last executing test programs: 3m32.557402892s ago: executing program 0 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 3m32.498668542s ago: executing program 0 (id=437): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@remote, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x64, 0xffff, 0x9, 0x1, 0x0, @private=0xa010100, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0xff, 0x6, 0x101, 0x2, 0x3}}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x1b56, &(0x7f0000002080)={0x0, 0x3ae6, 0x10000, 0x0, 0x361, 0x0, r0}, &(0x7f0000002100), &(0x7f0000002140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b', @ANYRES32], 0x64}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_open_dev$tty1(0xc, 0x4, 0x4) getpid() r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r8, &(0x7f0000000000)={0x2020}, 0x96) syz_open_dev$hidraw(&(0x7f0000002180), 0x1, 0x402040) read$FUSE(r8, &(0x7f0000004440)={0x2020}, 0x2020) 3m32.172768785s ago: executing program 0 (id=442): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @local, 0x8}, 0x1c) mount$cgroup(0x0, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@none}, {@name={'name', 0x3d, 'kfree\x00'}}]}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@ipv6_deladdr={0x34, 0x15, 0x200, 0x70bd2d, 0x25dfdbfd, {0xa, 0x18, 0xc, 0xfd, r1}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)=r6}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0514af2501e1ffff86284e0e", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r13, @ANYBLOB="738dd1ab253c88c8a427e7058c071b87f5b36f167a164cc395d1e2b7659837ff07"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "26739c"}}}}}, 0x0) 3m31.123919693s ago: executing program 0 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m31.002429193s ago: executing program 0 (id=454): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m30.764579665s ago: executing program 0 (id=461): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m15.765595679s ago: executing program 32 (id=461): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m11.39871367s ago: executing program 5 (id=1800): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x34, 0x11, 0x1, 0x70bd25, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1000000000000000}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x34}], 0x1}, 0x800) 1m11.274767771s ago: executing program 5 (id=1802): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m11.158263052s ago: executing program 5 (id=1806): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000080)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@sb={'sb', 0x3d, 0xfffffffffffffffb}}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 1m11.063965763s ago: executing program 5 (id=1808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1m10.952241274s ago: executing program 5 (id=1811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x18) 1m10.014405141s ago: executing program 5 (id=1815): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 54.486857189s ago: executing program 33 (id=1815): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 39.520239521s ago: executing program 6 (id=1893): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xcb3e) 39.382499242s ago: executing program 6 (id=1962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d0001000000000904000015030000000921"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 38.720230177s ago: executing program 6 (id=1968): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 38.489129119s ago: executing program 6 (id=1970): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000b40)={[{@fat=@debug}, {@fat=@gid}, {@dots}, {@dots}, {}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@dots}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@uid}, {@dots}, {@dots}], [{@fsmagic={'fsmagic', 0x3d, 0xfb}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_gt}, {@context={'context', 0x3d, 'system_u'}}, {@flag='ro'}, {@audit}, {@subj_role}, {@hash}]}, 0x5, 0x1c7, &(0x7f0000000500)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x341402, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 23.286294004s ago: executing program 34 (id=1970): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000b40)={[{@fat=@debug}, {@fat=@gid}, {@dots}, {@dots}, {}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@dots}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@uid}, {@dots}, {@dots}], [{@fsmagic={'fsmagic', 0x3d, 0xfb}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_gt}, {@context={'context', 0x3d, 'system_u'}}, {@flag='ro'}, {@audit}, {@subj_role}, {@hash}]}, 0x5, 0x1c7, &(0x7f0000000500)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x341402, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.248407525s ago: executing program 4 (id=2091): socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x40, 0x3ff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x25) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r0, @ANYBLOB="010003007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.096462417s ago: executing program 4 (id=2094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32=r3, @ANYBLOB="0b00e880976b640868433000a53205"], 0x2c}], 0x1}, 0x0) 6.066779314s ago: executing program 4 (id=2096): socket$packet(0x11, 0xa, 0x300) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) connect$llc(r0, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000300)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x1, 0x3, 0x8, 0x0, @void}, "2216ad1c91"}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="96", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) 3.990313121s ago: executing program 2 (id=2101): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r0, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 3.96051585s ago: executing program 4 (id=2102): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.926606751s ago: executing program 3 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10019}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x24}}, 0x0) 3.926245581s ago: executing program 2 (id=2106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32=r3, @ANYBLOB="0b00e880976b640868433000a5"], 0x2c}], 0x1}, 0x0) 3.846875751s ago: executing program 3 (id=2107): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4971, 0x4) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/19, 0x13}, 0x8}], 0x1, 0x1000000000fe, 0x0) 3.845751301s ago: executing program 1 (id=2108): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x7a08080, &(0x7f0000000000)={[{@noblock_validity}, {@errors_remount}]}, 0xfc, 0x474, &(0x7f00000003c0)="$eJzs3MtrXFUYAPBv7mTSpM/4qNqHGl9YfDRN+rALN4qCCwVBF9VdTNNSm1ppIthSTBSpSym4F5eCf4Er3Yi6EtzqXgpBsml8gFfunXvzfk0yyUTn94MJ59x7Zu75zrlncu65MxNA2+rN/lQidkfEL1k6ybMz0qJQVm566vrQH1PXhyqRpq/9Xsn33Z66PlSWLZ+3u8gcSSKSjytxaInjjl69dnFwZGT4SpHvG7v0bt/o1WtPX7g0eH74/PA7A6dPnzje/8ypgZNNiXNPVteDH1w+fOClN26+MnTm5ls/fNVR1nVBHM3SG73z2nKux5p9sBbbMydd6WhhRWhINSKy7qrl439fVGO28/bFix+1tHLApkrTNN27/O6JFPgfq0SrawC0RvmP/vZUd3Rt0nXwdjb5XP0CKIt7unjU93REUpSpLbi+baauYt3kzMSfn0fe/jvaqv0BgK33TTb/eao+/ykf9T09cc+ccnvz9eBsa8QdEXFnRNwVEXdHxP6IvOy9EXFfg8fvXZBfPP9Mbq0rsDXK5n/PFve25s//itnfP2lPtcjtie7oiVrl3IWR4WNFmxyJ2o4s37/CMb594edPl9vXW8z9ykd2/HIuWNTjVseO+c85Ozg2uLGoZ01+mK8Bji+Of/bOVZY6EBEH1/H62bz5whNfHl5u/+rxr6AJ95nSLyIer/f/RKwQ/8L7k93FvlMDJ/u6YmT4WF95Viz24083Xl3u+BuKvwmy/t+55Pk/E39PZe792tHGj3Hj10+WvaZp4Px/s9ySnf+dldfzdGex7f3BsbEr/RGdlZcXbx+YfbUyX5af3L0/4pGlx3/2HpedY1n8hyIiO4nvj4gHIuLBou4PRcTDkb/EUsanI+L75x99ez3xJ6s1bBNk/X92Xv/HKv3feKJ68buv1xN/Xdb/J/LUkWLLWt7/1lrBjbQdAAAA/Fck+WfgK8nRmXSSHD0asStf292ZjFweHXvy3OX3/jpb/6x8T9SScqWrvh5cXw/tL9aGy/zAgvzxYt34s2p3nt9Z3PsGWmfX3PGfLzjWx3/mt2qLKwdsPt/XgvZl/EP7Mv6hfRn/0L7WOv7TTa4HsPWWGv/jLagHsPXM/6F9Gf/Qvox/aF/GP7SljXyvX2KVxHjDzdsVK5Xp3CZx5YlI8kQ63sJq/F38DMvaCm9efcpfy1i9cK0Yd9uhB1dOtO49CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJn+DQAA//85XdxN") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.624490993s ago: executing program 3 (id=2109): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x80880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$eJzs3c9vHFcdAPDvjL1tNnFZt/RQKtFWtMiOIGu7Jq3VQ6ESglOlQrkHY2+M5bU3stdpbBXqiD8ACSFAQkJwgQsSB46VUP4EhBSJ3BEgEIIEDhwCg3Z3NjjOrn80u57E/nyk8bx5O7vf79NoZ+e9Gc8EcGq9FBGTEZGlWXY+Iip5fZpPsdOZWuvduf3+QmtKIsve/Xs5kryu+1lP5vNz+dvORMRXvxzxjeTBuBtb2yvz9XptPV+eaq4md7Ns+8Ly6vxSbam2Njs789rc63MX56YH0s7xiHjzi3/+wXd/8aU3f/PZ9/5w6a+T3+40sGN3OwYpifIDdaMRsT6MYAVptaeUly8etPL14ecDAEB/reP9ZyLiUxFxPiox0j6aAwAAAE6S7PNjcTeJyAAAAIATK42IsUjSakRcfbZVTtNqtXMN77NxNq03NpqfySr3xgvGo5ReXq7XpvNrB8ajlLSWZ/JrbLvLr+5Zno2IpyPi+5Vye7m60KgvFjryAQAAAKfHuV39/zQi/lXp9P8BAACAE2b8iOuPDCkPAAAAYHiO2v8HAAAAHj9H7f+/tfnr2SGlAgAAAAzeO2+/3X5Yd/f514tXtzZXGlcvLNY2VqqrmwvVhcb6lepSo7HUvmff6kGfV280rnwu1javTTVrG82pja3tS6uNzbXmpeX248ABAACAAjz94o1bSUTsvFFOu3VP5PNSRNb9V/8Pf/6T54rJEBiW9Cgr/2l4eQDHz6184PQaLToBoDClohMACvfgfuD+I4O+F+/89uDPTu5m2UdMCwAAGKCJT9y41T3U33mj3J53z/8nHxSXFzB8+fn/JCk6EeDYOf8Pp1dn3P+b5aLzAI5fab8jAJ0COPHSQ3zVH+b8f4drAAAAoGhj7SlJq3k/YOzFNK1WI55qPxaglFxertemI+JjEfH7SunJ1vJM+52J4QEAAAAAAAAAAAAAAAAAAAAAAAAAOKQsSyIDAAAATrSI9C9JexxgJCYqr4ztHR94Ivl3pT2PiPd+/O4Pr803m+szrfp/3Ktv/iivf7WIEQwAAABgr24/vduPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBunP7/YXudJxx//ZWRIz3ij8aZ9rzM1GKiLP/TGJ01/uSiBgZQPyd6xHxXK/4SSutGM+z2Bs/jYhywfHPDSA+nGY3WvufL/T6/qXxUnve+/s3mk8Pq//+L723/xvps/976pAxnr/5q6m+8a9HPD/ae//TjZ/0if/yIeN//Wvb2/1ey34WMdHz9ye5L9ZUc/XK1MbW9oXl1fml2lJtbXZ25rW51+cuzk1PXV6u1/K/PWN875Mf/ne/9p/tE3/8gPa/csj2/+fmtdsf7xRLe14qxU+zbPLlXvG/9U7WVsn2xu/+9n06/x1oLU90yzud8m4v/PJ3L+zX/sU+7T9o+08esv3nv/KdPx5yVQDgGGxsba/M1+u19cep8Ew8Emk80oU038A9Xiofez7lXmkMqzAfj8gm+KD/JngMCgXulAAAgKH4/0H/fdVpYQkBAAAAAAAAAAAAAAAAAADAKXTQbcBiALcT2xtzp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs638BAAD//2PM4P8=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) 3.624176853s ago: executing program 1 (id=2110): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000015c0)={0x4, [0x0, 0x8, 0x40], [{0x10, 0x8, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x5, 0x6}, {}, {}, {0x5, 0x9728851}, {0x8, 0x80000}, {0xee, 0x80000000}, {0x8}], 0x1f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x80001) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000280)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r6, r5}}, 0x18) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r8, r7, 0x0, 0xffffffff) write$P9_RREADDIR(r8, &(0x7f00000002c0)={0xb, 0x29, 0x1, {0x9}}, 0xb) setresuid(0xee01, 0xee00, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) r9 = socket$l2tp(0x2, 0x2, 0x73) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002a80)={'wlan0\x00'}) 2.803383869s ago: executing program 2 (id=2111): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc029900000000761ad367dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33719cb230328931deb95ef3fcafb1de27743a93f4715976edec860ab4dc3a4f514173187437437938d275a6d39cea", 0xd7, r3) keyctl$search(0xa, r3, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 2.69759856s ago: executing program 3 (id=2112): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0x5d}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.640564471s ago: executing program 4 (id=2113): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000", 0x17}], 0x1}, 0x0) 541.762826ms ago: executing program 4 (id=2114): socket$packet(0x11, 0xa, 0x300) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) connect$llc(r0, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000300)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x1, 0x3, 0x8, 0x0, @void}, "2216ad1c91"}}}}}}}, 0x0) 521.411017ms ago: executing program 1 (id=2115): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, 0x0) 341.248788ms ago: executing program 1 (id=2116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 340.790878ms ago: executing program 2 (id=2117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x101}, 0x14}}, 0x0) 225.065139ms ago: executing program 2 (id=2118): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x3, 0x8, 0x0, 0x70bd28, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_key={0x1, 0x8}]}, 0x40}, 0x1, 0x7}, 0x0) 209.715139ms ago: executing program 3 (id=2119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) sendmsg$inet(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)="5685e18e179a", 0x6}], 0x1}, 0x80) 209.255199ms ago: executing program 1 (id=2120): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xcaf, 0x240) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000002400)=0x200) 96.52587ms ago: executing program 1 (id=2121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32=r3, @ANYBLOB="0b00e880976b640868433000a5"], 0x2c}], 0x1}, 0x0) 96.34271ms ago: executing program 2 (id=2122): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=2123): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a", 0x23}], 0x1}, 0x0) kernel console output (not intermixed with test programs): udit(147.830:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 148.035924][ T26] audit: type=1326 audit(147.830:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 148.075057][ T26] audit: type=1326 audit(147.830:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 149.918813][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 149.942117][ T5820] netlink: 'syz.3.592': attribute type 30 has an invalid length. [ 150.045159][ T5821] netlink: 'syz.1.593': attribute type 