/wEAAKA2Yu6fDjOR/wEAAKA2Yu6fCTPJJP/r/+v/59T/d/5//X/9//rT/+9P/38A/X/9/7r1/4tC/5/rqmr9/5j7d4WZZJL/AQAAIAcx9+8OM5H/AQAAoDZi7t8TZiL/AwAAQG3E3H9/mEkm+V//X/9f/1//X/+/9/r1/zcm/f/+NlD//8Pj+v9L6P9Xe/sr2f93/n+us6r1/2PufyDMJJP8DwAAADmIuX9vmIn8DwAAALURc/++MJOQ/3v9v24AAABgY4m5f3+YSSb//q//X5P+/2/+fce69f/1//utfzj9/y36/2Hq/1dLTfv/3S+Lq7aB+v/O/9+D/n+1t1//X/+fparW/4+5/0CYSSb5HwAAAHIQc//rwkzkfwAAAKiNmPt/OsxE/gcAAIDaiLn/Z8JMMsn/+v816f930f/X/++3fuf/1/+vs5r2/4emVv3/Ef1//f9qbb/+v/4/S137/n/8aGX9/5j7HwwzyST/AwAAQA5i7v/ZMBP5HwAAAGoj5v7Xh5nI/wAAAFAbMfcfDDPJJP/r/+v/6//r/1+b/v/ri25V7P83Dx79/3rR/++vVv1/5//X/6/Y9uv/6/+zVNXO/x9z/xvCTDLJ/wAAAJCDmPsfCjOR/wEAAKA2Yu5/Y5iJ/A8AAAC1EXP/m8JMMsn/+v/6//r/+v/O/997/fr/G5P+f3/6/wPo/+v/6//r/zNUVev/x9z/5jCTTPI/AAAA5CDm/reEmcj/AAAAUBsx9781zET+BwAAgNqIuf9tYSaZ5H/9f/1//X/9f/3/3uvX/9+Y9P/70/8fQP9f/1//X/+foapa/z/m/p8LM8kk/wMAAEAOYu5/OMxE/gcAAIDaiLn/7WEm8j8AAADURsz97wgzyST/6//r/+v/6//r//dev/7/xqT/35/+/wD6//r/+v/6/wxV1fr/Mfe/M8wkk/wPAAAAOYi5/+fDTOR/AAAAqI2Y+98VZiL/AwAAQG3E3P8LYSaZ5H/9f/3/avX/Fy+0307/X/+/GFb/v3kj/f8s6P/3p/8/QI/+/2b9f/1//X/9f65a1fr/Mfe/O8wkk/wPAAAAOYi5/z1hJvI/AAAA1EbM/e8NM5H/AQAAoDZi7n8kzCST/K//n2X/Pz3k6vX/nf9f/9/5//X/10b/vz/9/wGc/1//X/9f/5+hqlr/P+b+R8NMMsn/AAAAkIOY+98XZiL/AwAAQG3E3P+LYSbyPwAAANRGzP3vDzPJJP/r/2fZ/6/w+f/r1v8f6zg+cur/T7Q9n+m41P/X/18H+v/96f8PoP+v/1/l/n84mrcsc3v9f6qoav3/mPs/EGaSSf4HAACAHMTc/0thJvI/AAAA1EbM/b8cZiL/AwAAQG3E3P8rYSaZ5H/9f/1//X/n/3f+/97r1//fiEb0/wfQ/x9A/1//v8r9/wH0/6miqvX/Y+7/1TCTZYPfD/5rBQ8TAAAAqJCY+z8YZpLJv/8DAABADmLuPxRmIv8DAABAbcTcfzjMJJP8r//f3f+PZ1TV/9f/1//X/9f/34iG1/9/2Y1Fof+v/6//r/+v/6//z1pUrf8fc/+RMJNM8j8AAADkIOb+Xwszkf8BAACgNmLuPxpmIv8DAABAbcTcPxtmkkn+v479//Fq9v+d//9q+/8/0f/X/w/0/3vT/18fzv/fn/7/APr/+v/6//r/DFXV+v8x98+FmWSS/wEAAKDG0o+DY+4/FmYi/wMAAEBtxNx/PMxE/gcAAIDaiLn/Q2EmmeR/5//X/3f+/+vR/x/rWF7/v6T/r/8/DPr//en/D6D/r/+v/6//z1BVrf8fc/98mEkm+R8AAAByEHP/h8NM5H8AAACojZj7PxJmIv8DAABAbcTcfyLMJJP8r/+v/597/79RFBed/1//v9f69f83Jv3//vT/B9D/1//X/9f/Z6iq1v+Puf9kmEkm+R8AAAByEHP/qTAT+R8AAABq4//Zu48muc7rjsNtmkgr+yN47ZWX9or+CN56pyqtVUpUDiSUs0TlHKicc05UzjlnKudIRUpVUHFwzgEG07gNYBrT977neTZHQAHsHqJJ1Z9Tv7q5++8at9j/AAAAMIzc/XeLW5rsf/2//r97/7/ayfP/9/96/f9Z+n/9/zYc6O+vXf/rLhaFX7T//6//vv5O+n/9v/5/kv5f/6//50Jz6/9z9989bmmy/wEAAKCD3P33iFvsfwAAABhG7v57xi32PwAAAAwjd//1cUuT/a//1//r//X/+/r/W/T/+v9l8/z/afr/DfT/+n/9v/6frZpb/5+7/15xS5P9DwAAAB3k7r933GL/AwAAwDBy998nbrH/AQAAYBi5++8btzTZ//p//b/+fyn9/3HP/7/g69H/6//X0f9P0/9voP/X/+v/9f9s1dz6/9z994tbmux/AAAA6CB3//3jFvsfAAAAhpG7/wFxi/0PAAAAw8jd/8C4pcn+1//r//X/S+n/j+j5//p//f/C3bw69+8E/f9B+v8NNvT/q5X+f8ol9/Prv7zlvP+L0P/r/zlobv1/7v4HxS3/u1odv9IvEgAAAJiV3P0PjluafP8fAAAAOsjdf0PcYv8DAADAMHL33xi3NNn/+n/9v/5f/6//X//6+v9l8vz/aYfv///z3+9y5779v+f/T/P8/233/3d8MvT/LNvc+v/c/afjlib7HwAAADrI3f+QuMX+BwAAgGHk7n9o3GL/AwAAwDBy9z8sbmmy//X/o/X//7rv953X/+/VLvp//b/+X/8/Ov3/NM//32DvX3On6of6f/2/5//r/zmcufX/ufsfHrc02f8AAADQQe7+R8Qt9j8AAAAMI3f/I+MW+x8AAACGkbv/UXFLk/2v/x+t/9//+zz/X/+/7vX1//r/ken/p+n/Nxjl+f9X+KnZdT9/WLt+//p//T8Hza3/z93/6Lilyf4HAACADnL3PyZusf8BAABgGLn7Hxu32P8AAAAwjNz9j4tbmux//b/+fxn9f76C/l//f/X7/6T/Xyb9/zT9/waj9P9XaNf9/NLfv/5f/89Bc+v/c/c/Pm5psv8BAACgg9z9T4hb7H8AAAAYRu7+J8Yt9j8AAAAMI3f/k+KWJvtf/6//X0b/7/n/+n/P/9f/Xxr9/zT9/wb6f/2//l//z1bNrf/P3X9T3NJk/wMAAEAHufufHLfY/wAAADCM3P1PiVvsfwAAABhG7v6nxi1N9r/+X/+v/9f/6//Xv77+f5n0/9P0/xvo//X/+n/9P1s1o/7/vN91cvW0uKXJ/gcAAIAOcvc/PW6x/wEAAGAYufufEbfY/wAAADCM3P3PjFua7H/9/2z6/72cb6z+/9RqtdL/r5r2/6fO+/Osz6X+X/9/BPT/0/T/G+j/9f/6f/0/WzWj/n/vx7n7nxW3NNn/AAAA0EHu/mfHLfY/AAAADCN3/3PiFvsfAAAAhpG7/7lxS5P9r/+fTf+/Z6z+3/P/L/x8dOr/Pf//IP3/0dD/T9P/b6D/1//r//X/bNXc+v/c/c+Lm44fu+IvEQAAAJiZ3P3Pj1uafP8fAAAAOsjd/4K4xf4HAACAhbrpwM/k7n9h3NJk/+v/t9v/Hz/v5/T/+v8LPx/6f/2//v/q0/9P0/9voP/X/+v/9f9s1dz6/9z9L4pbmux/AAAA6CB3/81xi/0PAAAAw8jd/+K4xf4HAACARTu/xMrd/5K4pcn+1/97/r/+X/+v/1//+vr/ZdL/T9P/b6D/1//vtv8/ce5/6v8Zw2X0/2fOnLnhqvf/uftfGrc02f8AAADQQe7+l8Ut9j8AAAAMI3f/y+MW+x8AAACGkbv/FXFLk/2v/2/a/+dHfVn9/42rlf5f/6//1/9P0/9P0/9voP/X/3v+v/6frZrb8/9z978ybmmy/wEAAKCD3P2vilvsfwAAABhG7v5Xxy32PwAAAAwjd/9r4pYm+1//37T/9/x//b/+/6j7/9tX+v8jsYj+/9TFX3/u/f9p/b/+f0K7/v///mffD/X/+n8Omlv/n7v/tXFLk/0PAAAAHeTuf13cYv8DAADAMHL3vz5usf8BAABgGLn73xA3Xdtk/+v/9f/6f/2//n/96x/x8/+Pr1Yr/f8WLKL/nzD3/n87z/+/8J/yc/T/+v8lv3/9v/6fg+bW/+fuf2Pc0mT/AwAAQAe5+98Ut9j/AAAAMIzc/W+OW+x/AAAAGEbu/rfELU32v/5f/6//1/8P3/+fXkT/7/n/W6L/n3YU/f8xz//X/+v/9f/6fzbYVf+fu/+tcUuT/Q8AAAAd5O5/W9xi/wMAAMAwcve/PW6x/wEAAGAYufvfEbc02f/6f/3/5fT/+T71/2P1/ydm1/+f3PfXa/L8f/3/luj/p83j+f8Xp//X/y/5/Q/S/9+k/2eb5vb8/9z974xbmux/AAAA6CB3/7vi1n+6tf8BAABgGLn73x232P8AAAAwjNz974lbmux//b/+3/P/9f/DP/9f/9+K/n+a/n8D/b/+X//v+f9s1dz6/9z9741bmux/AAAA6CB3//viFvsfAAAAhpG7//1xi/0PAAAAw8jdf0vc0mT/6//1//p//b/+/+yf4eH6/82Vsf7/aOj/px1N/39K/6//r37+X+KfAv2//n/T72dMc+v/c/d/IG5psv8BAACgg9z9H4xb7H8AAAAYRu7+D8Ut9j8AAAAs0rVrfi53/4fjlib7X/+v/9f/6//1/+tf3/P/l2kn/X9+KPT/nv8f+vT//7HvR0t7/v+F//+l/9f/s31z6/9z938kbmmy/wEAAKCD3P0fjVvsfwAAABhG7v6PxS32PwAAAAwjd//H45Ym+1//r//X/+v/9f/rX1//v0ye/z9N/7+B/n+nz89f+vvX/+v/OWhu/X/u/k/ELU32PwAAAHSQu/+TcYv9DwAAAMPI3f+puMX+BwAAgGHs7f6Myxruf/2//l//r//X/69/ff3/Mun/p+n/N9D/6//1//p/tmpu/f+n937XydVn4pYm+x8AAAA6yN3/2bjF/gcAAIBh5O7/XNxi/wMAAMAwcvd/Pm5psv/1//r/ZfT/Z86cuUH/r//f//Wc6/9v1f9T9P/T9P8b6P/1//p//T9bNbf+P3f/F+KWJvsfAAAAOsjd/8W4xf4HAACAYeTu/1LcYv8DAADAMHL3fzluabL/9f8z6P9P6v89/1//v/L8f/3/luj/p+n/Nxix/z956V/+rvv5w9r1+9f/6/85aG79f+7+r8QtTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACAYeTu/3rc0mT/6/+Prv+/4+9dl+f/n1qtf//6f/2//l//f7Xp/6fp/zcYsf+/DLvu55f+/vX/+n8Omlv/n7v/G3HL/uF37PK+SgAAAGBOcvd/M25p8v1/AAAA6CB3/7fiFvsfAAAAhpG7/9txS5P9r/+fwfP/B+z/Pf9//edD/z/r/v8a/f8Y9P/T9P8b6P/1//r/LfX/+WnW/3c3t/4/d/934pYm+x8AAAA6yN3/3bjF/gcAAIBh5O7/Xtxi/wMAAMAwcvffGrect//Xtd2j0P/r//X/+n/9//rX1/8vk/5/2qX2/ydWh+v/k/5/qf3/6dVqpf/X/3v+P4c3t/4/d//34xbf/wcAAIDFOXaRn8/d/4O4xf4HAACAYeTu/2HcYv8DAADAMHL3/yhuue2aXb2lI6X/1//r//X/+v/1r6//Xyb9/zTP/99A/7+Nfv46/f8Y/f9qpf/n8ObW/+fu/3Hc4vv/AAAAMIzc/T+JW+x/AAAAGEbu/p/GLfY/AAAADCN3/8/ilib7X/+v/z9k/7+XZur/z9L/n6X/X0//fzT0/9P0/xvo/3fazy/9/Y/W/3v+P9swt/4/d//P45Ym+x8AAAA6yN3/i7jF/gcAAIBh5O7/Zdxi/wMAAMAwcvf/Km5psv931v/H32r9/+L7f8//1//r//X/s6L/n6b/30D/r//X/+v/2aq59f+5+38dtzTZ/wAAANBB7v7fxC32PwAAAAwjd/9v4xb7HwAAAIaRu/93cUuT/e/5//p//b/+X/+//vX1/8uk/5+m/1+v/qD0//p//b/+n62aW/+fu//3cUuT/Q8AAAAd5O7/Q9xi/wMAAMAwcvffFrfY/wAAADCM3P1/jFua7H/9v/5f/6//1/+vf339/zLp/6ftsv///3/b/LKe/7/z/j/fgv5f/6//Zyvm1v/n7v9T3NJk/wMAAEAHufv/HLfY/wAAADCM3P1/iVvsfwAAABhG7v6/xi1N9v+G/v9E/UL9/yT9//73r/9f//nQ/+v/9f9Xn/5/2nKe/3/2r6v/38/z/+f9/vX/+n8Omlv/n7v/b3FLk/0PAAAAHeTuvz1usf8BAABgGLn7/x632P8AAAAwjNz9/4hbmux/z/9fUv9/nf5f/6//1//r/zfQ/09bTv/v+f/r6P/n/f71//p/Dppb/5+7/58BAAD//4T9VOY=") chdir(&(0x7f00000001c0)='./file0\x00') 3.919898048s ago: executing program 3 (id=1331): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./bus\x00', 0x40, 0x0, 0x0, 0x0, &(0x7f0000000280)) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) unshare(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x44}}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095", @ANYRESDEC=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xffffffffffffff0d) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) 3.701607546s ago: executing program 4 (id=1333): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.435355488s ago: executing program 3 (id=1334): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=""/192, &(0x7f0000000140)=0xc0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, 0x0) 3.330082407s ago: executing program 3 (id=1335): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(r3, &(0x7f0000000300)=""/246, 0xf6, 0x0) 3.011655303s ago: executing program 4 (id=1338): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000012400)={0x2020}, 0x2020) 2.979119965s ago: executing program 1 (id=1339): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 2.841658536s ago: executing program 1 (id=1341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1.862330137s ago: executing program 0 (id=1342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @random="4c5b01f560e4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}]}}}}}}}}, 0x0) 1.862059647s ago: executing program 1 (id=1343): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000006280)=""/98, 0x62}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000003f80)=""/4107, 0x100b}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/80, 0x50}, {&(0x7f00000006c0)=""/51, 0x33}], 0x8}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 1.725369078s ago: executing program 0 (id=1344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004800)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040004) socket$nl_generic(0x10, 0x3, 0x10) 1.599517959s ago: executing program 1 (id=1345): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=""/192, &(0x7f0000000140)=0xc0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, 0x0) 1.085367561s ago: executing program 1 (id=1346): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./bus\x00', 0x40, 0x0, 0x0, 0x0, &(0x7f0000000280)) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) unshare(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x44}}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095", @ANYRESDEC=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xffffffffffffff0d) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) 713.042551ms ago: executing program 1 (id=1347): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r0 = open(0x0, 0x181042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = open(&(0x7f0000000040)='./bus\x00', 0x864c42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x10001) sendfile(r0, r0, &(0x7f0000000240), 0x7f06) 651.595297ms ago: executing program 0 (id=1348): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 544.618215ms ago: executing program 0 (id=1349): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c800fd00f90001000fc304000700000002050400000006000300080003000c000000060003a90800ff00ec67000026070531140003000c00bc00040904000000240200007805010011030200000104024a000900ff03040902000502007afd02000702ff0706100702ffff03000000ff7f0000ff07"], 0x102) 429.535465ms ago: executing program 0 (id=1350): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005f00250e00000000d94aa19a000000000c"], 0x1c}], 0x1}, 0x0) 419.178486ms ago: executing program 3 (id=1351): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 383.757919ms ago: executing program 0 (id=1352): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/167, 0xa7}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) 269.359828ms ago: executing program 3 (id=1353): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0xd0, 0x3d0, 0xd0, 0x300, 0x3d0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @remote}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x149601, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file2\x00', 0x0, 0x2321091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$pptp(0x18, 0x1, 0x2) 0s ago: executing program 4 (id=1354): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0x93, 0x2, [], "b36e"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "ddc6"}]}}, 0x0, 0x36}, 0x20) kernel console output (not intermixed with test programs): change from 0 to 8 [ 244.218411][ T4046] device veth1_macvtap left promiscuous mode [ 244.225261][ T4046] device veth0_macvtap left promiscuous mode [ 244.231766][ T4046] device veth1_vlan left promiscuous mode [ 244.237623][ T4046] device veth0_vlan left promiscuous mode [ 244.410601][ T6494] loop3: detected capacity change from 0 to 32768 [ 244.448437][ T6499] loop4: detected capacity change from 0 to 256 [ 244.523482][ T6494] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 244.541201][ T6499] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.549737][ T6494] BTRFS error (device loop3): unrecognized metadata_ratio value 0x00080000000076f6 [ 244.568681][ T6494] BTRFS error (device loop3): open_ctree failed [ 244.807683][ T4046] team0 (unregistering): Port device team_slave_1 removed [ 244.867467][ T4046] team0 (unregistering): Port device team_slave_0 removed [ 244.908039][ T4046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.745546][ T1075] Bluetooth: hci0: command 0x040f tx timeout [ 245.797053][ T4046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.830332][ T6510] loop4: detected capacity change from 0 to 256 [ 245.882745][ T6510] exfat: Deprecated parameter 'utf8' [ 245.888114][ T6510] exfat: Deprecated parameter 'utf8' [ 245.930384][ T6510] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfc5055c6, utbl_chksum : 0xe619d30d) [ 246.544389][ T4046] bond0 (unregistering): Released all slaves [ 246.730663][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.742743][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.226858][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.236991][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.247845][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.257587][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.268114][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.277710][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.287455][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.437409][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.453314][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.478309][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.492142][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.509452][ T26] audit: type=1326 audit(1722487672.843:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.3.708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b31a43b9 code=0x0 [ 247.598293][ T6390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.753783][ T6390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.802090][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.810473][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.824397][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.832662][ T3799] Bluetooth: hci0: command 0x0419 tx timeout [ 247.915599][ T6390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.950982][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.961309][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.996795][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.006718][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.019574][ T6295] device veth0_vlan entered promiscuous mode [ 248.044686][ T6390] bond0: (slave netdevsim0): Releasing backup interface [ 248.090592][ T6390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.128201][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.142792][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.166727][ T6295] device veth1_vlan entered promiscuous mode [ 248.273335][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.287737][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.330310][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.362725][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.394928][ T6295] device veth0_macvtap entered promiscuous mode [ 248.440725][ T6295] device veth1_macvtap entered promiscuous mode [ 248.501784][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.551323][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.579833][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.600697][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.630932][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.661575][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.711620][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.741442][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.761497][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.801485][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.833060][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.841903][ T6390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.862928][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.871197][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.902553][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.911329][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.974134][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.011732][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.031585][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.061724][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.096426][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.121552][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.132365][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.151495][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.191479][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.233811][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.265143][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.281631][ T6390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.305731][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.324592][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.358532][ T6295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.381564][ T6295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.390333][ T6295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.421641][ T6295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.443183][ T6390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.459231][ T6390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.695062][ T5039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.722557][ T5039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.744829][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.797917][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.819123][ T5039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.838396][ T5039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.856740][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.872528][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.897710][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.917585][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.963111][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.002565][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.022073][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.029325][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.101670][ T26] audit: type=1326 audit(1722487675.433:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.2.638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00f16023b9 code=0x0 [ 250.126688][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.155383][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.172523][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.192670][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.199782][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.228258][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.258999][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.318276][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.344051][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.372948][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.469968][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.515100][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.540483][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.576667][ T6390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.651143][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.679726][ T6539] loop4: detected capacity change from 0 to 32768 [ 250.693189][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.701271][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.747063][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.782989][ T6539] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.710 (6539) [ 250.868815][ T6539] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 250.912328][ T6539] BTRFS error (device loop4): unrecognized metadata_ratio value 0x00080000000076f6 [ 250.982267][ T6539] BTRFS error (device loop4): open_ctree failed [ 251.303928][ T5364] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.377226][ T6558] loop4: detected capacity change from 0 to 512 [ 251.402377][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.473806][ T6558] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 251.492003][ T6558] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 251.554530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.575122][ T6558] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.714: casefold flag without casefold feature [ 251.589142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.653847][ T6558] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 251.704832][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 251.722691][ T5364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.742544][ T5364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.761959][ T5364] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 251.772150][ T6558] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 251.780325][ T6558] System zones: 0-2, 18-18, 34-35 [ 251.795006][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.796427][ T5364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.821316][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.834550][ T5364] usb 3-1: config 0 descriptor?? [ 251.876983][ T6558] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.997468][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.998017][ T6567] loop3: detected capacity change from 0 to 8 [ 252.021624][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.084722][ T6390] device veth0_vlan entered promiscuous mode [ 252.098938][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.107649][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.255596][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.273093][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.297510][ T6544] device bridge_slave_0 entered promiscuous mode [ 252.317073][ T5364] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 252.327791][ T6390] device veth1_vlan entered promiscuous mode [ 252.341636][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.370157][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.395339][ T6544] device bridge_slave_1 entered promiscuous mode [ 252.476176][ T3617] Bluetooth: hci6: command 0x0409 tx timeout [ 252.517022][ T13] usb 3-1: USB disconnect, device number 11 [ 252.708952][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.758227][ T6577] loop3: detected capacity change from 0 to 8192 [ 252.786419][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.802538][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.819079][ T6390] device veth0_macvtap entered promiscuous mode [ 252.910771][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.936241][ T6390] device veth1_macvtap entered promiscuous mode [ 253.060434][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.075294][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.159756][ T6544] team0: Port device team_slave_0 added [ 253.178857][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.201266][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.228682][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.266270][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.303711][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.339874][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.380816][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.394858][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.422510][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.452182][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.462583][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.475585][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.487982][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.501635][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.511243][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.574048][ T6544] team0: Port device team_slave_1 added [ 253.714731][ T26] audit: type=1326 audit(1722487679.053:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b31a43b9 code=0x7ffc0000 [ 253.794523][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.809591][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.856155][ T26] audit: type=1326 audit(1722487679.053:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd1b31a43b9 code=0x7ffc0000 [ 253.881645][ T26] audit: type=1326 audit(1722487679.053:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b31a43b9 code=0x7ffc0000 [ 253.904544][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.923232][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.958413][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.978786][ T26] audit: type=1326 audit(1722487679.113:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b31a43b9 code=0x7ffc0000 [ 254.011529][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.029873][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.039947][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.061017][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.086897][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.106493][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.119965][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.136386][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.148278][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.159001][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.170520][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.207433][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.219620][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.247922][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.281145][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.290199][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.303021][ T6390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.316045][ T6390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.326250][ T6390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.335377][ T6390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.541888][ T1075] Bluetooth: hci6: command 0x041b tx timeout [ 254.578662][ T6544] device hsr_slave_0 entered promiscuous mode [ 254.586591][ T6544] device hsr_slave_1 entered promiscuous mode [ 254.617013][ T6544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.641608][ T6544] Cannot create hsr debugfs directory [ 255.211827][ T6607] loop3: detected capacity change from 0 to 16 [ 255.555757][ T6607] erofs: (device loop3): mounted with root inode @ nid 36. [ 255.588031][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.594406][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.928578][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.941606][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.019560][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.194353][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.227467][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.248335][ T6544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.282577][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.419927][ T6544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.484147][ T6627] loop1: detected capacity change from 0 to 4096 [ 256.540781][ T6544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.586446][ T6627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.622439][ T1075] Bluetooth: hci6: command 0x040f tx timeout [ 256.662999][ T6544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.925442][ T26] audit: type=1326 audit(1722487682.263:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.4.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x0 [ 256.949375][ T4046] device hsr_slave_0 left promiscuous mode [ 256.986746][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.001660][ T4046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.019368][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.046703][ T4046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.060953][ T4046] device bridge_slave_1 left promiscuous mode [ 257.078156][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.100826][ T4046] device bridge_slave_0 left promiscuous mode [ 257.111264][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.135798][ T4046] device veth1_vlan left promiscuous mode [ 257.142108][ T4046] device veth0_vlan left promiscuous mode [ 257.680212][ T4046] team0 (unregistering): Port device team_slave_1 removed [ 257.703570][ T4046] team0 (unregistering): Port device team_slave_0 removed [ 257.721707][ T4046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.781965][ T4046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.962307][ T6645] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 257.998877][ T4046] bond0 (unregistering): Released all slaves [ 258.045732][ T6650] loop1: detected capacity change from 0 to 8 [ 258.223058][ T6544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.254648][ T6544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.287958][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 258.344508][ T6544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.359886][ T6544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.620629][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.689795][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.701779][ T13] Bluetooth: hci6: command 0x0419 tx timeout [ 258.702777][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.722772][ T6670] loop4: detected capacity change from 0 to 4096 [ 258.755160][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.768820][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.779632][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.789880][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.797055][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.812834][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.835371][ T6680] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 258.867332][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.878149][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.914355][ T6670] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.936428][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.943592][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.022980][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.056228][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.126473][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.160690][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.187586][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.198936][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.249031][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.277721][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.295530][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.320445][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.333964][ T6690] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 259.343737][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.390696][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.409756][ T6694] netlink: 'syz.2.756': attribute type 3 has an invalid length. [ 259.456315][ T6694] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 259.482039][ T6694] netlink: 'syz.2.756': attribute type 9 has an invalid length. [ 259.514373][ T6694] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 259.535149][ T6694] netlink: 'syz.2.756': attribute type 11 has an invalid length. [ 259.543691][ T6694] netlink: 'syz.2.756': attribute type 12 has an invalid length. [ 259.560632][ T6694] netlink: 'syz.2.756': attribute type 13 has an invalid length. [ 259.618189][ T6694] netlink: 'syz.2.756': attribute type 14 has an invalid length. [ 259.697507][ T6711] fuse: Bad value for 'group_id' [ 259.801925][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.815258][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.857287][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.969856][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.989758][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.080766][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.106899][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.129109][ T6544] device veth0_vlan entered promiscuous mode [ 260.154559][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.166838][ T6725] loop1: detected capacity change from 0 to 4096 [ 260.167430][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.220166][ T6544] device veth1_vlan entered promiscuous mode [ 260.270341][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.329685][ T6725] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.357822][ T6544] device veth0_macvtap entered promiscuous mode [ 260.416758][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.432832][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.443086][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.465551][ T6544] device veth1_macvtap entered promiscuous mode [ 260.598258][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.634403][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.682073][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.727107][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.753731][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.800659][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.849081][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.860136][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.873032][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.884087][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.894397][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.905744][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.918206][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.931556][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.962301][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.971850][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.983614][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.018694][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.071465][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.112415][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.149517][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.200761][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.223356][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.234638][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.244948][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.256761][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.301147][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.322222][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.337716][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.364078][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.374068][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.412701][ T6544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.437971][ T6544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.447357][ T6544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.487267][ T6544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.124114][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.145736][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.153068][ T6765] loop1: detected capacity change from 0 to 4096 [ 262.216041][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.217169][ T6765] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.249457][ T2604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.284552][ T6740] chnl_net:caif_netlink_parms(): no params data found [ 262.328822][ T2604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.587018][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.861846][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 262.886966][ T6781] device bond0 entered promiscuous mode [ 262.892933][ T6781] device bond_slave_0 entered promiscuous mode [ 262.909077][ T6781] device bond_slave_1 entered promiscuous mode [ 262.932521][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 262.954727][ T6776] netlink: 'syz.4.781': attribute type 20 has an invalid length. [ 262.964264][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.975529][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.001054][ T6740] device bridge_slave_0 entered promiscuous mode [ 263.040133][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 263.075059][ T6781] bond0: (slave bond_slave_0): Releasing backup interface [ 263.087357][ T6781] device bond_slave_0 left promiscuous mode [ 263.104259][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.125234][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.137030][ T6740] device bridge_slave_1 entered promiscuous mode [ 263.224596][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.237576][ T6793] netlink: 268 bytes leftover after parsing attributes in process `syz.4.782'. [ 263.256613][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.335618][ T6740] team0: Port device team_slave_0 added [ 263.355921][ T6740] team0: Port device team_slave_1 added [ 263.480938][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.501938][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.530031][ T6740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.552404][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.559980][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.601224][ T6740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.623696][ T6780] device bond0 left promiscuous mode [ 263.629607][ T6780] device bond_slave_1 left promiscuous mode [ 263.658458][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.785'. [ 263.691046][ T6806] device vlan2 entered promiscuous mode [ 263.758269][ T6806] device caif0 entered promiscuous mode [ 263.825627][ T6806] device caif0 left promiscuous mode [ 264.074729][ T6740] device hsr_slave_0 entered promiscuous mode [ 264.112773][ T6740] device hsr_slave_1 entered promiscuous mode [ 264.608424][ T6740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.623625][ T6845] netlink: 268 bytes leftover after parsing attributes in process `syz.0.800'. [ 264.793930][ T6848] netlink: 'syz.1.801': attribute type 16 has an invalid length. [ 264.802566][ T6848] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.801'. [ 265.224824][ T3789] Bluetooth: hci4: command 0x041b tx timeout [ 265.292434][ T6740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.484367][ T6740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.570898][ T6740] bond0: (slave netdevsim0): Releasing backup interface [ 265.605684][ T6740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.642430][ T3618] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 265.812273][ T6868] fuse: Bad value for 'fd' [ 266.012979][ T6740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.058046][ T6740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.071514][ T3618] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.091479][ T3618] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 266.124101][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.160764][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 266.171186][ T3618] usb 1-1: config 0 descriptor?? [ 266.203757][ T6740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.225478][ T3618] usb 1-1: bad CDC descriptors [ 266.234350][ T3618] usb 1-1: bad CDC descriptors [ 266.248310][ T6740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.426940][ T4002] usb 1-1: USB disconnect, device number 14 [ 266.564152][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.644960][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.653622][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.667428][ T6740] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.686210][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.761315][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.029182][ T6897] overlayfs: missing 'workdir' [ 267.225718][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.232931][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.335079][ T1075] Bluetooth: hci4: command 0x040f tx timeout [ 267.377502][ T6903] loop0: detected capacity change from 0 to 128 [ 267.398519][ T6901] loop4: detected capacity change from 0 to 256 [ 267.422545][ T6903] EXT4-fs (loop0): Ignoring removed nobh option [ 267.525701][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.537480][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.548254][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.555115][ T6903] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 267.557086][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.577853][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.587369][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.596629][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.605661][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.615837][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.624630][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.633565][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.642433][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.650989][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.659655][ T6903] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038 (0x7fffffff) [ 267.689468][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.719198][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.856427][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.906052][ T3789] Bluetooth: hci2: command 0x0406 tx timeout [ 267.915583][ T26] audit: type=1804 audit(1722487693.253:43): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.822" name="/newroot/9/mnt/bus" dev="loop0" ino=13 res=1 errno=0 [ 267.959205][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.462656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.470891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.512821][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.565233][ T6935] loop0: detected capacity change from 0 to 16 [ 268.596574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.616749][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.663691][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.696263][ T6935] erofs: (device loop0): mounted with root inode @ nid 36. [ 268.710782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.737709][ T6740] device veth0_vlan entered promiscuous mode [ 268.755795][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.771632][ T3613] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 268.785208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.809365][ T6740] device veth1_vlan entered promiscuous mode [ 268.862870][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.872110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.880326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.900846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.945920][ T6740] device veth0_macvtap entered promiscuous mode [ 268.978520][ T6740] device veth1_macvtap entered promiscuous mode [ 269.034097][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.065463][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.095865][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.126909][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.147177][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.167985][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.188322][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.204669][ T3613] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 269.209605][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.231616][ T3613] usb 3-1: config 0 has no interface number 0 [ 269.241534][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.251564][ T3613] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.271517][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.281372][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.283555][ T3613] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.304056][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.334423][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.345402][ T3797] Bluetooth: hci4: command 0x0419 tx timeout [ 269.375670][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.398027][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.441638][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.447769][ T6929] loop4: detected capacity change from 0 to 40427 [ 269.460247][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.461810][ T3613] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 269.477415][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.486870][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.498792][ T3613] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 269.514323][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.533801][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.540153][ T6943] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.551527][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.571639][ T3613] usb 3-1: Manufacturer: syz [ 269.581722][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.583900][ T3613] usb 3-1: config 0 descriptor?? [ 269.608038][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.629299][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.639840][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.660775][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.672192][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.687789][ T6941] loop0: detected capacity change from 0 to 32768 [ 269.689952][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.706021][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.717952][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.728816][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.739886][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.762324][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.804989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.805378][ T6929] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 269.822639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.858401][ T6740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.887575][ T6740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.896590][ T6740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.906526][ T6740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.929908][ T6941] XFS (loop0): Mounting V5 Filesystem [ 270.099551][ T5039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.151232][ T3613] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0006/input/input10 [ 270.165796][ T5039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.179094][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.202428][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.207022][ T6941] XFS (loop0): Ending clean mount [ 270.228187][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.248930][ T6941] XFS (loop0): Quotacheck needed: Please wait. [ 270.267830][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.286114][ T3613] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 270.411308][ T6941] XFS (loop0): Quotacheck: Done. [ 270.454283][ T3618] usb 3-1: USB disconnect, device number 12 [ 271.517962][ T6544] XFS (loop0): Unmounting Filesystem [ 272.529677][ T6981] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 273.312855][ T6966] loop3: detected capacity change from 0 to 32768 [ 273.360034][ T6966] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.840 (6966) [ 273.499593][ T6966] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 273.543800][ T6966] BTRFS info (device loop3): using free space tree [ 273.570062][ T6966] BTRFS info (device loop3): has skinny extents [ 273.606909][ T6994] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 273.927357][ T6966] BTRFS info (device loop3): enabling ssd optimizations [ 274.118157][ T26] audit: type=1804 audit(1722487699.453:44): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.840" name="/newroot/2/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 275.591087][ T7012] loop4: detected capacity change from 0 to 40427 [ 275.610324][ T7044] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 275.682569][ T7012] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 276.041131][ T4046] device hsr_slave_0 left promiscuous mode [ 276.043848][ T7056] loop1: detected capacity change from 0 to 1024 [ 276.053792][ T4046] device hsr_slave_1 left promiscuous mode [ 276.072581][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.080084][ T4046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.098615][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.109650][ T7052] loop0: detected capacity change from 0 to 8192 [ 276.144598][ T4046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.163948][ T4046] device bridge_slave_1 left promiscuous mode [ 276.170216][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.179789][ T4046] device bridge_slave_0 left promiscuous mode [ 276.215842][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.267497][ T7056] hfsplus: xattr searching failed [ 276.272850][ T26] audit: type=1800 audit(1722487701.603:45): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.866" name="bus" dev="loop0" ino=1048706 res=0 errno=0 [ 276.281558][ T3618] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 276.302950][ T26] audit: type=1800 audit(1722487701.633:46): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.868" name="file0" dev="loop1" ino=4 res=0 errno=0 [ 276.325086][ T7056] hfsplus: xattr search failed [ 276.359303][ T4046] device hsr_slave_0 left promiscuous mode [ 276.380166][ T4046] device hsr_slave_1 left promiscuous mode [ 276.418183][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.447229][ T4046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.497501][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.532568][ T4046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.560740][ T4046] device bridge_slave_1 left promiscuous mode [ 276.574978][ T7064] loop1: detected capacity change from 0 to 764 [ 276.576616][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.621594][ T3618] usb 3-1: Using ep0 maxpacket: 16 [ 276.627497][ T4046] device bridge_slave_0 left promiscuous mode [ 276.634225][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.741935][ T4046] device veth1_vlan left promiscuous mode [ 276.748992][ T4046] device veth0_vlan left promiscuous mode [ 276.755608][ T3618] usb 3-1: config 0 has an invalid interface number: 159 but max is 1 [ 276.769444][ T3618] usb 3-1: config 0 has an invalid interface number: 249 but max is 1 [ 276.782631][ T4046] device veth1_macvtap left promiscuous mode [ 276.790829][ T3618] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 276.801657][ T4046] device veth0_macvtap left promiscuous mode [ 276.809323][ T3618] usb 3-1: config 0 has no interface number 0 [ 276.809895][ T4046] device veth1_vlan left promiscuous mode [ 276.815881][ T3618] usb 3-1: config 0 has no interface number 2 [ 276.839046][ T3618] usb 3-1: config 0 interface 159 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 276.852799][ T3618] usb 3-1: config 0 interface 159 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 276.874026][ T3618] usb 3-1: config 0 interface 159 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 276.889316][ T4046] device veth0_vlan left promiscuous mode [ 276.895244][ T3618] usb 3-1: too many endpoints for config 0 interface 1 altsetting 1: 99, using maximum allowed: 30 [ 276.906794][ T3618] usb 3-1: config 0 interface 1 altsetting 1 has an invalid endpoint with address 0x1A, skipping [ 276.927344][ T3618] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 276.947344][ T3618] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 276.966721][ T3618] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0xA has invalid maxpacket 0 [ 276.984571][ T3618] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 277.010599][ T3618] usb 3-1: config 0 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 277.031563][ T3618] usb 3-1: config 0 interface 1 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 99 [ 277.065750][ T3618] usb 3-1: config 0 interface 249 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 277.087086][ T3618] usb 3-1: config 0 interface 249 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 277.108611][ T3618] usb 3-1: config 0 interface 1 has no altsetting 0 [ 277.133448][ T7012] loop4: detected capacity change from 0 to 32768 [ 277.277914][ T7012] XFS (loop4): Mounting V5 Filesystem [ 277.461875][ T7012] XFS (loop4): Ending clean mount [ 277.508592][ T7012] XFS (loop4): Quotacheck needed: Please wait. [ 277.670786][ T7012] XFS (loop4): Quotacheck: Done. [ 277.740636][ T3568] XFS (loop4): Unmounting Filesystem [ 277.989250][ T3618] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 278.003294][ T3618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.020309][ T3618] usb 3-1: SerialNumber: syz [ 278.081190][ T3618] usb 3-1: config 0 descriptor?? [ 278.455697][ T4046] team0 (unregistering): Port device team_slave_1 removed [ 278.536111][ T4046] team0 (unregistering): Port device team_slave_0 removed [ 278.586497][ T4046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.655423][ T4046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.701597][ T3772] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 278.841834][ T3618] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 278.862725][ T3618] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 278.889936][ T3618] dib0700: firmware download failed at 7 with -22 [ 278.905168][ T4046] bond0 (unregistering): Released all slaves [ 278.971830][ T3618] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 278.982848][ T3772] usb 5-1: Using ep0 maxpacket: 8 [ 278.998118][ T3618] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 279.010286][ T3618] dib0700: firmware download failed at 7 with -22 [ 279.030513][ T4046] bond1 (unregistering): Released all slaves [ 279.063290][ T3618] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 279.083296][ T3618] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 279.095473][ T3618] dib0700: firmware download failed at 7 with -22 [ 279.113318][ T3618] usb 3-1: USB disconnect, device number 13 [ 279.291829][ T3772] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 279.307489][ T3772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.329808][ T3772] usb 5-1: Product: syz [ 279.347624][ T3772] usb 5-1: Manufacturer: syz [ 279.356391][ T3772] usb 5-1: SerialNumber: syz [ 279.363660][ T3772] usb 5-1: config 0 descriptor?? [ 279.569192][ T7098] loop0: detected capacity change from 0 to 1024 [ 279.573225][ T4046] team0 (unregistering): Port device team_slave_1 removed [ 279.623124][ T4046] team0 (unregistering): Port device team_slave_0 removed [ 279.639996][ T3772] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.674056][ T4046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.700691][ T4046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.101676][ T26] audit: type=1326 audit(1722487705.393:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.211616][ T26] audit: type=1326 audit(1722487705.393:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.324697][ T26] audit: type=1326 audit(1722487705.393:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.382348][ T26] audit: type=1326 audit(1722487705.393:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.408058][ T26] audit: type=1326 audit(1722487705.393:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.414131][ T4046] bond0 (unregistering): Released all slaves [ 280.430529][ T26] audit: type=1326 audit(1722487705.393:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.430570][ T26] audit: type=1326 audit(1722487705.403:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.430604][ T26] audit: type=1326 audit(1722487705.403:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.430638][ T26] audit: type=1326 audit(1722487705.403:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 280.430672][ T26] audit: type=1326 audit(1722487705.403:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 281.044399][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 281.835205][ T3772] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 281.858235][ T3772] usb 5-1: USB disconnect, device number 13 [ 282.341607][ T3772] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 282.694572][ T7145] syz.1.895 (7145): attempted to duplicate a private mapping with mremap. This is not supported. [ 282.761750][ T3772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.798264][ T3772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.830651][ T3772] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 282.867875][ T3772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.914347][ T3772] usb 5-1: config 0 descriptor?? [ 283.285673][ T7148] loop0: detected capacity change from 0 to 1024 [ 283.290171][ T7130] loop3: detected capacity change from 0 to 40427 [ 283.338280][ T7130] F2FS-fs (loop3): Unrecognized mount option "errors=continue" or missing value [ 283.423831][ T3772] samsung 0003:0419:0600.0007: item fetching failed at offset 1/5 [ 283.438762][ T3772] samsung 0003:0419:0600.0007: parse failed [ 283.465880][ T3772] samsung: probe of 0003:0419:0600.0007 failed with error -22 [ 283.588046][ T7150] loop1: detected capacity change from 0 to 8192 [ 283.704486][ T3618] usb 5-1: USB disconnect, device number 14 [ 285.287679][ T3772] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 285.415038][ T7173] loop1: detected capacity change from 0 to 1024 [ 285.582197][ T3772] usb 5-1: Using ep0 maxpacket: 8 [ 286.013572][ T3772] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 286.745263][ T3772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.781599][ T3772] usb 5-1: Product: syz [ 286.795409][ T7184] loop3: detected capacity change from 0 to 8192 [ 286.796183][ T3772] usb 5-1: Manufacturer: syz [ 286.837393][ T3772] usb 5-1: SerialNumber: syz [ 286.878697][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 286.878713][ T26] audit: type=1800 audit(1722487712.213:58): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="bus" dev="loop3" ino=1048710 res=0 errno=0 [ 286.929792][ T3772] usb 5-1: config 0 descriptor?? [ 287.233275][ T3772] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.654055][ T26] audit: type=1326 audit(1722487712.993:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 287.762113][ T26] audit: type=1326 audit(1722487712.993:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 288.900944][ T26] audit: type=1326 audit(1722487712.993:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 289.042070][ T3772] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 289.481719][ T3772] usb 5-1: USB disconnect, device number 15 [ 289.531234][ T26] audit: type=1326 audit(1722487712.993:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 289.646609][ T26] audit: type=1326 audit(1722487712.993:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 289.840873][ T26] audit: type=1326 audit(1722487712.993:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 289.947350][ T7244] loop3: detected capacity change from 0 to 256 [ 290.637863][ T26] audit: type=1326 audit(1722487712.993:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 290.702440][ T26] audit: type=1326 audit(1722487712.993:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 290.753967][ T26] audit: type=1326 audit(1722487712.993:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79f5ffb3b9 code=0x7ffc0000 [ 292.345268][ T7286] loop1: detected capacity change from 0 to 1024 [ 292.521917][ T2604] hfsplus: bad catalog file entry [ 292.527086][ T2604] hfsplus: b-tree write err: -5, ino 3 [ 292.954748][ T7309] loop1: detected capacity change from 0 to 256 [ 295.829927][ T7346] fuse: Unknown parameter 'grou00000000000000000000' [ 297.374856][ T7326] loop1: detected capacity change from 0 to 40427 [ 298.287220][ T7367] loop1: detected capacity change from 0 to 1024 [ 298.480229][ T9] hfsplus: bad catalog file entry [ 298.496161][ T9] hfsplus: b-tree write err: -5, ino 3 [ 298.643304][ T7373] fuse: Unknown parameter 'grou00000000000000000000' [ 299.688579][ T7374] loop4: detected capacity change from 0 to 8192 [ 299.966336][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 299.966352][ T26] audit: type=1800 audit(1722487725.303:74): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.978" name="bus" dev="loop4" ino=1048713 res=0 errno=0 [ 300.156273][ T7400] loop1: detected capacity change from 0 to 1024 [ 300.342235][ T4542] hfsplus: bad catalog file entry [ 300.347427][ T4542] hfsplus: b-tree write err: -5, ino 3 [ 301.621502][ T7] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 301.750724][ T7393] loop3: detected capacity change from 0 to 40427 [ 301.981816][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.036538][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 302.097323][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 302.325379][ T7] usb 2-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 302.330172][ T7432] loop0: detected capacity change from 0 to 1024 [ 302.346625][ T7430] loop4: detected capacity change from 0 to 8192 [ 302.355233][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.423728][ T7] usb 2-1: Product: syz [ 302.427959][ T7] usb 2-1: Manufacturer: syz [ 302.441478][ T7] usb 2-1: SerialNumber: syz [ 302.471783][ T7] usb 2-1: config 0 descriptor?? [ 302.497676][ T7393] loop3: detected capacity change from 0 to 256 [ 302.535600][ T7432] hfsplus: xattr searching failed [ 302.540897][ T26] audit: type=1800 audit(1722487727.873:75): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1001" name="file0" dev="loop0" ino=4 res=0 errno=0 [ 302.636421][ T3652] hfsplus: bad catalog file entry [ 302.652323][ T26] audit: type=1800 audit(1722487727.993:76): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1000" name="bus" dev="loop4" ino=1048716 res=0 errno=0 [ 302.717673][ T3652] hfsplus: b-tree write err: -5, ino 3 [ 304.069328][ T7] usb 2-1: USB disconnect, device number 9 [ 304.239405][ T7465] loop0: detected capacity change from 0 to 1024 [ 304.403117][ T7465] hfsplus: xattr searching failed [ 304.411649][ T3618] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 304.439687][ T26] audit: type=1800 audit(1722487729.773:77): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1013" name="file0" dev="loop0" ino=4 res=0 errno=0 [ 304.540664][ T155] hfsplus: bad catalog file entry [ 304.572152][ T155] hfsplus: b-tree write err: -5, ino 3 [ 304.701593][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 304.891749][ T3618] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 304.901742][ T3618] usb 5-1: can't read configurations, error -61 [ 305.004603][ T7473] loop0: detected capacity change from 0 to 8192 [ 305.081532][ T3618] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 305.131886][ T26] audit: type=1800 audit(1722487730.463:78): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1016" name="bus" dev="loop0" ino=1048719 res=0 errno=0 [ 305.381638][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 305.561604][ T3618] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 305.576861][ T3618] usb 5-1: can't read configurations, error -61 [ 305.605757][ T3618] usb usb5-port1: attempt power cycle [ 306.171632][ T3618] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 306.292114][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 306.541679][ T3618] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 306.549418][ T3618] usb 5-1: can't read configurations, error -61 [ 306.613369][ T7497] loop0: detected capacity change from 0 to 1024 [ 306.741708][ T3618] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 306.768853][ T7497] hfsplus: xattr searching failed [ 306.775085][ T26] audit: type=1800 audit(1722487732.113:79): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1026" name="file0" dev="loop0" ino=4 res=0 errno=0 [ 306.839609][ T4045] hfsplus: bad catalog file entry [ 306.901708][ T4045] hfsplus: b-tree write err: -5, ino 3 [ 306.908873][ T7499] program syz.1.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.001657][ T3618] usb 5-1: device descriptor read/8, error -71 [ 307.127589][ T3618] usb usb5-port1: unable to enumerate USB device [ 307.552770][ T7514] loop0: detected capacity change from 0 to 8192 [ 307.695135][ T26] audit: type=1800 audit(1722487733.033:80): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1032" name="bus" dev="loop0" ino=1048721 res=0 errno=0 [ 308.560193][ T7528] loop4: detected capacity change from 0 to 1024 [ 308.684451][ T7528] hfsplus: xattr searching failed [ 308.689756][ T26] audit: type=1800 audit(1722487734.023:81): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1038" name="file0" dev="loop4" ino=4 res=0 errno=0 [ 308.704965][ T7527] hfsplus: xattr search failed [ 308.778070][ T9] hfsplus: bad catalog file entry [ 308.789119][ T9] hfsplus: b-tree write err: -5, ino 3 [ 308.799686][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 308.834913][ T7532] device bond1 entered promiscuous mode [ 308.895261][ T7532] device gretap1 entered promiscuous mode [ 308.902062][ T7532] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 308.978767][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 308.992758][ T7532] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 309.002639][ T7532] device gretap1 left promiscuous mode [ 309.019736][ T7532] bond1 (unregistering): Released all slaves [ 309.089152][ T7541] fuse: Unknown parameter 'group_id00000000000000000000' [ 309.239371][ T7543] loop4: detected capacity change from 0 to 2048 [ 309.357286][ T7543] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 309.378476][ T7543] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038 (0x7fffffff) [ 309.468784][ T7551] loop1: detected capacity change from 0 to 8192 [ 309.554697][ T7543] fs-verity: sha256 using implementation "sha256-avx2" [ 309.585973][ T26] audit: type=1800 audit(1722487734.923:82): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1047" name="bus" dev="loop1" ino=1048723 res=0 errno=0 [ 309.812254][ T7560] loop4: detected capacity change from 0 to 1024 [ 309.968003][ T7560] hfsplus: xattr searching failed [ 309.974798][ T26] audit: type=1800 audit(1722487735.313:83): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1050" name="file0" dev="loop4" ino=4 res=0 errno=0 [ 309.998659][ T7559] hfsplus: xattr search failed [ 310.045276][ T3651] hfsplus: bad catalog file entry [ 310.051341][ T7565] loop0: detected capacity change from 0 to 512 [ 310.056489][ T3651] hfsplus: b-tree write err: -5, ino 3 [ 310.185732][ T7565] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value [ 310.585095][ T7580] fuse: Bad value for 'user_id' [ 310.966179][ T7595] loop1: detected capacity change from 0 to 1024 [ 311.109878][ T7595] hfsplus: xattr searching failed [ 311.118754][ T26] audit: type=1800 audit(1722487736.453:84): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1063" name="file0" dev="loop1" ino=4 res=0 errno=0 [ 311.145220][ T7594] hfsplus: xattr search failed [ 311.178857][ T7573] chnl_net:caif_netlink_parms(): no params data found [ 311.214139][ T4045] hfsplus: bad catalog file entry [ 311.219292][ T4045] hfsplus: b-tree write err: -5, ino 3 [ 311.343172][ T7598] loop0: detected capacity change from 0 to 8192 [ 311.447721][ T7607] fuse: Bad value for 'user_id' [ 311.454509][ T26] audit: type=1800 audit(1722487736.793:85): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1064" name="bus" dev="loop0" ino=1048725 res=0 errno=0 [ 311.554805][ T7573] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.562743][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.614720][ T7573] device bridge_slave_0 entered promiscuous mode [ 311.645256][ T7619] macsec0: mtu less than device minimum [ 311.651112][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.669179][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.678698][ T7573] device bridge_slave_1 entered promiscuous mode [ 311.698024][ T3651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.752718][ T7573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.768004][ T7573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.833314][ T3651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.909598][ T7573] team0: Port device team_slave_0 added [ 311.945685][ T3651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.972115][ T7573] team0: Port device team_slave_1 added [ 312.070125][ T3651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.135808][ T7573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.151508][ T7573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.204898][ T7573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.254555][ T7573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.270942][ T7573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.297369][ T7573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.475719][ T7573] device hsr_slave_0 entered promiscuous mode [ 312.486703][ T7638] fuse: Bad value for 'user_id' [ 312.551463][ T3617] Bluetooth: hci3: command 0x0409 tx timeout [ 312.558405][ T7573] device hsr_slave_1 entered promiscuous mode [ 312.588752][ T7573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.612219][ T7573] Cannot create hsr debugfs directory [ 312.907744][ T7656] device ipip0 entered promiscuous mode [ 313.115669][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 313.125352][ T7673] fuse: Bad value for 'fd' [ 313.850950][ T7706] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1098'. [ 313.963531][ T7573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.996849][ T7573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.044888][ T7573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.143642][ T7573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.279381][ T3651] device hsr_slave_0 left promiscuous mode [ 314.344317][ T3651] device hsr_slave_1 left promiscuous mode [ 314.385375][ T7721] fuse: Bad value for 'fd' [ 314.386015][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.418041][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.441953][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.508277][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.542385][ T3651] device bridge_slave_1 left promiscuous mode [ 314.562891][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.576169][ T3651] device bridge_slave_0 left promiscuous mode [ 314.590116][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.608792][ T3651] device veth1_macvtap left promiscuous mode [ 314.622755][ T3651] device veth0_macvtap left promiscuous mode [ 314.631764][ T3617] Bluetooth: hci3: command 0x041b tx timeout [ 314.646625][ T3651] device veth1_vlan left promiscuous mode [ 314.659667][ T3651] device veth0_vlan left promiscuous mode [ 315.004740][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 315.020307][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 315.037042][ T3651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.053340][ T3651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.143775][ T3651] bond0 (unregistering): Released all slaves [ 315.190036][ T7712] netlink: 'syz.1.1099': attribute type 12 has an invalid length. [ 315.401939][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1104'. [ 315.495984][ T7736] device bond1 entered promiscuous mode [ 315.570120][ T7573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.645840][ T7736] device gretap1 entered promiscuous mode [ 315.654263][ T7736] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 315.670417][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 315.695100][ T7736] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 315.721894][ T7736] device gretap1 left promiscuous mode [ 315.744454][ T7736] bond1 (unregistering): Released all slaves [ 315.776045][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.792172][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.804147][ T7573] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.951658][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.965496][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.002112][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.009269][ T3784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.036399][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.056073][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.085527][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.092730][ T3784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.154462][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.158553][ T7765] fuse: Bad value for 'fd' [ 316.172223][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.191038][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.261970][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.279254][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.291103][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.329668][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.533566][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.712061][ T3764] Bluetooth: hci3: command 0x040f tx timeout [ 316.845521][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.855772][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.908407][ T7573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.968565][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.992942][ T7785] loop4: detected capacity change from 0 to 512 [ 317.027289][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.033667][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.043099][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.061966][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.221249][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1120'. [ 317.303247][ T7785] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.315765][ T7785] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038 (0x7fffffff) [ 317.348235][ T7801] device bond1 entered promiscuous mode [ 317.354261][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 317.393501][ T7807] bond1 (unregistering): Released all slaves [ 317.599367][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 317.656697][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.664957][ T7816] fuse: Bad value for 'fd' [ 317.672305][ T3618] Bluetooth: hci4: command 0x0409 tx timeout [ 317.683033][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.710171][ T7573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.782542][ T7823] xt_NFQUEUE: number of total queues is 0 [ 318.001919][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.010901][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.081148][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.097903][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.117877][ T7744] device bridge_slave_0 entered promiscuous mode [ 318.202546][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.211109][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.253821][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.262111][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.311598][ T7744] device bridge_slave_1 entered promiscuous mode [ 318.345928][ T7573] device veth0_vlan entered promiscuous mode [ 318.365140][ T7857] fuse: Bad value for 'fd' [ 318.371541][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.412208][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.584243][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.620903][ T7573] device veth1_vlan entered promiscuous mode [ 318.654691][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.701176][ T7865] loop1: detected capacity change from 0 to 1024 [ 318.791600][ T3772] Bluetooth: hci3: command 0x0419 tx timeout [ 318.897680][ T7744] team0: Port device team_slave_0 added [ 318.919834][ T26] audit: type=1804 audit(1722487744.253:86): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1138" name="/newroot/119/file2/file1" dev="loop1" ino=20 res=1 errno=0 [ 318.969485][ T7744] team0: Port device team_slave_1 added [ 319.153374][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.175719][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.194427][ T7885] loop0: detected capacity change from 0 to 2048 [ 319.300952][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.306323][ T7891] fuse: Bad value for 'fd' [ 