last executing test programs: 11.188978827s ago: executing program 1 (id=490): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0b0200000023e88c4a683609870008000100000000000c00990001"], 0x33}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 11.074873917s ago: executing program 1 (id=494): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000100)) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) 9.479181575s ago: executing program 2 (id=499): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x2d, r1, 0x0}) setuid(0xee00) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000300)={r2}) 9.103139237s ago: executing program 2 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="470000001004000000000000eaff003a03516be5d10cfec70000000340", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000a80), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x80000, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6c733d63703837342c6e6f626172726965722c63726561746f723dbd3c66f52c666f7263652c666f7263652c756d61736b3d30303030303030303030303030303030303030363734352c003e838000fd80f3680ffb58b20857be26d28f73111114be48dc840e38bdb0f11de52deec61da8aac0a0c5751a22734caafa2e45c4ea10ea7cef796c856b1075a05274e65543252068d452533248a97c5863ada3c1bfefe0355ea72af70206046e3b4ddf96b0db12811de14a0d350d02e1198336262ce692c881c506f183958f43da742afbfb72e02e41306606e4b373cc7b8f096c75e99c6ef0d366cf19335748f598cc276769c9481dfd1b9e3bb215ee685517f40bbcd92047dc8c9eacc12ee60ba80acb98c2db2271e90ac86c53a6532d2c661b3483fdfaea2f5fd6d3f23048d6562477187cc1240064"], 0xff, 0x6b9, &(0x7f0000000ac0)="$eJzs3U9sHFcdB/DvrJ21N0Wp26ZpQEi1GqmCRiR2ViVBQmpACOUQoQguvVqN01hx0spxUVohsgEKEidOqAcORSgcekIIIZUTopyRkLhwyj0SNw45AEYzO7terzf+k8RZp/18pPG82Tfvvd/8+mZmd7bRBvjMOvd6DnRS5Nzx8zfK7Tu328t3brev9spJppI0ksnuKkUrKT5Jzqa75PPli3V3xf3GefXux8XkBx+1u1uT9VLt39iq3SYj9+wk0/2NiSSz3eJ/dtztpv6qpernjfX+HlDRj7tM2LFe4voH03mo3uGBrW0yMBkb2zbf+XkL7Fs3u/fNTWaSg+neXcv3Ab1b1fZXhvHb8trklgsAAMCnwMjP8oOevpd7uZFDjyccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePJNdH8sv15VS6NXnk3R+/3/5sBv6jfHHPJDev9Stfru0+MOBAAAAAAAAAAeyov3ci83cqi3vVZU3/m/VG0crv4+lXdyPYtZyYncyEJWs5qVzCeZGeioeWNhdXVlfnPLX6Zsuba2drNueWpky1Mb4+oMBzrq/zTYtBMAAAAAAAAAfGb9KOfWv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9oEgmuqtqOdwrz6QxmWQ6SbOY7e/eHGuwj8Cfxx0AAAAA7L1WvT5U/K9bWCuqz/xHqs/903kn17KapaxmOYu5WD0L6H7qb/y9016+c7t9tVw2d/yNf+0qjqrHdJ89jB55rtrj+X6Lc/l2vpfjmc2FrGQp389CVrOY2XyrKi2kyEz99GLmzu1WerFujvfshq0Lw7G9OFAu4ztaRdLKpSxVsZ3IG81e6I16v6MDo/2xmQyNeKvMTvFabYc5ulivyyP6Rb3eH2aqIz/Qz8hcnfsyG88M5n1z7nc5T4ZHmk+j/wzq8Poo5ebwSA+U84P1usz1T/c257t8lLYxE52fl1u92Xdk65wnX/7HXy5cbly7cvnS9eP7ZxqN9Llt9xieE+2BTLywo0wsl5noPEQmph+45SPVrLPRvYru7mr5UtX2UJbynbyVi1nM6cxlPmcyl6/lVNo5NZDX57fOa3WuNbpn2lM7nNjHvlQXynvSzwbuTY/N1P0qyiN4ZiCvg1e6mapu8JX1LD17ZvssFc2MviL9c2Qok1+oC+UYPx6444zfcCbmBzLx3Nbz5df/XUtyffnalZXLC2/vcLyX63V52r6/8dr8m0dyQLtXH245X54t/2Ole9sYnB1l3XO9uqF8NetvXCbrzjbUNVOdz9267c7Usqcjt0b11K17YeQo7aru6EDdhnc5eSvL/XchAOxjB1852Gzdbf2t9WHrJ63LrfPT35w6M/XFZg78dfJPE79r/Lbx9eKVfJgf5tC4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+D6+++d2VheXlxZR8W0njEHd4aWdVLRfeV5v449ie1MLXVjPp9ki2aN8cRcyvJHg0xvatWmbzPWfAoA5vKiKrz/VdaSaMfT5Ir++QH7oC9cHL16tsnr7/73leWri68ufjm4rVTZ06/drr91fmbJy8tLS/Odf+OO0pgL6y/DRh3JAAAAAAAAAAAAMBOPY5/ZTFi2KIzhmMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnkznXs+BTorMz52YK7fv3G4vl0uvvL7nZJJGkuIHSfFJcjbdJTMD3RX3G+fVux//6uUPPmqv9zXZ278x1O4P/15bq4utHR5Fp14ym2SiXm9vaif9TQxX7F7RP8IyYcd6iYNx+38AAAD//6TZBgQ=") r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) 8.410019696s ago: executing program 0 (id=504): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000000c0)={0xf, 0x20, 0x6, 0x7}) 6.647219638s ago: executing program 2 (id=509): socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 6.091161876s ago: executing program 2 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="470000001004000000000000eaff003a03516be5d10cfec70000000340", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000a80), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x80000, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xff, 0x6b9, &(0x7f0000000ac0)="$eJzs3U9sHFcdB/DvrJ21N0Wp26ZpQEi1GqmCRiR2ViVBQmpACOUQoQguvVqN01hx0spxUVohsgEKEidOqAcORSgcekIIIZUTopyRkLhwyj0SNw45AEYzO7terzf+k8RZp/18pPG82Tfvvd/8+mZmd7bRBvjMOvd6DnRS5Nzx8zfK7Tu328t3brev9spJppI0ksnuKkUrKT5Jzqa75PPli3V3xf3GefXux8XkBx+1u1uT9VLt39iq3SYj9+wk0/2NiSSz3eJ/dtztpv6qpernjfX+HlDRj7tM2LFe4voH03mo3uGBrW0yMBkb2zbf+XkL7Fs3u/fNTWaSg+neXcv3Ab1b1fZXhvHb8trklgsAAMCnwMjP8oOevpd7uZFDjyccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePJNdH8sv15VS6NXnk3R+/3/5sBv6jfHHPJDev9Stfru0+MOBAAAAAAAAAAeyov3ci83cqi3vVZU3/m/VG0crv4+lXdyPYtZyYncyEJWs5qVzCeZGeioeWNhdXVlfnPLX6Zsuba2drNueWpky1Mb4+oMBzrq/zTYtBMAAAAAAAAAfGb9KOfWv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9oEgmuqtqOdwrz6QxmWQ6SbOY7e/eHGuwj8Cfxx0AAAAA7L1WvT5U/K9bWCuqz/xHqs/903kn17KapaxmOYu5WD0L6H7qb/y9016+c7t9tVw2d/yNf+0qjqrHdJ89jB55rtrj+X6Lc/l2vpfjmc2FrGQp389CVrOY2XyrKi2kyEz99GLmzu1WerFujvfshq0Lw7G9OFAu4ztaRdLKpSxVsZ3IG81e6I16v6MDo/2xmQyNeKvMTvFabYc5ulivyyP6Rb3eH2aqIz/Qz8hcnfsyG88M5n1z7nc5T4ZHmk+j/wzq8Poo5ebwSA+U84P1usz1T/c257t8lLYxE52fl1u92Xdk65wnX/7HXy5cbly7cvnS9eP7ZxqN9Llt9xieE+2BTLywo0wsl5noPEQmph+45SPVrLPRvYru7mr5UtX2UJbynbyVi1nM6cxlPmcyl6/lVNo5NZDX57fOa3WuNbpn2lM7nNjHvlQXynvSzwbuTY/N1P0qyiN4ZiCvg1e6mapu8JX1LD17ZvssFc2MviL9c2Qok1+oC+UYPx6444zfcCbmBzLx3Nbz5df/XUtyffnalZXLC2/vcLyX63V52r6/8dr8m0dyQLtXH245X54t/2Ole9sYnB1l3XO9uqF8NetvXCbrzjbUNVOdz9267c7Usqcjt0b11K17YeQo7aru6EDdhnc5eSvL/XchAOxjB1852Gzdbf2t9WHrJ63LrfPT35w6M/XFZg78dfJPE79r/Lbx9eKVfJgf5tC4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+D6+++d2VheXlxZR8W0njEHd4aWdVLRfeV5v449ie1MLXVjPp9ki2aN8cRcyvJHg0xvatWmbzPWfAoA5vKiKrz/VdaSaMfT5Ir++QH7oC9cHL16tsnr7/73leWri68ufjm4rVTZ06/drr91fmbJy8tLS/Odf+OO0pgL6y/DRh3JAAAAAAAAAAAAMBOPY5/ZTFi2KIzhmMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnkznXs+BTorMz52YK7fv3G4vl0uvvL7nZJJGkuIHSfFJcjbdJTMD3RX3G+fVux//6uUPPmqv9zXZ278x1O4P/15bq4utHR5Fp14ym2SiXm9vaif9TQxX7F7RP8IyYcd6iYNx+38AAAD//6TZBgQ=") r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) 4.979246702s ago: executing program 0 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x60, r1, 0x5, 0x70bd2a, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0x15, 0x0, @random="57f3b7dcbb686fe969d2b4933c1f01f98f"}]}]}, 0x60}}, 0x0) 4.910571478s ago: executing program 0 (id=517): socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6]}, 0x45c) inotify_init1(0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 3.436870884s ago: executing program 0 (id=519): keyctl$session_to_parent(0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xd, 0x8000000000000000, 0x1ff, 0x3, 0xf, 0x6, 0x3ff, 0x6}, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x11, 0x3, 0x0) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000180), 0x4) 3.404242357s ago: executing program 4 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr(r0, &(0x7f0000000140)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 3.199226545s ago: executing program 4 (id=521): io_uring_setup(0x1aed, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002a40), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000002ac0)={0x0}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xbd941) 2.623640965s ago: executing program 2 (id=522): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) 2.405929273s ago: executing program 0 (id=523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) close(r0) r1 = io_uring_setup(0xab2, &(0x7f0000000140)) r2 = socket$key(0xf, 0x3, 0x2) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) 2.299139642s ago: executing program 4 (id=524): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a010902120001000000000904"], 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 2.065381043s ago: executing program 0 (id=525): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182842, 0x0, 0x0, 0x0, &(0x7f0000000380)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.722233492s ago: executing program 4 (id=526): socket(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1.371155682s ago: executing program 3 (id=527): sched_setaffinity(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1.333082716s ago: executing program 3 (id=528): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x40000000, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.213768046s ago: executing program 3 (id=529): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x80000000}]}}]}, 0x38}}, 0x0) 1.16319678s ago: executing program 1 (id=530): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000980)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9c) 1.145175412s ago: executing program 1 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0xe, 0x6, 0x101}, 0x14}}, 0x0) 1.140815502s ago: executing program 2 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c2002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) 1.059036249s ago: executing program 3 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) connect$llc(0xffffffffffffffff, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="470000001004000000000000eaff003a03516be5d10cfec70000000340", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000a80), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x80000, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xff, 0x6b9, &(0x7f0000000ac0)="$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") r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) 1.058839999s ago: executing program 1 (id=535): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009"], 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 97.951732ms ago: executing program 3 (id=536): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000018c0)={0x0, 'macvtap0\x00'}) 97.437692ms ago: executing program 4 (id=537): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000140001011000000008000000021f0012", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 97.310072ms ago: executing program 1 (id=538): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a010902120001000000000904"], 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 233.99µs ago: executing program 3 (id=539): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a80)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x0) 0s ago: executing program 4 (id=540): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000005400000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080251006f6199"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): .130371][ T4029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.132604][ T4029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.134920][ T4029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.183287][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.186193][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.190522][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.195321][ T4033] device veth0_macvtap entered promiscuous mode [ 43.200972][ T4033] device veth1_macvtap entered promiscuous mode [ 43.203460][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.208800][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.211295][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.213879][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.216962][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.219578][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.223505][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.238147][ T374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.240511][ T374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.247394][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.250202][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.253618][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.258749][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.261441][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.266064][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.268758][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.271253][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.273784][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.277508][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.280283][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.283966][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.306169][ T374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.308314][ T374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.309233][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.312933][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.317631][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.320369][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.322870][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.327810][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.330316][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.333087][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.338498][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.343788][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.351319][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.354167][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.358134][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.360766][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.366512][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.368778][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.371033][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.373251][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.390798][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.393452][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.397194][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.400114][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.402792][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.406606][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.409336][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.412101][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.417205][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.437245][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.439885][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.457279][ T4033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.459776][ T4033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.462233][ T4033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.464478][ T4033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.491386][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.493585][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.498741][ T611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.500875][ T611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.514925][ T611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.554387][ T4097] loop1: detected capacity change from 0 to 8 [ 43.568980][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.592604][ T374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.594877][ T374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.654930][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.689727][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.692139][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.712636][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.729413][ T4098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 43.746517][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.748665][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.781022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.791873][ T4098] Zero length message leads to an empty skb [ 43.816751][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.827666][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.850050][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.855599][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.858402][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.872446][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.993561][ T4111] loop3: detected capacity change from 0 to 512 [ 44.039080][ T4111] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.040110][ T4113] fuse: Unknown parameter 'userZ’”BIø?