4 has an invalid length. [ 150.269866][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.290192][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.308310][ T5790] device bridge_slave_0 entered promiscuous mode [ 150.329382][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.341454][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.369475][ T5790] device bridge_slave_1 entered promiscuous mode [ 150.460162][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.465103][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.486037][ T5838] loop3: detected capacity change from 0 to 1024 [ 150.604376][ T5790] team0: Port device team_slave_0 added [ 150.615267][ T5842] loop2: detected capacity change from 0 to 512 [ 150.636938][ T5790] team0: Port device team_slave_1 added [ 150.647306][ T5838] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.677465][ T5842] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 150.680252][ T5842] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.697581][ T5842] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 150.708264][ T5849] loop7: detected capacity change from 0 to 16384 [ 150.728334][ T5842] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 150.751836][ T5842] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2932: inode #16: comm syz.2.601: corrupted xattr block 31 [ 150.762722][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.764652][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.858103][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.863296][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.865187][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.929367][ T5842] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 150.932164][ T5842] EXT4-fs (loop2): 1 orphan inode deleted [ 150.942227][ T5849] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 150.946154][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.946397][ T5842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.059237][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 151.727387][ T25] Bluetooth: hci5: command 0x0409 tx timeout [ 151.856008][ T5790] device hsr_slave_0 entered promiscuous mode [ 151.917253][ T5790] device hsr_slave_1 entered promiscuous mode [ 151.937346][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.939536][ T5790] Cannot create hsr debugfs directory [ 152.274544][ T5876] loop4: detected capacity change from 0 to 512 [ 152.379209][ T5790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.381359][ T5876] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,nouid32,acl,,errors=continue. Quota mode: writeback. [ 152.418520][ T5878] loop1: detected capacity change from 0 to 128 [ 152.449205][ T5790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.502201][ T5790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.539679][ T5790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.542025][ T5878] attempt to access beyond end of device [ 152.542025][ T5878] loop1: rw=0, want=255510, limit=128 [ 152.567495][ T5878] Buffer I/O error on dev loop1, logical block 127754, async page read [ 152.824568][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.863796][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.866133][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.889871][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.893686][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 152.893698][ T26] audit: type=1326 audit(152.860:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 152.925626][ T26] audit: type=1326 audit(152.880:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 152.973808][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.976970][ T26] audit: type=1326 audit(152.920:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 153.145271][ T5891] loop1: detected capacity change from 0 to 256 [ 153.976901][ T4123] Bluetooth: hci5: command 0x041b tx timeout [ 153.986025][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.999592][ T26] audit: type=1326 audit(152.930:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=442 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 154.005601][ T26] audit: type=1326 audit(152.930:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 154.022518][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.024428][ T4200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.027851][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.100482][ T26] audit: type=1326 audit(152.930:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.4.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 154.170711][ T5894] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 154.172970][ T5894] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 154.189238][ T5894] vhci_hcd vhci_hcd.0: Device attached [ 154.202706][ T5895] vhci_hcd: connection closed [ 154.205673][ T136] vhci_hcd: stop threads [ 154.209687][ T136] vhci_hcd: release socket [ 154.210992][ T136] vhci_hcd: disconnect device [ 154.840259][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.843168][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.845801][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.848431][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.253627][ T26] audit: type=1326 audit(155.220:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 155.268982][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.276187][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.290638][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.299548][ T26] audit: type=1326 audit(155.260:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 155.307387][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.344555][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.351355][ T26] audit: type=1326 audit(155.270:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 155.370698][ T26] audit: type=1326 audit(155.280:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 155.413738][ T5916] loop1: detected capacity change from 0 to 764 [ 155.416862][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.419871][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.423261][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.437119][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.439901][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.448293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.460350][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.702428][ T5925] loop4: detected capacity change from 0 to 736 [ 155.783221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.785533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.830852][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.832592][ T5925] rock: directory entry would overflow storage [ 155.834346][ T5925] rock: sig=0x5850, size=36, remaining=14 [ 156.135226][ T4123] Bluetooth: hci5: command 0x040f tx timeout [ 156.423976][ T5952] loop1: detected capacity change from 0 to 256 [ 158.177043][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 158.727557][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.730847][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.742137][ T5954] sctp: failed to load transform for md5: -2 [ 158.854534][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.857810][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.862992][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.886340][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.919998][ T5790] device veth0_vlan entered promiscuous mode [ 158.960929][ T5790] device veth1_vlan entered promiscuous mode [ 159.049293][ T5790] device veth0_macvtap entered promiscuous mode [ 159.055329][ T5790] device veth1_macvtap entered promiscuous mode [ 159.069982][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.089330][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.117984][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.123655][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.132593][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.168929][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.183448][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.186306][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.193259][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.198572][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.205880][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.221021][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.231119][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.242459][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.272548][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.278802][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.282157][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.299604][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.312328][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.315609][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 159.315625][ T26] audit: type=1326 audit(159.280:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.327996][ T26] audit: type=1326 audit(159.290:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.335669][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.344955][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.350341][ T26] audit: type=1326 audit(159.290:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.361727][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.370164][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.374376][ T26] audit: type=1326 audit(159.290:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.395038][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.403872][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.407581][ T26] audit: type=1326 audit(159.300:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.413581][ T26] audit: type=1326 audit(159.300:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.428601][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.438001][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.446055][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.447239][ T5987] loop3: detected capacity change from 0 to 512 [ 159.450593][ T26] audit: type=1326 audit(159.300:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.462508][ T26] audit: type=1326 audit(159.300:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.482316][ T5790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.484947][ T5790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.498243][ T5790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.500809][ T5790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.504197][ T26] audit: type=1326 audit(159.300:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.532153][ T26] audit: type=1326 audit(159.300:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=223 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 159.561206][ T5987] EXT4-fs (loop3): Ignoring removed orlov option [ 159.635655][ T5987] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.652: Attempting to read directory block (0) that is past i_size (256) [ 159.654142][ T5987] EXT4-fs (loop3): Remounting filesystem read-only [ 159.656178][ T5987] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 159.677046][ T5987] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,auto_da_alloc,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 159.749760][ T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.753768][ T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.804498][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.820534][ T5987] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.652: Attempting to read directory block (0) that is past i_size (256) [ 159.831091][ T334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.833682][ T334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.844906][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.857655][ T5987] EXT4-fs (loop3): Remounting filesystem read-only [ 160.052692][ T6002] loop5: detected capacity change from 0 to 512 [ 160.162071][ T6002] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.371204][ T6014] loop2: detected capacity change from 0 to 512 [ 160.432665][ T5995] loop4: detected capacity change from 0 to 32768 [ 160.467583][ T6014] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 160.532755][ T6014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 160.580463][ T5995] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 160.593710][ T6014] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.659: corrupted in-inode xattr [ 160.625079][ T6014] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.659: couldn't read orphan inode 15 (err -117) [ 160.647885][ T6014] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 160.923635][ T6010] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 160.935709][ T4024] ocfs2: Unmounting device (7,4) on (node local) [ 160.980309][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.659'. [ 160.980633][ T6010] lo speed is unknown, defaulting to 1000 [ 161.100811][ T6010] lo speed is unknown, defaulting to 1000 [ 161.129539][ T6010] lo speed is unknown, defaulting to 1000 [ 161.523209][ T6010] infiniband sz1: set active [ 161.527599][ T4071] lo speed is unknown, defaulting to 1000 [ 161.542614][ T6010] infiniband sz1: added lo [ 161.774415][ T6010] RDS/IB: sz1: added [ 161.776536][ T6010] smc: adding ib device sz1 with port count 1 [ 161.791253][ T6010] smc: ib device sz1 port 1 has pnetid [ 161.794894][ T1982] lo speed is unknown, defaulting to 1000 [ 161.800085][ T6010] lo speed is unknown, defaulting to 1000 [ 161.882340][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 161.928007][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 161.965306][ T6068] loop4: detected capacity change from 0 to 512 [ 161.985648][ T6068] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 161.994039][ T6068] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 162.006483][ T6068] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.048668][ T6068] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 162.053205][ T6068] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 162.056934][ T6068] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.682: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 162.068169][ T6068] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.682: couldn't read orphan inode 13 (err -117) [ 162.074558][ T6068] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,jqfmt=vfsv0,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 162.082398][ T6010] lo speed is unknown, defaulting to 1000 [ 162.132352][ T6068] EXT4-fs (loop4): shut down requested (1) [ 162.146567][ T6051] loop5: detected capacity change from 0 to 32768 [ 162.219412][ T6051] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 162.264268][ T6086] netlink: 300 bytes leftover after parsing attributes in process `syz.1.688'. [ 162.492419][ T6010] lo speed is unknown, defaulting to 1000 [ 162.573150][ T6010] lo speed is unknown, defaulting to 1000 [ 162.573283][ T5790] ocfs2: Unmounting device (7,5) on (node local) [ 162.651432][ T6010] lo speed is unknown, defaulting to 1000 [ 162.726232][ T6095] loop4: detected capacity change from 0 to 1024 [ 162.735071][ T6095] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.758363][ T6095] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.785403][ T6095] JBD2: no valid journal superblock found [ 162.795841][ T6095] EXT4-fs (loop4): error loading journal [ 162.815987][ T6010] lo speed is unknown, defaulting to 1000 [ 163.293763][ T6111] loop4: detected capacity change from 0 to 256 [ 163.999382][ T1535] Bluetooth: hci2: command 0x0406 tx timeout [ 164.001353][ T1535] Bluetooth: hci0: command 0x0406 tx timeout [ 164.020092][ T1535] Bluetooth: hci1: command 0x0406 tx timeout [ 164.050209][ T1535] Bluetooth: hci3: command 0x0406 tx timeout [ 164.357375][ T6120] netpci0: tun_chr_ioctl cmd 2147767511 [ 164.405859][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.430509][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.443765][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.455257][ T6121] device bridge_slave_0 left promiscuous mode [ 164.478314][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.916356][ T6121] device bridge_slave_1 left promiscuous mode [ 164.919243][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.974506][ T6121] bond0: (slave bond_slave_0): Releasing backup interface [ 165.056423][ T6121] bond0: (slave bond_slave_1): Releasing backup interface [ 165.430155][ T6121] team0: Port device team_slave_0 removed [ 165.481367][ T6121] team0: Port device team_slave_1 removed [ 165.483952][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.485989][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.499765][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.501768][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.503239][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 165.503251][ T26] audit: type=1326 audit(165.470:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 165.525339][ T26] audit: type=1326 audit(165.490:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9b3c32cc code=0x7ffc0000 [ 165.567219][ T26] audit: type=1326 audit(165.490:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff9b3c31e8 code=0x7ffc0000 [ 165.584628][ T26] audit: type=1326 audit(165.490:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff9b3c30ec code=0x7ffc0000 [ 165.603953][ T26] audit: type=1326 audit(165.490:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff9b3c30ec code=0x7ffc0000 [ 165.644979][ T6132] loop3: detected capacity change from 0 to 512 [ 165.650582][ T26] audit: type=1326 audit(165.510:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9b3bf62c code=0x7ffc0000 [ 165.678147][ T26] audit: type=1326 audit(165.510:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 165.682843][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.708'. [ 165.683918][ T26] audit: type=1326 audit(165.520:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 165.708551][ T6132] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 165.712508][ T6132] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.738985][ T26] audit: type=1326 audit(165.520:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 165.744642][ T26] audit: type=1326 audit(165.520:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 165.752620][ T6132] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 165.755141][ T6132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 165.767865][ T6132] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 165.770579][ T6132] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 165.772865][ T6132] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 165.808842][ T6141] process 'syz.4.711' launched '/dev/fd/3' with NULL argv: empty string added [ 165.854401][ T6132] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.706: dx entry: limit 65535 != root limit 120 [ 165.867198][ T6132] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.706: Corrupt directory, running e2fsck is recommended [ 167.022333][ T6072] udevd[6072]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.075459][ T6207] loop4: detected capacity change from 0 to 40427 [ 167.082631][ T6207] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 167.084945][ T6207] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 167.090268][ T6207] F2FS-fs (loop4): invalid crc value [ 167.108527][ T6072] udevd[6072]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.120286][ T6072] udevd[6072]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 167.174588][ T6207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.204561][ T6207] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 167.207039][ T6207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 168.827761][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 169.132615][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 169.712928][ T6307] sctp: [Deprecated]: syz.1.781 (pid 6307) Use of int in max_burst socket option deprecated. [ 169.712928][ T6307] Use struct sctp_assoc_value instead [ 169.957557][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 170.089117][ T6328] syz.4.790 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 170.178952][ T6330] team0: Device ipvlan2 failed to register rx_handler [ 171.484057][ T26] kauditd_printk_skb: 98 callbacks suppressed [ 171.484072][ T26] audit: type=1326 audit(171.450:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.503681][ T26] audit: type=1326 audit(171.470:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.526857][ T26] audit: type=1326 audit(171.480:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.532747][ T26] audit: type=1326 audit(171.480:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.653742][ T26] audit: type=1326 audit(171.480:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.697642][ T26] audit: type=1326 audit(171.480:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.734817][ T26] audit: type=1326 audit(171.480:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.852948][ T26] audit: type=1326 audit(171.820:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.871380][ T26] audit: type=1326 audit(171.820:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 171.907515][ T26] audit: type=1326 audit(171.820:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 172.182498][ T6409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.824'. [ 172.315920][ T6409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.824'. [ 172.405872][ T6417] device macsec0 left promiscuous mode [ 172.417493][ T6417] device macsec0 entered promiscuous mode [ 172.492398][ T6409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.824'. [ 172.586599][ T6424] loop5: detected capacity change from 0 to 1024 [ 172.716540][ T6424] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.764959][ T6433] loop4: detected capacity change from 0 to 2048 [ 172.853442][ T6433] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.099232][ T6441] loop4: detected capacity change from 0 to 256 [ 173.261129][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 173.656100][ T6445] loop5: detected capacity change from 0 to 256 [ 175.353179][ T6441] attempt to access beyond end of device [ 175.353179][ T6441] loop4: rw=2049, want=260, limit=256 [ 177.501092][ T6478] loop3: detected capacity change from 0 to 764 [ 177.530647][ T6478] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 178.013401][ T6494] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.016412][ T6494] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 178.152055][ T6498] loop4: detected capacity change from 0 to 512 [ 178.590713][ T6498] EXT4-fs (loop4): Ignoring removed oldalloc option [ 178.729808][ T6498] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.851: Parent and EA inode have the same ino 15 [ 178.756887][ T6498] EXT4-fs (loop4): Remounting filesystem read-only [ 178.769363][ T6498] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 178.790185][ T6498] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.851: Parent and EA inode have the same ino 15 [ 178.811622][ T6498] EXT4-fs (loop4): Remounting filesystem read-only [ 178.834864][ T6498] EXT4-fs (loop4): 1 orphan inode deleted [ 178.836565][ T6498] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,prjquota,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: writeback. [ 179.008526][ T26] kauditd_printk_skb: 293 callbacks suppressed [ 179.008540][ T26] audit: type=1326 audit(178.980:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.3.861" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd5ad28 code=0x0 [ 179.138846][ T6521] loop5: detected capacity change from 0 to 128 [ 179.262741][ T6528] attempt to access beyond end of device [ 179.262741][ T6528] loop5: rw=2049, want=425, limit=128 [ 179.401825][ T6520] attempt to access beyond end of device [ 179.401825][ T6520] loop5: rw=524288, want=369, limit=128 [ 179.540729][ T6535] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.869'. [ 179.862378][ T6551] loop5: detected capacity change from 0 to 1764 [ 179.886801][ T6556] futex_wake_op: syz.4.878 tries to shift op by 144; fix this program [ 180.071306][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.882'. [ 180.078932][ T6564] netlink: 'syz.5.883': attribute type 27 has an invalid length. [ 180.319632][ T6576] loop4: detected capacity change from 0 to 1024 [ 180.427310][ T6576] EXT4-fs (loop4): Ignoring removed nobh option [ 180.430463][ T6576] EXT4-fs (loop4): Ignoring removed bh option [ 180.435656][ T6576] EXT4-fs (loop4): Ignoring removed bh option [ 180.482485][ T6576] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,mb_optimize_scan=0x0000000000000000,bh,bh,,errors=continue. Quota mode: writeback. [ 180.694593][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 181.035827][ T6576] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.886: Allocating blocks 497-513 which overlap fs metadata [ 181.079125][ T6576] EXT4-fs (loop4): pa 00000000dfe7ee8f: logic 256, phys. 385, len 8 [ 181.081655][ T6576] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 181.824215][ T6603] loop3: detected capacity change from 0 to 8192 [ 181.917268][ T6603] attempt to access beyond end of device [ 181.917268][ T6603] loop3: rw=0, want=57848, limit=8192 [ 181.935160][ T6603] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 181.943882][ T6603] FAT-fs (loop3): Filesystem has been set read-only [ 181.955684][ T6603] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 181.961089][ T6603] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 182.270424][ T6608] loop3: detected capacity change from 0 to 1024 [ 182.311045][ T6608] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 182.321617][ T26] audit: type=1326 audit(182.290:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.351088][ T26] audit: type=1326 audit(182.320:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.367837][ T6608] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c119, mo2=0002] [ 182.370469][ T6608] System zones: 0-1, 3-12 [ 182.372456][ T6608] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,max_dir_size_kb=0x0000000000000009,nombcache,norecovery,data_err=ignore,acl,debug,sysvgroups,nomblk_io_submit,,errors=continue. Quota mode: none. [ 182.379490][ T26] audit: type=1326 audit(182.330:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.405744][ T26] audit: type=1326 audit(182.360:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.415920][ T26] audit: type=1326 audit(182.360:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.422687][ T26] audit: type=1326 audit(182.360:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.453265][ T26] audit: type=1326 audit(182.360:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.495061][ T26] audit: type=1326 audit(182.360:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.511134][ T26] audit: type=1326 audit(182.360:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 182.723086][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.899'. [ 182.873784][ T6564] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.876526][ T6564] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.886507][ T6564] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.889635][ T6564] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.161023][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 183.359306][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.375665][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.391948][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.466955][ T6570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.471502][ T6574] tipc: Started in network mode [ 183.473029][ T6574] tipc: Node identity 6, cluster identity 4711 [ 183.474793][ T6574] tipc: Node number set to 6 [ 183.486259][ T6591] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 184.026604][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 184.026619][ T26] audit: type=1326 audit(183.990:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 184.058274][ T26] audit: type=1326 audit(184.030:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 184.075407][ T26] audit: type=1326 audit(184.030:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 184.095411][ T6657] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 184.122578][ T26] audit: type=1326 audit(184.030:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 184.155765][ T26] audit: type=1326 audit(184.030:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=96 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 184.181591][ T26] audit: type=1326 audit(184.030:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 184.225995][ T26] audit: type=1326 audit(184.100:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 184.226045][ T26] audit: type=1326 audit(184.120:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 184.226080][ T26] audit: type=1326 audit(184.120:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 184.226115][ T26] audit: type=1326 audit(184.120:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.4.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 184.238237][ T6657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.317827][ T6664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.318201][ T6664] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 184.319762][ T6664] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 184.484886][ T6677] netlink: 'syz.5.923': attribute type 1 has an invalid length. [ 184.499230][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.923'. [ 184.729419][ T6689] loop5: detected capacity change from 0 to 512 [ 184.813619][ T6689] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 184.843208][ T6702] 9p: Unknown uid 00000000004294967295 [ 184.971708][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 185.176441][ T6716] device syzkaller1 entered promiscuous mode [ 185.230165][ T6724] netlink: 'syz.2.934': attribute type 4 has an invalid length. [ 185.232566][ T6724] rdma_rxe: ignoring netdev event = 23 for lo [ 185.247954][ T6728] udc-core: couldn't find an available UDC or it's busy [ 185.249816][ T6728] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 185.274643][ T6724] rdma_rxe: lo changed mtu to 4 [ 185.280357][ T6724] rdma_rxe: ignoring netdev event = 10 for lo [ 185.293492][ T6724] infiniband sz1: set down [ 185.296661][ T21] lo speed is unknown, defaulting to 1000 [ 185.360892][ T6728] lo speed is unknown, defaulting to 1000 [ 185.362422][ T21] lo speed is unknown, defaulting to 1000 [ 185.424956][ T6728] lo speed is unknown, defaulting to 1000 [ 185.433007][ T6728] lo speed is unknown, defaulting to 1000 [ 185.746478][ T6728] infiniband syz2: set active [ 185.748040][ T25] lo speed is unknown, defaulting to 1000 [ 185.757119][ T6728] infiniband syz2: added lo [ 185.790351][ T6728] infiniband syz2: Couldn't open port 1 [ 185.853594][ T6728] RDS/IB: syz2: added [ 185.855064][ T6728] smc: adding ib device syz2 with port count 1 [ 185.876911][ T6728] smc: ib device syz2 port 1 has pnetid [ 185.878678][ T25] lo speed is unknown, defaulting to 1000 [ 185.907228][ T6728] lo speed is unknown, defaulting to 1000 [ 186.085208][ T6759] loop4: detected capacity change from 0 to 512 [ 186.113656][ T6728] lo speed is unknown, defaulting to 1000 [ 186.206594][ T6759] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.214572][ T6728] lo speed is unknown, defaulting to 1000 [ 186.242228][ T6759] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.947: bg 0: block 248: padding at end of block bitmap is not set [ 186.265688][ T6728] lo speed is unknown, defaulting to 1000 [ 186.317333][ T6759] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.947: Failed to acquire dquot type 1 [ 186.341522][ T6728] lo speed is unknown, defaulting to 1000 [ 186.351593][ T6759] EXT4-fs (loop4): 1 truncate cleaned up [ 186.377039][ T6759] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.393286][ T6728] lo speed is unknown, defaulting to 1000 [ 187.068294][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'. [ 187.098827][ T6791] bridge0: port 3(batadv1) entered blocking state [ 187.104588][ T6791] bridge0: port 3(batadv1) entered disabled state [ 187.127790][ T6791] device batadv1 entered promiscuous mode [ 187.271879][ T6797] loop4: detected capacity change from 0 to 2048 [ 187.288760][ T6800] lo speed is unknown, defaulting to 1000 [ 187.333933][ T6800] lo speed is unknown, defaulting to 1000 [ 187.432204][ T6797] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 187.445880][ T6797] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.549301][ T6797] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,usrjquota=./file0,resuid=0x000000000000ee01,discard,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 187.558102][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579620][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579677][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579695][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579713][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579730][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579747][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579764][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579792][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579809][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579827][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579844][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579861][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579879][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579896][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579913][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579930][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579947][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579965][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.579982][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580000][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580017][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580035][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580052][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580069][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580086][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580103][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580121][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580138][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580155][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580173][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580190][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580207][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580224][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580242][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580265][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580284][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580302][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580319][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580336][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580353][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580370][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.580387][ T1535] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 187.597187][ T1535] hid-generic 0000:0000:20000000.0002: hidraw0: HID v0.01 Device [syz0] on syz1 [ 187.611672][ T4122] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 187.611753][ T4122] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 187.769273][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 188.716538][ T6826] loop3: detected capacity change from 0 to 8192 [ 188.904025][ T6826] attempt to access beyond end of device [ 188.904025][ T6826] loop3: rw=0, want=57848, limit=8192 [ 188.942966][ T6826] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 188.945526][ T6826] FAT-fs (loop3): Filesystem has been set read-only [ 188.949663][ T6826] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 188.977058][ T6826] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 189.028508][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 189.028523][ T26] audit: type=1326 audit(189.000:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.069463][ T26] audit: type=1326 audit(189.010:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.075472][ T26] audit: type=1326 audit(189.010:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.125915][ T26] audit: type=1326 audit(189.090:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.138367][ T26] audit: type=1326 audit(189.110:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.185943][ T26] audit: type=1326 audit(189.150:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.193143][ T26] audit: type=1326 audit(189.160:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.208056][ T26] audit: type=1326 audit(189.160:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.234942][ T26] audit: type=1326 audit(189.160:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=287 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 189.265504][ T26] audit: type=1326 audit(189.160:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 190.042643][ T6870] loop5: detected capacity change from 0 to 2048 [ 190.146376][ T6870] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.094912][ T6882] loop3: detected capacity change from 0 to 32768 [ 191.265787][ T6882] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 192.203415][ T4039] ocfs2: Unmounting device (7,3) on (node local) [ 192.507832][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.509711][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.569514][ T6920] loop5: detected capacity change from 0 to 40427 [ 192.635839][ T6920] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 192.639355][ T6920] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 192.662147][ T6920] F2FS-fs (loop5): invalid crc value [ 192.693299][ T6920] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.758034][ T6920] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 192.761065][ T6920] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 193.051882][ T6969] netlink: 'syz.3.1022': attribute type 4 has an invalid length. [ 193.629133][ T6978] lo speed is unknown, defaulting to 1000 [ 193.691769][ T6978] lo speed is unknown, defaulting to 1000 [ 195.920220][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 195.920233][ T26] audit: type=1326 audit(195.890:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 195.930884][ T26] audit: type=1326 audit(195.900:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 195.937845][ T26] audit: type=1326 audit(195.900:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 195.953680][ T26] audit: type=1326 audit(195.920:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 195.965809][ T26] audit: type=1326 audit(195.920:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 196.069360][ T26] audit: type=1326 audit(196.040:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.5.1040" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x0 [ 196.580020][ T7029] 9p: Unknown uid 00000000004294967295 [ 196.778136][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1047'. [ 196.786913][ T7038] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1047'. [ 196.801073][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1047'. [ 196.804232][ T7038] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1047'. [ 196.829202][ T7038] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1047'. [ 196.988040][ T26] audit: type=1326 audit(196.960:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 196.993942][ T26] audit: type=1326 audit(196.960:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 197.080822][ T26] audit: type=1326 