last executing test programs: 28.631173914s ago: executing program 3 (id=347): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 28.19478009s ago: executing program 3 (id=356): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4, 0x0, 0x40000010001}, 0x18) listen(r2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sigaltstack(0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) 27.970390684s ago: executing program 3 (id=358): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800400, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 27.534552851s ago: executing program 3 (id=367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) 27.354604293s ago: executing program 3 (id=372): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00'], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 27.298125054s ago: executing program 3 (id=373): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000900000008000000020000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2f0000006800e978000000000038650400"], 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 12.268234003s ago: executing program 32 (id=373): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000900000008000000020000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2f0000006800e978000000000038650400"], 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 6.280958394s ago: executing program 2 (id=690): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f00000005c0)=""/68, 0x44}], 0x1, 0x3933284d, 0x0) 6.122858487s ago: executing program 2 (id=691): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = io_uring_setup(0x7882, &(0x7f0000000a40)={0x0, 0x17fe, 0x2, 0xfffffffe, 0x3bd}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 6.005822718s ago: executing program 2 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 4.986471294s ago: executing program 2 (id=696): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 4.626653449s ago: executing program 2 (id=700): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 4.534568561s ago: executing program 5 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 4.355207774s ago: executing program 5 (id=706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2.052644859s ago: executing program 4 (id=710): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) socket$packet(0x11, 0x2, 0x300) io_setup(0x2, &(0x7f0000000180)) io_setup(0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0400"/14, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007820000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000004"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000eb10000073ac292b3d4516af3078d8184ea5082dbd7000fcdbdf2400000022", @ANYRES32=0x0, @ANYBLOB="00000000000002000800280088bf000008000d00d7020000"], 0x30}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0xf, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000340)=0x1e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60}]}) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r7) 1.825388252s ago: executing program 1 (id=715): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x6f) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.729792843s ago: executing program 1 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.417246588s ago: executing program 5 (id=720): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 1.393942859s ago: executing program 0 (id=721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 1.30662636s ago: executing program 2 (id=722): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x13, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x80000) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x408b, &(0x7f0000004bc0)="$eJzszz1KM1EUBuB3fr5vJiKCthZiZyWxs7F3A9lAOjsLe6PuJrgAVyQIrsBmZDIjRmKpKPI8zXnv4dx7OeHHPW10bpKiSP4nj2vdZi0/zO93U/fpbjoZWvXlzqp2g+uDJNOT/Ntqy2wnudr8ebb86l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBf7/k9tkPpuq5Lqg9TVVIki9SZ70+aJKdl0tfcVi8X49DhcZLzvfG06G+86V9cmS2/cRcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A8qc1aNschRmiG2n842r+zOoQ2AUAwE0KuAoBiBhLAHy3UbpiQ4EKhv3zNNc+IuUz33SJ9b1ZLs6zuffzr6+17DowEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHMFAAD//36UHlY=") syz_open_procfs(r4, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.30637036s ago: executing program 4 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x14) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[], 0x0) 1.212500681s ago: executing program 0 (id=724): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setreuid(0x0, 0xee00) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.191517032s ago: executing program 4 (id=725): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000408}, 0x0) 1.074822113s ago: executing program 0 (id=726): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 887.777536ms ago: executing program 1 (id=727): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 789.922558ms ago: executing program 0 (id=728): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @var={0xb}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) 687.82161ms ago: executing program 1 (id=729): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xa8, 0x4, 0x0, {0x5, 0x4, 0x1, 0x8, 0x9, 0x68, 0x3, 0x2, 0xc, 0x1, @private=0xa010100, @broadcast}}}}}}, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 686.88544ms ago: executing program 5 (id=730): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000800000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r2) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="3605bfa9b05d6657", 0x8, 0x40080, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 430.817763ms ago: executing program 0 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) 329.000515ms ago: executing program 4 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x5}, 0x18) statfs(0x0, 0x0) 327.114395ms ago: executing program 0 (id=742): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xa6, 0xff, 0x8}, {0x7fff, 0x9, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x2}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8003, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) clock_settime(0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x200, 0x0, 0x3, 0x3}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)=@qipcrtr={0x2a, 0x1}, 0x80) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000001f) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x8000003d) 214.682537ms ago: executing program 4 (id=733): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 90.759838ms ago: executing program 1 (id=734): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 48.709129ms ago: executing program 1 (id=735): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0x6, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x3, 0x32cb9428aff826a, 0x0, 0x6e6bb1, 0x3, {0x6, 0x32, 0x6, 0xff, 0x0, 0xffffffff, 0x0, @in6=@local, @in=@local}}]}, 0x50}}, 0x4000) 0s ago: executing program 4 (id=736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. syzkaller login: [ 40.926841][ T4013] cgroup: Unknown subsys name 'net' [ 41.148559][ T4013] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.505617][ T4013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.004624][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 43.020773][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 43.158226][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.160381][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.163243][ T4023] device bridge_slave_0 entered promiscuous mode [ 43.169038][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.171003][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.173982][ T4023] device bridge_slave_1 entered promiscuous mode [ 43.186226][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.188215][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.190956][ T4028] device bridge_slave_0 entered promiscuous mode [ 43.212768][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 43.227648][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.230507][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.233044][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.235914][ T4028] device bridge_slave_1 entered promiscuous mode [ 43.251254][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 43.259264][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.291254][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.319565][ T4023] team0: Port device team_slave_0 added [ 43.323320][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.330354][ T4023] team0: Port device team_slave_1 added [ 43.335853][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 43.398173][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.400138][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.408056][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.414452][ T4028] team0: Port device team_slave_0 added [ 43.422263][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.424317][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.427236][ T4029] device bridge_slave_0 entered promiscuous mode [ 43.436921][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.438870][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.452256][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.456845][ T4028] team0: Port device team_slave_1 added [ 43.469160][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.471379][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.474272][ T4029] device bridge_slave_1 entered promiscuous mode [ 43.502525][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.504714][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.512311][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.516762][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.518725][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.526133][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.529858][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.532438][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.535201][ T4031] device bridge_slave_0 entered promiscuous mode [ 43.563177][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.565273][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.567912][ T4031] device bridge_slave_1 entered promiscuous mode [ 43.572149][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.577121][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.613674][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.615716][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.618548][ T4027] device bridge_slave_0 entered promiscuous mode [ 43.714371][ T4023] device hsr_slave_0 entered promiscuous mode [ 43.752521][ T4023] device hsr_slave_1 entered promiscuous mode [ 43.834228][ T4028] device hsr_slave_0 entered promiscuous mode [ 43.882284][ T4028] device hsr_slave_1 entered promiscuous mode [ 43.922087][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.924473][ T4028] Cannot create hsr debugfs directory [ 43.926265][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.928292][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.931120][ T4027] device bridge_slave_1 entered promiscuous mode [ 43.941479][ T4029] team0: Port device team_slave_0 added [ 43.961492][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.975151][ T4029] team0: Port device team_slave_1 added [ 44.002135][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.011046][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.013395][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.020601][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.030480][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.057250][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.059227][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.066722][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.082571][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.087339][ T4031] team0: Port device team_slave_0 added [ 44.117183][ T4031] team0: Port device team_slave_1 added [ 44.138686][ T4027] team0: Port device team_slave_0 added [ 44.166271][ T4027] team0: Port device team_slave_1 added [ 44.224205][ T4029] device hsr_slave_0 entered promiscuous mode [ 44.262485][ T4029] device hsr_slave_1 entered promiscuous mode [ 44.302241][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.304603][ T4029] Cannot create hsr debugfs directory [ 