ÓÄIß´”Tölã~› ¨žúØ¥÷**sqJaä€îônPo' [ 44.097116][ T4111] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.128454][ T4111] EXT4-fs (loop3): 1 truncate cleaned up [ 44.137778][ T4111] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.198267][ T4111] EXT4-fs (loop3): shut down requested (2) [ 44.432955][ T4118] raw_sendmsg: syz.3.5 forgot to set AF_INET. Fix it! [ 44.467735][ T4109] loop2: detected capacity change from 0 to 32768 [ 44.510263][ T4109] XFS: ikeep mount option is deprecated. [ 44.524953][ T4120] sp0: Synchronizing with TNC [ 44.544032][ T4102] loop0: detected capacity change from 0 to 32768 [ 44.553927][ T4127] sp0: Found TNC [ 44.577276][ T4109] XFS (loop2): Mounting V5 Filesystem [ 44.586531][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 44.704587][ T4102] XFS (loop0): Mounting V5 Filesystem [ 44.804254][ T3604] Bluetooth: hci2: command 0x040f tx timeout [ 44.805998][ T3604] Bluetooth: hci3: command 0x040f tx timeout [ 44.808928][ T3604] Bluetooth: hci1: command 0x040f tx timeout [ 44.812211][ T3604] Bluetooth: hci4: command 0x040f tx timeout [ 44.995761][ T4150] netlink: 'syz.3.6': attribute type 7 has an invalid length. [ 44.997613][ T4150] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6'. [ 45.065601][ T4150] loop3: detected capacity change from 0 to 512 [ 45.597315][ T4150] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.600731][ T4150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.635679][ T4109] XFS (loop2): Ending clean mount [ 45.641644][ T4102] XFS (loop0): Starting recovery (logdev: internal) [ 45.669135][ T4109] XFS (loop2): Quotacheck needed: Please wait. [ 45.673849][ T4150] EXT4-fs (loop3): 1 truncate cleaned up [ 45.675309][ T4150] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 45.732468][ T4102] XFS (loop0): Ending recovery (logdev: internal) [ 45.759608][ T4109] XFS (loop2): Quotacheck: Done. [ 45.859531][ T4025] XFS (loop0): Unmounting Filesystem [ 45.904070][ T4028] XFS (loop2): Unmounting Filesystem [ 45.966442][ T4158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 45.968710][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 45.978619][ T4139] loop1: detected capacity change from 0 to 32768 [ 46.095053][ T4139] XFS (loop1): Mounting V5 Filesystem [ 46.211590][ T4156] loop4: detected capacity change from 0 to 32768 [ 46.241550][ T4175] loop3: detected capacity change from 0 to 512 [ 46.254353][ T4139] XFS (loop1): Ending clean mount [ 46.256160][ T4156] ======================================================= [ 46.256160][ T4156] WARNING: The mand mount option has been deprecated and [ 46.256160][ T4156] and is ignored by this kernel. Remove the mand [ 46.256160][ T4156] option from the mount to silence this warning. [ 46.256160][ T4156] ======================================================= [ 46.270975][ T4139] XFS (loop1): Quotacheck needed: Please wait. [ 46.295919][ T4175] EXT4-fs (loop3): Ignoring removed orlov option [ 46.297794][ T4175] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 46.297794][ T4175] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 46.297794][ T4175] [ 46.298107][ T4139] XFS (loop1): Quotacheck: Done. [ 46.302263][ T4175] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 46.316190][ T4156] XFS: attr2 mount option is deprecated. [ 46.391197][ T4183] loop2: detected capacity change from 0 to 4096 [ 46.393449][ T4175] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.16: corrupted in-inode xattr [ 46.397927][ T4175] EXT4-fs (loop3): Remounting filesystem read-only [ 46.399709][ T4175] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.16: couldn't read orphan inode 15 (err -117) [ 46.416138][ T4175] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,orlov,nombcache,noacl,grpid,norecovery,. Quota mode: none. [ 46.422096][ T4156] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 46.428455][ T4185] FAULT_INJECTION: forcing a failure. [ 46.428455][ T4185] name failslab, interval 1, probability 0, space 0, times 1 [ 46.432134][ T4185] CPU: 0 PID: 4185 Comm: syz.0.12 Not tainted 5.15.166-syzkaller #0 [ 46.434326][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.435818][ T4183] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 46.436743][ T4185] Call trace: [ 46.436764][ T4185] dump_backtrace+0x0/0x530 [ 46.441261][ T4185] show_stack+0x2c/0x3c [ 46.442401][ T4185] dump_stack_lvl+0x108/0x170 [ 46.443567][ T4185] dump_stack+0x1c/0x58 [ 46.444605][ T4185] should_fail+0x3b8/0x514 [ 46.445794][ T4185] __should_failslab+0xbc/0x110 [ 46.447116][ T4185] should_failslab+0x10/0x28 [ 46.448270][ T4185] slab_pre_alloc_hook+0x64/0xe8 [ 46.449464][ T4185] kmem_cache_alloc_trace+0x9c/0x47c [ 46.450845][ T4185] snd_pcm_oss_change_params_locked+0x188/0x3198 [ 46.452494][ T4185] snd_pcm_oss_read+0x228/0x92c [ 46.453742][ T4185] vfs_read+0x278/0xb18 [ 46.454933][ T4185] ksys_read+0x15c/0x26c [ 46.456049][ T4185] __arm64_sys_read+0x7c/0x90 [ 46.457283][ T4185] invoke_syscall+0x98/0x2b8 [ 46.458546][ T4185] el0_svc_common+0x138/0x258 [ 46.459789][ T4185] do_el0_svc+0x58/0x14c [ 46.460975][ T4185] el0_svc+0x7c/0x1f0 [ 46.462031][ T4185] el0t_64_sync_handler+0x84/0xe4 [ 46.463292][ T4185] el0t_64_sync+0x1a0/0x1a4 [ 46.496996][ T4156] XFS (loop4): Quotacheck needed: Please wait. [ 46.535655][ T4156] XFS (loop4): Quotacheck: Done. [ 46.555802][ T4033] XFS (loop4): Unmounting Filesystem [ 46.622729][ T4183] ntfs3: loop2: failed to convert "c46c" to koi8-u [ 46.638147][ T4021] XFS (loop1): Unmounting Filesystem [ 46.667915][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 46.719801][ T4196] netlink: 240 bytes leftover after parsing attributes in process `syz.3.19'. [ 46.827435][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 46.829278][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 46.830745][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 46.832281][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 47.268337][ T4209] netlink: 'syz.2.26': attribute type 7 has an invalid length. [ 47.270293][ T4209] netlink: 168 bytes leftover after parsing attributes in process `syz.2.26'. [ 47.317267][ T4209] loop2: detected capacity change from 0 to 512 [ 47.470074][ T4209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.584786][ T4209] EXT4-fs (loop2): 1 truncate cleaned up [ 47.586407][ T4209] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 47.884303][ T4214] loop4: detected capacity change from 0 to 128 [ 48.043872][ T4217] loop2: detected capacity change from 0 to 512 [ 48.076098][ T4214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.094990][ T4217] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.100264][ T4217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 48.102570][ T4217] System zones: 0-1, 15-15, 18-18, 34-34 [ 48.114331][ T4217] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.132576][ T4205] loop3: detected capacity change from 0 to 32768 [ 48.136568][ T4217] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 48.139142][ T4217] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.142835][ T4217] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 48.152804][ T4214] overlayfs: unrecognized mount option "verity=require" or missing value [ 48.160815][ T4198] loop0: detected capacity change from 0 to 32768 [ 48.185084][ T4214] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 48.193145][ T4225] loop1: detected capacity change from 0 to 4096 [ 48.193981][ T4217] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.27: bad orphan inode 16 [ 48.210361][ T4217] ext4_test_bit(bit=15, block=18) = 1 [ 48.211888][ T4217] is_bad_inode(inode)=0 [ 48.213064][ T4217] NEXT_ORPHAN(inode)=0 [ 48.216729][ T4217] max_ino=32 [ 48.217566][ T4217] i_nlink=2 [ 48.219121][ T4217] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.224137][ T4205] XFS (loop3): Mounting V5 Filesystem [ 48.227237][ T4225] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 48.233434][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.240850][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.262358][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.275830][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.282519][ T4198] XFS (loop0): Mounting V5 Filesystem [ 48.286213][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.296811][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.304944][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.351319][ T4205] XFS (loop3): Ending clean mount [ 48.361129][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.392078][ T4198] XFS (loop0): Starting recovery (logdev: internal) [ 48.417778][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.422247][ T4033] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 48.522258][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 48.539217][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.541150][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.543068][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.562853][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.577569][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.584086][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 48.601386][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.607932][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.615577][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.619920][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.623229][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.628655][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.630894][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.632909][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.634959][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.637275][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.639619][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.641736][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.643718][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.659405][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.662831][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.669677][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.673363][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.685550][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.689730][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.693969][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.697832][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.702044][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.704478][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.708365][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.711218][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.713305][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.720759][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.722866][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.724900][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.728647][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.730608][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.732560][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.751317][ T13] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 48.779038][ T13] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x434, xfs_rmapbt block 0x14 [ 48.783307][ T4198] XFS (loop0): Ending recovery (logdev: internal) [ 48.785770][ T13] XFS (loop3): Unmount and run xfs_repair [ 48.787277][ T13] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 48.797872][ T13] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 48.800168][ T13] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 48.821035][ T13] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 48.823686][ T13] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 48.826477][ T13] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 48.828606][ T13] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 48.830822][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 48.833182][ T13] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 48.845764][ T4205] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 48.864636][ T4205] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x164c/0x1f34 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 48.885305][ T4205] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 48.912816][ T4025] XFS (loop0): Unmounting Filesystem [ 48.914395][ T4029] XFS (loop3): Unmounting Filesystem [ 48.972335][ T4252] loop1: detected capacity change from 0 to 32768 [ 49.007885][ T4252] XFS: attr2 mount option is deprecated. [ 49.014801][ T4252] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 49.056053][ T4252] XFS (loop1): Quotacheck needed: Please wait. [ 49.108809][ T4252] XFS (loop1): Quotacheck: Done. [ 49.142195][ T4021] XFS (loop1): Unmounting Filesystem [ 49.494545][ T4267] loop2: detected capacity change from 0 to 32768 [ 49.585298][ T4212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.639130][ T4267] XFS (loop2): Mounting V5 Filesystem [ 49.794668][ T4212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.812305][ T4291] udc-core: couldn't find an available UDC or it's busy [ 49.814202][ T4291] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.827526][ T4267] XFS (loop2): Ending clean mount [ 49.831008][ T4267] XFS (loop2): Quotacheck needed: Please wait. [ 49.868539][ T4267] XFS (loop2): Quotacheck: Done. [ 49.923573][ T4212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.982505][ T4212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.024369][ T4028] XFS (loop2): Unmounting Filesystem [ 50.083411][ T4284] loop3: detected capacity change from 0 to 32768 [ 50.179926][ T4284] XFS (loop3): Mounting V5 Filesystem [ 50.203650][ T4307] loop0: detected capacity change from 0 to 1024 [ 50.246545][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 50.260804][ T4307] EXT4-fs (loop0): inodes count not valid: 32 vs 12 [ 50.400356][ T4307] loop0: detected capacity change from 0 to 512 [ 50.464988][ T4284] XFS (loop3): Ending clean mount [ 50.504479][ T4307] EXT4-fs (loop0): 1 orphan inode deleted [ 50.510742][ T4307] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,dioread_nolock,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 50.636015][ T4284] bond0: option mode: unable to set because the bond device has slaves [ 50.640382][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.642532][ T4307] capability: warning: `syz.0.41' uses deprecated v2 capabilities in a way that may be insecure [ 50.647833][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.674689][ T4029] XFS (loop3): Unmounting Filesystem [ 50.683777][ T4277] device bridge_slave_0 entered promiscuous mode [ 50.709801][ T4332] loop2: detected capacity change from 0 to 720 [ 50.740020][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.742070][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.744778][ T4277] device bridge_slave_1 entered promiscuous mode [ 50.794573][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.823809][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.881509][ T4336] netlink: 22 bytes leftover after parsing attributes in process `syz.2.44'. [ 50.908477][ T4277] team0: Port device team_slave_0 added [ 50.918811][ T4277] team0: Port device team_slave_1 added [ 51.092376][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.094141][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.146303][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.157313][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.159377][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.171512][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.265237][ T4277] device hsr_slave_0 entered promiscuous mode [ 51.316154][ T4277] device hsr_slave_1 entered promiscuous mode [ 51.365594][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.368824][ T4277] Cannot create hsr debugfs directory [ 51.625694][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 51.710622][ T4345] loop3: detected capacity change from 0 to 32768 [ 52.489206][ T4345] XFS (loop3): Mounting V5 Filesystem [ 52.548354][ T4369] netlink: 'syz.0.49': attribute type 7 has an invalid length. [ 52.550560][ T4369] netlink: 168 bytes leftover after parsing attributes in process `syz.0.49'. [ 52.584332][ T4355] loop2: detected capacity change from 0 to 32768 [ 52.624716][ T4345] XFS (loop3): Starting recovery (logdev: internal) [ 52.644349][ T4355] XFS: attr2 mount option is deprecated. [ 52.661713][ T4377] loop0: detected capacity change from 0 to 512 [ 52.676566][ T4345] XFS (loop3): Ending recovery (logdev: internal) [ 52.689949][ T4355] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 52.716960][ T4029] XFS (loop3): Unmounting Filesystem [ 52.729640][ T4355] XFS (loop2): Quotacheck needed: Please wait. [ 52.837777][ T4355] XFS (loop2): Quotacheck: Done. [ 52.878399][ T4028] XFS (loop2): Unmounting Filesystem [ 52.933400][ T4401] udc-core: couldn't find an available UDC or it's busy [ 52.935198][ T4401] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.037275][ T4212] device hsr_slave_0 left promiscuous mode [ 53.071241][ T4408] loop0: detected capacity change from 0 to 64 [ 53.076136][ T4212] device hsr_slave_1 left promiscuous mode [ 53.153403][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.155153][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.162136][ T4408] hfs: request for non-existent node 237 in B*Tree [ 53.179887][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.180602][ T4408] hfs: request for non-existent node 237 in B*Tree [ 53.182252][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.184604][ T4408] hfs: request for non-existent node 237 in B*Tree [ 53.195064][ T4408] hfs: request for non-existent node 237 in B*Tree [ 53.197827][ T4212] device bridge_slave_1 left promiscuous mode [ 53.203985][ T4408] hfs: request for non-existent node 237 in B*Tree [ 53.208817][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.245972][ T4408] hfs: request for non-existent node 237 in B*Tree [ 53.269840][ T4413] hfs: request for non-existent node 237 in B*Tree [ 53.271604][ T4413] hfs: request for non-existent node 237 in B*Tree [ 53.273185][ T4212] device bridge_slave_0 left promiscuous mode [ 53.275160][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.370272][ T4420] loop2: detected capacity change from 0 to 64 [ 53.372712][ T4418] loop3: detected capacity change from 0 to 512 [ 53.416097][ T4212] device veth1_macvtap left promiscuous mode [ 53.418289][ T4212] device veth0_macvtap left promiscuous mode [ 53.426567][ T4212] device veth1_vlan left promiscuous mode [ 53.428382][ T4212] device veth0_vlan left promiscuous mode [ 53.487782][ T4418] EXT4-fs error (device loop3): __ext4_iget:4872: inode #15: block 1803188595: comm syz.3.58: invalid block [ 53.496525][ T4418] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.58: couldn't read orphan inode 15 (err -117) [ 53.503251][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,journal_dev=0x0000000000007ffc,debug_want_extra_isize=0x000000000000005c,usrquota,user_xattr,delalloc,usrjquota=,,errors=continue. Quota mode: writeback. [ 53.522539][ T4418] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.58: invalid indirect mapped block 234881024 (level 0) [ 53.705521][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 54.732894][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 54.742594][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 54.754142][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.786434][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.991822][ T4212] bond0 (unregistering): Released all slaves [ 55.006739][ T4437] loop0: detected capacity change from 0 to 32768 [ 55.105774][ T4437] XFS (loop0): Mounting V5 Filesystem [ 55.111237][ T4430] netlink: 'syz.2.59': attribute type 7 has an invalid length. [ 55.113193][ T4430] netlink: 168 bytes leftover after parsing attributes in process `syz.2.59'. [ 55.115833][ T4433] netlink: 'syz.3.60': attribute type 7 has an invalid length. [ 55.117861][ T4433] netlink: 168 bytes leftover after parsing attributes in process `syz.3.60'. [ 55.327613][ T4437] XFS (loop0): Starting recovery (logdev: internal) [ 55.362550][ T4437] XFS (loop0): Ending recovery (logdev: internal) [ 55.436843][ T4025] XFS (loop0): Unmounting Filesystem [ 55.590722][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.627525][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.667620][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.671291][ T4447] loop3: detected capacity change from 0 to 32768 [ 55.703625][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.706602][ T4447] XFS: attr2 mount option is deprecated. [ 55.794335][ T4068] Bluetooth: hci4: command 0x040f tx timeout [ 55.834110][ T4474] loop2: detected capacity change from 0 to 1024 [ 55.884161][ T4447] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 55.897706][ T4474] hfsplus: unable to parse mount options [ 55.964948][ T4447] XFS (loop3): Quotacheck needed: Please wait. [ 55.993904][ T4447] XFS (loop3): Quotacheck: Done. [ 56.023145][ T4483] loop0: detected capacity change from 0 to 512 [ 56.028676][ T4029] XFS (loop3): Unmounting Filesystem [ 56.089028][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.165006][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.167240][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.169674][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.199398][ T4483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.65: inode #1: comm syz.0.65: iget: illegal inode # [ 56.204860][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.222496][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.225948][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.227636][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.238755][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.242903][ T4483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.65: error while reading EA inode 1 err=-117 [ 56.255806][ T4489] device syzkaller0 entered promiscuous mode [ 56.276369][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.283853][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.289669][ T4483] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.292330][ T4483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.65: inode #1: comm syz.0.65: iget: illegal inode # [ 56.303148][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.304876][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.333314][ T4483] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.65: error while reading EA inode 1 err=-117 [ 56.362652][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.370902][ T3604] syzkaller0: tun_net_xmit 48 [ 56.372802][ T4486] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 56.374299][ T4486] syzkaller0: Linktype set failed because interface is up [ 56.387266][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.390103][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.393000][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.400817][ T4483] EXT4-fs (loop0): 1 orphan inode deleted [ 56.402328][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 56.419714][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.430919][ T4483] netlink: 'syz.0.65': attribute type 11 has an invalid length. [ 56.433210][ T4499] netlink: 'syz.0.65': attribute type 11 has an invalid length. [ 56.441546][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.486192][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.671392][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.674093][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.706957][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.709856][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.712928][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.726231][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.744065][ T4506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 56.753801][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.903882][ T4515] netlink: 'syz.2.72': attribute type 7 has an invalid length. [ 56.916076][ T4515] netlink: 168 bytes leftover after parsing attributes in process `syz.2.72'. [ 57.002140][ T4524] netlink: 'syz.0.83': attribute type 7 has an invalid length. [ 57.004039][ T4524] netlink: 168 bytes leftover after parsing attributes in process `syz.0.83'. [ 57.170384][ T4480] loop1: detected capacity change from 0 to 32768 [ 57.241616][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.243577][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.262628][ T4480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.67 (4480) [ 57.547177][ T4539] netlink: 'syz.2.74': attribute type 7 has an invalid length. [ 57.549401][ T4539] netlink: 168 bytes leftover after parsing attributes in process `syz.2.74'. [ 57.937858][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.036335][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 58.060097][ T4480] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 58.062566][ T4480] BTRFS info (device loop1): using free space tree [ 58.083181][ T4480] BTRFS info (device loop1): has skinny extents [ 58.175556][ T3604] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 58.365522][ T3604] usb 1-1: device descriptor read/64, error -71 [ 58.394266][ T4480] BTRFS info (device loop1): enabling ssd optimizations [ 58.533455][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.538891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.624583][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.627511][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.630906][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.635738][ T3604] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 58.645074][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.656629][ T4277] device veth0_vlan entered promiscuous mode [ 58.676720][ T4277] device veth1_vlan entered promiscuous mode [ 58.730857][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.733549][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.736574][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.747254][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.759879][ T4277] device veth0_macvtap entered promiscuous mode [ 58.764966][ T4277] device veth1_macvtap entered promiscuous mode [ 58.798207][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.815446][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.817833][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.820316][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.825603][ T3604] usb 1-1: device descriptor read/64, error -71 [ 58.843420][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.863715][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.866925][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.869450][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.884861][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.887719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.890177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.892489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.906139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.918529][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.921178][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.923369][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.945700][ T3604] usb usb1-port1: attempt power cycle [ 58.946993][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.955815][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.958390][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.970642][ T4544] loop3: detected capacity change from 0 to 32768 [ 58.975394][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.978105][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.016496][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.019053][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.022048][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.055329][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.059064][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.061288][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.063400][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.085022][ T4544] XFS (loop3): Mounting V5 Filesystem [ 59.165324][ T4544] XFS (loop3): Starting recovery (logdev: internal) [ 59.205976][ T4480] overlayfs: './file1' not a directory [ 59.244342][ T4480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.67'. [ 59.274545][ T4544] XFS (loop3): Ending recovery (logdev: internal) [ 59.319537][ T4568] loop2: detected capacity change from 0 to 32768 [ 59.356060][ T3604] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 59.359735][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.361997][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.365887][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.409221][ T4029] XFS (loop3): Unmounting Filesystem [ 59.413844][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.415879][ T4568] XFS: attr2 mount option is deprecated. [ 59.419774][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.438890][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.445685][ T3604] usb 1-1: device descriptor read/8, error -71 [ 59.539052][ T4568] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 59.554787][ T4568] XFS (loop2): Quotacheck needed: Please wait. [ 59.581377][ T4617] loop4: detected capacity change from 0 to 512 [ 59.623814][ T4568] XFS (loop2): Quotacheck: Done. [ 59.638364][ T4617] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 59.638364][ T4617] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 59.638364][ T4617] [ 59.655917][ T4028] XFS (loop2): Unmounting Filesystem [ 59.725418][ T3604] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 59.790627][ T4617] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.48: corrupted inode contents [ 59.815940][ T3604] usb 1-1: device descriptor read/8, error -71 [ 59.834820][ T4617] EXT4-fs (loop4): Remounting filesystem read-only [ 59.838875][ T4617] EXT4-fs error (device loop4): ext4_dirty_inode:6004: inode #3: comm syz.4.48: mark_inode_dirty error [ 59.861962][ T4617] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.48: corrupted inode contents [ 59.909874][ T4617] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.48: mark_inode_dirty error [ 59.927391][ T4617] Quota error (device loop4): write_blk: dquota write failed [ 59.929892][ T4617] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 59.937615][ T3604] usb usb1-port1: unable to enumerate USB device [ 59.962543][ T4617] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.48: Failed to acquire dquot type 0 [ 59.989497][ T4617] EXT4-fs (loop4): 1 truncate cleaned up [ 59.991051][ T4617] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 60.025074][ T4628] loop3: detected capacity change from 0 to 4096 [ 60.092102][ T4628] ntfs3: Unknown parameter 'di' [ 60.129138][ T4636] loop1: detected capacity change from 0 to 512 [ 60.244628][ T4636] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.288335][ T4640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 60.290672][ T4640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 60.312062][ T4645] udc-core: couldn't find an available UDC or it's busy [ 60.313917][ T4645] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.516926][ T4656] netlink: 'syz.0.85': attribute type 7 has an invalid length. [ 60.520034][ T4653] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 60.522529][ T4656] netlink: 168 bytes leftover after parsing attributes in process `syz.0.85'. [ 60.527778][ T4653] udc-core: couldn't find an available UDC or it's busy [ 60.532616][ T4653] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.599076][ T4021] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 60.606010][ T4021] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 60.608500][ T4021] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor: Failed to acquire dquot type 0 [ 60.868442][ T4665] netlink: 'syz.0.98': attribute type 7 has an invalid length. [ 60.870261][ T4665] netlink: 168 bytes leftover after parsing attributes in process `syz.0.98'. [ 60.924466][ T4665] loop0: detected capacity change from 0 to 512 [ 61.099680][ T4665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.445854][ T4665] EXT4-fs (loop0): 1 truncate cleaned up [ 61.447333][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 61.978621][ T4210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.004566][ T4669] loop4: detected capacity change from 0 to 32768 [ 62.073643][ T4210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.157504][ T4669] XFS (loop4): Mounting V5 Filesystem [ 62.182392][ T4672] loop0: detected capacity change from 0 to 32768 [ 62.223252][ T4210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.239351][ T4672] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.90 (4672) [ 62.277932][ T4669] XFS (loop4): Starting recovery (logdev: internal) [ 62.304020][ T4674] chnl_net:caif_netlink_parms(): no params data found [ 62.332381][ T4210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.340545][ T4669] XFS (loop4): Ending recovery (logdev: internal) [ 62.392606][ T4277] XFS (loop4): Unmounting Filesystem [ 63.233574][ T4672] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 63.241053][ T4672] BTRFS info (device loop0): using free space tree [ 63.242728][ T4672] BTRFS info (device loop0): has skinny extents [ 63.279811][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.281721][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.284372][ T4674] device bridge_slave_0 entered promiscuous mode [ 63.310723][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.315074][ T4702] loop3: detected capacity change from 0 to 512 [ 63.315102][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.322652][ T4674] device bridge_slave_1 entered promiscuous mode [ 63.348799][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.364328][ T4702] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.373150][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.418714][ T4702] EXT4-fs (loop3): 1 truncate cleaned up [ 63.420384][ T4702] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 63.451486][ T4702] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 63.496470][ T4674] team0: Port device team_slave_0 added [ 63.500526][ T4674] team0: Port device team_slave_1 added [ 63.529294][ T4672] BTRFS info (device loop0): enabling ssd optimizations [ 63.550379][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.552055][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.560568][ T4674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.564818][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.568954][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.588761][ T4723] loop2: detected capacity change from 0 to 1024 [ 63.589155][ T4674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.767098][ T4725] binder: 4724:4725 transaction failed 29189/-22, size 0-0 line 2917 [ 63.769902][ T25] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.878387][ T4674] device hsr_slave_0 entered promiscuous mode [ 63.905991][ T4674] device hsr_slave_1 entered promiscuous mode [ 64.001595][ T4674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.008596][ T4674] Cannot create hsr debugfs directory [ 64.025676][ T4629] Bluetooth: hci0: command 0x0409 tx timeout [ 64.874303][ T4738] netlink: 'syz.4.102': attribute type 7 has an invalid length. [ 64.876552][ T4738] netlink: 168 bytes leftover after parsing attributes in process `syz.4.102'. [ 65.029795][ T4748] loop4: detected capacity change from 0 to 512 [ 65.136426][ T4748] EXT2-fs (loop4): error: revision level too high, forcing read-only mode [ 65.178980][ T4748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.104'. [ 65.187462][ T4748] attempt to access beyond end of device [ 65.187462][ T4748] loop4: rw=0, want=1022040, limit=512 [ 65.369668][ T4754] loop2: detected capacity change from 0 to 512 [ 65.420173][ T4754] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.642012][ T4754] EXT4-fs (loop2): 1 truncate cleaned up [ 65.643411][ T4754] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 65.830027][ T4753] netlink: 'syz.2.103': attribute type 7 has an invalid length. [ 65.831935][ T4753] netlink: 168 bytes leftover after parsing attributes in process `syz.2.103'. [ 66.105573][ T4625] Bluetooth: hci0: command 0x041b tx timeout [ 66.183991][ T4769] loop4: detected capacity change from 0 to 8192 [ 66.230337][ T4769] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 66.233455][ T4769] REISERFS (device loop4): using ordered data mode [ 66.235178][ T4769] reiserfs: using flush barriers [ 66.240407][ T4769] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.244952][ T4769] REISERFS (device loop4): checking transaction log (loop4) [ 66.259178][ T4769] REISERFS (device loop4): Using r5 hash to sort names [ 66.262142][ T4769] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 66.265939][ T4769] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 68.693183][ T4783] loop2: detected capacity change from 0 to 128 [ 68.731560][ T4625] Bluetooth: hci3: command 0x0409 tx timeout [ 68.733546][ T4625] Bluetooth: hci0: command 0x040f tx timeout [ 68.781838][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.932342][ T4757] chnl_net:caif_netlink_parms(): no params data found [ 69.353138][ T4674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.359313][ T4796] loop0: detected capacity change from 0 to 32768 [ 69.362810][ T4814] loop4: detected capacity change from 0 to 8 [ 69.631728][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.637794][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.690608][ T1960] cfg80211: failed to load regulatory.db [ 70.177329][ T4674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.262864][ T4674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.344043][ T4796] XFS (loop0): Mounting V5 Filesystem [ 70.408589][ T4796] XFS (loop0): Ending clean mount [ 70.419897][ T4796] XFS (loop0): Quotacheck needed: Please wait. [ 70.442927][ T4796] XFS (loop0): Quotacheck: Done. [ 70.503310][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.505106][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.520183][ T4757] device bridge_slave_0 entered promiscuous mode [ 70.523784][ T4674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.538262][ T4821] loop2: detected capacity change from 0 to 32768 [ 70.580100][ T4821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.116 (4821) [ 70.589972][ T4025] XFS (loop0): Unmounting Filesystem [ 70.598076][ T4821] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 70.600465][ T4821] BTRFS info (device loop2): using free space tree [ 70.602202][ T4821] BTRFS info (device loop2): has skinny extents [ 70.644644][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.646639][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.649114][ T4757] device bridge_slave_1 entered promiscuous mode [ 70.745612][ T4625] Bluetooth: hci0: command 0x0419 tx timeout [ 70.765764][ T4625] Bluetooth: hci3: command 0x041b tx timeout [ 70.767492][ T4821] BTRFS info (device loop2): enabling ssd optimizations [ 70.789253][ T4836] loop4: detected capacity change from 0 to 32768 [ 70.925832][ T4757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.939328][ T4836] XFS (loop4): Mounting V5 Filesystem [ 70.982193][ T4210] device hsr_slave_0 left promiscuous mode [ 71.076406][ T4836] XFS (loop4): Ending clean mount [ 71.102843][ T4836] XFS (loop4): Quotacheck needed: Please wait. [ 71.108527][ T4210] device hsr_slave_1 left promiscuous mode [ 71.126073][ T4836] XFS (loop4): Quotacheck: Done. [ 71.156083][ T4836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.118'. [ 71.205804][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.207852][ T4210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.218188][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.220618][ T4210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.235590][ T4210] device bridge_slave_1 left promiscuous mode [ 71.237365][ T4210] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.272025][ T4210] device bridge_slave_0 left promiscuous mode [ 71.273890][ T4210] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.427003][ T4821] overlayfs: './file1' not a directory [ 71.441037][ T4821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 71.456426][ T4210] device veth1_macvtap left promiscuous mode [ 71.458381][ T4210] device veth0_macvtap left promiscuous mode [ 71.460089][ T4210] device veth1_vlan left promiscuous mode [ 71.461708][ T4210] device veth0_vlan left promiscuous mode [ 71.752987][ T4210] team0 (unregistering): Port device team_slave_1 removed [ 71.763427][ T4210] team0 (unregistering): Port device team_slave_0 removed [ 71.773354][ T4210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.824948][ T4210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.992897][ T4210] bond0 (unregistering): Released all slaves [ 72.076039][ T4757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.078340][ T4836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.118'. [ 72.125400][ T4277] XFS (loop4): Unmounting Filesystem [ 72.151982][ T4757] team0: Port device team_slave_0 added [ 72.174436][ T4757] team0: Port device team_slave_1 added [ 72.326584][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.328987][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.331079][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.356351][ T4757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.377768][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.380408][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.394453][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.396601][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.403272][ T4757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.438970][ T4674] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.447028][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.449706][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.452250][ T4695] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.454035][ T4695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.481358][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.492156][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.494747][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.496914][ T4695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.502238][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.545622][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.551439][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.603441][ T4757] device hsr_slave_0 entered promiscuous mode [ 72.645932][ T4757] device hsr_slave_1 entered promiscuous mode [ 72.716042][ T4757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.717845][ T4757] Cannot create hsr debugfs directory [ 72.751101][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.754309][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.759843][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.827938][ T4625] Bluetooth: hci3: command 0x040f tx timeout [ 72.838301][ T4898] tipc: Started in network mode [ 72.839954][ T4898] tipc: Node identity ff050000000000000000000000000001, cluster identity 4711 [ 72.842936][ T4898] tipc: Enabling of bearer rejected, failed to enable media [ 72.848847][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.852446][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.855112][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.861717][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.864106][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.868390][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.880009][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.057474][ T4909] loop4: detected capacity change from 0 to 512 [ 73.639843][ T4908] netlink: 'syz.4.119': attribute type 7 has an invalid length. [ 73.641792][ T4908] netlink: 168 bytes leftover after parsing attributes in process `syz.4.119'. [ 73.650046][ T4909] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.707604][ T4909] EXT4-fs (loop4): 1 truncate cleaned up [ 73.709096][ T4909] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 75.573339][ T4625] Bluetooth: hci3: command 0x0419 tx timeout [ 75.891314][ T4757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.289014][ T4757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.393139][ T4757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.420931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.423398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.442885][ T4674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.486799][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.489890][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.502632][ T4757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.561280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.574610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.586560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.595776][ T4928] loop2: detected capacity change from 0 to 40427 [ 76.604865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.617563][ T4674] device veth0_vlan entered promiscuous mode [ 76.624392][ T4674] device veth1_vlan entered promiscuous mode [ 76.685255][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.698026][ T4928] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.698714][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.700170][ T4928] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.719359][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.722460][ T4928] F2FS-fs (loop2): invalid crc value [ 76.737428][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.751980][ T4674] device veth0_macvtap entered promiscuous mode [ 76.766120][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.770875][ T4674] device veth1_macvtap entered promiscuous mode [ 76.809756][ T4928] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.861563][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.867505][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.873378][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.880489][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.886317][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.892465][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.898231][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.904457][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.907496][ T4928] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.909559][ T4928] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.944419][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.963075][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.966136][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.976548][ T4925] attempt to access beyond end of device [ 76.976548][ T4925] loop2: rw=0, want=49160, limit=40427 [ 76.997824][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.005798][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.008356][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.011015][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.013507][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.027157][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.029824][ T4674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.032424][ T4674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.052298][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.060367][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.063076][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.071296][ T4674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.073777][ T4674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.077260][ T4674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081879][ T4674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.089822][ T4757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.103692][ T4946] loop4: detected capacity change from 0 to 40427 [ 77.160146][ T4757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.218035][ T4757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.219745][ T4946] F2FS-fs (loop4): Unrecognized mount option "compresshe" or missing value [ 77.261526][ T4757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.286564][ T4028] attempt to access beyond end of device [ 77.286564][ T4028] loop2: rw=2051, want=53248, limit=40427 [ 77.296436][ T4028] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 77.497008][ T4695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.499085][ T4695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.515671][ T4630] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.534115][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.559268][ T4695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.561669][ T4695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.575955][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.633678][ T4757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.688847][ T4757] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.691040][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.693409][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.735235][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.738021][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.740470][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.742416][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.745033][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.775425][ T4630] usb 1-1: Using ep0 maxpacket: 16 [ 77.780279][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.782993][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.807134][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.809243][ T514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.830808][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.876720][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.886893][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.901385][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.915950][ T4630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.918920][ T4630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.920338][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.921444][ T4630] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.935393][ T4630] usb 1-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 77.937615][ T4630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.940814][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.958468][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.976720][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.985180][ T4630] usb 1-1: config 0 descriptor?? [ 77.999166][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.006288][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.013226][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.040286][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.344395][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.361540][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.367940][ T4757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.417814][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.420717][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.466583][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.469470][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.472080][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.496390][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.501074][ T4956] loop4: detected capacity change from 0 to 32768 [ 78.504718][ T4630] hid-multitouch 0003:18D1:5028.0002: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.0-1/input0 [ 78.517739][ T4757] device veth0_vlan entered promiscuous mode [ 78.525008][ T4757] device veth1_vlan entered promiscuous mode [ 78.591930][ T4956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.131 (4956) [ 78.609120][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.611698][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.614266][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.625826][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.639130][ T4757] device veth0_macvtap entered promiscuous mode [ 78.643826][ T4757] device veth1_macvtap entered promiscuous mode [ 78.659178][ T4958] loop1: detected capacity change from 0 to 32768 [ 78.674153][ T4956] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 78.684190][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.691137][ T4956] BTRFS info (device loop4): using free space tree [ 78.693555][ T4956] BTRFS info (device loop4): has skinny extents [ 78.703810][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.715975][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.718265][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.725813][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.728357][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.730722][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.739207][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.741911][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.746919][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.752459][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.756295][ T4958] XFS: attr2 mount option is deprecated. [ 78.767598][ T4065] usb 1-1: USB disconnect, device number 6 [ 78.795812][ T4983] delete_channel: no stack [ 78.807292][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.810108][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.818391][ T4954] sctp: failed to load transform for md5: -2 [ 78.848564][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.868238][ T4958] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 78.879725][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.887794][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.890300][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.895777][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.898469][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.900934][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.903536][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.923425][ T4958] XFS (loop1): Quotacheck needed: Please wait. [ 78.937944][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.940527][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.943014][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.960801][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.966589][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.972792][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.976021][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.982990][ T4757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.985138][ T4757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.992077][ T4956] BTRFS info (device loop4): enabling ssd optimizations [ 79.006913][ T4757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.009370][ T4958] XFS (loop1): Quotacheck: Done. [ 79.019463][ T4757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.043394][ T4674] XFS (loop1): Unmounting Filesystem [ 79.266833][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.268965][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.313272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.323569][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.345869][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.350934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.822646][ T5016] loop0: detected capacity change from 0 to 32768 [ 79.856907][ T5016] XFS: attr2 mount option is deprecated. [ 80.039799][ T5025] loop1: detected capacity change from 0 to 512 [ 80.125946][ T5025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.444965][ T5025] EXT4-fs (loop1): 1 truncate cleaned up [ 80.446396][ T5025] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 80.630139][ T5024] netlink: 'syz.1.135': attribute type 7 has an invalid length. [ 80.632052][ T5024] netlink: 168 bytes leftover after parsing attributes in process `syz.1.135'. [ 80.691462][ T5016] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 80.716708][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 80.738938][ T5016] XFS (loop0): Quotacheck needed: Please wait. [ 80.790497][ T5016] XFS (loop0): Quotacheck: Done. [ 80.809880][ T5018] loop3: detected capacity change from 0 to 32768 [ 81.111486][ T5018] XFS (loop3): Mounting V5 Filesystem [ 82.076886][ T4025] XFS (loop0): Unmounting Filesystem [ 82.128060][ T5018] XFS (loop3): Starting recovery (logdev: internal) [ 82.248149][ T5018] XFS (loop3): Ending recovery (logdev: internal) [ 82.332426][ T4757] XFS (loop3): Unmounting Filesystem [ 83.629780][ T5070] sched: RT throttling activated [ 84.856997][ T5072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.140'. [ 84.866261][ T5078] fuse: Bad value for 'user_id' [ 84.890703][ T5072] loop4: detected capacity change from 0 to 764 [ 84.978558][ T5072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 85.267917][ T5083] xt_time: unknown flags 0x18 [ 85.280336][ T5085] loop4: detected capacity change from 0 to 128 [ 85.438479][ T5083] netlink: 'syz.0.141': attribute type 11 has an invalid length. [ 85.455303][ T5085] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value [ 85.616538][ T5090] netlink: 'syz.3.150': attribute type 7 has an invalid length. [ 85.618510][ T5090] netlink: 168 bytes leftover after parsing attributes in process `syz.3.150'. [ 86.027486][ T5090] loop3: detected capacity change from 0 to 512 [ 86.049813][ T5090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.346727][ T5090] EXT4-fs (loop3): 1 truncate cleaned up [ 86.348032][ T5090] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 86.492054][ T5078] loop1: detected capacity change from 0 to 65536 [ 86.582695][ T5101] loop0: detected capacity change from 0 to 512 [ 86.597917][ T5100] loop2: detected capacity change from 0 to 1024 [ 86.602262][ T5078] XFS (loop1): Mounting V5 Filesystem [ 86.635232][ T5078] XFS (loop1): Ending clean mount [ 86.655263][ T5101] EXT4-fs (loop0): Unrecognized mount option "rootcontext=unconfined_u" or missing value [ 86.685580][ T5100] EXT4-fs (loop2): Ignoring removed orlov option [ 86.762749][ T4674] XFS (loop1): Unmounting Filesystem [ 86.903239][ T4210] device hsr_slave_0 left promiscuous mode [ 86.951548][ T5100] EXT4-fs (loop2): Test dummy encryption mode enabled [ 86.953624][ T5100] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 86.958636][ T4210] device hsr_slave_1 left promiscuous mode [ 87.815608][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.817565][ T4210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.820114][ T4210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.822106][ T4210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.842630][ T4210] device bridge_slave_1 left promiscuous mode [ 87.844451][ T4210] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.906063][ T4210] device bridge_slave_0 left promiscuous mode [ 87.907582][ T4210] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.918758][ T5112] loop4: detected capacity change from 0 to 32768 [ 87.956003][ T5112] XFS: attr2 mount option is deprecated. [ 88.041054][ T5112] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 88.103131][ T5112] XFS (loop4): Quotacheck needed: Please wait. [ 88.106128][ T4210] device veth1_macvtap left promiscuous mode [ 88.107780][ T4210] device veth0_macvtap left promiscuous mode [ 88.109382][ T4210] device veth1_vlan left promiscuous mode [ 88.110867][ T4210] device veth0_vlan left promiscuous mode [ 88.180396][ T5112] XFS (loop4): Quotacheck: Done. [ 88.217596][ T5122] loop0: detected capacity change from 0 to 32768 [ 88.312680][ T5111] loop3: detected capacity change from 0 to 32768 [ 88.324659][ T4277] XFS (loop4): Unmounting Filesystem [ 88.330386][ T5111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.152 (5111) [ 88.372387][ T5122] XFS (loop0): Mounting V5 Filesystem [ 88.380212][ T5111] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 88.382637][ T5111] BTRFS info (device loop3): using free space tree [ 88.384364][ T5111] BTRFS info (device loop3): has skinny extents [ 88.469408][ T5122] XFS (loop0): Starting recovery (logdev: internal) [ 88.497603][ T5122] XFS (loop0): Ending recovery (logdev: internal) [ 88.574927][ T4025] XFS (loop0): Unmounting Filesystem [ 88.731727][ T5111] BTRFS info (device loop3): enabling ssd optimizations [ 88.966137][ T4210] team0 (unregistering): Port device team_slave_1 removed [ 88.993689][ T5168] netlink: 3 bytes leftover after parsing attributes in process `syz.4.158'. [ 89.004114][ T4210] team0 (unregistering): Port device team_slave_0 removed [ 89.036719][ T4210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.054510][ T5160] loop1: detected capacity change from 0 to 40427 [ 89.115818][ T5160] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 89.117593][ T5160] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.120073][ T4210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.133731][ T5160] F2FS-fs (loop1): invalid crc value [ 89.140687][ T5160] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.252070][ T5160] F2FS-fs (loop1): Start checkpoint disabled! [ 89.303487][ T5160] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.305474][ T5160] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 89.455722][ T4212] attempt to access beyond end of device [ 89.455722][ T4212] loop1: rw=2049, want=40968, limit=40427 [ 90.093361][ T4210] bond0 (unregistering): Released all slaves [ 90.443008][ T5186] loop4: detected capacity change from 0 to 1024 [ 90.524920][ T5186] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.623260][ T5186] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x000000000000003f,,errors=continue. Quota mode: none. [ 90.791259][ T5190] loop2: detected capacity change from 0 to 32768 [ 90.830485][ T5190] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.167 (5190) [ 90.891174][ T5197] loop1: detected capacity change from 0 to 8192 [ 90.894732][ T5190] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 90.899693][ T5190] BTRFS error (device loop2): superblock checksum mismatch [ 90.947418][ T5190] BTRFS error (device loop2): open_ctree failed [ 90.951348][ T5197] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 90.953968][ T5197] REISERFS (device loop1): using ordered data mode [ 90.968216][ T5197] reiserfs: using flush barriers [ 90.985813][ T5205] udc-core: couldn't find an available UDC or it's busy [ 90.987511][ T5205] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.005524][ T5197] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.010061][ T5197] REISERFS (device loop1): checking transaction log (loop1) [ 91.057690][ T5197] REISERFS (device loop1): Using r5 hash to sort names [ 91.087673][ T5197] reiserfs: enabling write barrier flush mode [ 91.120035][ T4015] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by udevd (4015) [ 91.137790][ T5197] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 91.206811][ T5203] loop3: detected capacity change from 0 to 32768 [ 91.255082][ T5197] 9pnet: Insufficient options for proto=fd [ 91.267710][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 91.270085][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 91.320644][ T5214] loop4: detected capacity change from 0 to 512 [ 91.370405][ T5203] XFS (loop3): Mounting V5 Filesystem [ 91.409063][ T5214] EXT4-fs (loop4): Ignoring removed oldalloc option [ 91.425819][ T5214] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.174: Parent and EA inode have the same ino 15 [ 91.453195][ T5214] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.174: Parent and EA inode have the same ino 15 [ 91.484509][ T5214] EXT4-fs (loop4): 1 orphan inode deleted [ 91.495691][ T5214] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 92.173788][ T5203] XFS (loop3): Starting recovery (logdev: internal) [ 92.245143][ T5203] XFS (loop3): Ending recovery (logdev: internal) [ 92.387197][ T4757] XFS (loop3): Unmounting Filesystem [ 92.448249][ T26] audit: type=1326 audit(92.410:2): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=5234 comm="syz.2.178" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98c433e8 code=0x0 [ 92.530376][ T5199] loop0: detected capacity change from 0 to 32768 [ 92.577751][ T5199] XFS: attr2 mount option is deprecated. [ 92.616332][ T5249] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.178'. [ 92.712985][ T5199] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 92.735547][ T5245] loop4: detected capacity change from 0 to 4096 [ 92.770598][ T5199] XFS (loop0): Quotacheck needed: Please wait. [ 92.813612][ T5245] ntfs: volume version 3.1. [ 92.840276][ T5254] loop1: detected capacity change from 0 to 4096 [ 92.854800][ T5199] XFS (loop0): Quotacheck: Done. [ 92.896528][ T5254] ntfs3: Unknown parameter '€' [ 93.007462][ T4025] XFS (loop0): Unmounting Filesystem [ 93.204352][ T5264] binder: 5262:5264 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 93.222317][ T5264] binder: 5264 RLIMIT_NICE not set [ 93.352982][ T5264] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 94.644062][ T5290] loop4: detected capacity change from 0 to 64 [ 94.703422][ T5290] ALSA: mixer_oss: invalid OSS volume 'H8LAÆ¢ÎoÚÜQn' [ 94.760528][ T5292] loop2: detected capacity change from 0 to 1024 [ 94.781268][ T5292] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.784005][ T5292] EXT4-fs (loop2): first meta block group too large: 50331648 (group descriptor block count 1) [ 94.831993][ T5295] loop1: detected capacity change from 0 to 512 [ 94.870561][ T5295] EXT2-fs (loop1): error: couldn't mount because of unsupported optional features (4740) [ 95.031153][ T5303] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.218784][ T5313] loop0: detected capacity change from 0 to 64 [ 95.388277][ T5288] loop3: detected capacity change from 0 to 32768 [ 95.503040][ T5320] loop0: detected capacity change from 0 to 1024 [ 95.536779][ T5288] XFS (loop3): Mounting V5 Filesystem [ 95.566879][ T5320] hfsplus: unable to parse mount options [ 95.669164][ T5288] XFS (loop3): Starting recovery (logdev: internal) [ 95.755502][ T5288] XFS (loop3): Ending recovery (logdev: internal) [ 95.765129][ T5299] loop2: detected capacity change from 0 to 32768 [ 95.817092][ T5299] XFS: attr2 mount option is deprecated. [ 95.849049][ T4757] XFS (loop3): Unmounting Filesystem [ 95.968987][ T5299] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 95.973763][ T5301] loop4: detected capacity change from 0 to 32768 [ 96.052732][ T5334] loop1: detected capacity change from 0 to 2048 [ 96.062384][ T5301] xfs: Unknown parameter 'uid<00000000000000000000' [ 96.086377][ T5299] XFS (loop2): Quotacheck needed: Please wait. [ 96.145758][ T5299] XFS (loop2): Quotacheck: Done. [ 96.215976][ T5336] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.276547][ T5320] loop0: detected capacity change from 0 to 32768 [ 96.315785][ T4028] XFS (loop2): Unmounting Filesystem [ 96.353834][ T5320] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.198 (5320) [ 96.363624][ T5301] loop4: detected capacity change from 0 to 4096 [ 96.492654][ T5340] 9pnet: Insufficient options for proto=fd [ 96.521990][ T5320] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 96.524392][ T5320] BTRFS info (device loop0): using free space tree [ 96.526871][ T5320] BTRFS info (device loop0): has skinny extents [ 96.538858][ T5340] 9pnet: Could not find request transport: /îdno= [ 96.849967][ T5320] BTRFS info (device loop0): enabling ssd optimizations [ 96.880764][ T5365] loop1: detected capacity change from 0 to 512 [ 96.927010][ T5360] loop4: detected capacity change from 0 to 4096 [ 96.944516][ T5365] EXT4-fs (loop1): Ignoring removed bh option [ 96.961013][ T5365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 96.963205][ T5365] System zones: 1-12 [ 96.971403][ T5365] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 393240: comm syz.1.203: invalid block [ 96.998010][ T5365] EXT4-fs (loop1): Remounting filesystem read-only [ 96.999703][ T5365] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.203: couldn't read orphan inode 11 (err -117) [ 97.001440][ T5363] loop3: detected capacity change from 0 to 8192 [ 97.015576][ T5365] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,sb=0x0004000000000000,errors=remount-ro,sb=0x0000000000000008,bh. Quota mode: none. [ 97.081003][ T26] audit: type=1326 audit(97.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5377 comm="syz.2.201" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98c433e8 code=0x0 [ 97.112541][ T5363] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 97.114847][ T5363] REISERFS (device loop3): using ordered data mode [ 97.140453][ T5363] reiserfs: using flush barriers [ 97.150555][ T5385] EXT4-fs (loop1): shut down requested (2) [ 97.154095][ T5365] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #2: lblock 0: comm syz.1.203: error -117 reading directory block [ 97.188176][ T5363] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.192551][ T5363] REISERFS (device loop3): checking transaction log (loop3) [ 97.194402][ T5386] loop2: detected capacity change from 0 to 256 [ 97.327382][ T5386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 97.439197][ T5363] REISERFS (device loop3): Using tea hash to sort names [ 97.442768][ T5363] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 97.673296][ T5405] loop1: detected capacity change from 0 to 256 [ 97.722405][ T5405] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 97.759358][ T5405] bpf_jit: unknown atomic op code 51 [ 97.914973][ T5410] loop1: detected capacity change from 0 to 1024 [ 97.965201][ T5393] loop4: detected capacity change from 0 to 32768 [ 97.976330][ T5410] EXT4-fs (loop1): Ignoring removed orlov option [ 97.977873][ T5410] EXT4-fs (loop1): Ignoring removed orlov option [ 98.079981][ T5410] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 98.081658][ T5410] EXT4-fs (loop1): mount failed [ 98.119607][ T5418] loop3: detected capacity change from 0 to 128 [ 98.155260][ T5393] XFS (loop4): Mounting V5 Filesystem [ 98.222223][ T5406] loop0: detected capacity change from 0 to 32768 [ 98.273952][ T5406] XFS: attr2 mount option is deprecated. [ 98.875510][ T5429] loop2: detected capacity change from 0 to 512 [ 99.120634][ T5393] XFS (loop4): Starting recovery (logdev: internal) [ 99.145700][ T4758] Bluetooth: hci3: command 0x0411 tx timeout [ 99.168427][ T5393] XFS (loop4): Ending recovery (logdev: internal) [ 99.170805][ T5406] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 99.207473][ T4277] XFS (loop4): Unmounting Filesystem [ 99.305109][ T5429] FAT-fs (loop2): bogus logical sector size 0 [ 99.306911][ T5429] FAT-fs (loop2): Can't find a valid FAT filesystem [ 100.194093][ T5406] XFS (loop0): Quotacheck needed: Please wait. [ 100.233573][ T5406] XFS (loop0): Quotacheck: Done. [ 100.328614][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 100.341796][ T5441] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 100.453785][ T5439] loop3: detected capacity change from 0 to 8192 [ 100.462108][ T4025] XFS (loop0): Unmounting Filesystem [ 100.533282][ T5450] : renamed from ipvlan1 [ 100.537865][ T5439] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 100.540201][ T5439] REISERFS (device loop3): using ordered data mode [ 100.541746][ T5439] reiserfs: using flush barriers [ 100.551966][ T5439] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.570474][ T5439] REISERFS (device loop3): checking transaction log (loop3) [ 100.813465][ T5450] loop1: detected capacity change from 0 to 4096 [ 100.891606][ T5452] loop2: detected capacity change from 0 to 32768 [ 100.907449][ T5450] ntfs: (device loop1): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 100.916249][ T5439] REISERFS (device loop3): Using tea hash to sort names [ 100.918521][ T5439] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 100.921888][ T5439] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 100.927165][ T5450] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 100.930050][ T5450] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.968781][ T5450] ntfs: volume version 3.1. [ 100.974601][ T5450] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.978339][ T5450] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 100.981466][ T5450] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 101.167074][ T5454] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 101.170217][ T5454] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 101.173935][ T5450] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 101.177135][ T5450] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 101.209227][ T5452] XFS (loop2): Mounting V5 Filesystem [ 101.424847][ T5452] XFS (loop2): Ending clean mount [ 101.523454][ T4028] XFS (loop2): Unmounting Filesystem [ 102.018345][ T5465] loop0: detected capacity change from 0 to 32768 [ 102.164844][ T5465] XFS (loop0): Mounting V5 Filesystem [ 102.244916][ T5503] overlayfs: unrecognized mount option "fscontext=system_u" or missing value [ 102.333936][ T5465] XFS (loop0): Ending clean mount [ 102.433244][ T4025] XFS (loop0): Unmounting Filesystem [ 102.638727][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 102.814758][ T5523] loop3: detected capacity change from 0 to 512 [ 102.893973][ T5523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.934502][ T5523] EXT4-fs (loop3): 1 truncate cleaned up [ 102.936628][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000081,jqfmt=vfsv0,barrier=0x000000000000d021,user_xattr,noinit_itable,jqfmt=vfsv1,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 104.072041][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 110.488827][ T5627] udc-core: couldn't find an available UDC or it's busy [ 110.500968][ T5627] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.645301][ T5629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 110.647872][ T5629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 110.738274][ T26] audit: type=1326 audit(110.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.743542][ T26] audit: type=1326 audit(110.700:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.770128][ T26] audit: type=1326 audit(110.700:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.812731][ T26] audit: type=1326 audit(110.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.845635][ T26] audit: type=1326 audit(110.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.850910][ T26] audit: type=1326 audit(110.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.875579][ T26] audit: type=1326 audit(110.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.880935][ T26] audit: type=1326 audit(110.700:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.910608][ T5636] loop9: detected capacity change from 0 to 7 [ 110.915684][ T26] audit: type=1326 audit(110.700:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.927113][ T5636] Dev loop9: unable to read RDB block 7 [ 110.928746][ T5636] loop9: unable to read partition table [ 110.930289][ T5636] loop9: partition table beyond EOD, truncated [ 110.936104][ T26] audit: type=1326 audit(110.700:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff98c433e8 code=0x7ffc0000 [ 110.941571][ T5636] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.438199][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 111.686279][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.293'. [ 112.494052][ T5685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.310'. [ 112.642333][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 112.673256][ T5701] loop0: detected capacity change from 0 to 128 [ 112.714365][ T5701] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.733437][ T5701] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.740404][ T5704] loop2: detected capacity change from 0 to 2048 [ 112.848097][ T5704] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.327: bad orphan inode 8192 [ 112.851184][ T5704] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.892935][ T5704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 112.901678][ T5704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 112.957082][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 113.152636][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'. [ 113.567057][ T5768] loop3: detected capacity change from 0 to 512 [ 113.603175][ T5768] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 113.629251][ T5773] loop0: detected capacity change from 0 to 256 [ 113.664888][ T5774] syz.1.348 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.031421][ T5795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 114.553713][ T4372] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.775980][ T4372] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.913823][ T4372] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.021607][ T4372] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.104450][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 115.225163][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.233158][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.236639][ T5814] device bridge_slave_0 entered promiscuous mode [ 115.241655][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.243491][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.262420][ T5814] device bridge_slave_1 entered promiscuous mode [ 115.330289][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.382277][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.507033][ T5814] team0: Port device team_slave_0 added [ 115.528613][ T5814] team0: Port device team_slave_1 added [ 115.641984][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.643723][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.677554][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.707685][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.709086][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.740708][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.867892][ T5814] device hsr_slave_0 entered promiscuous mode [ 115.896032][ T5814] device hsr_slave_1 entered promiscuous mode [ 115.956230][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.958246][ T5814] Cannot create hsr debugfs directory [ 116.665477][ T4630] Bluetooth: hci1: command 0x0409 tx timeout [ 116.761576][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.847939][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.898052][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.946271][ T4372] device hsr_slave_0 left promiscuous mode [ 116.988006][ T4372] device hsr_slave_1 left promiscuous mode [ 117.055952][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.057892][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.060683][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.066588][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.073580][ T4372] device bridge_slave_1 left promiscuous mode [ 117.075144][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.137488][ T4372] device bridge_slave_0 left promiscuous mode [ 117.139385][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.255816][ T4372] device veth1_macvtap left promiscuous mode [ 117.257300][ T4372] device veth0_macvtap left promiscuous mode [ 117.258753][ T4372] device veth1_vlan left promiscuous mode [ 117.260583][ T4372] device veth0_vlan left promiscuous mode [ 117.909420][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 117.938265][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 117.957543][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.006222][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.244895][ T4372] bond0 (unregistering): Released all slaves [ 118.342018][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.573565][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.605507][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.608021][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.619362][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.644581][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.647380][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.649935][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.651830][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.675081][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.687950][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.699133][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.715191][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.716956][ T514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.745525][ T4758] Bluetooth: hci1: command 0x041b tx timeout [ 118.756860][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.762049][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.772114][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.781229][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.817305][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.838314][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.840829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.865526][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.868395][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.878039][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.880662][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.919117][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.285518][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.302760][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.304882][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.380854][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.383784][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.426254][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.429105][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.436269][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.442227][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.453749][ T5814] device veth0_vlan entered promiscuous mode [ 119.466652][ T5814] device veth1_vlan entered promiscuous mode [ 119.540441][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.543049][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.552065][ T5814] device veth0_macvtap entered promiscuous mode [ 119.567319][ T5814] device veth1_macvtap entered promiscuous mode [ 119.610174][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.621282][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.632628][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.651490][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.654078][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.672846][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.685805][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.699062][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.709904][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.712529][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.715876][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.718434][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.731452][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.744444][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.761262][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.763886][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.781556][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.784085][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.815521][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.831728][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.834457][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.839128][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.849937][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.853719][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.871830][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.881250][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.888984][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.893636][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.069344][ T4210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.071887][ T4210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.079856][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.153398][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.156126][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.164043][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.825672][ T4758] Bluetooth: hci1: command 0x040f tx timeout [ 121.636880][ T5941] loop0: detected capacity change from 0 to 256 [ 121.692030][ T5941] exfat: Deprecated parameter 'namecase' [ 121.693697][ T5941] exfat: Deprecated parameter 'utf8' [ 121.695065][ T5941] exfat: Deprecated parameter 'namecase' [ 121.861552][ T5941] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 125.708939][ T4758] Bluetooth: hci1: command 0x0419 tx timeout [ 126.513008][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 126.513164][ T26] audit: type=1326 audit(126.450:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.4.404" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7a753e8 code=0x0 [ 128.630237][ T5964] loop2: detected capacity change from 0 to 40427 [ 128.749605][ T5964] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 128.751536][ T5964] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 128.766713][ T5964] F2FS-fs (loop2): invalid crc value [ 128.831558][ T5964] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.891826][ T5964] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 128.893640][ T5964] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.066888][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.068634][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.552815][ T6017] loop3: detected capacity change from 0 to 4096 [ 131.652303][ T6017] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 131.755739][ T6020] loop1: detected capacity change from 0 to 8 [ 131.806258][ T6020] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 136.163574][ T6066] loop2: detected capacity change from 0 to 4096 [ 136.185309][ T6066] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 136.495721][ T6068] process 'syz.2.433' launched './file0' with NULL argv: empty string added [ 137.269231][ T6068] loop2: detected capacity change from 0 to 32768 [ 137.329178][ T6068] Dev loop2 SGI disklabel: csum bad, label corrupted [ 137.337167][ T3640] Dev loop2 SGI disklabel: csum bad, label corrupted [ 139.059976][ T6094] loop2: detected capacity change from 0 to 8192 [ 139.124257][ T6094] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.878017][ T6113] loop4: detected capacity change from 0 to 4096 [ 139.977107][ T6117] udc-core: couldn't find an available UDC or it's busy [ 139.978686][ T6117] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.001064][ T6113] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 140.329840][ T6123] udc-core: couldn't find an available UDC or it's busy [ 140.331601][ T6123] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.530924][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.448'. [ 140.629086][ T6132] loop0: detected capacity change from 0 to 512 [ 140.711243][ T6129] input: syz1 as /devices/virtual/input/input2 [ 140.768126][ T6132] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.453: iget: bad i_size value: -67835469387268086 [ 140.772455][ T6132] EXT4-fs (loop0): Remounting filesystem read-only [ 140.774237][ T6132] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.453: couldn't read orphan inode 15 (err -117) [ 140.778904][ T6132] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nombcache,noload,. Quota mode: none. [ 143.077293][ T6154] input: syz1 as /devices/virtual/input/input3 [ 143.872419][ T6177] loop4: detected capacity change from 0 to 1024 [ 144.564854][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.592755][ T6183] loop2: detected capacity change from 0 to 512 [ 144.678034][ T6183] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 144.680219][ T6183] System zones: 0-2, 18-18, 34-35 [ 144.691823][ T6183] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.716012][ T6183] Quota error (device loop2): find_tree_dqentry: Getting block too big (9 >= 6) [ 144.718436][ T6183] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 144.720759][ T6183] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.472: Failed to acquire dquot type 1 [ 144.890085][ T4024] Bluetooth: Frame is too long (len 79, expected len 4) [ 144.935169][ T6203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.395518][ T4625] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.641676][ T4625] usb 1-1: Using ep0 maxpacket: 16 [ 145.711788][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 145.876740][ T6231] netlink: 216 bytes leftover after parsing attributes in process `syz.1.488'. [ 145.917737][ T4625] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 145.919948][ T4625] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 145.922140][ T4625] usb 1-1: Product: syz [ 145.923231][ T4625] usb 1-1: Manufacturer: syz [ 145.924332][ T4625] usb 1-1: SerialNumber: syz [ 145.950293][ T4625] usb 1-1: config 0 descriptor?? [ 145.987917][ T4625] usb 1-1: selecting invalid altsetting 1 [ 146.031282][ T6239] loop4: detected capacity change from 0 to 164 [ 146.058681][ T4625] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 146.064967][ T6243] netlink: 9 bytes leftover after parsing attributes in process `syz.2.493'. [ 146.074418][ T6243] device gretap0 entered promiscuous mode [ 146.095847][ T6239] Unable to read rock-ridge attributes [ 146.102479][ T6239] Unable to read rock-ridge attributes [ 146.122161][ T6243] netlink: 5 bytes leftover after parsing attributes in process `syz.2.493'. [ 146.124472][ T6243] 0ªX¹¦D: renamed from gretap0 [ 146.164070][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.169995][ T6243] device 30ªX¹¦D left promiscuous mode [ 146.173002][ T6243] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 146.208497][ T4066] usb 1-1: USB disconnect, device number 7 [ 147.339706][ T6259] loop4: detected capacity change from 0 to 1024 [ 147.987131][ T6226] loop3: detected capacity change from 0 to 32768 [ 148.048807][ T6226] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 148.052999][ T6226] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 148.082622][ T6265] IPv6: Can't replace route, no match found [ 148.158887][ T6226] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 148.165327][ T4625] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 148.172167][ T4625] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 148.294881][ T4625] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 148.328215][ T4625] gfs2: fsid=syz:syz.0: jid=0: Done [ 148.330506][ T6226] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 148.436362][ T6269] netlink: 'syz.4.502': attribute type 10 has an invalid length. [ 148.551248][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.569007][ T6269] bond0: (slave team0): Enslaving as an active interface with an up link [ 149.015543][ T4625] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.375725][ T4625] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 149.378618][ T4625] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.392542][ T4625] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.394785][ T4625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.415528][ T4625] usb 1-1: config 0 descriptor?? [ 149.435727][ T6283] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.459534][ T4625] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 150.054688][ T26] audit: type=1326 audit(150.010:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.3.508" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa291c3e8 code=0x0 [ 150.208939][ T6266] loop2: detected capacity change from 0 to 1024 [ 150.438343][ T6295] udc-core: couldn't find an available UDC or it's busy [ 150.440459][ T6295] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.493649][ T6287] loop4: detected capacity change from 0 to 40427 [ 150.557751][ T6287] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 150.562636][ T6287] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.583842][ T6287] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.613034][ T6287] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 150.615065][ T6287] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 150.663496][ T6287] F2FS-fs (loop4): switch extent_cache option is not allowed [ 150.692399][ T4277] attempt to access beyond end of device [ 150.692399][ T4277] loop4: rw=2049, want=45104, limit=40427 [ 150.911282][ T6299] udc-core: couldn't find an available UDC or it's busy [ 150.913025][ T6299] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.439120][ T6308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.042502][ T4625] usb 1-1: USB disconnect, device number 8 [ 152.129781][ T6311] capability: warning: `syz.3.514' uses 32-bit capabilities (legacy support in use) [ 154.189775][ T6305] loop2: detected capacity change from 0 to 1024 [ 154.828235][ T6341] udc-core: couldn't find an available UDC or it's busy [ 154.829999][ T6341] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.833185][ T6339] loop3: detected capacity change from 0 to 512 [ 155.551708][ T6347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.674898][ T6334] loop2: detected capacity change from 0 to 40427 [ 155.773771][ T6334] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 155.781831][ T6334] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 155.788323][ T6334] F2FS-fs (loop2): invalid crc value [ 155.824425][ T6334] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.908292][ T6334] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 155.910098][ T6334] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 156.162233][ T6367] loop3: detected capacity change from 0 to 1024 [ 157.040759][ T6373] udc-core: couldn't find an available UDC or it's busy [ 157.051745][ T6373] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.054293][ T6344] loop0: detected capacity change from 0 to 40427 [ 157.124282][ T6377] ------------[ cut here ]------------ [ 157.126174][ T6377] WARNING: CPU: 0 PID: 6377 at net/mac80211/cfg.c:3686 ieee80211_probe_client+0x54c/0x6a8 [ 157.128589][ T6377] Modules linked in: [ 157.129552][ T6377] CPU: 0 PID: 6377 Comm: syz.4.540 Not tainted 5.15.166-syzkaller #0 [ 157.131635][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 157.134251][ T6377] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 157.136240][ T6377] pc : ieee80211_probe_client+0x54c/0x6a8 [ 157.137721][ T6377] lr : ieee80211_probe_client+0x548/0x6a8 [ 157.139175][ T6377] sp : ffff800020347070 [ 157.140377][ T6377] x29: ffff8000203470a0 x28: ffff0000d76f0dc0 x27: ffff800020347180 [ 157.142390][ T6377] x26: ffff0000d76f2980 x25: 0000000000000000 x24: ffff0000e4f37420 [ 157.144442][ T6377] x23: ffff0000e65ea558 x22: ffff0000e65e8000 x21: dfff800000000000 [ 157.146451][ T6377] x20: 00000000ffffffea x19: ffff0000e65e9288 x18: 0000000000000008 [ 157.148653][ T6377] x17: 0000000000000002 x16: ffff8000084c4e2c x15: ffff80000fe5cd68 [ 157.150801][ T6377] x14: 1ffff0000295606a x13: dfff800000000000 x12: 0000000000040000 [ 157.152713][ T6377] x11: 0000000000002018 x10: ffff800024c19000 x9 : 0000000000002019 [ 157.154798][ T6377] x8 : ffff80001148d274 x7 : ffff8000114931e4 x6 : 0000000000000000 [ 157.156910][ T6377] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 157.158917][ T6377] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 157.161047][ T6377] Call trace: [ 157.161906][ T6377] ieee80211_probe_client+0x54c/0x6a8 [ 157.163302][ T6377] nl80211_probe_client+0x380/0xa80 [ 157.164623][ T6377] genl_rcv_msg+0xc18/0x1018 [ 157.165855][ T6377] netlink_rcv_skb+0x20c/0x3b8 [ 157.167007][ T6377] genl_rcv+0x38/0x50 [ 157.167997][ T6377] netlink_unicast+0x664/0x938 [ 157.169199][ T6377] netlink_sendmsg+0x844/0xb38 [ 157.170435][ T6377] ____sys_sendmsg+0x584/0x870 [ 157.171655][ T6377] ___sys_sendmsg+0x214/0x294 [ 157.172748][ T6377] __arm64_sys_sendmsg+0x1ac/0x25c [ 157.174049][ T6377] invoke_syscall+0x98/0x2b8 [ 157.175264][ T6377] el0_svc_common+0x138/0x258 [ 157.176452][ T6377] do_el0_svc+0x58/0x14c [ 157.177518][ T6377] el0_svc+0x7c/0x1f0 [ 157.178570][ T6377] el0t_64_sync_handler+0x84/0xe4 [ 157.179864][ T6377] el0t_64_sync+0x1a0/0x1a4 [ 157.181044][ T6377] irq event stamp: 598 [ 157.182091][ T6377] hardirqs last enabled at (597): [] _raw_spin_unlock_irqrestore+0xac/0x158 [ 157.184814][ T6377] hardirqs last disabled at (598): [] el1_dbg+0x24/0x80 [ 157.186933][ T6377] softirqs last enabled at (582): [] local_bh_enable+0x10/0x34 [ 157.189280][ T6377] softirqs last disabled at (576): [] local_bh_disable+0x10/0x34 [ 157.191604][ T6377] ---[ end trace 94d9c8a67c8a10eb ]--- [ 157.212540][ T6344] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 157.214156][ T6344] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 157.282885][ T6344] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.341238][ T6344] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 157.343143][ T6344] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.392808][ T6344] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 157.404587][ T6344] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.418238][ T6344] F2FS-fs (loop0): switch extent_cache option is not allowed [ 157.439106][ T5814] attempt to access beyond end of device [ 157.439106][ T5814] loop0: rw=2049, want=45104, limit=40427 [ 163.865461][ T4066] Bluetooth: hci2: command 0x0406 tx timeout