audit(197.050:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 197.093715][ T26] audit: type=1326 audit(197.050:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 198.159605][ T7064] netlink: 'syz.3.1061': attribute type 29 has an invalid length. [ 198.162336][ T7064] netlink: 'syz.3.1061': attribute type 29 has an invalid length. [ 198.212319][ T7064] netlink: 'syz.3.1061': attribute type 29 has an invalid length. [ 198.228195][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 198.230665][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.232745][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.275832][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.286990][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.438989][ T7077] netlink: 'syz.5.1066': attribute type 29 has an invalid length. [ 198.444926][ T7077] netlink: 'syz.5.1066': attribute type 29 has an invalid length. [ 198.453819][ T7077] netlink: 'syz.5.1066': attribute type 29 has an invalid length. [ 199.253083][ T7088] lo speed is unknown, defaulting to 1000 [ 199.476611][ T7088] lo speed is unknown, defaulting to 1000 [ 199.995332][ T7102] loop5: detected capacity change from 0 to 1024 [ 200.051507][ T7102] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.103875][ T7102] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,resuid=0x0000000000000000,resuid=0x0000000000000000,norecovery,lazytime,dioread_nolock,nolazytime,data_err=abort,,errors=continue. Quota mode: writeback. [ 200.181296][ T7117] atomic_op 00000000f843e77c conn xmit_atomic 0000000000000000 [ 200.552106][ T7132] loop5: detected capacity change from 0 to 2048 [ 200.596102][ T7132] loop5: p1 < > p4 [ 200.609656][ T7132] loop5: p4 size 8388608 extends beyond EOD, truncated [ 201.175559][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 201.193731][ T6072] udevd[6072]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 201.378357][ T7170] team0: Device ipvlan2 failed to register rx_handler [ 201.429576][ T6072] udevd[6072]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 201.437569][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 201.437586][ T26] audit: type=1326 audit(201.410:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.444982][ T26] audit: type=1326 audit(201.410:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.469804][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 201.496814][ T26] audit: type=1326 audit(201.410:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.497924][ T7179] loop4: detected capacity change from 0 to 512 [ 201.502581][ T26] audit: type=1326 audit(201.410:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.502632][ T26] audit: type=1326 audit(201.410:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.577357][ T26] audit: type=1326 audit(201.410:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.588007][ T26] audit: type=1326 audit(201.410:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.593765][ T26] audit: type=1326 audit(201.410:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x7ffc0000 [ 201.767066][ T7179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1110: inode #1: comm syz.4.1110: iget: illegal inode # [ 201.779570][ T7179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1110: error while reading EA inode 1 err=-117 [ 201.799911][ T7179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1110: inode #1: comm syz.4.1110: iget: illegal inode # [ 201.805801][ T7179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1110: error while reading EA inode 1 err=-117 [ 201.841693][ T7179] EXT4-fs (loop4): 1 orphan inode deleted [ 201.863793][ T7179] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,init_itable=0x00000000000000a6,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 202.908804][ T7207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1123'. [ 203.094758][ T7207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1123'. [ 203.218061][ T7207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1123'. [ 203.344602][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1130'. [ 203.354739][ T7233] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 203.524144][ T7245] loop4: detected capacity change from 0 to 2048 [ 203.540083][ T7245] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 203.545283][ T7245] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.572325][ T7245] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,usrjquota=./file0,resuid=0x000000000000ee01,discard,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 203.811613][ T7262] loop4: detected capacity change from 0 to 1024 [ 203.908086][ T7266] IPv6: Can't replace route, no match found [ 204.161186][ T7262] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.139263][ T7287] device macsec0 entered promiscuous mode [ 205.232011][ T7285] loop5: detected capacity change from 0 to 2048 [ 205.358973][ T7285] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 205.361561][ T7285] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.414028][ T7285] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,usrjquota=./file0,resuid=0x000000000000ee01,discard,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 206.445475][ T7312] loop5: detected capacity change from 0 to 512 [ 206.542945][ T7312] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 206.582151][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 206.593992][ T7318] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 206.598393][ T26] audit: type=1326 audit(206.550:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.610202][ T7312] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.1159: Unimplemented hash flags: 0x0001 [ 206.613854][ T7312] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1159: Corrupt directory, running e2fsck is recommended [ 206.651372][ T26] audit: type=1326 audit(206.550:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.666805][ T26] audit: type=1326 audit(206.550:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.667503][ T7324] device netdevsim0 entered promiscuous mode [ 206.674478][ T26] audit: type=1326 audit(206.550:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.680712][ T26] audit: type=1326 audit(206.550:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.686838][ T26] audit: type=1326 audit(206.550:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.692540][ T26] audit: type=1326 audit(206.550:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.699473][ T26] audit: type=1326 audit(206.550:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.705605][ T26] audit: type=1326 audit(206.550:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 206.712926][ T26] audit: type=1326 audit(206.550:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 207.447916][ T7324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.634556][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 207.660168][ T7337] bridge0: port 4(syz_tun) entered blocking state [ 207.662466][ T7337] bridge0: port 4(syz_tun) entered disabled state [ 207.677883][ T7337] device syz_tun entered promiscuous mode [ 207.680220][ T7337] bridge0: port 4(syz_tun) entered blocking state [ 207.682489][ T7337] bridge0: port 4(syz_tun) entered forwarding state [ 208.739546][ T7377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1188'. [ 208.742156][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 208.745175][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 208.955924][ T7384] lo speed is unknown, defaulting to 1000 [ 208.986495][ T7388] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1192'. [ 209.595448][ T7384] lo speed is unknown, defaulting to 1000 [ 209.715036][ T7403] device ipvlan2 entered promiscuous mode [ 209.729599][ T7403] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 209.754286][ T7403] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 209.767729][ T7403] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 211.543315][ T7440] lo speed is unknown, defaulting to 1000 [ 211.598860][ T7466] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 211.825447][ T7440] lo speed is unknown, defaulting to 1000 [ 212.363379][ T7503] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1240'. [ 212.740937][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 212.944370][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 212.944385][ T26] audit: type=1326 audit(212.910:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 212.974832][ T26] audit: type=1326 audit(212.940:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.013672][ T26] audit: type=1326 audit(212.940:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.066791][ T26] audit: type=1326 audit(212.940:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.083086][ T26] audit: type=1326 audit(212.940:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.108021][ T26] audit: type=1326 audit(212.940:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.134324][ T26] audit: type=1326 audit(212.940:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.164829][ T26] audit: type=1326 audit(212.940:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=189 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.185197][ T26] audit: type=1326 audit(212.940:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 213.471110][ T26] audit: type=1326 audit(213.440:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x7ffc0000 [ 214.083799][ T7542] udc-core: couldn't find an available UDC or it's busy [ 214.103269][ T7542] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 214.961936][ T7565] tipc: Enabling of bearer rejected, failed to enable media [ 217.044188][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 218.129321][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 218.129335][ T26] audit: type=1326 audit(218.100:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.1292" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x0 [ 219.217937][ T7669] atomic_op 00000000b0fbdc42 conn xmit_atomic 0000000000000000 [ 219.415097][ T26] audit: type=1326 audit(219.380:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.431946][ T26] audit: type=1326 audit(219.380:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.450459][ T26] audit: type=1326 audit(219.390:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.478700][ T26] audit: type=1326 audit(219.390:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.484426][ T26] audit: type=1326 audit(219.390:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.517508][ T26] audit: type=1326 audit(219.390:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.537801][ T26] audit: type=1326 audit(219.390:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.572289][ T26] audit: type=1326 audit(219.390:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 219.606928][ T26] audit: type=1326 audit(219.390:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff89a11d28 code=0x7ffc0000 [ 220.040536][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 220.051877][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 222.086451][ T7728] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 222.088518][ T7728] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.099429][ T7728] vhci_hcd vhci_hcd.0: Device attached [ 222.183270][ T7728] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1334'. [ 222.185808][ T7728] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 222.249626][ T7729] vhci_hcd: connection closed [ 222.249967][ T4129] vhci_hcd: stop threads [ 222.252440][ T4129] vhci_hcd: release socket [ 222.256416][ T4129] vhci_hcd: disconnect device [ 223.548862][ T26] kauditd_printk_skb: 254 callbacks suppressed [ 223.548882][ T26] audit: type=1326 audit(223.500:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.556455][ T26] audit: type=1326 audit(223.500:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.570839][ T7755] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1343'. [ 223.579808][ T26] audit: type=1326 audit(223.500:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.600313][ T26] audit: type=1326 audit(223.500:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.625361][ T26] audit: type=1326 audit(223.500:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.642055][ T26] audit: type=1326 audit(223.500:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.658636][ T26] audit: type=1326 audit(223.500:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.664409][ T26] audit: type=1326 audit(223.500:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.686403][ T26] audit: type=1326 audit(223.500:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.702627][ T26] audit: type=1326 audit(223.500:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.1342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff9b3c0d28 code=0x7ffc0000 [ 223.775970][ T7761] lo speed is unknown, defaulting to 1000 [ 224.034125][ T7761] lo speed is unknown, defaulting to 1000 [ 224.470060][ T7786] lo speed is unknown, defaulting to 1000 [ 224.663916][ T7786] lo speed is unknown, defaulting to 1000 [ 225.081278][ T7821] netlink: 'syz.1.1366': attribute type 12 has an invalid length. [ 226.060744][ T7860] bridge0: port 3(vlan2) entered blocking state [ 226.062563][ T7860] bridge0: port 3(vlan2) entered disabled state [ 230.168136][ T7925] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 