319.351278][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.371089][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.422181][ T7885] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.448146][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.463983][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.518403][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.547512][ T7573] device veth0_macvtap entered promiscuous mode [ 320.099676][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 320.170045][ T7744] device hsr_slave_0 entered promiscuous mode [ 320.199416][ T7744] device hsr_slave_1 entered promiscuous mode [ 320.285892][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.324979][ T7573] device veth1_macvtap entered promiscuous mode [ 320.508353][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.362661][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.381444][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.393143][ T7922] loop0: detected capacity change from 0 to 1024 [ 321.399645][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.410069][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.435710][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.455536][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.475161][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.488982][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.510273][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.542489][ T7573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.564788][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.583082][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.605291][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.621543][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.661801][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.680589][ T7924] fuse: Invalid rootmode [ 321.690832][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.731748][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.771456][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.805273][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.865923][ T7922] pit: kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 321.874129][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.886823][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.897863][ T7922] pit: kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 321.897885][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.919872][ T7573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.927795][ T7922] pit: kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 321.960546][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.976835][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.021944][ T7573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.038872][ T7573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.058527][ T7573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.077595][ T7573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.189430][ T3772] Bluetooth: hci4: command 0x040f tx timeout [ 322.202835][ T7744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.256493][ T7744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.444408][ T7744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.606363][ T7952] fuse: Invalid rootmode [ 323.674651][ T7744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.726849][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.761557][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.867167][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.915678][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.946707][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.996665][ T7744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.092594][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.111753][ T7744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.172657][ T7744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.224747][ T7744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.251631][ T3772] Bluetooth: hci4: command 0x0419 tx timeout [ 324.743388][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.814405][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.827103][ T7974] fuse: Invalid rootmode [ 324.832623][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.862826][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.908219][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.924188][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.945435][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.952689][ T3784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.014831][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.026414][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.048853][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.070598][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.077824][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.110474][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.251243][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.262593][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.298060][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.316337][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.343036][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.476956][ T7744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.541519][ T7744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.586264][ T7992] syz.1.1180 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.613194][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.632580][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.641154][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.651267][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.660924][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.702175][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.738732][ T3651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.844867][ T8000] fuse: Bad value for 'rootmode' [ 325.991200][ T3651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.067636][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.081947][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.122289][ T3651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.186491][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.345530][ T3651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.476044][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.504624][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.663498][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 326.697188][ T7744] device veth0_vlan entered promiscuous mode [ 326.742386][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.755708][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.776441][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.792242][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.838984][ T7744] device veth1_vlan entered promiscuous mode [ 326.889832][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 327.087665][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.102119][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.110700][ T7983] device bridge_slave_0 entered promiscuous mode [ 327.175399][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.213909][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.238423][ T7983] device bridge_slave_1 entered promiscuous mode [ 327.250729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.284880][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.453782][ T3784] Bluetooth: hci6: command 0x0409 tx timeout [ 327.464211][ T8028] fuse: Bad value for 'rootmode' [ 327.596284][ T7744] device veth0_macvtap entered promiscuous mode [ 327.654050][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.690211][ T7744] device veth1_macvtap entered promiscuous mode [ 327.718754][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.778560][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.804648][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.815951][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.828818][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.839248][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.860162][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.870443][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.890368][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.911468][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.931434][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.941777][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.961590][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.976745][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.005504][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 328.016327][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.035431][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 328.052556][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.082730][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.110739][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.131351][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.153701][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.174280][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.194915][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.210212][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.230794][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.251315][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.271510][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.291542][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.311569][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.333900][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.368714][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.392466][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.445683][ T7983] team0: Port device team_slave_0 added [ 328.470956][ T7983] team0: Port device team_slave_1 added [ 328.573905][ T7744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.611187][ T7744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.644259][ T7744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.671453][ T7744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.710377][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.722138][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.811325][ T7983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.892883][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.903847][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.980777][ T7983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.220989][ T7983] device hsr_slave_0 entered promiscuous mode [ 329.238884][ T7983] device hsr_slave_1 entered promiscuous mode [ 329.262050][ T7983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.275112][ T7983] Cannot create hsr debugfs directory [ 329.461093][ T5039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.506399][ T5039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.517512][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 329.553294][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.600255][ T7936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.651157][ T7936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.703860][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.062962][ T3651] device hsr_slave_0 left promiscuous mode [ 330.091902][ T3651] device hsr_slave_1 left promiscuous mode [ 330.104143][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.141485][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.176817][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.243903][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.303279][ T3651] device bridge_slave_1 left promiscuous mode [ 330.309548][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.362408][ T3651] device bridge_slave_0 left promiscuous mode [ 330.382195][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.414154][ T3651] device veth1_macvtap left promiscuous mode [ 330.420496][ T3651] device veth0_macvtap left promiscuous mode [ 330.441563][ T3651] device veth1_vlan left promiscuous mode [ 330.447470][ T3651] device veth0_vlan left promiscuous mode [ 331.029544][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 331.112002][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 331.172042][ T8086] fuse: Bad value for 'rootmode' [ 331.199148][ T3651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.239777][ T3651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.521606][ T26] audit: type=1326 audit(1722487756.853:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 331.558568][ T26] audit: type=1326 audit(1722487756.853:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 331.593320][ T3617] Bluetooth: hci6: command 0x040f tx timeout [ 331.608184][ T3651] bond0 (unregistering): Released all slaves [ 331.672565][ T26] audit: type=1326 audit(1722487756.893:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 331.696741][ T26] audit: type=1326 audit(1722487756.893:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm=6CAE690D95DB80E38B5B62CFFD798A exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 331.721626][ T26] audit: type=1326 audit(1722487756.893:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm=6CAE690D95DB80E38B5B62CFFD798A exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 331.748000][ T26] audit: type=1326 audit(1722487756.893:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm=6CAE690D95DB80E38B5B62CFFD798A exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 331.780461][ T26] audit: type=1326 audit(1722487756.893:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm=6CAE690D95DB80E38B5B62CFFD798A exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 331.837431][ T26] audit: type=1326 audit(1722487756.893:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm=6CAE690D95DB80E38B5B62CFFD798A exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0bdd3b9 code=0x7ffc0000 [ 332.423268][ T7983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.468192][ T7983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.481921][ T7983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.821470][ T7983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.966232][ T26] audit: type=1326 audit(1722487758.303:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8ac263b9 code=0x7ffc0000 [ 332.971613][ T8123] loop3: detected capacity change from 0 to 8 [ 333.056715][ T26] audit: type=1326 audit(1722487758.303:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0c8ac263b9 code=0x7ffc0000 [ 333.152471][ T8123] SQUASHFS error: Failed to read block 0xdfa: -5 [ 333.224374][ T8119] loop4: detected capacity change from 0 to 8192 [ 333.230945][ T8123] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 333.381328][ T8135] loop1: detected capacity change from 0 to 1024 [ 333.472808][ T7983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.539821][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.558469][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.602498][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.671180][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.672434][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 