44.306881][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.308837][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.316576][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.340217][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.347176][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.356075][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.386146][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.388329][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.396196][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.403414][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.405463][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.419078][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.525235][ T4031] device hsr_slave_0 entered promiscuous mode [ 44.562560][ T4031] device hsr_slave_1 entered promiscuous mode [ 44.602579][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.604851][ T4031] Cannot create hsr debugfs directory [ 44.644393][ T4027] device hsr_slave_0 entered promiscuous mode [ 44.672909][ T1533] Bluetooth: hci0: command 0x0409 tx timeout [ 44.682470][ T4027] device hsr_slave_1 entered promiscuous mode [ 44.732218][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.734379][ T4027] Cannot create hsr debugfs directory [ 44.834252][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 44.835968][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 44.842305][ T4037] Bluetooth: hci4: command 0x0409 tx timeout [ 44.844340][ T4037] Bluetooth: hci3: command 0x0409 tx timeout [ 44.871812][ T4023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.920651][ T4023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.978393][ T4023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.026279][ T4023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.100787][ T4028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.168778][ T4028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.208178][ T4028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.268189][ T4028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.359329][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.370938][ T4029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.434139][ T4029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.491701][ T4029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.524714][ T4029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.578357][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.582595][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.593685][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.606407][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.609356][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.615300][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.617509][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.620434][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.651519][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.655195][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.657884][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.659854][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.668271][ T4027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.713464][ T4027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.764370][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.767633][ T4027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.811128][ T4027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.865468][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.869032][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.873236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.885779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.909692][ T4031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.946423][ T4031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.984292][ T4031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.024875][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.028719][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.041484][ T4031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.107917][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.110818][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.130654][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.135148][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.140374][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.167144][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.205413][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.215615][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.218434][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.238212][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.261316][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.265531][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.268847][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.271755][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.275596][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.277574][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.289291][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.292999][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.296408][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.299415][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.301377][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.312515][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.316891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.319243][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.335692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.338757][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.341718][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.343883][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.348893][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.352696][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.360210][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.369698][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.373034][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.375721][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.377690][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.400264][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.404640][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.411553][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.416504][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.430905][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.435065][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.439363][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.444214][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.451876][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.459616][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.476667][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.479829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.498279][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.500771][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.510452][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.513378][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.515290][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.517826][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.520965][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.526731][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.529882][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.548551][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.552503][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.555352][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.558445][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.561434][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.567039][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.570155][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.573871][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.588151][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.600235][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.605025][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.607734][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.609719][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.612849][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.615866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.618854][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.621505][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.626427][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.643622][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.646174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.649164][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.659480][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.662675][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.666329][ T4023] device veth0_vlan entered promiscuous mode [ 46.680325][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.683489][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.687955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.690920][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.701348][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.705348][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.708386][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.715289][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.719524][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.732221][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.735212][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.755047][ T4023] device veth1_vlan entered promiscuous mode [ 46.762301][ T3605] Bluetooth: hci0: command 0x041b tx timeout [ 46.763026][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.766833][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.770706][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.777931][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.779993][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.790941][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.794802][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.809037][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.813788][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.816892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.819773][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.822045][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.830665][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.839653][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.843407][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.868738][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.871890][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.882894][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.893148][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.895425][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.922531][ T3605] Bluetooth: hci3: command 0x041b tx timeout [ 46.925000][ T3605] Bluetooth: hci4: command 0x041b tx timeout [ 46.926773][ T3605] Bluetooth: hci1: command 0x041b tx timeout [ 46.928633][ T3605] Bluetooth: hci2: command 0x041b tx timeout [ 46.931777][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.936205][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.939046][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.945432][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.948517][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.951415][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.963498][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.972725][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.979181][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.019097][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.021416][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.026328][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.029202][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.034254][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.051311][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.054042][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.059830][ T4023] device veth0_macvtap entered promiscuous mode [ 47.078737][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.089488][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.098627][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.102495][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.131590][ T4023] device veth1_macvtap entered promiscuous mode [ 47.144841][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.147949][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.182323][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.186255][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.190111][ T4028] device veth0_vlan entered promiscuous mode [ 47.199472][ T4028] device veth1_vlan entered promiscuous mode [ 47.207313][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.210080][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.213321][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.230872][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.245461][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.248535][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.251354][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.254561][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.257628][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.260536][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.263923][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.270386][ T4029] device veth0_vlan entered promiscuous mode [ 47.279158][ T4029] device veth1_vlan entered promiscuous mode [ 47.306366][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.309317][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.314642][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.317045][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.327186][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.333393][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.350431][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.353837][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.356675][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.359627][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.367199][ T4023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.369936][ T4023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.373729][ T4023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.376247][ T4023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.387667][ T4028] device veth0_macvtap entered promiscuous mode [ 47.423934][ T4028] device veth1_macvtap entered promiscuous mode [ 47.426471][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.429302][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.432213][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.435083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.447910][ T4029] device veth0_macvtap entered promiscuous mode [ 47.463919][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.467312][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.470224][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.475010][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.478668][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.499945][ T4029] device veth1_macvtap entered promiscuous mode [ 47.516301][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.519191][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.524629][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.536299][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.539350][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.544705][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.551248][ T4031] device veth0_vlan entered promiscuous mode [ 47.568221][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.571073][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.574372][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.577245][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.581489][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.586536][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.590129][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.594208][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.598234][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.620390][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.624303][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.628058][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.631176][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.639610][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.643665][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.646157][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.648566][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.656022][ T4027] device veth0_vlan entered promiscuous mode [ 47.664331][ T4031] device veth1_vlan entered promiscuous mode [ 47.688969][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.694479][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.697320][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.700268][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.705488][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.721763][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.724945][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.728088][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.731324][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.746222][ T4027] device veth1_vlan entered promiscuous mode [ 47.764185][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.767349][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.770527][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.774734][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.778735][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.786699][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.789727][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.795002][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.805717][ T4029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.808241][ T4029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.810696][ T4029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.814467][ T4029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.827438][ T330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.829825][ T330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.848546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.851637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.855902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.858945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.867169][ T4031] device veth0_macvtap entered promiscuous mode [ 47.876869][ T4031] device veth1_macvtap entered promiscuous mode [ 47.931601][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.936193][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.939394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.942779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.945961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.009297][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.017629][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.021423][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.026202][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.029022][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.033252][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.047499][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.069873][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.074081][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.095433][ T4027] device veth0_macvtap entered promiscuous mode [ 48.098192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.101121][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.107329][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.110970][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.121583][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.140342][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.144811][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.147853][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.150571][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.155582][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.159955][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.175556][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.178438][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.184315][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.187454][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.195357][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.197815][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.204600][ T4031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.207141][ T4031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.209503][ T4031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.212928][ T4031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.222959][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.225260][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.238203][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.241015][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.260709][ T4027] device veth1_macvtap entered promiscuous mode [ 48.351575][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.364837][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.368358][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.381446][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.385707][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.388752][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.393559][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.396567][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.401570][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.433784][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.437061][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.463434][ T330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.465962][ T330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.471813][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.481827][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.493455][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.496387][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.499154][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.503417][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.506173][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.509000][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.514470][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.518610][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.521313][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.538144][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.627684][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.630285][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.645221][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.659687][ T4027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.663257][ T4027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.666009][ T4027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.668723][ T4027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.676699][ T4115] loop1: detected capacity change from 0 to 1024 [ 48.700423][ T330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.705846][ T330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.710560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.714200][ T4115] ======================================================= [ 48.714200][ T4115] WARNING: The mand mount option has been deprecated and [ 48.714200][ T4115] and is ignored by this kernel. Remove the mand [ 48.714200][ T4115] option from the mount to silence this warning. [ 48.714200][ T4115] ======================================================= [ 48.830218][ T4115] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.834277][ T4068] Bluetooth: hci0: command 0x040f tx timeout [ 48.897877][ T4115] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.10: Allocating blocks 385-513 which overlap fs metadata [ 48.902667][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.904957][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.908590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.927376][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.930048][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.934873][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.977176][ T4114] EXT4-fs (loop1): pa 00000000dfd067c9: logic 16, phys. 129, len 24 [ 48.980772][ T4114] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 48.993471][ T4068] Bluetooth: hci2: command 0x040f tx timeout [ 48.995443][ T4068] Bluetooth: hci1: command 0x040f tx timeout [ 48.997268][ T4068] Bluetooth: hci4: command 0x040f tx timeout [ 48.999137][ T4068] Bluetooth: hci3: command 0x040f tx timeout [ 49.058872][ T4126] loop3: detected capacity change from 0 to 1024 [ 49.089460][ T4126] EXT4-fs (loop3): Ignoring removed nobh option [ 49.095031][ T4126] EXT4-fs (loop3): Ignoring removed bh option [ 49.102319][ T4126] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.143506][ T4126] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,errors=remount-ro,bh,dioread_nolock,. Quota mode: none. [ 49.202500][ T26] audit: type=1326 audit(49.