234.604121][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1420'. [ 234.987062][ T7982] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1425'. [ 236.720122][ T7999] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.723167][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 236.832309][ T8011] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 236.872208][ T8011] team0: Device hsr_slave_0 failed to register rx_handler [ 236.933639][ T8019] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 237.012390][ T8019] batman_adv: batadv0: Adding interface: dummy0 [ 237.014229][ T8019] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.095945][ T8019] batman_adv: batadv0: Interface activated: dummy0 [ 237.107890][ T8011] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 237.130926][ T8028] batadv0: mtu less than device minimum [ 237.137026][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.144710][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.151892][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.159078][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.166041][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.173185][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.180399][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.187474][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.194417][ T8028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.561821][ T8127] sock: sock_timestamping_bind_phc: sock not bind to device [ 240.357495][ T8145] device pim6reg1 entered promiscuous mode [ 240.621364][ T4059] syzkaller0: tun_net_xmit 76 [ 240.623423][ T4059] syzkaller0: tun_net_xmit 48 [ 240.638666][ T8170] syzkaller0: create flow: hash 360440967 index 2 [ 240.647293][ T4059] syzkaller0: tun_net_xmit 76 [ 240.707141][ T1535] syzkaller0: tun_net_xmit 76 [ 240.730040][ T8179] syzkaller0: delete flow: hash 360440967 index 2 [ 240.756992][ T1535] syzkaller0: tun_net_xmit 76 [ 240.790924][ T1535] syzkaller0: tun_net_xmit 76 [ 242.018142][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 242.018157][ T26] audit: type=1326 audit(497.981:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.3.1526" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd5ad28 code=0x0 [ 243.626305][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 243.664089][ T8270] device bond1 entered promiscuous mode [ 243.666100][ T8270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.076398][ T8301] infiniband syz2: set active [ 245.116002][ T8301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.119676][ T1535] lo speed is unknown, defaulting to 1000 [ 245.131793][ T8301] netlink: 'syz.5.1562': attribute type 10 has an invalid length. [ 245.165648][ T8301] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.168507][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 245.241994][ T8300] delete_channel: no stack [ 245.319353][ T8312] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 245.326451][ T8311] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 245.389541][ T8312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.392363][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1569'. [ 245.506574][ T8323] net_ratelimit: 10 callbacks suppressed [ 245.506593][ T8323] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 245.530963][ T8318] device veth3 entered promiscuous mode [ 245.565109][ T8318] bond1: (slave veth3): Enslaving as an active interface with a down link [ 245.624819][ T8312] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 245.820466][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1574'. [ 246.127970][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 246.892033][ T8354] tipc: Started in network mode [ 246.893417][ T8354] tipc: Node identity 6, cluster identity 4711 [ 246.895020][ T8354] tipc: Node number set to 6 [ 246.978581][ T8361] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 247.156623][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1588'. [ 247.290406][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 247.365625][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 247.383041][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 247.720570][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 247.761889][ T8404] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 248.192115][ T8428] netlink: set zone limit has 8 unknown bytes [ 248.837750][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 250.063872][ T8498] lo speed is unknown, defaulting to 1000 [ 250.240302][ T8498] lo speed is unknown, defaulting to 1000 [ 250.442278][ T8516] device wg2 entered promiscuous mode [ 250.896911][ T4059] Bluetooth: hci4: command 0x0406 tx timeout [ 251.457849][ T8569] binder: 8568:8569 tried to acquire reference to desc 0, got 1 instead [ 251.471607][ T8569] binder: 8568:8569 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 251.476135][ T8569] binder: 8569 RLIMIT_NICE not set [ 251.482208][ T8569] binder: 8569 RLIMIT_NICE not set [ 251.484174][ T8569] binder: send failed reply for transaction 5 to 8568:8569 [ 251.501557][ T8569] binder: 8568:8569 ioctl c0306201 400000000680 returned -14 [ 251.506583][ T4028] binder: undelivered TRANSACTION_COMPLETE [ 251.509762][ T4028] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.549616][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 251.555346][ T8571] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 252.118479][ T8578] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 252.567862][ T8590] udc-core: couldn't find an available UDC or it's busy [ 252.578631][ T8590] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 254.375659][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.377558][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.453309][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1688'. [ 258.093179][ T8663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.496379][ T8674] udc-core: couldn't find an available UDC or it's busy [ 258.498708][ T8674] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 262.562945][ T8736] binder: 8735:8736 tried to acquire reference to desc 0, got 1 instead [ 262.573373][ T8736] binder: 8735:8736 got reply transaction with bad transaction stack, transaction 10 has target 8735:0 [ 262.584259][ T8736] binder: 8735:8736 transaction failed 29201/-71, size 0-0 line 2837 [ 262.612028][ T8736] binder: 8735:8736 ioctl c0306201 0 returned -14 [ 262.651217][ T8738] device syzkaller0 entered promiscuous mode [ 262.657746][ T4071] binder: release 8735:8736 transaction 10 out, still active [ 262.660460][ T4071] binder: undelivered TRANSACTION_COMPLETE [ 262.662088][ T4071] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.688676][ T4028] binder: send failed reply for transaction 10, target dead [ 265.115503][ T8796] udc-core: couldn't find an available UDC or it's busy [ 265.126777][ T8796] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.446594][ T26] audit: type=1326 audit(778.409:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.1.1765" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x0 [ 266.526439][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 267.390003][ T26] audit: type=1326 audit(779.359:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.1.1771" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x0 [ 268.029911][ T26] audit: type=1326 audit(779.999:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.5.1781" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x0 [ 269.491007][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1788'. [ 269.648389][ T26] audit: type=1326 audit(781.619:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1791" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9552ed28 code=0x0 [ 271.178745][ T8897] udc-core: couldn't find an available UDC or it's busy [ 271.180750][ T8897] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 271.264637][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1794'. [ 272.381853][ T8915] netlink: 'syz.5.1800': attribute type 49 has an invalid length. [ 274.926708][ T8967] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 276.293351][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 276.662025][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 277.450999][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 277.557830][ T26] audit: type=1326 audit(789.508:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8985 comm="syz.2.1828" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89a11d28 code=0x0 [ 279.066976][ T9012] udc-core: couldn't find an available UDC or it's busy [ 279.068975][ T9012] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 280.454971][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 280.666267][ T9037] netlink: 'syz.1.1848': attribute type 10 has an invalid length. [ 280.711616][ T9037] team0: Device hsr_slave_0 failed to register rx_handler [ 282.001764][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1855'. [ 282.249315][ T9065] netlink: 'syz.2.1859': attribute type 27 has an invalid length. [ 282.796740][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.799268][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.351438][ T9065] device wg2 left promiscuous mode [ 283.616118][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.715087][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.937892][ T9065] device macsec0 left promiscuous mode [ 285.036887][ T9065] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.039457][ T9065] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.041956][ T9065] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.047710][ T9065] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.365626][ T9065] device wireguard0 left promiscuous mode [ 285.382208][ T9065] device bond1 left promiscuous mode [ 285.422756][ T9068] rdma_rxe: ignoring netdev event = 14 for lo [ 285.433551][ T9068] infiniband sīz2: set active [ 285.434958][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 285.449651][ T9068] infiniband sīz2: set active [ 285.488952][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 285.506465][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.510559][ T9068] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.697831][ T9068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.710122][ T1535] lo speed is unknown, defaulting to 1000 [ 285.713222][ T4059] lo speed is unknown, defaulting to 1000 [ 285.720391][ T1535] lo speed is unknown, defaulting to 1000 [ 291.955608][ T9158] lo speed is unknown, defaulting to 1000 [ 292.048398][ T9158] lo speed is unknown, defaulting to 1000 [ 292.416654][ T9196] binder: 9195:9196 tried to acquire reference to desc 0, got 1 instead [ 292.435855][ T9196] binder: 9195:9196 got transaction with too large buffer [ 292.438129][ T9196] binder: 9195:9196 transaction failed 29201/-22, size 88-24 line 3349 [ 292.465384][ T1535] binder: undelivered TRANSACTION_ERROR: 29201 [ 292.615731][ T4071] Bluetooth: hci6: command 0x0409 tx timeout [ 293.595995][ T9158] chnl_net:caif_netlink_parms(): no params data found [ 293.719507][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.724524][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.759828][ T9158] device bridge_slave_0 entered promiscuous mode [ 293.771588][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.777947][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.790908][ T9158] device bridge_slave_1 entered promiscuous mode [ 293.878732][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.638519][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.705568][ T4028] Bluetooth: hci6: command 0x041b tx timeout [ 294.738083][ T9158] team0: Port device team_slave_0 added [ 294.766913][ T9158] team0: Port device team_slave_1 added [ 294.800807][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.803495][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.818406][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.831410][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.833725][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.849758][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.962948][ T9158] device hsr_slave_0 entered promiscuous mode [ 295.017445][ T9158] device hsr_slave_1 entered promiscuous mode [ 295.056966][ T9158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.062244][ T9158] Cannot create hsr debugfs directory [ 295.326385][ T9158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 295.370962][ T9158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 295.412753][ T9158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 295.493739][ T9158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.708261][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.720148][ T9249] cgroup: fork rejected by pids controller in /syz2 [ 296.757550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.760366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.784315][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.796737][ T4071] Bluetooth: hci6: command 0x040f tx timeout [ 