333.702952][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.762504][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.769611][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.895514][ T8135] EXT4-fs (loop1): Test dummy encryption mode enabled [ 333.922828][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.937597][ T8135] EXT4-fs (loop1): Ignoring removed orlov option [ 333.949926][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.960709][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.972103][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.979248][ T3784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.998903][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.012527][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.045303][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.070545][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.159524][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.209143][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.409702][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 335.158653][ T8135] device hsr_slave_1 left promiscuous mode [ 335.205871][ T7983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.231845][ T7983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.292499][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.313103][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.340778][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.357096][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.369788][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.394684][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.579302][ T8176] loop4: detected capacity change from 0 to 8192 [ 336.671721][ T3764] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 336.776781][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.795266][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.824785][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.920374][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.949892][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.759517][ T7983] device veth0_vlan entered promiscuous mode [ 337.791720][ T3764] usb 2-1: config 0 has an invalid interface number: 43 but max is 0 [ 337.804655][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.833698][ T3764] usb 2-1: config 0 has no interface number 0 [ 337.843085][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.873873][ T3764] usb 2-1: config 0 interface 43 has no altsetting 0 [ 337.914156][ T3764] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 337.929443][ T3764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.948579][ T3764] usb 2-1: config 0 descriptor?? [ 338.007836][ T3764] usb 2-1: selecting invalid altsetting 0 [ 338.284020][ T3764] usb 2-1: USB disconnect, device number 10 [ 338.709180][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.733113][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.755073][ T7983] device veth1_vlan entered promiscuous mode [ 338.882709][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.892427][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.008495][ T7983] device veth0_macvtap entered promiscuous mode [ 339.024542][ T7983] device veth1_macvtap entered promiscuous mode [ 339.052742][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.065393][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.076193][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.087759][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.098328][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.127236][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.148646][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.167366][ T3794] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 339.169286][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 339.227109][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.290434][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.370375][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.471916][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.556576][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.811567][ T3794] usb 2-1: Using ep0 maxpacket: 8 [ 340.460746][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.511081][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.542764][ T8250] fuse: Unknown parameter 'user_i00000000000000000000' [ 340.551863][ T3794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.552539][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.572408][ T3794] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x49, skipping [ 340.584731][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.608591][ T3794] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.614751][ T8248] loop4: detected capacity change from 0 to 1024 [ 340.639745][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.663319][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.689355][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.709875][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.723294][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.781829][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.803820][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.821320][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.840677][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.859964][ T3794] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0 [ 340.869534][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.891016][ T3794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.895132][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.900182][ T3794] usb 2-1: Product: syz [ 340.909146][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.924798][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.926905][ T3794] usb 2-1: Manufacturer: syz [ 340.936458][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.948304][ T3794] usb 2-1: SerialNumber: syz [ 340.966921][ T8248] EXT4-fs (loop4): Test dummy encryption mode enabled [ 340.981677][ T8248] EXT4-fs (loop4): Ignoring removed orlov option [ 341.023752][ T3794] usb 2-1: config 0 descriptor?? [ 341.061812][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.076143][ T8259] loop3: detected capacity change from 0 to 512 [ 341.085084][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.116988][ T7983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.134511][ T7983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.150428][ T7983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.160689][ T7983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.170303][ T8259] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 341.194171][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 341.234302][ T8259] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 341.259933][ T8259] EXT4-fs (loop3): 1 truncate cleaned up [ 341.267409][ T8259] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,usrjquota=,nombcache,noload,,errors=continue. Quota mode: none. [ 341.300202][ T8248] device hsr_slave_1 left promiscuous mode [ 341.411585][ T3794] usb 2-1: probing VID:PID(0424:012C) [ 341.435099][ T3794] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 341.446570][ T7936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.461613][ T7936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.522847][ T3794] vub300: probe of 2-1:0.0 failed with error -22 [ 341.552624][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.567665][ T3794] usb 2-1: USB disconnect, device number 11 [ 341.682425][ T7936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.699005][ T7936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.142511][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.223459][ T8290] fuse: Unknown parameter 'user_i00000000000000000000' [ 343.661789][ T3794] Bluetooth: hci6: command 0x0405 tx timeout [ 344.570516][ T8323] fuse: Unknown parameter 'user_i00000000000000000000' [ 345.171535][ T3613] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 345.303798][ T8334] loop3: detected capacity change from 0 to 128 [ 345.451533][ T3613] usb 5-1: Using ep0 maxpacket: 32 [ 345.523576][ T8334] ADFS-fs (loop3): unrecognised mount option "ÿÿÿÿ" or missing value [ 345.571588][ T3613] usb 5-1: config 5 has an invalid interface number: 19 but max is 0 [ 345.609274][ T8344] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 345.618208][ T8344] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 346.442466][ T3613] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 346.511529][ T3613] usb 5-1: config 5 has no interface number 0 [ 346.761734][ T3613] usb 5-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 346.830517][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.022259][ T3613] usb 5-1: Product: syz [ 347.026655][ T3613] usb 5-1: Manufacturer: syz [ 347.031271][ T3613] usb 5-1: SerialNumber: syz [ 347.213055][ T3613] sierra 5-1:5.19: Sierra USB modem converter detected [ 347.227699][ T8353] loop1: detected capacity change from 0 to 32768 [ 347.436661][ T3613] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 347.464989][ T3613] usb 5-1: USB disconnect, device number 20 [ 347.517511][ T3613] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 347.539834][ T3613] sierra 5-1:5.19: device disconnected [ 348.613976][ T8372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 348.828011][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'. [ 348.902753][ T8392] device bridge_slave_1 left promiscuous mode [ 349.641779][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.726199][ T3794] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 349.793532][ T8391] loop3: detected capacity change from 0 to 128 [ 349.841501][ T3794] Bluetooth: hci6: Injecting HCI hardware error event [ 349.852589][ T3573] Bluetooth: hci6: hardware error 0x00 [ 349.947135][ T8391] ADFS-fs (loop3): unrecognised mount option "ÿÿÿÿ" or missing value [ 350.358034][ T8418] EXT4-fs (sda1): shut down requested (1) [ 350.386812][ T8418] Aborting journal on device sda1-8. [ 350.424497][ T8422] fuse: Bad value for 'fd' [ 351.235133][ T8383] loop4: detected capacity change from 0 to 32768 [ 352.254753][ T8455] fuse: Bad value for 'fd' [ 352.631881][ T8466] loop1: detected capacity change from 0 to 128 [ 352.909047][ T8466] ADFS-fs (loop1): unrecognised mount option "ÿÿÿÿ" or missing value [ 352.979938][ T8441] loop0: detected capacity change from 0 to 32768 [ 353.141100][ T8443] loop3: detected capacity change from 0 to 32768 [ 353.253205][ T8443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1312 (8443) [ 353.303333][ T8443] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 353.303410][ T8441] XFS (loop0): Mounting V5 Filesystem [ 353.344044][ T8481] udevd[8481]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 353.376879][ T8443] BTRFS info (device loop3): using free space tree [ 353.432671][ T8443] BTRFS info (device loop3): has skinny extents [ 353.522993][ T8441] XFS (loop0): Ending clean mount [ 353.549858][ T8441] XFS (loop0): Quotacheck needed: Please wait. [ 353.723697][ T8441] XFS (loop0): Quotacheck: Done. [ 353.808695][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 353.808714][ T26] audit: type=1804 audit(1722487779.143:135): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1310" name="/newroot/16/file2/bus" dev="loop0" ino=9292 res=1 errno=0 [ 353.821550][ T8443] BTRFS info (device loop3): enabling ssd optimizations [ 353.921751][ T3797] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 353.924433][ T26] audit: type=1804 audit(1722487779.243:136): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1310" name="/newroot/16/file2/bus" dev="loop0" ino=9292 res=1 errno=0 [ 353.951798][ T8443] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 354.022821][ T8506] udevd[8506]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 354.146369][ T7983] XFS (loop0): Unmounting Filesystem [ 354.181876][ T3797] usb 2-1: Using ep0 maxpacket: 8 [ 354.310383][ T8450] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 354.502486][ T3797] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 354.523781][ T3797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.541914][ T3797] usb 2-1: Product: syz [ 354.552393][ T3797] usb 2-1: Manufacturer: syz [ 354.566554][ T3797] usb 2-1: SerialNumber: syz [ 354.592610][ T3797] usb 2-1: config 0 descriptor?? [ 354.640551][ T3797] gspca_main: spca500-2.14.0 probing 046d:0900 [ 354.971272][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 354.995839][ T8514] IPVS: Error joining to the multicast group [ 355.116463][ T8516] fuse: Bad value for 'fd' [ 355.359376][ T8510] loop4: detected capacity change from 0 to 32768 [ 355.381619][ T3797] gspca_spca500: reg write: error -71 [ 355.411764][ T3797] gspca_spca500: reg write: error -71 [ 355.446366][ T3797] gspca_spca500: reg write: error -71 [ 355.494624][ T3797] gspca_spca500: reg write: error -71 [ 355.537306][ T3797] gspca_spca500: reg write: error -71 [ 355.549717][ T8528] loop0: detected capacity change from 0 to 4096 [ 355.581666][ T3797] gspca_spca500: reg write: error -71 [ 355.611571][ T3797] gspca_spca500: reg write: error -71 [ 355.660282][ T3797] gspca_spca500: reg write: error -71 [ 355.721693][ T3797] gspca_spca500: reg write: error -71 [ 355.741774][ T3797] gspca_spca500: reg write: error -71 [ 355.763862][ T3797] gspca_spca500: reg write: error -71 [ 355.813017][ T3797] gspca_spca500: reg write: error -71 [ 355.897640][ T3797] usb 2-1: USB disconnect, device number 12 [ 355.950608][ T8534] device bridge0 entered promiscuous mode [ 355.965147][ T8537] udevd[8537]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video71': Input/output error [ 356.131910][ T8533] device bridge0 left promiscuous mode [ 356.329242][ T8548] fuse: Bad value for 'fd' [ 357.351530][ T3617] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 357.414031][ T8559] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 357.591649][ T3617] usb 5-1: Using ep0 maxpacket: 8 [ 358.231809][ T3617] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 358.255183][ T3617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.292710][ T3617] usb 5-1: Product: syz [ 358.313320][ T3617] usb 5-1: Manufacturer: syz [ 358.341501][ T3617] usb 5-1: SerialNumber: syz [ 358.375686][ T3617] usb 5-1: config 0 descriptor?? [ 358.423953][ T3617] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 358.448009][ T3617] pctv452e: pctv452e_power_ctrl: 1 [ 358.448009][ T3617] [ 358.481464][ T3617] usb 5-1: selecting invalid altsetting 3 [ 358.495721][ T3617] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 358.495721][ T3617] [ 358.537980][ T3617] dvb-usb: bulk message failed: -22 (5/0) [ 358.602459][ T3617] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.642555][ T3617] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 358.671742][ T3617] usb 5-1: media controller created [ 358.679488][ T3617] dvb-usb: bulk message failed: -22 (8/0) [ 358.696957][ T3617] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 358.719053][ T3617] dvb-usb: MAC address reading failed. [ 358.783668][ T3617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.802257][ T8570] loop1: detected capacity change from 0 to 8192 [ 358.858654][ T8578] fuse: Bad value for 'fd' [ 358.869515][ T3617] DVB: Unable to find symbol stb0899_attach() [ 358.879018][ T3617] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 358.919221][ T26] audit: type=1800 audit(1722487784.253:137): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1347" name="bus" dev="loop1" ino=1048738 res=0 errno=0 [ 359.311775][ T27] INFO: task kworker/1:10:3766 blocked for more than 143 seconds. [ 359.319694][ T27] Not tainted 5.15.164-syzkaller #0 [ 359.358376][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.408254][ T27] task:kworker/1:10 state:D stack:21400 pid: 3766 ppid: 2 flags:0x00004000 [ 359.464186][ T3617] rc_core: Couldn't load IR keymap rc-tt-1500 [ 359.470304][ T3617] Registered IR keymap rc-empty [ 359.476980][ T3617] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 359.488161][ T3617] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 359.497003][ T27] Workqueue: gfs_recovery gfs2_recover_func [ 359.500456][ T3617] dvb-usb: schedule remote query interval to 100 msecs. [ 359.505568][ T27] [ 359.506619][ T3617] pctv452e: pctv452e_power_ctrl: 0 [ 359.506619][ T3617] [ 359.524512][ T3617] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 359.544847][ T27] Call Trace: [ 359.550530][ T3617] usb 5-1: USB disconnect, device number 21 [ 359.556934][ T27] [ 359.559903][ T27] __schedule+0x12c4/0x45b0 [ 359.569533][ T27] ? mark_lock+0x98/0x340 [ 359.578374][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 359.593035][ T27] ? release_firmware_map_entry+0x190/0x190 [ 359.599117][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 359.604826][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 359.610075][ T27] schedule+0x11b/0x1f0 [ 359.614729][ T27] io_schedule+0x88/0x100 [ 359.620236][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 359.626619][ T27] ? wait_on_page_bit+0x50/0x50 [ 359.631916][ T27] ? rcu_lock_release+0x20/0x20 [ 359.636957][ T27] ? crc32_le_shift+0x2d4/0x2f0 [ 359.642520][ T27] ? gfs2_jhead_process_page+0x571/0xbf0 [ 359.648398][ T27] gfs2_jhead_process_page+0x25e/0xbf0 [ 359.654483][ T27] ? gfs2_end_log_read+0x530/0x530 [ 359.659917][ T27] ? bio_add_page+0x2ba/0x450 [ 359.665506][ T27] gfs2_find_jhead+0xa5c/0x10c0 [ 359.670855][ T27] ? gfs2_end_log_write+0x800/0x800 [ 359.676746][ T27] ? arch_stack_walk+0x10d/0x140 [ 359.683772][ T27] ? gfs2_jdesc_check+0x1f2/0x290 [ 359.688949][ T27] gfs2_recover_func+0x6ce/0x1f00 [ 359.694583][ T27] ? validate_chain+0x112/0x5930 [ 359.699753][ T27] ? reacquire_held_locks+0x660/0x660 [ 359.705810][ T27] ? mark_lock+0x98/0x340 [ 359.710320][ T27] ? __get_log_header+0x4e0/0x4e0 [ 359.716023][ T27] ? register_lock_class+0x100/0x9a0 [ 359.723614][ T27] ? is_dynamic_key+0x1f0/0x1f0 [ 359.728680][ T27] ? mark_lock+0x98/0x340 [ 359.733574][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 359.738863][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 359.745577][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 359.751289][ T27] process_one_work+0x8a1/0x10c0 [ 359.756861][ T27] ? worker_detach_from_pool+0x260/0x260 [ 359.763715][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 359.769670][ T27] ? kthread_data+0x4e/0xc0 [ 359.774794][ T27] ? wq_worker_running+0x97/0x170 [ 359.779990][ T27] worker_thread+0xaca/0x1280 [ 359.784911][ T27] kthread+0x3f6/0x4f0 [ 359.789100][ T27] ? rcu_lock_release+0x20/0x20 [ 359.795546][ T27] ? kthread_blkcg+0xd0/0xd0 [ 359.800179][ T27] ret_from_fork+0x1f/0x30 [ 359.804752][ T27] [ 359.807889][ T27] INFO: task syz.2.426:5644 blocked for more than 143 seconds. [ 359.815928][ T27] Not tainted 5.15.164-syzkaller #0 [ 359.828365][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.851476][ T27] task:syz.2.426 state:D stack:23544 pid: 5644 ppid: 5051 flags:0x00004004 [ 359.860751][ T27] Call Trace: [ 359.864197][ T27] [ 359.867154][ T27] __schedule+0x12c4/0x45b0 [ 359.881438][ T27] ? preempt_schedule+0xd9/0xe0 [ 359.886361][ T27] ? preempt_schedule_common+0xa6/0xd0 [ 359.894193][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 359.896819][ T8593] overlayfs: failed to resolve './file1': -2 [ 359.899877][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 359.899920][ T27] ? release_firmware_map_entry+0x190/0x190 [ 359.931437][ T27] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 359.937464][ T27] schedule+0x11b/0x1f0 [ 359.941942][ T27] bit_wait+0xe/0xc0 [ 359.945873][ T27] __wait_on_bit+0xb9/0x180 [ 359.950406][ T27] ? out_of_line_wait_on_bit_lock+0x250/0x250 [ 359.966306][ T27] out_of_line_wait_on_bit+0x1d0/0x250 [ 359.981476][ T27] ? out_of_line_wait_on_bit_lock+0x250/0x250 [ 359.987614][ T27] ? __wait_on_bit+0x180/0x180 [ 359.993420][ T27] ? bit_waitqueue+0x30/0x30 [ 359.998078][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 360.011431][ T27] ? gfs2_journal_wipe+0xcf0/0xcf0 [ 360.016699][ T27] gfs2_recover_journal+0x110/0x160 [ 360.031422][ T27] init_journal+0x1804/0x23c0 [ 360.036269][ T27] ? end_bio_io_page+0xf0/0xf0 [ 360.041239][ T27] ? init_sb+0xc50/0x1340 [ 360.061636][ T27] ? snprintf+0xd6/0x120 [ 360.066132][ T27] ? init_journal+0x7d2/0x23c0 [ 360.071106][ T27] ? vscnprintf+0x80/0x80 [ 360.091445][ T27] init_inodes+0xdc/0x310 [ 360.096023][ T27] gfs2_fill_super+0x1c2c/0x2750 [ 360.101016][ T27] ? gfs2_reconfigure+0xcf0/0xcf0 [ 360.121437][ T27] ? ptr_to_hashval+0x60/0x60 [ 360.126184][ T27] ? gfs2_glock_nq_num+0x123/0x270 [ 360.133886][ T27] ? set_blocksize+0x1ec/0x370 [ 360.138814][ T27] get_tree_bdev+0x3fe/0x620 [ 360.151416][ T27] ? gfs2_reconfigure+0xcf0/0xcf0 [ 360.151657][ T3802] Bluetooth: hci5: command 0x0406 tx timeout [ 360.156520][ T27] gfs2_get_tree+0x50/0x210 [ 360.156549][ T27] ? bpf_lsm_capable+0x5/0x10 [ 360.191435][ T27] vfs_get_tree+0x88/0x270 [ 360.195922][ T27] do_new_mount+0x2ba/0xb40 [ 360.200452][ T27] ? do_move_mount_old+0x160/0x160 [ 360.221458][ T27] ? user_path_at_empty+0x12b/0x180 [ 360.226726][ T27] __se_sys_mount+0x2d5/0x3c0 [ 360.242769][ T27] ? __x64_sys_mount+0xc0/0xc0 [ 360.247572][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 360.261417][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 360.266679][ T27] ? __x64_sys_mount+0x1c/0xc0 [ 360.281421][ T27] do_syscall_64+0x3b/0xb0 [ 360.285989][ T27] ? clear_bhb_loop+0x15/0x70 [ 360.301504][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.307674][ T27] RIP: 0033:0x7ff24363daba [ 360.312483][ T27] RSP: 002b:00007ff241abae78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 360.320919][ T27] RAX: ffffffffffffffda RBX: 00007ff241abaf00 RCX: 00007ff24363daba [ 360.329058][ T27] RDX: 000000002001f680 RSI: 000000002001f6c0 RDI: 00007ff241abaec0 [ 360.338119][ T27] RBP: 000000002001f680 R08: 00007ff241abaf00 R09: 0000000000000000 [ 360.346317][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000002001f6c0 [ 360.355802][ T27] R13: 00007ff241abaec0 R14: 000000000001f6b8 R15: 000000002001f700 [ 360.363908][ T27] [ 360.375009][ T27] [ 360.375009][ T27] Showing all locks held in the system: [ 360.394166][ T27] 1 lock held by khungtaskd/27: [ 360.423551][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 360.466717][ T27] 1 lock held by acpid/3011: [ 360.487053][ T3617] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 360.497394][ T27] #0: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 360.514180][ T27] 2 locks held by getty/3330: [ 360.522857][ T27] #0: ffff88814b123098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 360.532958][ T27] #1: ffffc90002bab2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 360.545403][ T27] 3 locks held by kworker/u5:2/3573: [ 360.551548][ T27] 4 locks held by udevd/3586: [ 360.556490][ T27] #0: ffff8880705e0e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 360.565783][ T27] #1: ffff888069109c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x50/0x3b0 [ 360.575469][ T27] #2: ffff88801dbbd0f0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x6f/0x3b0 [ 360.585204][ T27] #3: ffff88801e9d5220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17e/0x340 [ 360.594539][ T27] 2 locks held by kworker/1:4/3613: [ 360.600031][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 360.610641][ T27] #1: ffffc900031a7d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 360.622786][ T27] 3 locks held by kworker/1:5/3617: [ 360.628095][ T27] #0: ffff888014a06138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 360.642004][ T27] #1: ffffc900031f7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 360.661922][ T27] #2: ffff88801e9d5220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 360.681452][ T27] 2 locks held by kworker/1:10/3766: [ 360.686832][ T27] #0: ffff888018a64138 ((wq_completion)gfs_recovery){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 360.711454][ T27] #1: ffffc90003437d20 ((work_completion)(&jd->jd_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 360.731541][ T27] 3 locks held by kworker/0:18/3802: [ 360.738042][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 360.760892][ T27] #1: ffffc90004467d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 360.783520][ T27] #2: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 360.797027][ T27] 3 locks held by kworker/u4:8/3889: [ 360.811541][ T27] 1 lock held by syz.2.426/5644: [ 360.816619][ T27] #0: ffff8880602ca0e0 (&type->s_umount_key#95/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940 [ 360.833449][ T27] 1 lock held by syz.2.1318/8463: [ 360.838525][ T27] #0: ffff8880602ca0e0 (&type->s_umount_key#106){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 360.850384][ T27] [ 360.853551][ T27] ============================================= [ 360.853551][ T27] [ 360.863279][ T27] NMI backtrace for cpu 1 [ 360.867626][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 360.875743][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 360.885806][ T27] Call Trace: [ 360.889170][ T27] [ 360.892101][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 360.896783][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 360.902413][ T27] ? panic+0x860/0x860 [ 360.906661][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 360.911795][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 360.916732][ T27] ? __wake_up_klogd+0xd5/0x100 [ 360.921594][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 360.927779][ T27] ? _printk+0xd1/0x120 [ 360.931969][ T27] ? panic+0x860/0x860 [ 360.936094][ T27] ? __wake_up_klogd+0xcc/0x100 [ 360.940947][ T27] ? panic+0x860/0x860 [ 360.945065][ T27] ? __rcu_read_unlock+0x92/0x100 [ 360.950095][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 360.956175][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 360.962462][ T27] watchdog+0xe72/0xeb0 [ 360.966642][ T27] kthread+0x3f6/0x4f0 [ 360.970738][ T27] ? hungtask_pm_notify+0x50/0x50 [ 360.975768][ T27] ? kthread_blkcg+0xd0/0xd0 [ 360.980472][ T27] ret_from_fork+0x1f/0x30 [ 360.984915][ T27] [ 360.988918][ T27] Sending NMI from CPU 1 to CPUs 0: [ 360.994600][ C0] NMI backtrace for cpu 0 [ 360.994615][ C0] CPU: 0 PID: 4542 Comm: kworker/u4:13 Not tainted 5.15.164-syzkaller #0 [ 360.994633][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 360.994644][ C0] Workqueue: phy23 ieee80211_iface_work [ 360.994669][ C0] RIP: 0010:kasan_get_free_meta+0x18/0x20 [ 360.994688][ C0] Code: 48 0f 44 c1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 63 8f c0 00 00 00 48 8d 14 0e 31 c0 48 81 f9 ff ff ff 7f 48 0f 45 c2 0f 1f 80 00 00 00 00 48 83 3f ff 74 65 48 c7 c0 ff ff ff ff eb [ 360.994703][ C0] RSP: 0018:ffffc90002f77a30 EFLAGS: 00000293 [ 360.994716][ C0] RAX: ffff88806155bc00 RBX: ffff88806155bc00 RCX: 0000000000000000 [ 360.994729][ C0] RDX: ffff88806155bc00 RSI: ffff88806155bc00 RDI: ffff888011c41c80 [ 360.994741][ C0] RBP: 0000000000000400 R08: dffffc0000000000 R09: ffffed100c2ab780 [ 360.994753][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 360.994764][ C0] R13: ffffffff81c99711 R14: ffff888011c41c80 R15: 0000000000000001 [ 360.994776][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 360.994789][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.994801][ C0] CR2: 00007f0c8ad81178 CR3: 000000007e142000 CR4: 00000000003506f0 [ 360.994816][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.994825][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.994835][ C0] Call Trace: [ 360.994840][ C0] [ 360.994845][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 360.994865][ C0] ? read_lock_is_recursive+0x10/0x10 [ 360.994883][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 360.994902][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 360.994928][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 360.994946][ C0] ? nmi_handle+0xf7/0x370 [ 360.994964][ C0] ? kasan_get_free_meta+0x18/0x20 [ 360.994979][ C0] ? default_do_nmi+0x62/0x150 [ 360.994998][ C0] ? exc_nmi+0xa8/0x100 [ 360.995013][ C0] ? end_repeat_nmi+0x16/0x31 [ 360.995032][ C0] ? kfree+0xf1/0x270 [ 360.995054][ C0] ? kasan_get_free_meta+0x18/0x20 [ 360.995070][ C0] ? kasan_get_free_meta+0x18/0x20 [ 360.995086][ C0] ? kasan_get_free_meta+0x18/0x20 [ 360.995102][ C0] [ 360.995107][ C0] [ 360.995111][ C0] kasan_set_free_info+0x9/0x40 [ 360.995127][ C0] ____kasan_slab_free+0xd8/0x120 [ 360.995144][ C0] slab_free_freelist_hook+0xdd/0x160 [ 360.995164][ C0] ? skb_release_data+0x73a/0x8a0 [ 360.995182][ C0] kfree+0xf1/0x270 [ 360.995210][ C0] skb_release_data+0x73a/0x8a0 [ 360.995228][ C0] ? rcu_is_watching+0x11/0xa0 [ 360.995248][ C0] kfree_skb_reason+0xb3/0x170 [ 360.995266][ C0] ieee80211_iface_work+0x251/0xcc0 [ 360.995290][ C0] process_one_work+0x8a1/0x10c0 [ 360.995317][ C0] ? worker_detach_from_pool+0x260/0x260 [ 360.995337][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 360.995355][ C0] ? kthread_data+0x4e/0xc0 [ 360.995371][ C0] ? wq_worker_running+0x97/0x170 [ 360.995388][ C0] worker_thread+0xaca/0x1280 [ 360.995419][ C0] kthread+0x3f6/0x4f0 [ 360.995434][ C0] ? rcu_lock_release+0x20/0x20 [ 360.995450][ C0] ? kthread_blkcg+0xd0/0xd0 [ 360.995467][ C0] ret_from_fork+0x1f/0x30 [ 360.995492][ C0] [ 361.070479][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 361.326278][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 361.334247][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 361.344299][ T27] Call Trace: [ 361.347568][ T27] [ 361.350485][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 361.355159][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 361.360788][ T27] ? panic+0x860/0x860 [ 361.364872][ T27] panic+0x318/0x860 [ 361.368773][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 361.374504][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 361.380648][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 361.385851][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 361.391913][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 361.398119][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 361.404271][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 361.410420][ T27] watchdog+0xeb0/0xeb0 [ 361.414605][ T27] kthread+0x3f6/0x4f0 [ 361.418663][ T27] ? hungtask_pm_notify+0x50/0x50 [ 361.423674][ T27] ? kthread_blkcg+0xd0/0xd0 [ 361.428252][ T27] ret_from_fork+0x1f/0x30 [ 361.432666][ T27] [ 361.435975][ T27] Kernel Offset: disabled [ 361.440484][ T27] Rebooting in 86400 seconds..