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.248628][ T26] audit: type=1326 audit(49.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.308698][ T26] audit: type=1326 audit(49.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.364268][ T26] audit: type=1326 audit(49.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.370381][ T26] audit: type=1326 audit(49.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.437134][ T26] audit: type=1326 audit(49.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.458445][ T26] audit: type=1326 audit(49.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.477600][ T26] audit: type=1326 audit(49.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.493750][ T26] audit: type=1326 audit(49.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.510309][ T26] audit: type=1326 audit(49.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 49.646739][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 49.859258][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 49.868873][ T4170] device bridge_slave_1 left promiscuous mode [ 49.878878][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.910394][ T4180] loop3: detected capacity change from 0 to 1024 [ 49.919292][ T4180] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 49.921498][ T4180] EXT4-fs (loop3): Ignoring removed nobh option [ 49.926181][ T4180] EXT4-fs (loop3): Ignoring removed bh option [ 49.928138][ T4180] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.947969][ T4170] device bridge_slave_0 left promiscuous mode [ 49.950048][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.978178][ T4180] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,data_err=abort,mblk_io_submit,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 50.519156][ T4210] loop3: detected capacity change from 0 to 512 [ 50.588218][ T4210] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.599191][ T4210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.638232][ T4222] netlink: 288 bytes leftover after parsing attributes in process `syz.1.46'. [ 50.654608][ T4210] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.659573][ T4210] EXT4-fs (loop3): 1 truncate cleaned up [ 50.661197][ T4210] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 50.707856][ T4210] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 50.764161][ T4228] syz.1.48 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.916460][ T3605] Bluetooth: hci0: command 0x0419 tx timeout [ 51.072566][ T4068] Bluetooth: hci3: command 0x0419 tx timeout [ 51.074605][ T4068] Bluetooth: hci4: command 0x0419 tx timeout [ 51.077070][ T4068] Bluetooth: hci1: command 0x0419 tx timeout [ 51.079003][ T4068] Bluetooth: hci2: command 0x0419 tx timeout [ 51.291399][ T4253] device syzkaller0 entered promiscuous mode [ 51.471370][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 51.625900][ T4268] capability: warning: `syz.1.62' uses 32-bit capabilities (legacy support in use) [ 51.772934][ T4274] loop2: detected capacity change from 0 to 1024 [ 51.831535][ T4274] EXT4-fs (loop2): Ignoring removed nobh option [ 51.839672][ T4274] EXT4-fs (loop2): Ignoring removed bh option [ 51.841357][ T4274] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.889302][ T4274] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,errors=remount-ro,bh,dioread_nolock,. Quota mode: none. [ 52.135065][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 52.571168][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 52.579345][ T4313] device bridge_slave_1 left promiscuous mode [ 52.583633][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.638975][ T4313] device bridge_slave_0 left promiscuous mode [ 52.641618][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.766751][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 52.937467][ T4330] loop3: detected capacity change from 0 to 1024 [ 52.969108][ T4330] EXT4-fs (loop3): Ignoring removed oldalloc option [ 52.971271][ T4330] EXT4-fs (loop3): Ignoring removed bh option [ 52.997389][ T4330] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.088876][ T4330] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 53.508381][ T4351] loop4: detected capacity change from 0 to 128 [ 54.350919][ T4364] loop1: detected capacity change from 0 to 512 [ 54.373586][ T4366] loop3: detected capacity change from 0 to 512 [ 54.426168][ T4366] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 54.428248][ T4366] EXT4-fs (loop3): Ignoring removed bh option [ 54.430147][ T4366] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.433512][ T4366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.437164][ T4364] EXT4-fs (loop1): Ignoring removed nobh option [ 54.446710][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 54.446722][ T26] audit: type=1326 audit(54.410:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.466214][ T26] audit: type=1326 audit(54.430:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.466762][ T4366] EXT4-fs (loop3): 1 truncate cleaned up [ 54.474272][ T4366] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,dioread_nolock,bh,errors=continue,nouid32,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 54.492702][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 54.494939][ T26] audit: type=1326 audit(54.430:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.495324][ T4373] device bridge_slave_1 left promiscuous mode [ 54.501473][ T26] audit: type=1326 audit(54.450:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.510631][ T26] audit: type=1326 audit(54.450:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.522980][ T26] audit: type=1326 audit(54.450:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.536006][ T4364] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.90: corrupted inode contents [ 54.545606][ T26] audit: type=1326 audit(54.450:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.556951][ T4364] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #3: comm syz.1.90: mark_inode_dirty error [ 54.570209][ T26] audit: type=1326 audit(54.450:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 54.578087][ T4364] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.90: corrupted inode contents [ 54.586223][ T4364] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.90: mark_inode_dirty error [ 54.592974][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.604887][ T4364] Quota error (device loop1): write_blk: dquota write failed [ 54.618197][ T4364] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 54.632127][ T4364] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.90: Failed to acquire dquot type 0 [ 54.726139][ T4364] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.90: corrupted inode contents [ 54.742360][ T4364] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #16: comm syz.1.90: mark_inode_dirty error [ 54.748263][ T4373] device bridge_slave_0 left promiscuous mode [ 54.750193][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.763989][ T4364] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.90: corrupted inode contents [ 54.782085][ T4364] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.90: mark_inode_dirty error [ 54.804237][ T4364] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.90: corrupted inode contents [ 54.822653][ T4364] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 54.838864][ T4364] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.90: corrupted inode contents [ 54.849699][ T4364] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.90: mark_inode_dirty error [ 54.868220][ T4364] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 54.877436][ T4364] EXT4-fs (loop1): 1 truncate cleaned up [ 54.880384][ T4364] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x000000000002d353,nobh,,errors=continue. Quota mode: writeback. [ 55.398511][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 55.405429][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 55.720274][ T4417] loop1: detected capacity change from 0 to 512 [ 55.745035][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 55.909727][ T4417] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.106: bg 0: block 248: padding at end of block bitmap is not set [ 55.942111][ T4417] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.106: Failed to acquire dquot type 1 [ 55.974760][ T4417] EXT4-fs (loop1): 1 truncate cleaned up [ 55.976412][ T4417] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 56.882330][ T2367] cfg80211: failed to load regulatory.db [ 56.958351][ T4437] loop4: detected capacity change from 0 to 512 [ 57.009660][ T4437] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 57.011783][ T4437] EXT4-fs (loop4): Ignoring removed bh option [ 57.033366][ T4443] loop2: detected capacity change from 0 to 128 [ 57.061058][ T4437] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.112: inode #13: comm syz.4.112: iget: illegal inode # [ 57.081522][ T4437] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.112: couldn't read orphan inode 13 (err -117) [ 57.120013][ T4437] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,nogrpid,bh,delalloc,nolazytime,,errors=continue. Quota mode: none. [ 57.343352][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 57.592992][ T4468] Cannot find add_set index 0 as target [ 57.744132][ T4477] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.769248][ T4479] loop4: detected capacity change from 0 to 1024 [ 57.805100][ T4479] EXT4-fs (loop4): Ignoring removed nobh option [ 57.806994][ T4479] EXT4-fs (loop4): Ignoring removed bh option [ 57.808741][ T4479] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.878078][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 57.884751][ T4479] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,usrquota,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 57.891231][ T4488] device bridge_slave_1 left promiscuous mode [ 57.899907][ T4488] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.978205][ T4488] device bridge_slave_0 left promiscuous mode [ 57.980270][ T4488] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.768138][ T4535] loop4: detected capacity change from 0 to 512 [ 58.866126][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 59.179806][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x1 [ 59.184499][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 59.186783][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 59.194060][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 59.196339][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 59.206467][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 59.211690][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 59.217798][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: collection stack underflow [ 59.225981][ T1533] hid-generic FFFF:FFFFFFFC:20000001.0001: item 0 0 0 12 parsing failed [ 59.232348][ T1533] hid-generic: probe of FFFF:FFFFFFFC:20000001.0001 failed with error -22 [ 59.689704][ T4582] loop3: detected capacity change from 0 to 1024 [ 59.738241][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000006,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 59.980317][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.994995][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.004692][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.049839][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 60.049852][ T26] audit: type=1326 audit(60.010:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.078569][ T26] audit: type=1326 audit(60.030:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=103 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.087743][ T26] audit: type=1326 audit(60.030:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.217939][ T26] audit: type=1326 audit(60.180:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.225867][ T26] audit: type=1326 audit(60.190:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.250307][ T26] audit: type=1326 audit(60.190:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.3.182" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.350289][ T26] audit: type=1326 audit(60.310:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.365874][ T26] audit: type=1326 audit(60.330:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.423320][ T4617] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.184' sets config #1 [ 60.451550][ T26] audit: type=1326 audit(60.330:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.464597][ T4622] loop1: detected capacity change from 0 to 512 [ 60.477466][ T26] audit: type=1326 audit(60.330:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d6588a8 code=0x7ffc0000 [ 60.527649][ T4622] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 60.568512][ T4622] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 60.570715][ T4622] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 60.586412][ T4622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 60.588928][ T4622] System zones: 1-12 [ 60.622680][ T4622] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.187: corrupted in-inode xattr [ 60.632657][ T4622] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.187: couldn't read orphan inode 15 (err -117) [ 60.636711][ T4622] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,max_dir_size_kb=0x0000000000000002,mblk_io_submit,,errors=continue. Quota mode: none. [ 60.665712][ T4622] syz.1.187 uses obsolete (PF_INET,SOCK_PACKET) [ 60.907732][ T4637] loop4: detected capacity change from 0 to 1024 [ 61.053692][ T4641] loop0: detected capacity change from 0 to 1024 [ 61.131781][ T4641] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 61.283019][ T4653] loop4: detected capacity change from 0 to 512 [ 61.336880][ T4653] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=pagemap" or missing value [ 61.480724][ T4067] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.489036][ T4659] netlink: 96 bytes leftover after parsing attributes in process `syz.1.201'. [ 61.490831][ T4067] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.499867][ T4661] hid-generic 0000:0000:0000.0002: pid 4661 passed too short report [ 61.830630][ T4669] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 61.889769][ T4675] loop1: detected capacity change from 0 to 1024 [ 61.996942][ T4681] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 61.999483][ T4681] netlink: 224 bytes leftover after parsing attributes in process `syz.3.211'. [ 62.053334][ T4675] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.077320][ T4690] loop3: detected capacity change from 0 to 512 [ 62.161330][ T4677] fido_id[4677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.175768][ T4692] loop0: detected capacity change from 0 to 128 [ 62.200022][ T4696] Cannot find add_set index 0 as target [ 62.206717][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 62.209223][ T4696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.211217][ T4696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.213350][ T4692] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.220330][ T4692] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.247288][ T4690] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.214: bg 0: block 248: padding at end of block bitmap is not set [ 62.254657][ T4690] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.214: Failed to acquire dquot type 1 [ 62.256028][ T4696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.260707][ T4696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.273784][ T4690] EXT4-fs (loop3): 1 truncate cleaned up [ 62.275621][ T4690] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 62.890071][ T4721] loop4: detected capacity change from 0 to 256 [ 62.956336][ T4723] rdma_op 0000000031b4a3bc conn xmit_rdma 0000000000000000 [ 62.996013][ T4496] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.071370][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 63.101572][ T4729] loop4: detected capacity change from 0 to 164 [ 63.121572][ T4729] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 63.168647][ T4734] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.230'. [ 63.228450][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 63.229321][ T4737] loop2: detected capacity change from 0 to 512 [ 63.297466][ T4737] EXT4-fs (loop2): Ignoring removed nobh option [ 63.355020][ T4737] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.231: corrupted inode contents [ 63.368707][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.370881][ T4737] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #16: comm syz.2.231: mark_inode_dirty error [ 63.381983][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.384559][ T4737] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.231: corrupted inode contents [ 63.388762][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.390773][ T4737] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.231: mark_inode_dirty error [ 63.405638][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.411175][ T4737] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.231: corrupted inode contents [ 63.416847][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.421725][ T4737] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 63.428973][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.431347][ T4737] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.231: corrupted inode contents [ 63.437049][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.439352][ T4737] EXT4-fs error (device loop2): ext4_truncate:4273: inode #16: comm syz.2.231: mark_inode_dirty error [ 63.448392][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.450594][ T4737] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 63.455813][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 63.466974][ T4737] EXT4-fs (loop2): 1 truncate cleaned up [ 63.469028][ T4737] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 63.794984][ T4763] loop2: detected capacity change from 0 to 1024 [ 63.832125][ T4758] raw_sendmsg: syz.1.239 forgot to set AF_INET. Fix it! [ 63.836025][ T4763] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 63.977076][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 64.201438][ T4777] loop1: detected capacity change from 0 to 128 [ 64.431265][ T4780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.579684][ T4780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.649848][ T4780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.751520][ T4780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.829714][ T4807] loop3: detected capacity change from 0 to 1024 [ 64.894051][ T4807] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 64.933742][ T4780] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.943781][ T4780] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.950896][ T4780] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.960965][ T4780] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.089979][ T26] kauditd_printk_skb: 138 callbacks suppressed [ 65.089991][ T26] audit: type=1326 audit(65.050:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.103501][ T26] audit: type=1326 audit(65.060:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.120045][ T4815] netlink: 96 bytes leftover after parsing attributes in process `syz.2.258'. [ 65.128095][ T26] audit: type=1326 audit(65.080:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.148162][ T26] audit: type=1326 audit(65.080:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.174564][ T26] audit: type=1326 audit(65.080:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.198491][ T26] audit: type=1326 audit(65.100:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.228156][ T26] audit: type=1326 audit(65.100:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.254987][ T26] audit: type=1326 audit(65.100:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.282165][ T26] audit: type=1326 audit(65.100:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.306681][ T26] audit: type=1326 audit(65.100:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4816 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 65.508140][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 66.785527][ T4869] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 66.899029][ T4873] device syzkaller1 entered promiscuous mode [ 67.367169][ T4884] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.595708][ T4886] loop3: detected capacity change from 0 to 512 [ 67.691174][ T4886] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 67.699191][ T4886] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 67.813034][ T4892] loop4: detected capacity change from 0 to 2048 [ 67.891015][ T4017] Alternate GPT is invalid, using primary GPT. [ 67.892333][ T4894] loop3: detected capacity change from 0 to 256 [ 67.897510][ T4894] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.905813][ T4017] loop4: p1 p2 p3 [ 67.941265][ T4894] FAT-fs (loop3): Directory bread(block 64) failed [ 67.947919][ T4894] FAT-fs (loop3): Directory bread(block 65) failed [ 67.956303][ T4894] FAT-fs (loop3): Directory bread(block 66) failed [ 67.958518][ T4892] Alternate GPT is invalid, using primary GPT. [ 67.959427][ T4894] FAT-fs (loop3): Directory bread(block 67) failed [ 67.960284][ T4892] loop4: p1 p2 p3 [ 67.968686][ T4894] FAT-fs (loop3): Directory bread(block 68) failed [ 67.973721][ T4894] FAT-fs (loop3): Directory bread(block 69) failed [ 67.977848][ T4894] FAT-fs (loop3): Directory bread(block 70) failed [ 67.981094][ T4894] FAT-fs (loop3): Directory bread(block 71) failed [ 67.989659][ T4894] FAT-fs (loop3): Directory bread(block 72) failed [ 67.994772][ T4894] FAT-fs (loop3): Directory bread(block 73) failed [ 68.187201][ T4898] loop2: detected capacity change from 0 to 128 [ 68.194095][ T4900] netlink: 96 bytes leftover after parsing attributes in process `syz.4.289'. [ 68.252288][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 68.285952][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.288873][ T4903] attempt to access beyond end of device [ 68.288873][ T4903] loop2: rw=2049, want=905, limit=128 [ 68.296694][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 68.318175][ T4902] loop4: detected capacity change from 0 to 2048 [ 68.376007][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 68.378852][ T4905] device bridge_slave_1 left promiscuous mode [ 68.380846][ T4905] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.420185][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.485623][ T4905] device bridge_slave_0 left promiscuous mode [ 68.487641][ T4905] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.565714][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 68.577604][ T4747] udevd[4747]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.599748][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 68.670472][ T4913] loop2: detected capacity change from 0 to 128 [ 69.319085][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 69.420896][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 69.429473][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 69.625296][ T4963] loop0: detected capacity change from 0 to 128 [ 69.636950][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.639022][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.643875][ T4971] loop2: detected capacity change from 0 to 256 [ 69.700969][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 69.765015][ T4975] Invalid ELF header magic: != ELF [ 69.834718][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 69.978178][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 69.990422][ T4983] loop3: detected capacity change from 0 to 1024 [ 70.020227][ T4983] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 70.147894][ T4988] loop2: detected capacity change from 0 to 128 [ 70.421672][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 70.428099][ T5003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 70.437262][ T5003] netlink: 'syz.2.330': attribute type 6 has an invalid length. [ 70.496386][ T5009] netlink: 'syz.2.331': attribute type 3 has an invalid length. [ 70.614335][ T5014] loop4: detected capacity change from 0 to 512 [ 70.628655][ T5008] team0 (unregistering): Port device team_slave_0 removed [ 70.660331][ T5008] team0 (unregistering): Port device team_slave_1 removed [ 70.796089][ T5016] loop2: detected capacity change from 0 to 128 [ 70.942978][ T5016] attempt to access beyond end of device [ 70.942978][ T5016] loop2: rw=2049, want=1041, limit=128 [ 70.946607][ T5016] attempt to access beyond end of device [ 70.946607][ T5016] loop2: rw=2049, want=937, limit=128 [ 71.199368][ T5029] loop4: detected capacity change from 0 to 512 [ 71.236171][ T5029] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 71.242616][ T5029] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 71.345222][ T5029] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 71.393220][ T5045] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 71.726170][ T26] kauditd_printk_skb: 301 callbacks suppressed [ 71.726184][ T26] audit: type=1326 audit(71.690:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 71.744585][ T26] audit: type=1326 audit(71.710:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 71.767658][ T26] audit: type=1326 audit(71.710:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 71.780280][ T26] audit: type=1326 audit(71.710:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 71.800167][ T26] audit: type=1326 audit(71.710:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 71.845953][ T5063] loop3: detected capacity change from 0 to 4096 [ 71.901398][ T5063] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.035809][ T5081] loop0: detected capacity change from 0 to 128 [ 72.119489][ T26] audit: type=1326 audit(72.080:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 72.150229][ T26] audit: type=1326 audit(72.080:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 72.168285][ T26] audit: type=1326 audit(72.080:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 72.194814][ T26] audit: type=1326 audit(72.080:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 72.216157][ T26] audit: type=1326 audit(72.080:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 72.270004][ T5092] netlink: 'syz.2.357': attribute type 29 has an invalid length. [ 72.288438][ T5092] netlink: 'syz.2.357': attribute type 29 has an invalid length. [ 72.301122][ T5092] netlink: 'syz.2.357': attribute type 29 has an invalid length. [ 72.344366][ T5096] loop3: detected capacity change from 0 to 512 [ 72.388369][ T5096] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 72.395681][ T5096] EXT4-fs (loop3): invalid journal inode [ 72.397516][ T5096] EXT4-fs (loop3): can't get journal size [ 72.410218][ T5096] EXT4-fs (loop3): 1 truncate cleaned up [ 72.417967][ T5096] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 73.048501][ T5135] loop0: detected capacity change from 0 to 256 [ 73.170663][ T5140] device team1 entered promiscuous mode [ 73.178012][ T5140] Zero length message leads to an empty skb [ 73.278642][ T5135] __nla_validate_parse: 11 callbacks suppressed [ 73.278657][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 73.455766][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 73.516331][ T5157] loop2: detected capacity change from 0 to 764 [ 74.237905][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 74.550229][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.597136][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.609971][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.935781][ T5201] loop0: detected capacity change from 0 to 128 [ 75.209374][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 75.229359][ T5221] IPVS: Error joining to the multicast group [ 75.460959][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 75.985866][ T5247] loop4: detected capacity change from 0 to 1024 [ 76.021950][ T5247] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 76.079779][ T5247] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 76.086798][ T5253] loop2: detected capacity change from 0 to 512 [ 76.212393][ T5253] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01d, mo2=0002] [ 76.215343][ T5253] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.258906][ T5253] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 76.279081][ T5253] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 76.291212][ T5253] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.423: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.349784][ T5253] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.423: couldn't read orphan inode 13 (err -117) [ 76.406338][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x0000000000000009,nobarrier,nombcache,debug,grpid,,errors=continue. Quota mode: writeback. [ 76.536155][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 76.875344][ T5273] loop4: detected capacity change from 0 to 128 [ 76.957265][ T5285] loop2: detected capacity change from 0 to 128 [ 77.122640][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 77.128701][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 77.128715][ T26] audit: type=1326 audit(77.090:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.178246][ T26] audit: type=1326 audit(77.090:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.228134][ T26] audit: type=1326 audit(77.090:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.277042][ T26] audit: type=1326 audit(77.090:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.322328][ T26] audit: type=1326 audit(77.090:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.328643][ T26] audit: type=1326 audit(77.090:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.337219][ T26] audit: type=1326 audit(77.090:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.345491][ T26] audit: type=1326 audit(77.090:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.351741][ T26] audit: type=1326 audit(77.090:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 77.358824][ T26] audit: type=1326 audit(77.090:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff876d2e4c code=0x7ffc0000 [ 77.420862][ T5301] loop0: detected capacity change from 0 to 512 [ 77.601800][ T5301] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 77.918982][ T5323] netlink: 'syz.0.446': attribute type 11 has an invalid length. [ 77.921375][ T5323] netlink: 448 bytes leftover after parsing attributes in process `syz.0.446'. [ 77.932573][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 78.228826][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 78.620840][ T5356] loop4: detected capacity change from 0 to 1024 [ 78.660852][ T5356] EXT4-fs (loop4): Ignoring removed nobh option [ 78.663913][ T5356] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.709459][ T5356] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: writeback. [ 78.837737][ T5344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 78.840647][ T5344] netlink: 'syz.2.457': attribute type 7 has an invalid length. [ 78.843732][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 78.935727][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 79.328501][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 79.354797][ T5386] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 79.550465][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 79.559797][ T5397] SET target dimension over the limit! [ 79.817633][ T5412] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 80.186090][ T5430] loop0: detected capacity change from 0 to 512 [ 80.284539][ T5430] EXT4-fs warning (device loop0): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 80.294878][ T5430] EXT4-fs (loop0): mount failed [ 80.395555][ T5439] tipc: Started in network mode [ 80.397713][ T5439] tipc: Node identity fabc6776fee5, cluster identity 4711 [ 80.429475][ T5439] tipc: Enabled bearer , priority 0 [ 80.462409][ T5439] syzkaller0: MTU too low for tipc bearer [ 80.464107][ T5439] tipc: Disabling bearer [ 80.520937][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.496'. [ 80.991434][ T5463] Cannot find add_set index 0 as target [ 81.111608][ T5469] loop2: detected capacity change from 0 to 1024 [ 81.143529][ T5469] EXT4-fs (loop2): Ignoring removed nobh option [ 81.145535][ T5469] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.237419][ T5469] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: writeback. [ 81.389819][ T5479] tipc: Started in network mode [ 81.391400][ T5479] tipc: Node identity 26d17a6a51a, cluster identity 4711 [ 81.427518][ T5479] tipc: Enabled bearer , priority 0 [ 81.471141][ T5479] syzkaller0: MTU too low for tipc bearer [ 81.483966][ T5479] tipc: Disabling bearer [ 82.034705][ T5515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'. [ 82.132999][ T26] kauditd_printk_skb: 147 callbacks suppressed [ 82.133013][ T26] audit: type=1326 audit(82.090:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.144226][ T26] audit: type=1326 audit(82.110:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.168443][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 82.179832][ T26] audit: type=1326 audit(82.120:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.213124][ T26] audit: type=1326 audit(82.120:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.235359][ T26] audit: type=1326 audit(82.120:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.258228][ T26] audit: type=1326 audit(82.120:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.290550][ T26] audit: type=1326 audit(82.120:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.318864][ T5536] loop0: detected capacity change from 0 to 1024 [ 82.328581][ T26] audit: type=1326 audit(82.120:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.370219][ T26] audit: type=1326 audit(82.120:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.390169][ T5536] EXT4-fs (loop0): Ignoring removed nobh option [ 82.390587][ T5540] mmap: syz.2.533 (5540) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 82.396260][ T26] audit: type=1326 audit(82.120:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa83488a8 code=0x7ffc0000 [ 82.398054][ T5536] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.419244][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x1 [ 82.421723][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.425429][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.431824][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.435335][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.437555][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.442286][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.444658][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.449905][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.452931][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.455209][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.457578][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.460153][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.463713][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.466924][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.469317][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.471604][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.479653][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.482430][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.485276][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.488506][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.491174][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.500381][ T5536] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: writeback. [ 82.526132][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.535336][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.550713][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.560197][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.593723][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.615355][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.631767][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.654008][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x0 [ 82.675898][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: unknown main item tag 0x1 [ 82.690854][ T2367] hid-generic FFFF:FFFFFFFC:20000001.0003: hidraw0: HID va0.69 Device [syz0] on syz1 [ 82.857163][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 83.075955][ T5562] fido_id[5562]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.280078][ T5583] usb usb1: usbfs: process 5583 (syz.4.550) did not claim interface 0 before use [ 83.529407][ T5599] Invalid ELF header magic: != ELF [ 83.632738][ T5604] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 84.113806][ T5628] device wireguard0 entered promiscuous mode [ 84.225285][ T5635] __nla_validate_parse: 3 callbacks suppressed [ 84.225300][ T5635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.573'. [ 84.260605][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 84.273511][ T5634] device veth0_to_bond entered promiscuous mode [ 84.275428][ T5634] device macvlan2 entered promiscuous mode [ 84.299764][ T5635] loop0: detected capacity change from 0 to 512 [ 84.427182][ T5635] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.554338][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 84.718971][ T5650] loop4: detected capacity change from 0 to 1024 [ 84.747431][ T5656] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.750479][ T5656] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 84.822964][ T5650] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.856525][ T5650] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.579: Allocating blocks 385-513 which overlap fs metadata [ 84.885258][ T5650] EXT4-fs (loop4): pa 000000007885fd02: logic 16, phys. 129, len 24 [ 84.887725][ T5650] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 84.940802][ T5666] loop0: detected capacity change from 0 to 512 [ 84.992890][ T5666] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.004371][ T5666] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.584: invalid indirect mapped block 4294967295 (level 1) [ 85.013623][ T5666] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.584: invalid indirect mapped block 4294967295 (level 1) [ 85.028352][ T5666] EXT4-fs (loop0): 2 truncates cleaned up [ 85.030066][ T5666] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 85.847710][ T5684] loop4: detected capacity change from 0 to 1024 [ 85.933321][ T5684] EXT4-fs (loop4): Invalid commit interval 67108869, must be smaller than 21474836 [ 86.669963][ T5714] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.208272][ T26] kauditd_printk_skb: 132 callbacks suppressed [ 87.208286][ T26] audit: type=1107 audit(87.169:1050): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 87.576348][ T5735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 87.583110][ T26] audit: type=1326 audit(87.577:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 87.589908][ T26] audit: type=1326 audit(87.588:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 87.617793][ T26] audit: type=1326 audit(87.599:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=240 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 87.632726][ T5735] loop0: detected capacity change from 0 to 512 [ 87.638526][ T26] audit: type=1326 audit(87.599:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 87.696810][ T26] audit: type=1326 audit(87.599:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876d08a8 code=0x7ffc0000 [ 87.720345][ T5735] EXT4-fs (loop0): too many log groups per flexible block group [ 87.722831][ T5735] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 87.724906][ T5735] EXT4-fs (loop0): mount failed [ 87.888999][ T5749] loop4: detected capacity change from 0 to 736 [ 87.986200][ T26] audit: type=1326 audit(88.006:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 87.997861][ T5749] rock: directory entry would overflow storage [ 88.000846][ T26] audit: type=1326 audit(88.017:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 88.011639][ T5749] rock: sig=0x3b10, size=4, remaining=3 [ 88.020901][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 88.033814][ T26] audit: type=1326 audit(88.017:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 88.039676][ T26] audit: type=1326 audit(88.017:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6ca18a8 code=0x7ffc0000 [ 88.171377][ T5764] loop2: detected capacity change from 0 to 128 [ 88.470391][ T5777] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 88.853694][ T5786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.089634][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 89.272202][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.301036][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.337496][ T5767] device bridge_slave_0 entered promiscuous mode [ 89.361843][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.364253][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.381959][ T5767] device bridge_slave_1 entered promiscuous mode [ 89.472697][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 89.477794][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.494139][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.607481][ T5767] team0: Port device team_slave_0 added [ 89.615450][ T5826] loop2: detected capacity change from 0 to 764 [ 89.638045][ T5767] team0: Port device team_slave_1 added [ 89.699961][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.718451][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.732946][ T5826] 9pnet: Could not find request transport: 0xffffffffffffffff [ 89.786621][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.806511][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.814169][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.868949][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.894675][ T5833] loop2: detected capacity change from 0 to 164 [ 90.017217][ T5767] device hsr_slave_0 entered promiscuous mode [ 90.032315][ T5833] process 'syz.2.645' launched '/dev/fd/3' with NULL argv: empty string added [ 90.061663][ T5833] attempt to access beyond end of device [ 90.061663][ T5833] loop2: rw=524288, want=263332, limit=164 [ 90.065297][ T5833] attempt to access beyond end of device [ 90.065297][ T5833] loop2: rw=0, want=263332, limit=164 [ 90.104248][ T5767] device hsr_slave_1 entered promiscuous mode [ 90.140965][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.144611][ T5767] Cannot create hsr debugfs directory [ 90.248955][ T4037] Bluetooth: hci5: command 0x0409 tx timeout [ 90.300594][ T5839] loop0: detected capacity change from 0 to 1024 [ 90.361665][ T5839] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 90.369864][ T5845] udc-core: couldn't find an available UDC or it's busy [ 90.387655][ T5845] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.438473][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 90.523010][ T5767] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.545843][ T5767] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.600323][ T5767] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.657074][ T5767] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.712708][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 90.990194][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.030072][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.032848][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.042188][ T5867] loop0: detected capacity change from 0 to 512 [ 91.064747][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.107177][ T5870] loop8: detected capacity change from 0 to 16384 [ 91.116748][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.120159][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.123088][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.125190][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.155276][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.156282][ T5867] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #17: comm syz.0.657: iget: bogus i_mode (0) [ 91.163726][ T5867] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.657: couldn't read orphan inode 17 (err -117) [ 91.168016][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.179103][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.181435][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.184733][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.189274][ T5867] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.217586][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.220909][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.247241][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.279393][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.321947][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.490050][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.493855][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.501108][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.504176][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.522120][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.525841][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.060727][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.063629][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.154287][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 92.180256][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 92.183184][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 92.183198][ T26] audit: type=1326 audit(92.469:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.203790][ T26] audit: type=1326 audit(92.469:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.259339][ T26] audit: type=1326 audit(92.469:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.364831][ T26] audit: type=1326 audit(92.491:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.442537][ T26] audit: type=1326 audit(92.491:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.453019][ T26] audit: type=1326 audit(92.491:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.459044][ T26] audit: type=1326 audit(92.491:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.489172][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.491641][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.494649][ T26] audit: type=1326 audit(92.491:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.515953][ T26] audit: type=1326 audit(92.491:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.553801][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.553838][ T26] audit: type=1326 audit(92.491:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb78168a8 code=0x7ffc0000 [ 92.709036][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 93.038319][ T4068] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 93.055215][ T4068] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.301017][ T5934] netlink: 'syz.2.678': attribute type 10 has an invalid length. [ 93.303335][ T5934] netlink: 2 bytes leftover after parsing attributes in process `syz.2.678'. [ 93.305939][ T5934] device team0 entered promiscuous mode [ 93.307473][ T5934] device team_slave_0 entered promiscuous mode [ 93.318619][ T5934] device team_slave_1 entered promiscuous mode [ 93.361513][ T4844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.416833][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.420413][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.473000][ T5941] loop4: detected capacity change from 0 to 128 [ 93.484159][ T4844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.533451][ T5767] device veth0_vlan entered promiscuous mode [ 93.547275][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.550211][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.556832][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.566737][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.614166][ T4844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.666156][ T5948] loop4: detected capacity change from 0 to 1024 [ 93.700511][ T5767] device veth1_vlan entered promiscuous mode [ 93.721581][ T5767] device veth0_macvtap entered promiscuous mode [ 93.728240][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.734387][ T5948] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.740240][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.753974][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.769414][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.770071][ T5948] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,barrier=0x0000000000010002,dioread_lock,data_err=ignore,mb_optimize_scan=0x0000000000000000,dioread_nolock,nobarrier,abort,user_xattr,norecovery,errors=remount-ro,. Quota mode: none. [ 93.820652][ T4844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.886590][ T5767] device veth1_macvtap entered promiscuous mode [ 93.893031][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.896015][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.955977][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.958873][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.961692][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.993499][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.003219][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.011770][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.014838][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.030222][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.038725][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.064570][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.067632][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.092189][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 94.107477][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.110459][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.133140][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.136111][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.154315][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.157257][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.164935][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.175778][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.189590][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.195823][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 94.198490][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.201572][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.221446][ T5767] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.228964][ T5767] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.231421][ T5767] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.240640][ T5767] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.415023][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 94.486414][ T5990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.250243][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 95.319512][ T5989] bond1 (unregistering): Released all slaves [ 95.472230][ T1613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.475931][ T1613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.486947][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.571405][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.575017][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.580357][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.813053][ T6013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.851905][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.619'. [ 95.855145][ T6020] netem: change failed [ 97.875784][ T2367] Bluetooth: hci5: command 0x0419 tx timeout [ 98.032036][ T6013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.444641][ T6013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.582771][ T6013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.611674][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 98.614635][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.617455][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.620562][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.624346][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.749090][ T6013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.758427][ T6013] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.778280][ T6013] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.803362][ T6013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.200628][ T6103] loop0: detected capacity change from 0 to 512 [ 99.306972][ T6103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.377518][ T6103] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 99.399783][ T6103] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 99.901767][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.730'. [ 99.904514][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.906772][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.949831][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.951944][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.084506][ T6136] loop4: detected capacity change from 0 to 1024 [ 100.107739][ T6134] IPVS: stopping master sync thread 6137 ... [ 100.136813][ T6136] EXT4-fs (loop4): Ignoring removed oldalloc option [ 100.138916][ T6136] EXT4-fs (loop4): Ignoring removed bh option [ 100.140724][ T6136] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.151300][ T6131] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 100.194212][ T6136] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 100.292213][ T6138] [ 100.293011][ T6138] ====================================================== [ 100.294989][ T6138] WARNING: possible circular locking dependency detected [ 100.296977][ T6138] 5.15.185-syzkaller #0 Not tainted [ 100.298451][ T6138] ------------------------------------------------------ [ 100.300502][ T6138] syz.0.742/6138 is trying to acquire lock: [ 100.302191][ T6138] ffff0000d871cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 100.305364][ T6138] [ 100.305364][ T6138] but task is already holding lock: [ 100.307564][ T6138] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 100.310620][ T6138] [ 100.310620][ T6138] which lock already depends on the new lock. [ 100.310620][ T6138] [ 100.313734][ T6138] [ 100.313734][ T6138] the existing dependency chain (in reverse order) is: [ 100.316250][ T6138] [ 100.316250][ T6138] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 100.318626][ T6138] __mutex_lock_common+0x194/0x1edc [ 100.320362][ T6138] mutex_lock_nested+0xac/0x11c [ 100.321926][ T6138] rfkill_register+0x44/0x77c [ 100.323452][ T6138] hci_register_dev+0x3d8/0x854 [ 100.324981][ T6138] vhci_create_device+0x2bc/0x564 [ 100.326686][ T6138] vhci_write+0x30c/0x3ac [ 100.328099][ T6138] vfs_write+0x7c8/0xa2c [ 100.329503][ T6138] ksys_write+0x120/0x210 [ 100.330981][ T6138] __arm64_sys_write+0x7c/0x90 [ 100.332506][ T6138] invoke_syscall+0x98/0x2b8 [ 100.334054][ T6138] el0_svc_common+0x138/0x258 [ 100.335626][ T6138] do_el0_svc+0x58/0x14c [ 100.337032][ T6138] el0_svc+0x78/0x1e0 [ 100.338319][ T6138] el0t_64_sync_handler+0xcc/0xe4 [ 100.339971][ T6138] el0t_64_sync+0x1a0/0x1a4 [ 100.341470][ T6138] [ 100.341470][ T6138] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 100.343735][ T6138] __mutex_lock_common+0x194/0x1edc [ 100.345383][ T6138] mutex_lock_nested+0xac/0x11c [ 100.346933][ T6138] vhci_send_frame+0x88/0x118 [ 100.346951][ T6138] hci_send_frame+0x194/0x2f0 [ 100.346962][ T6138] hci_tx_work+0x7e4/0x1394 [ 100.346970][ T6138] process_one_work+0x79c/0x1140 [ 100.346982][ T6138] worker_thread+0x8f4/0x101c [ 100.346992][ T6138] kthread+0x374/0x454 [ 100.347000][ T6138] ret_from_fork+0x10/0x20 [ 100.347010][ T6138] [ 100.347010][ T6138] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 100.347030][ T6138] __flush_work+0xf4/0x1bc [ 100.347039][ T6138] flush_work+0x24/0x38 [ 100.347048][ T6138] hci_dev_do_close+0x164/0x105c [ 100.347058][ T6138] hci_unregister_dev+0x23c/0x4c0 [ 100.347067][ T6138] vhci_release+0x74/0xc4 [ 100.347075][ T6138] __fput+0x1c0/0x7f8 [ 100.347086][ T6138] ____fput+0x20/0x30 [ 100.347094][ T6138] task_work_run+0x12c/0x1e0 [ 100.347105][ T6138] do_exit+0x67c/0x1f58 [ 100.347114][ T6138] do_group_exit+0x100/0x268 [ 100.347123][ T6138] get_signal+0x73c/0x1340 [ 100.347133][ T6138] do_notify_resume+0x35c/0x3128 [ 100.347144][ T6138] el0_svc+0xf0/0x1e0 [ 100.347153][ T6138] el0t_64_sync_handler+0xcc/0xe4 [ 100.347162][ T6138] el0t_64_sync+0x1a0/0x1a4 [ 100.347170][ T6138] [ 100.347170][ T6138] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 100.347186][ T6138] __mutex_lock_common+0x194/0x1edc [ 100.347196][ T6138] mutex_lock_nested+0xac/0x11c [ 100.347206][ T6138] bg_scan_update+0x48/0x3d0 [ 100.347215][ T6138] process_one_work+0x79c/0x1140 [ 100.347225][ T6138] worker_thread+0x8f4/0x101c [ 100.347234][ T6138] kthread+0x374/0x454 [ 100.347242][ T6138] ret_from_fork+0x10/0x20 [ 100.347251][ T6138] [ 100.347251][ T6138] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 100.347267][ T6138] __lock_acquire+0x2928/0x651c [ 100.347278][ T6138] lock_acquire+0x1f4/0x620 [ 100.347287][ T6138] __flush_work+0xf4/0x1bc [ 100.347296][ T6138] __cancel_work_timer+0x2ec/0x448 [ 100.347305][ T6138] cancel_work_sync+0x24/0x38 [ 100.347314][ T6138] hci_request_cancel_all+0xbc/0x2d0 [ 100.347323][ T6138] hci_dev_do_close+0x54/0x105c [ 100.347333][ T6138] hci_rfkill_set_block+0xdc/0x1d0 [ 100.347343][ T6138] rfkill_set_block+0x18c/0x374 [ 100.347354][ T6138] rfkill_fop_write+0x4a4/0x5cc [ 100.347364][ T6138] vfs_write+0x280/0xa2c [ 100.347372][ T6138] ksys_write+0x120/0x210 [ 100.347381][ T6138] __arm64_sys_write+0x7c/0x90 [ 100.347389][ T6138] invoke_syscall+0x98/0x2b8 [ 100.347399][ T6138] el0_svc_common+0x138/0x258 [ 100.347409][ T6138] do_el0_svc+0x58/0x14c [ 100.347419][ T6138] el0_svc+0x78/0x1e0 [ 100.347427][ T6138] el0t_64_sync_handler+0xcc/0xe4 [ 100.347436][ T6138] el0t_64_sync+0x1a0/0x1a4 [ 100.347444][ T6138] [ 100.347444][ T6138] other info that might help us debug this: [ 100.347444][ T6138] [ 100.347448][ T6138] Chain exists of: [ 100.347448][ T6138] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 100.347448][ T6138] [ 100.347473][ T6138] Possible unsafe locking scenario: [ 100.347473][ T6138] [ 100.347476][ T6138] CPU0 CPU1 [ 100.347479][ T6138] ---- ---- [ 100.347482][ T6138] lock(rfkill_global_mutex); [ 100.347490][ T6138] lock(&data->open_mutex); [ 100.347498][ T6138] lock(rfkill_global_mutex); [ 100.347506][ T6138] lock((work_completion)(&hdev->bg_scan_update)); [ 100.347514][ T6138] [ 100.347514][ T6138] *** DEADLOCK *** [ 100.347514][ T6138] [ 100.347516][ T6138] 1 lock held by syz.0.742/6138: [ 100.347523][ T6138] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 100.347559][ T6138] [ 100.347559][ T6138] stack backtrace: [ 100.347564][ T6138] CPU: 0 PID: 6138 Comm: syz.0.742 Not tainted 5.15.185-syzkaller #0 [ 100.347574][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.347582][ T6138] Call trace: [ 100.347584][ T6138] dump_backtrace+0x0/0x43c [ 100.347595][ T6138] show_stack+0x2c/0x3c [ 100.347605][ T6138] __dump_stack+0x30/0x40 [ 100.347614][ T6138] dump_stack_lvl+0xf8/0x160 [ 100.347623][ T6138] dump_stack+0x1c/0x5c [ 100.347631][ T6138] print_circular_bug+0x148/0x1b0 [ 100.347641][ T6138] check_noncircular+0x240/0x2d4 [ 100.347651][ T6138] __lock_acquire+0x2928/0x651c [ 100.347661][ T6138] lock_acquire+0x1f4/0x620 [ 100.347670][ T6138] __flush_work+0xf4/0x1bc [ 100.347679][ T6138] __cancel_work_timer+0x2ec/0x448 [ 100.347688][ T6138] cancel_work_sync+0x24/0x38 [ 100.347697][ T6138] hci_request_cancel_all+0xbc/0x2d0 [ 100.347706][ T6138] hci_dev_do_close+0x54/0x105c [ 100.347716][ T6138] hci_rfkill_set_block+0xdc/0x1d0 [ 100.347726][ T6138] rfkill_set_block+0x18c/0x374 [ 100.347735][ T6138] rfkill_fop_write+0x4a4/0x5cc [ 100.347746][ T6138] vfs_write+0x280/0xa2c [ 100.347754][ T6138] ksys_write+0x120/0x210 [ 100.347762][ T6138] __arm64_sys_write+0x7c/0x90 [ 100.347771][ T6138] invoke_syscall+0x98/0x2b8 [ 100.347788][ T6138] el0_svc_common+0x138/0x258 [ 100.347799][ T6138] do_el0_svc+0x58/0x14c [ 100.347808][ T6138] el0_svc+0x78/0x1e0 [ 100.347816][ T6138] el0t_64_sync_handler+0xcc/0xe4 [ 100.347825][ T6138] el0t_64_sync+0x1a0/0x1a4 [ 101.641032][ T4844] device hsr_slave_0 left promiscuous mode [ 101.679931][ T4844] device hsr_slave_1 left promiscuous mode [ 101.735330][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.737613][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.740367][ T4844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.742507][ T4844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.820262][ T4844] device veth1_macvtap left promiscuous mode [ 101.822342][ T4844] device veth0_macvtap left promiscuous mode [ 101.824099][ T4844] device veth1_vlan left promiscuous mode [ 101.825801][ T4844] device veth0_vlan left promiscuous mode [ 102.032434][ T4844] team0 (unregistering): Port device team_slave_1 removed [ 102.042569][ T4844] team0 (unregistering): Port device team_slave_0 removed [ 102.050504][ T4844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.079176][ T4844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.230359][ T4844] bond0 (unregistering): Released all slaves