296.808373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.811680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.814517][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.816510][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.852404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.858309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.872575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.888592][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.890555][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.924477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.934359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.953155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.963706][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.976457][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.049577][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.059474][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.067800][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.082448][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.092264][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.106583][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.120812][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.599391][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.602062][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.617765][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.890774][ T4071] Bluetooth: hci6: command 0x0419 tx timeout [ 298.956515][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.969477][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.045457][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.048511][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.057619][ T9158] device veth0_vlan entered promiscuous mode [ 299.065853][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.068623][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.114894][ T9158] device veth1_vlan entered promiscuous mode [ 299.257996][ T9297] lo speed is unknown, defaulting to 1000 [ 299.787112][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.932379][ T9297] lo speed is unknown, defaulting to 1000 [ 300.260914][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.463140][ T9158] device veth0_macvtap entered promiscuous mode [ 300.535478][ T9158] device veth1_macvtap entered promiscuous mode [ 300.661726][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.664689][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.667316][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.737593][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.759527][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.779755][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.793592][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.796268][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.818866][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.833892][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.863681][ T9158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.866435][ T9158] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.889404][ T9158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.899568][ T9158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.113356][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.119469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.137647][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.148274][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.156004][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.895674][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.906517][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.938181][ T4071] Bluetooth: hci2: command 0x0409 tx timeout [ 302.684857][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.877274][ T373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.880502][ T373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.992924][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.995981][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.083369][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 304.100241][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.103344][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.390731][ T9297] chnl_net:caif_netlink_parms(): no params data found [ 304.462944][ T9380] udc-core: couldn't find an available UDC or it's busy [ 304.467586][ T9380] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 304.610817][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.612835][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.615743][ T9297] device bridge_slave_0 entered promiscuous mode [ 304.649020][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.652554][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.655525][ T9297] device bridge_slave_1 entered promiscuous mode [ 304.682857][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.688649][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.713493][ T9297] team0: Port device team_slave_0 added [ 304.735443][ T9297] team0: Port device team_slave_1 added [ 304.791503][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.795694][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.807587][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.852702][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.854863][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.867358][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.943148][ T9297] device hsr_slave_0 entered promiscuous mode [ 305.004860][ T9297] device hsr_slave_1 entered promiscuous mode [ 305.132968][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.135217][ T9297] Cannot create hsr debugfs directory [ 306.219688][ T4072] Bluetooth: hci2: command 0x040f tx timeout [ 306.860823][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 308.337561][ T4072] Bluetooth: hci2: command 0x0419 tx timeout [ 308.413551][ T26] audit: type=1326 audit(820.170:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9417 comm="syz.4.1973" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x0 [ 308.931758][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 309.438352][ T9436] device bond3 entered promiscuous mode [ 309.468042][ T9436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.511113][ T9454] netlink: 'syz.1.1979': attribute type 32 has an invalid length. [ 309.695194][ T136] device hsr_slave_0 left promiscuous mode [ 309.752072][ T136] device hsr_slave_1 left promiscuous mode [ 310.051018][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.057499][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.069347][ T136] device bridge_slave_1 left promiscuous mode [ 310.078146][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.138685][ T136] device bridge_slave_0 left promiscuous mode [ 310.141708][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.229626][ T136] rdma_rxe: ignoring netdev event = 10 for lo [ 310.345171][ T136] infiniband sīz2: set down [ 311.654803][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 311.998986][ T136] bond1 (unregistering): Released all slaves [ 312.520039][ T26] audit: type=1326 audit(824.261:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.1.1986" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x0 [ 313.533502][ T136] team0 (unregistering): Port device team_slave_0 removed [ 313.546576][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.612124][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.841794][ T136] bond0 (unregistering): Released all slaves [ 313.941736][ T9] smc: removing ib device sīz2 [ 313.946887][ T4106] lo speed is unknown, defaulting to 1000 [ 314.273751][ T9297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.332063][ T9297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.377562][ T9297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.470128][ T9297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.604486][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'. [ 316.001740][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.003594][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.064479][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.106914][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.110088][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.117923][ T26] audit: type=1326 audit(827.846:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.4.2000" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x0 [ 316.156823][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.192543][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.195855][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.198928][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.200930][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.271421][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.282731][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.300089][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.310797][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.313088][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.359841][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.368258][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.405994][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.411263][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.520730][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.528294][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.539297][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.560389][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.574729][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.588710][ T9543] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 316.595715][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.607675][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.630999][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.951886][ T9563] udc-core: couldn't find an available UDC or it's busy [ 316.953816][ T9563] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 317.005533][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.008288][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.018236][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.060035][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.063299][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.096120][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.102678][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.107961][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.112999][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.134245][ T9297] device veth0_vlan entered promiscuous mode [ 317.166477][ T9297] device veth1_vlan entered promiscuous mode [ 317.358623][ T9297] device veth0_macvtap entered promiscuous mode [ 317.413058][ T9297] device veth1_macvtap entered promiscuous mode [ 317.627750][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.631840][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.644944][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.667909][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.670758][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.690257][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.693511][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.702097][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.705415][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.160678][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.183344][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.186291][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.199235][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.202651][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.205335][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.208209][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.221782][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.224903][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.227934][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.234046][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.451378][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.454896][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.531017][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 319.163918][ T26] audit: type=1326 audit(830.833:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.1.2013" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x0 [ 319.228263][ T9297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.230760][ T9297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.233253][ T9297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.240039][ T9297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.314347][ T4122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.323723][ T4122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.381361][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.418561][ T4122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.421591][ T4122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.453404][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.274261][ T26] audit: type=1326 audit(833.971:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.2.2027" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7ddcd28 code=0x0 [ 322.418565][ T9640] lo speed is unknown, defaulting to 1000 [ 322.499763][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 323.170344][ T4059] Bluetooth: hci7: command 0x0409 tx timeout [ 325.025673][ T26] audit: type=1326 audit(836.711:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.1.2042" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x0 [ 325.114744][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 325.800278][ T25] Bluetooth: hci7: command 0x041b tx timeout [ 325.877701][ T9640] chnl_net:caif_netlink_parms(): no params data found [ 326.015151][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.017176][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.030382][ T9640] device bridge_slave_0 entered promiscuous mode [ 326.035744][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.037864][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.051122][ T9640] device bridge_slave_1 entered promiscuous mode [ 326.090851][ T9734] udc-core: couldn't find an available UDC or it's busy [ 326.092655][ T9734] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 326.113405][ T9640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.123356][ T9640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.193381][ T9640] team0: Port device team_slave_0 added [ 326.204974][ T9640] team0: Port device team_slave_1 added [ 326.259612][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.262698][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.291250][ T9640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.299658][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.310916][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.338660][ T9640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.352329][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 326.465363][ T9640] device hsr_slave_0 entered promiscuous mode [ 326.522743][ T9640] device hsr_slave_1 entered promiscuous mode [ 326.592120][ T9640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.594438][ T9640] Cannot create hsr debugfs directory [ 326.896545][ T26] audit: type=1326 audit(838.584:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.1.2054" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb947d28 code=0x0 [ 327.646518][ T9640] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.798497][ T9640] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 327.830357][ T4059] Bluetooth: hci7: command 0x040f tx timeout [ 327.843081][ T9640] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 327.864648][ T26] audit: type=1326 audit(839.541:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.3.2056" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd5ad28 code=0x0 [ 327.874674][ T9640] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.947488][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 328.687995][ T9765] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 328.760573][ T9765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.903008][ T9768] device veth3 entered promiscuous mode [ 328.921012][ T9768] bond1: (slave veth3): Enslaving as an active interface with a down link [ 328.971013][ T9765] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 329.299832][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.351224][ T9640] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.378566][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.382363][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.005098][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 330.742279][ T25] Bluetooth: hci7: command 0x0419 tx timeout [ 330.855579][ T26] audit: type=1326 audit(842.520:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.2.2071" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7ddcd28 code=0x0 [ 330.911394][ T136] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.930018][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'. [ 330.980644][ T136] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.143483][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.150063][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.152740][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.154702][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.157249][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.171524][ T136] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.181497][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.184642][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.187616][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.189550][ T9767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.580559][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.025865][ T136] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.065097][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.069151][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.088560][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.097001][ T9819] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 332.165665][ T9819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.209615][ T9824] device veth3 entered promiscuous mode [ 332.224906][ T9824] bond4: (slave veth3): Enslaving as an active interface with a down link [ 332.227471][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.281742][ T9829] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 332.396781][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.403675][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.417623][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.447332][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.726187][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 334.680801][ T9640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.684457][ T9640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.895527][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.902122][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.321521][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 336.365042][ T26] audit: type=1326 audit(848.013:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.3.2086" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd5ad28 code=0x0 [ 336.512855][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.516110][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.542498][ T9640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.782126][ T9892] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 336.840068][ T9892] device veth3 entered promiscuous mode [ 336.954098][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 339.713943][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.722704][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.851185][ T9640] device veth0_vlan entered promiscuous mode [ 339.859889][ T26] audit: type=1326 audit(851.502:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.4.2102" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b3c0d28 code=0x0 [ 339.868452][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.875677][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.922846][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.926694][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.943499][ T9640] device veth1_vlan entered promiscuous mode [ 340.010843][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 340.013817][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 340.020489][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.032395][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.053286][ T9640] device veth0_macvtap entered promiscuous mode [ 340.093137][ T9640] device veth1_macvtap entered promiscuous mode [ 340.207123][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 340.939910][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.956963][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.960636][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.964093][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.967056][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.970614][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.973272][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.976318][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.120107][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.129973][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.132829][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.158011][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.180545][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.183332][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.186081][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.193420][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.028033][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.211728][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.243999][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 343.247810][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 343.251070][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 343.275513][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.291739][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.318717][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.429407][ T6446] batman_adv: batadv1: MLD Querier appeared [ 343.507692][ T9640] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.510218][ T9640] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.534468][ T9640] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.547336][ T9640] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.801743][T10016] ------------[ cut here ]------------ [ 343.803391][T10016] WARNING: CPU: 1 PID: 10016 at block/genhd.c:586 del_gendisk+0x690/0x724 [ 343.805699][T10016] Modules linked in: [ 343.806775][T10016] CPU: 1 PID: 10016 Comm: syz.2.2122 Not tainted 5.15.178-syzkaller #0 [ 343.809044][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.811868][T10016] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 343.814087][T10016] pc : del_gendisk+0x690/0x724 [ 343.815438][T10016] lr : del_gendisk+0x690/0x724 [ 343.816802][T10016] sp : ffff800021067bc0 [ 343.817939][T10016] x29: ffff800021067be0 x28: ffff0000d702b680 x27: 1fffe0001a03f82a [ 343.820166][T10016] x26: 1fffe0001d28f810 x25: 1ffff0000420cf88 x24: ffff0000e947c080 [ 343.822432][T10016] x23: 0000000000000000 x22: ffff0000e947c0a0 x21: ffff0000e947c000 [ 343.824669][T10016] x20: ffff0000cca05550 x19: 0000000000000240 x18: 0000000000000000 [ 343.826918][T10016] x17: 0000000000000002 x16: ffff8000082eae30 x15: 0000000000004c82 [ 343.829166][T10016] x14: 1ffff0000296e06c x13: dfff800000000000 x12: 0000000000080000 [ 343.831517][T10016] x11: 0000000000000edb x10: ffff80002fa13000 x9 : 0000000000000edc [ 343.833848][T10016] x8 : ffff80000a8dfad4 x7 : ffff80000c0f8f68 x6 : 0000000000000000 [ 343.836152][T10016] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800011c155a8 [ 343.838435][T10016] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 343.840706][T10016] Call trace: [ 343.841587][T10016] del_gendisk+0x690/0x724 [ 343.842904][T10016] loop_control_ioctl+0x4a8/0x62c [ 343.844349][T10016] __arm64_sys_ioctl+0x14c/0x1c8 [ 343.845752][T10016] invoke_syscall+0x98/0x2b8 [ 343.847098][T10016] el0_svc_common+0x138/0x258 [ 343.848406][T10016] do_el0_svc+0x58/0x14c [ 343.849618][T10016] el0_svc+0x7c/0x1f0 [ 343.850703][T10016] el0t_64_sync_handler+0x84/0xe4 [ 343.852080][T10016] el0t_64_sync+0x1a0/0x1a4 [ 343.853325][T10016] irq event stamp: 262 [ 343.854393][T10016] hardirqs last enabled at (261): [] kasan_quarantine_put+0xdc/0x204 [ 343.857118][T10016] hardirqs last disabled at (262): [] el1_dbg+0x24/0x80 [ 343.859540][T10016] softirqs last enabled at (238): [] local_bh_enable+0x10/0x34 [ 343.862154][T10016] softirqs last disabled at (236): [] local_bh_disable+0x10/0x34 [ 343.864767][T10016] ---[ end trace 32fff17f5e21e084 ]--- [ 343.998984][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 344.695372][ T26] audit: type=1326 audit(856.299:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.2.2122" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7ddcd28 code=0x0 [ 344.867795][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.879748][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.890240][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.948943][ T9767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.953646][ T9767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.962181][ T136] device hsr_slave_0 left promiscuous mode [ 344.999695][ T136] device hsr_slave_1 left promiscuous mode [ 345.069510][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.071780][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.076133][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.078286][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.085641][ T136] device bridge_slave_1 left promiscuous mode [ 345.093626][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.140554][ T136] device bridge_slave_0 left promiscuous mode [ 345.142474][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.280367][ T136] device veth1_macvtap left promiscuous mode [ 345.282756][ T136] device veth0_macvtap left promiscuous mode [ 345.284500][ T136] device veth1_vlan left promiscuous mode [ 345.286395][ T136] device veth0_vlan left promiscuous mode [ 345.592277][ T136] team0 (unregistering): Port device team_slave_1 removed [ 345.605912][ T136] team0 (unregistering): Port device team_slave_0 removed [ 345.616291][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.669472][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.865132][ T136] bond0 (unregistering): Released all slaves [ 345.971109][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready