last executing test programs: 34.542153156s ago: executing program 0 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r1, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x30000002}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000001c0)={0x1, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x68, r7, 0xe21, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) 31.788090719s ago: executing program 0 (id=2360): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d302c757466383d312c7379735f696d6d757461626c652c757466383d792c757466383d112c696f636861727365743d63703835322c696f636861727365743d69736f383835392d372c73686f72746e616d653d77696e39352c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c726f6469722c00"], 0x1, 0x376, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x9fd6fb031326140d) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)={'nat\x00', 0x0, [0x81, 0x7, 0xffff, 0xb41, 0xfffffffd]}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) timerfd_create(0x0, 0x0) r3 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2c1, &(0x7f0000000e00)="$eJzs3b1uI1UUAOAzjmMbKOyCCiExEhRUq822NA4oKy24ArkAClixuxKKLaSsFIkf4d2KloaSJ0BCoqPlAWh4AyRaJDpSRBo04xn/ZWxiKU74+b4mJ/eec++Z8ThRCt98+OL4+EEaj55+8Wt0Okk0+tGPsyR60YjKk1jS/zoAgH+zsyyLP7KpbeqSiOjsri0AYIe2/v3/w85bAgB27J1333vrcDA4ejtNO3F3/NXpMP/LPv86nT98FB/HKB7G7ejGeUQ2M43vZlk2aaa5XrwynpwO88rxBz+X6x/+HlHUH0Q3esXQcv29wdFBOrVQP8n7eLbcv5/X34luPF+z/73B0Z2a+hi24tWXF/q/Fd345aP4JEbxoGhiXv/lQZq+kX3z5+fv5+3l9UmcDttF3ly2d80vDQAAAAAAAAAAAAAAAAAAAAAA/2G3yrNz2lGc35MPlefv7J3n3+xHWuktn88zrU+qhVbOB5pk8W11vs7tNE2zMnFe34wXmtG8masGAAAAAAAAAAAAAAAAAACAf5bHn352fH80enhSBG9mZTAb2RxUq1Qj1WkA1cf6L7vOatCfjTRPXorNye35Xo0y3LBy7FU5ScTS1HLPjdr7s6PgmXU9f/f9tgt2/j5nf75X9MqbccXXVT0Xx/eTqM1pRzXSqR6SHxdzWnHJvVrrprKtHr9W7VR362tvPVcEkw05kWxq7LXfpneuHCnfUE9mOa3irtaW75fBQvnKs1H/Wqx7p1yQJFfxEwcAAAAAAAAAAAAAAAAAAFhn/qHfmsmnG0sbWXtnbQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAtZr///9Z0LwwshpMyuLpyE+vb0huxcnjG75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gf+CgAA//+fM1QK") syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0), 0x85, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 27.268600001s ago: executing program 0 (id=2368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000580)=0xfffff800, 0x4) 25.82230875s ago: executing program 0 (id=2370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x1, 0x8, 0x5, 0x1ff, {0x1, 0x7, 0x7d3088ee, 0x5, 0x1, 0x7, 0x8, 0x1, 0x4, 0xa000, 0x9, 0x0, 0x0, 0x65, 0xc74}}}}, 0xa0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@dfltuid}, {@access_any}]}}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffffffffc55) 23.998864501s ago: executing program 0 (id=2374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nogrpid}, {@noblock_validity}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x63a, &(0x7f0000000640)="$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") syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000001100)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = dup2(r3, r3) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) 21.08570222s ago: executing program 0 (id=2379): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000980), 0x1, 0x60200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x63a, &(0x7f0000000640)="$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") pipe(0x0) 13.413495488s ago: executing program 1 (id=2397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) socket$netlink(0x10, 0x3, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 11.470445134s ago: executing program 1 (id=2400): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10d242, 0x15) sendfile(r0, r0, &(0x7f00000000c0)=0x7, 0x6fecb1) 10.251205605s ago: executing program 2 (id=2403): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x94, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14) 8.582142371s ago: executing program 2 (id=2404): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x20) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) 7.807053847s ago: executing program 1 (id=2408): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2208482, &(0x7f0000000040), 0x1, 0x5d8, &(0x7f0000000640)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 7.263119945s ago: executing program 2 (id=2412): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28501) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000480)='#', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) write$P9_RLOCK(r5, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8) recvfrom$unix(r6, &(0x7f0000001340)=""/239, 0xef, 0x10120, 0x0, 0x0) 7.090879041s ago: executing program 3 (id=2413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) rmdir(0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000400)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@extent_cache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5553, &(0x7f000000b3c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x29) add_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="4076c993d2ec1368cadf7c5983f305d110bda339892deac626a803f63e5a3a951f9a", 0x22, 0xfffffffffffffffb) 6.899749847s ago: executing program 1 (id=2414): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 3.780948433s ago: executing program 2 (id=2415): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='nocheckpoint_merge,nocheckpoint_merge,acl,alloc_mode=reuse,inline_xattr,disable_roll_forward,nobarrier,disable_ext_identify,noflush_merge,user_xattr,whint_mode=fs-based,mode=adaptive,checkpoint=enable,resuid=', @ANYRESHEX=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB="2e0008097284f732697e311ac9f36bf8a0bb3a51b4e711652339"], 0x1, 0x5516, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000840)="fffa4d219a84a1daaf8e82f0a4dfa0a39bbca33ea38128e48578cee28da2620435175b3a9c2bcb07c7ed842e954f06de91", 0x31}], 0x1, 0x5409, 0x0, 0x0) 3.251703331s ago: executing program 3 (id=2416): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000040)={[{@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffec8}}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@dots}, {@nodots}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0xffffffff) 2.98695479s ago: executing program 3 (id=2417): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x101000, 0x64) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x803400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 2.761240267s ago: executing program 3 (id=2418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) io_setup(0x3ff, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x4000000, 0x0, 0x0) 2.68232278s ago: executing program 1 (id=2419): r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008001dc000000001", 0x1c, 0x0, 0x0, 0x0) 2.407161889s ago: executing program 3 (id=2420): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x94, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14) 2.256565394s ago: executing program 2 (id=2421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000ffff2abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0004000023080000240012800b00010067726574617000001400028005000800650000000a00010000000000"], 0x44}}, 0x24000800) select(0x40, &(0x7f0000000240)={0xfffffffffffffe01, 0x0, 0x2, 0xffffffffffff0249, 0x3, 0xd0, 0x3, 0x401}, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x101, 0x1, 0x2, 0xcc, 0x100000000}, &(0x7f0000000400)={0x1, 0xaf40, 0x4, 0x4, 0x800, 0xfff, 0xff, 0x8}, &(0x7f0000000440)={0x0, 0x2710}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) readv(r1, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/29, 0x1d}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x1}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x0, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x80047453, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x17c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysinfo(&(0x7f0000000f00)=""/136) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r7, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)='k', 0x1}, {&(0x7f0000000580)="fbe550d432cb0ac16b069b3632ce4ce0e8dea1a71d5b0403c546dc35", 0x1c}], 0x2}, 0x0) 76.532138ms ago: executing program 1 (id=2422): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$eJzs3d1rm9UfAPDvkzZ7//3WwRgqIgUvnMyla+vLBC/mtQ4Gej9D+6yMpsto0rHWgduFu5bhnQPxXrz2UvwHvPBvGOhgyCiCeBN50idZ2iZtuqUvms8HnnK+z0vPOXlyTs7JSUgAQ2s8+1OIeDkivkoiTkZEkh8bjfzg+Np5q0/vzGRbEo3GJ38kzfOyuPW/Wtcdz4OXIuLnLyPOFTbnW1temS9XKuliHk/UF25O1JZXzl9fKM+lc+mNqenpi+9MT73/3rsDq+ubV7KCjOTRqQdJXIoTedRZjxdwtzMYj/H8MSnGpQ0nTg4gs4Mk6br3hz0vBzszkrfzYmR9wMkYyVs98N/3RUQ0gCGV7Lj9/1rcnZIAe6s1DmjN7Qc0D/7XePLh2gRoc/1H194biSPNudGx1WTdzCib744NIP8sjx9/f/gg22Jw70MAbOvuvYi4MDq6uf9L8v7v+V3o45yNeej/YO/8lI1/3uo2/im0xz/RZfxzvEvbfR7bt//C4wFk01M2/vug6/i3vWg1NpJH/2uO+YrJteuVNOvb/h8RZ6N4OIu3Ws+5uPqo0etY5/gv27L8W2PBvByPRw+vv2a2XC+/SJ07PbkX8UrX8W/Svv/J2v1ft8STPR5X+szjTPrwtV7Htq//7mp8F/FG1/v/rLrJ1uuTE83nw0TrWbHZn/fP/NIr//2uf3b/j21d/7Gkc722tvM8vj3ydxrt9eT11tU/+n/+H0o+baYP5ftul+v1xcmIQ8nH7f2F1v6pZ9e24tb5Wf3Pvr51/5d06f+ORsRnfdb//unvX+117CDc/9mu9789u91w/3eeePTR59/0yr+//u/tZupsvqef/q/fAr7IYwcAAAAAAAAHTSEiTkRSKLXThUKptPb5jtNxrFCp1urnrlWXbsxG87uyY1EstFa6T3Z8HmIyXzFsxVMb4umIOBURX48cbcalmWpldr8rDwAAAAAAAAAAAAAAAAAAAAfE8R7f/8/8NrLfpQN2nZ/8huG1bfsfxC89AQeS138YXto/DK++2n9x98sB7D2v/zC8tH8YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAADdeXy5WxrrD69M5PFs7eWl+art87PprX50sLSTGmmunizNFetzlXS0kx1Ybv/V6lWb05OxdLtiXpaq0/UlleuLlSXbtSvXl8oz6VXU78iBgAAAAAAAAAAAAAAAAAAAJvVllfmy5VKuigxxIm/Go3G814+ut+Fl9iVxH73TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzD8BAAD//1hdMq0=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYRES8], 0xfe37, 0x0) 76.231238ms ago: executing program 3 (id=2423): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@debug}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) 0s ago: executing program 2 (id=2424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = timerfd_create(0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_normal', 0x10000, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000640)={&(0x7f00000a8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/222, 0xde, 0x0, &(0x7f0000000580)=""/182, 0xb6}, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000280)={0x1, "87022476e56bd7b2da6de8b0984de637807daf493da1e03bc0d34e5297cb004e"}) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x1400) rename(&(0x7f00000001c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 71.164214][ T5755] cgroup: Unknown subsys name 'net' [ 71.302999][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.719521][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.726176][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.951310][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.078507][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.103566][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.112473][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.120915][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.129205][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.137381][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.144785][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.155428][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.163348][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.171682][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.171898][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.178918][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.194276][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.196666][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.210915][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.212107][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.220127][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.226361][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.241319][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.248942][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.257741][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.269812][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.278781][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.288558][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.654135][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.786801][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 75.834796][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.843872][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.851775][ T5770] bridge_slave_0: entered allmulticast mode [ 75.859729][ T5770] bridge_slave_0: entered promiscuous mode [ 75.892867][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 75.904355][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.911565][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.918806][ T5770] bridge_slave_1: entered allmulticast mode [ 75.926864][ T5770] bridge_slave_1: entered promiscuous mode [ 75.964211][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.982073][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.006109][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.115009][ T5770] team0: Port device team_slave_0 added [ 76.123997][ T5770] team0: Port device team_slave_1 added [ 76.134999][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.142295][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.149545][ T5768] bridge_slave_0: entered allmulticast mode [ 76.157151][ T5768] bridge_slave_0: entered promiscuous mode [ 76.208916][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.216293][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.223439][ T5768] bridge_slave_1: entered allmulticast mode [ 76.231370][ T5768] bridge_slave_1: entered promiscuous mode [ 76.259268][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.266487][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.292635][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.322473][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.329972][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.337262][ T5769] bridge_slave_0: entered allmulticast mode [ 76.344003][ T5769] bridge_slave_0: entered promiscuous mode [ 76.352441][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.360016][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.367488][ T5767] bridge_slave_0: entered allmulticast mode [ 76.374380][ T5767] bridge_slave_0: entered promiscuous mode [ 76.382079][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.389433][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.415545][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.444692][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.454244][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.461807][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.469373][ T5769] bridge_slave_1: entered allmulticast mode [ 76.476256][ T5769] bridge_slave_1: entered promiscuous mode [ 76.482771][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.492934][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.500298][ T5767] bridge_slave_1: entered allmulticast mode [ 76.508038][ T5767] bridge_slave_1: entered promiscuous mode [ 76.536006][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.582833][ T5770] hsr_slave_0: entered promiscuous mode [ 76.589170][ T5770] hsr_slave_1: entered promiscuous mode [ 76.651907][ T5768] team0: Port device team_slave_0 added [ 76.663636][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.679077][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.690416][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.709324][ T5768] team0: Port device team_slave_1 added [ 76.733724][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.785964][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.793304][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.819558][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.856001][ T5769] team0: Port device team_slave_0 added [ 76.862946][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.870122][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.896733][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.911164][ T5767] team0: Port device team_slave_0 added [ 76.921622][ T5767] team0: Port device team_slave_1 added [ 76.943525][ T5769] team0: Port device team_slave_1 added [ 77.020336][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.027485][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.053760][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.072193][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.079476][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.105783][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.119020][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.126281][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.152503][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.172758][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.181215][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.207865][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.236017][ T5783] Bluetooth: hci1: command tx timeout [ 77.246382][ T5768] hsr_slave_0: entered promiscuous mode [ 77.252675][ T5768] hsr_slave_1: entered promiscuous mode [ 77.259319][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.267643][ T5768] Cannot create hsr debugfs directory [ 77.315419][ T5783] Bluetooth: hci3: command tx timeout [ 77.325327][ T5774] Bluetooth: hci2: command tx timeout [ 77.353419][ T5769] hsr_slave_0: entered promiscuous mode [ 77.359974][ T5769] hsr_slave_1: entered promiscuous mode [ 77.366235][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.373884][ T5769] Cannot create hsr debugfs directory [ 77.395374][ T5774] Bluetooth: hci0: command tx timeout [ 77.401889][ T5767] hsr_slave_0: entered promiscuous mode [ 77.408528][ T5767] hsr_slave_1: entered promiscuous mode [ 77.414622][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.422285][ T5767] Cannot create hsr debugfs directory [ 77.675021][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.714722][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.759677][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.777595][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.860595][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.873856][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.900183][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.910929][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.965375][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.979684][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.999681][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.019704][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.149005][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.156806][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.169259][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.193186][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.214006][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.260367][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.289550][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.296912][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.315977][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.323147][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.343732][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.397789][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.425021][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.432213][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.454002][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.477708][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.484843][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.533861][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.570628][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.578027][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.634915][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.642159][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.707927][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.720925][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.741479][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.832592][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.893499][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.900724][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.945075][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.952460][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.017583][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.192129][ T5770] veth0_vlan: entered promiscuous mode [ 79.223958][ T5770] veth1_vlan: entered promiscuous mode [ 79.310995][ T5770] veth0_macvtap: entered promiscuous mode [ 79.326363][ T5774] Bluetooth: hci1: command tx timeout [ 79.341289][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.364662][ T5770] veth1_macvtap: entered promiscuous mode [ 79.396573][ T5774] Bluetooth: hci3: command tx timeout [ 79.396688][ T5783] Bluetooth: hci2: command tx timeout [ 79.428205][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.462097][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.475039][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.484325][ T5783] Bluetooth: hci0: command tx timeout [ 79.492203][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.501468][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.510310][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.526827][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.578246][ T5768] veth0_vlan: entered promiscuous mode [ 79.593996][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.631892][ T5768] veth1_vlan: entered promiscuous mode [ 79.717286][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.727455][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.804785][ T5768] veth0_macvtap: entered promiscuous mode [ 79.818693][ T5768] veth1_macvtap: entered promiscuous mode [ 79.828844][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.839498][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.850624][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.851487][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.872074][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.912283][ T5767] veth0_vlan: entered promiscuous mode [ 79.937270][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.948120][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.963492][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.973949][ T5769] veth0_vlan: entered promiscuous mode [ 80.004868][ T5767] veth1_vlan: entered promiscuous mode [ 80.023923][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.032993][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.042601][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.051638][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.065979][ T5769] veth1_vlan: entered promiscuous mode [ 80.219372][ T5767] veth0_macvtap: entered promiscuous mode [ 80.264825][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.281766][ T5767] veth1_macvtap: entered promiscuous mode [ 80.294535][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.306519][ T5769] veth0_macvtap: entered promiscuous mode [ 80.354748][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.372664][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.383956][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.400545][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.413327][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.438524][ T5769] veth1_macvtap: entered promiscuous mode [ 80.468232][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.476982][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.488860][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.496802][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.508492][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.519994][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.532623][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.557440][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.566454][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.583336][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.592770][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.691936][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.727743][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.756848][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.775932][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.795947][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.810543][ T5835] syz.1.2[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.817110][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.848469][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.853892][ T5835] loop1: detected capacity change from 0 to 2048 [ 80.872363][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.897796][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.925777][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.943491][ T5835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.949755][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.981001][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.033474][ T27] audit: type=1800 audit(1775197940.003:2): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 81.065084][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.093807][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.116764][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.168527][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.192486][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.208289][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.385702][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.396697][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.397464][ T5783] Bluetooth: hci1: command tx timeout [ 81.475574][ T5783] Bluetooth: hci3: command tx timeout [ 81.475740][ T5774] Bluetooth: hci2: command tx timeout [ 81.555731][ T5774] Bluetooth: hci0: command tx timeout [ 81.590502][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.608076][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.622032][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.641999][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.721122][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.755321][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.980601][ T5853] loop0: detected capacity change from 0 to 512 [ 83.059178][ T5853] EXT4-fs (loop0): 1 truncate cleaned up [ 83.095015][ T5853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.205637][ T27] audit: type=1800 audit(1775197942.173:3): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 83.403932][ T5853] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1: bg 0: block 465: padding at end of block bitmap is not set [ 83.737423][ T5860] Zero length message leads to an empty skb [ 83.748430][ T5783] Bluetooth: hci2: command tx timeout [ 83.754112][ T5783] Bluetooth: hci3: command tx timeout [ 83.759782][ T5783] Bluetooth: hci0: command tx timeout [ 83.765979][ T5774] Bluetooth: hci1: command tx timeout [ 84.260191][ T5853] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 4 with max blocks 4 with error 28 [ 84.377770][ T5853] EXT4-fs (loop0): This should not happen!! Data will be lost [ 84.377770][ T5853] [ 84.417388][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.442514][ T5853] EXT4-fs (loop0): Total free blocks count 0 [ 84.460384][ T5853] EXT4-fs (loop0): Free/Dirty block details [ 84.475911][ T5853] EXT4-fs (loop0): free_blocks=0 [ 84.480980][ T5853] EXT4-fs (loop0): dirty_blocks=6 [ 84.525384][ T5853] EXT4-fs (loop0): Block reservation details [ 84.531809][ T5853] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 84.678269][ T3452] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 85.282092][ T5882] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.787126][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 87.098329][ T787] cfg80211: failed to load regulatory.db [ 88.253705][ T5910] loop2: detected capacity change from 0 to 512 [ 88.325067][ T5910] EXT4-fs (loop2): 1 truncate cleaned up [ 88.332373][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.461933][ T27] audit: type=1800 audit(1775197947.433:4): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 88.611609][ T3471] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:9: bg 0: block 465: padding at end of block bitmap is not set [ 88.686734][ T3471] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 6 with error 28 [ 88.722738][ T3471] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.722738][ T3471] [ 88.753081][ T3471] EXT4-fs (loop2): Total free blocks count 0 [ 88.770734][ T3471] EXT4-fs (loop2): Free/Dirty block details [ 88.796796][ T3471] EXT4-fs (loop2): free_blocks=0 [ 88.813543][ T3471] EXT4-fs (loop2): dirty_blocks=6 [ 88.845361][ T3471] EXT4-fs (loop2): Block reservation details [ 88.854274][ T3471] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 88.870844][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.140934][ T5921] random: crng reseeded on system resumption [ 90.064688][ T5926] overlayfs: missing 'lowerdir' [ 90.113537][ T5926] loop3: detected capacity change from 0 to 512 [ 90.445395][ T5926] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.452239][ T5926] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.500064][ T5926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.659206][ T5926] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.669268][ T5926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.681302][ T5926] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.29: corrupted xattr entries [ 91.635278][ T5926] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.699353][ T5926] EXT4-fs (loop3): 1 orphan inode deleted [ 91.726811][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 91.827794][ T5926] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 91.917004][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.930276][ T5942] loop1: detected capacity change from 0 to 2048 [ 91.990681][ T5942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.093264][ T27] audit: type=1800 audit(1775197951.053:5): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 92.224016][ T27] audit: type=1800 audit(1775197951.063:6): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 92.255364][ T5944] loop3: detected capacity change from 0 to 512 [ 92.287555][ T5929] loop0: detected capacity change from 0 to 32768 [ 92.319360][ T5944] EXT4-fs (loop3): 1 truncate cleaned up [ 92.347301][ T5944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.454311][ T27] audit: type=1800 audit(1775197951.423:7): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 92.474515][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.524049][ T5940] loop2: detected capacity change from 0 to 32768 [ 92.566289][ T5940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.33 (5940) [ 92.614590][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.700549][ T5940] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.726163][ T5940] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.738163][ T5940] BTRFS info (device loop2): force clearing of disk cache [ 92.769436][ T5940] BTRFS info (device loop2): metadata ratio 0 [ 92.795233][ T5940] BTRFS info (device loop2): enabling ssd optimizations [ 92.826997][ T5940] BTRFS info (device loop2): using spread ssd allocation scheme [ 92.840258][ T5940] BTRFS info (device loop2): using free space tree [ 93.354659][ T5940] BTRFS info (device loop2): auto enabling async discard [ 93.593320][ T5940] BTRFS info (device loop2): rebuilding free space tree [ 94.339085][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.965525][ T5989] loop3: detected capacity change from 0 to 2048 [ 96.000806][ T5989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.085062][ T27] audit: type=1800 audit(1775197955.043:8): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 96.105597][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.114100][ T5993] loop1: detected capacity change from 0 to 512 [ 96.232495][ T27] audit: type=1800 audit(1775197955.053:9): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 96.392428][ T5993] EXT4-fs (loop1): 1 truncate cleaned up [ 96.404381][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.105235][ T27] audit: type=1800 audit(1775197956.073:10): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 97.464584][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.446701][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.508320][ T5770] cgroup: fork rejected by pids controller in /syz2 [ 98.657824][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 98.684135][ T787] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.705041][ T787] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.726360][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.734189][ T6000] loop0: detected capacity change from 0 to 40427 [ 98.764337][ T787] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 98.779051][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.784506][ T6000] F2FS-fs (loop0): invalid crc value [ 98.793357][ T787] usb 2-1: Product: syz [ 98.805144][ T787] usb 2-1: Manufacturer: syz [ 98.809966][ T787] usb 2-1: SerialNumber: syz [ 98.831102][ T6000] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.831633][ T787] usb 2-1: config 0 descriptor?? [ 98.981532][ T6000] F2FS-fs (loop0): Start checkpoint disabled! [ 99.014039][ T6000] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 99.096868][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.123732][ T6000] syz.0.47: attempt to access beyond end of device [ 99.123732][ T6000] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.213314][ T6012] loop3: detected capacity change from 0 to 32768 [ 99.271961][ T6012] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.50 (6012) [ 99.346388][ T787] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 99.350487][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.384662][ T6012] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.389859][ T11] kworker/u4:0: attempt to access beyond end of device [ 99.389859][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 99.426547][ T6012] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 99.453135][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 99.465514][ T6012] BTRFS info (device loop3): force clearing of disk cache [ 99.473416][ T6012] BTRFS info (device loop3): metadata ratio 0 [ 99.480764][ T6012] BTRFS info (device loop3): enabling ssd optimizations [ 99.492998][ T6012] BTRFS info (device loop3): using spread ssd allocation scheme [ 99.500874][ T6012] BTRFS info (device loop3): using free space tree [ 99.539820][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 99.575829][ T787] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 99.603968][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.657885][ T787] gs_usb: probe of 2-1:0.0 failed with error -22 [ 99.712464][ T6012] BTRFS info (device loop3): auto enabling async discard [ 99.730205][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.770434][ T6012] BTRFS info (device loop3): rebuilding free space tree [ 99.806932][ T787] usb 2-1: USB disconnect, device number 2 [ 100.025374][ T5769] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.468696][ T5779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (5779) [ 100.649862][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.658797][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.667648][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.686738][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.694490][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.828262][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.155644][ T5780] Bluetooth: hci3: command tx timeout [ 103.912643][ T6074] netlink: 'syz.0.59': attribute type 21 has an invalid length. [ 103.920542][ T6074] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.198503][ T6066] loop3: detected capacity change from 0 to 32768 [ 104.323299][ T6066] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.362087][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 104.491662][ T6066] XFS (loop3): Ending clean mount [ 104.547879][ T6066] XFS (loop3): Quotacheck needed: Please wait. [ 104.685185][ T6066] XFS (loop3): Quotacheck: Done. [ 104.782620][ T6071] loop1: detected capacity change from 0 to 32768 [ 104.810854][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.818290][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.828682][ T6040] bridge_slave_0: entered allmulticast mode [ 104.836899][ T6040] bridge_slave_0: entered promiscuous mode [ 104.900786][ T6071] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.970273][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.065186][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.072571][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.091264][ T6040] bridge_slave_1: entered allmulticast mode [ 105.112335][ T6040] bridge_slave_1: entered promiscuous mode [ 105.113393][ T6071] XFS (loop1): Ending clean mount [ 105.182791][ T6071] XFS (loop1): Quotacheck needed: Please wait. [ 105.246479][ T5780] Bluetooth: hci3: command tx timeout [ 105.328073][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.411171][ T6071] XFS (loop1): Quotacheck: Done. [ 105.487163][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.699243][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.717423][ T6040] team0: Port device team_slave_0 added [ 105.747629][ T6040] team0: Port device team_slave_1 added [ 105.819433][ T12] hsr_slave_0: left promiscuous mode [ 105.833196][ T12] hsr_slave_1: left promiscuous mode [ 105.884052][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.911103][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.923316][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.923344][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.944309][ T12] bridge_slave_1: left allmulticast mode [ 105.944336][ T12] bridge_slave_1: left promiscuous mode [ 105.945993][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.973186][ T6093] loop0: detected capacity change from 0 to 32768 [ 106.010396][ T6093] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 106.046907][ T12] bridge_slave_0: left allmulticast mode [ 106.514474][ T12] bridge_slave_0: left promiscuous mode [ 106.547821][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.744560][ T12] veth1_macvtap: left promiscuous mode [ 106.774687][ T12] veth0_macvtap: left promiscuous mode [ 106.791098][ T5779] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 106.805708][ T12] veth1_vlan: left promiscuous mode [ 106.811375][ T12] veth0_vlan: left promiscuous mode [ 106.855802][ T6125] loop1: detected capacity change from 0 to 2048 [ 106.975774][ T6125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.068489][ T27] audit: type=1800 audit(1775197966.043:11): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.64" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 107.315298][ T5780] Bluetooth: hci3: command tx timeout [ 107.344774][ T6123] loop0: detected capacity change from 0 to 32768 [ 107.359825][ T6128] loop1: detected capacity change from 0 to 512 [ 107.431926][ T6128] EXT4-fs (loop1): 1 truncate cleaned up [ 107.453059][ T6128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.493213][ T6123] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.592663][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.669110][ T6123] XFS (loop0): Ending clean mount [ 107.762252][ T6123] XFS (loop0): Quotacheck needed: Please wait. [ 107.836997][ T6123] XFS (loop0): Quotacheck: Done. [ 108.753883][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.406286][ T12] team0 (unregistering): Port device team_slave_1 removed [ 109.445366][ T5780] Bluetooth: hci3: command tx timeout [ 110.560182][ T12] team0 (unregistering): Port device team_slave_0 removed [ 110.716593][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.885647][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.323250][ T6169] loop0: detected capacity change from 0 to 2048 [ 112.381523][ T6169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.472868][ T27] audit: type=1800 audit(1775197971.453:12): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.74" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 112.601987][ T12] bond0 (unregistering): Released all slaves [ 112.768842][ T6167] loop1: detected capacity change from 0 to 32768 [ 112.787704][ T6167] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 112.902878][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.936009][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.067044][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.115340][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.122617][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.177851][ T5779] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 113.211473][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.579015][ T6040] hsr_slave_0: entered promiscuous mode [ 114.788552][ T6040] hsr_slave_1: entered promiscuous mode [ 115.692911][ T6178] loop0: detected capacity change from 0 to 32768 [ 115.854113][ T6178] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.104156][ T6178] XFS (loop0): Ending clean mount [ 116.156270][ T6178] XFS (loop0): Quotacheck needed: Please wait. [ 116.643876][ T6178] XFS (loop0): Quotacheck: Done. [ 117.030104][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 117.620104][ T5810] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.835401][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 117.934889][ T5810] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 118.164322][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.370785][ T5810] usb 2-1: Product: syz [ 118.375023][ T5810] usb 2-1: Manufacturer: syz [ 118.424691][ T5810] usb 2-1: SerialNumber: syz [ 118.460084][ T5810] usb 2-1: config 0 descriptor?? [ 118.543388][ T6040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.584580][ T6040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.639086][ T6040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.665055][ T6040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.712414][ T5810] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.901094][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.964808][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.030220][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.037472][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.082113][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.089354][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.331378][ T5810] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 119.372179][ T5810] usb 2-1: USB disconnect, device number 3 [ 119.408321][ T6240] loop0: detected capacity change from 0 to 32768 [ 119.479675][ T6240] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 119.670112][ T5953] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 121.143897][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.281562][ T6040] veth0_vlan: entered promiscuous mode [ 121.593816][ T6040] veth1_vlan: entered promiscuous mode [ 122.142453][ T6040] veth0_macvtap: entered promiscuous mode [ 122.188139][ T6040] veth1_macvtap: entered promiscuous mode [ 122.276005][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.325236][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.358197][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.680486][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.859536][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.929145][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.950361][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.978425][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.036565][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.065171][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.095219][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.135212][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.172545][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.211361][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.283925][ T6040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.320593][ T6040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.340107][ T6040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.375181][ T6040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.877833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.928614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.726564][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.734451][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.175302][ T5757] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.197961][ T5757] usb 2-1: Using ep0 maxpacket: 8 [ 127.235570][ T5757] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.253561][ T5810] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 127.273717][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.292495][ T5757] usb 2-1: Product: syz [ 127.301989][ T5757] usb 2-1: Manufacturer: syz [ 127.315148][ T5757] usb 2-1: SerialNumber: syz [ 127.337555][ T5757] usb 2-1: config 0 descriptor?? [ 127.819059][ T5810] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 127.966820][ T5757] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.989555][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.115683][ T5810] usb 3-1: Product: syz [ 128.125632][ T5810] usb 3-1: Manufacturer: syz [ 128.145237][ T5810] usb 3-1: SerialNumber: syz [ 128.193691][ T5810] usb 3-1: config 0 descriptor?? [ 128.277948][ T5810] usb 3-1: selecting invalid altsetting 3 [ 128.301931][ T5810] comedi comedi5: could not set alternate setting 3 in high speed [ 128.321437][ T5810] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 128.357966][ T5810] usbdux: probe of 3-1:0.0 failed with error -22 [ 128.542891][ T5757] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 128.584218][ T5757] usb 2-1: USB disconnect, device number 4 [ 129.838479][ T28] usb 3-1: USB disconnect, device number 2 [ 130.385351][ T5757] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 130.622336][ T5757] usb 4-1: not running at top speed; connect to a high speed hub [ 130.635186][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.657863][ T5757] usb 4-1: config 3 has an invalid interface number: 52 but max is 0 [ 130.666179][ T5757] usb 4-1: config 3 has no interface number 0 [ 131.543901][ T5757] usb 4-1: config 3 interface 52 has no altsetting 0 [ 131.566938][ T5757] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 131.582289][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.590428][ T5757] usb 4-1: Product: syz [ 131.594892][ T5757] usb 4-1: Manufacturer: syz [ 131.599717][ T5757] usb 4-1: SerialNumber: syz [ 131.648139][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 131.665123][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 131.693272][ T9] usb 3-1: config 220 has no interface number 2 [ 131.742704][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 131.793516][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 131.834769][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 131.851077][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 131.873006][ T5757] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 131.888286][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 131.901660][ T5757] usb 4-1: selecting invalid altsetting 0 [ 131.907599][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.934758][ T9] usb 3-1: Product: syz [ 131.945620][ T5757] usb 4-1: USB disconnect, device number 2 [ 131.951643][ T9] usb 3-1: Manufacturer: syz [ 131.977505][ T5757] pvrusb2: Device being rendered inoperable [ 131.986606][ T9] usb 3-1: SerialNumber: syz [ 132.408494][ T9] usb 3-1: selecting invalid altsetting 0 [ 132.602234][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 132.783930][ T9] usb 3-1: No valid video chain found. [ 132.832773][ T9] usb 3-1: selecting invalid altsetting 0 [ 132.859179][ T9] usbtest: probe of 3-1:220.1 failed with error -22 [ 132.944047][ T9] usb 3-1: USB disconnect, device number 3 [ 133.183836][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.183932][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.279585][ T6403] loop3: detected capacity change from 0 to 512 [ 134.505989][ T6403] EXT4-fs (loop3): 1 truncate cleaned up [ 134.554899][ T6403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.969105][ T27] audit: type=1800 audit(1775197993.913:13): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.121" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 135.472121][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.636744][ T28] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.717973][ T6434] loop1: detected capacity change from 0 to 2048 [ 136.732497][ T6434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.168263][ T27] audit: type=1800 audit(1775197996.133:14): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.131" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 137.576590][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 137.599821][ T28] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 137.608843][ T28] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 137.627827][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 137.648132][ T28] usb 3-1: config 1 has no interface number 0 [ 137.650149][ T6441] loop0: detected capacity change from 0 to 512 [ 137.654316][ T28] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.705412][ T28] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 137.736517][ T28] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 137.746664][ T6441] EXT4-fs (loop0): 1 truncate cleaned up [ 137.753688][ T6441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.782431][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.799917][ T27] audit: type=1800 audit(1775197996.773:15): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.134" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 137.802383][ T6441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.134: bg 0: block 465: padding at end of block bitmap is not set [ 137.862471][ T28] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 137.937359][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.088731][ T28] snd_usb_pod 3-1:1.1: set_interface failed [ 138.110665][ T28] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 138.129328][ T28] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 138.165804][ T28] usb 3-1: USB disconnect, device number 4 [ 138.541719][ T6437] loop1: detected capacity change from 0 to 32768 [ 138.728306][ T6437] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.166701][ T6437] XFS (loop1): Ending clean mount [ 139.207082][ T6437] XFS (loop1): Quotacheck needed: Please wait. [ 139.388756][ T6437] XFS (loop1): Quotacheck: Done. [ 139.390992][ T6440] loop3: detected capacity change from 0 to 32768 [ 139.447051][ T6440] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.538818][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.626181][ T6440] XFS (loop3): Ending clean mount [ 139.661755][ T6440] XFS (loop3): Quotacheck needed: Please wait. [ 139.772402][ T6440] XFS (loop3): Quotacheck: Done. [ 140.006220][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.053907][ T6489] loop0: detected capacity change from 0 to 40427 [ 143.109134][ T6489] F2FS-fs (loop0): invalid crc value [ 143.141554][ T6489] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.226720][ T6496] loop1: detected capacity change from 0 to 32768 [ 143.369653][ T6496] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.446218][ T6489] F2FS-fs (loop0): Start checkpoint disabled! [ 143.496291][ T6489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 143.517730][ T6496] XFS (loop1): Ending clean mount [ 143.553260][ T6496] XFS (loop1): Quotacheck needed: Please wait. [ 143.643658][ T6489] syz.0.146: attempt to access beyond end of device [ 143.643658][ T6489] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.669941][ T6527] loop3: detected capacity change from 0 to 512 [ 143.682754][ T6496] XFS (loop1): Quotacheck: Done. [ 143.698984][ T6527] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.759256][ T6527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.797853][ T6527] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 143.816759][ T6527] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.819073][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.857575][ T6527] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.157: corrupted xattr entries [ 143.911505][ T6527] EXT4-fs (loop3): 1 orphan inode deleted [ 143.928886][ T6527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 143.970155][ T3471] kworker/u4:9: attempt to access beyond end of device [ 143.970155][ T3471] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 143.990785][ T6527] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 144.000532][ T3471] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 144.025591][ T3471] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 145.011587][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.562946][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 147.133663][ T6550] loop2: detected capacity change from 0 to 32768 [ 147.275461][ T6550] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.347629][ T6550] XFS (loop2): Ending clean mount [ 147.376437][ T6550] XFS (loop2): Quotacheck needed: Please wait. [ 147.413475][ T6571] loop0: detected capacity change from 0 to 512 [ 147.441858][ T6571] EXT4-fs (loop0): Test dummy encryption mode enabled [ 147.483801][ T6559] loop3: detected capacity change from 0 to 40427 [ 147.497044][ T6571] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.510796][ T6559] F2FS-fs (loop3): invalid crc value [ 147.534804][ T6550] XFS (loop2): Quotacheck: Done. [ 147.537767][ T6571] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 147.574135][ T6559] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.593580][ T6571] EXT4-fs (loop0): orphan cleanup on readonly fs [ 147.646986][ T6571] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.169: corrupted xattr entries [ 147.739008][ T6571] EXT4-fs (loop0): 1 orphan inode deleted [ 147.763668][ T6559] F2FS-fs (loop3): Start checkpoint disabled! [ 147.764521][ T6571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.783994][ T6559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 147.844220][ T6040] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.869470][ T6571] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 147.916485][ T6559] syz.3.167: attempt to access beyond end of device [ 147.916485][ T6559] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.071630][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.321668][ T6576] loop0: detected capacity change from 0 to 512 [ 148.384667][ T6576] EXT4-fs (loop0): 1 truncate cleaned up [ 148.414741][ T1129] kworker/u4:7: attempt to access beyond end of device [ 148.414741][ T1129] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 148.430395][ T6576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.438932][ T27] audit: type=1800 audit(1775198007.413:16): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 148.441321][ T6576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.171: bg 0: block 465: padding at end of block bitmap is not set [ 148.445795][ T1129] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 148.446086][ T1129] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 148.446136][ T1129] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 148.605417][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.336425][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 150.840608][ T6605] loop0: detected capacity change from 0 to 512 [ 150.869038][ T6605] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.908393][ T6605] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.026420][ T6605] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 151.050857][ T6605] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.062428][ T6605] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.179: corrupted xattr entries [ 151.096576][ T6605] EXT4-fs (loop0): 1 orphan inode deleted [ 151.121234][ T6605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.150944][ T6608] overlayfs: failed to clone upperpath [ 151.179110][ T6605] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 151.357939][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.961856][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 154.349045][ T6643] loop3: detected capacity change from 0 to 512 [ 154.374237][ T6643] EXT4-fs (loop3): Test dummy encryption mode enabled [ 154.405017][ T6643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.435989][ T6643] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 154.453428][ T6643] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.478560][ T6643] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.191: corrupted xattr entries [ 154.510786][ T6643] EXT4-fs (loop3): 1 orphan inode deleted [ 154.530892][ T6643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 154.613472][ T6643] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 154.726878][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.765373][ T6672] loop3: detected capacity change from 0 to 512 [ 157.785218][ T6672] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.792128][ T6672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.854645][ T6672] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 157.892089][ T6672] EXT4-fs (loop3): orphan cleanup on readonly fs [ 157.912684][ T6672] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.201: corrupted xattr entries [ 157.942809][ T6672] EXT4-fs (loop3): 1 orphan inode deleted [ 157.950541][ T6672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 157.990870][ T6672] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.200794][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.139865][ T6668] loop2: detected capacity change from 0 to 32768 [ 159.166940][ T6668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.199 (6668) [ 159.252010][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 159.287247][ T6668] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.316368][ T6668] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 159.347128][ T6668] BTRFS info (device loop2): setting nodatacow, compression disabled [ 159.370369][ T6668] BTRFS info (device loop2): enabling auto defrag [ 159.393815][ T6668] BTRFS info (device loop2): max_inline at 0 [ 159.420401][ T6668] BTRFS info (device loop2): using free space tree [ 159.622572][ T6668] BTRFS info (device loop2): auto enabling async discard [ 159.928536][ T6040] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.253567][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.210'. [ 162.282588][ T6722] binder: 6719:6722 ioctl c0306201 0 returned -14 [ 162.297394][ T6722] netlink: 'syz.2.210': attribute type 10 has an invalid length. [ 162.383267][ T6723] loop5: detected capacity change from 0 to 7 [ 162.506390][ T6723] Dev loop5: unable to read RDB block 7 [ 162.512466][ T6723] loop5: AHDI p1 [ 162.516544][ T6723] loop5: partition table partially beyond EOD, truncated [ 162.584165][ T6722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.605384][ T6722] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 162.615948][ T6724] netlink: 'syz.2.210': attribute type 10 has an invalid length. [ 162.623700][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.210'. [ 162.634228][ T6724] batadv0: entered promiscuous mode [ 162.640488][ T6724] batadv0: entered allmulticast mode [ 163.374380][ T6724] bond0: (slave batadv0): Releasing backup interface [ 163.388076][ T6724] bridge0: port 3(batadv0) entered blocking state [ 163.394802][ T6724] bridge0: port 3(batadv0) entered disabled state [ 163.590880][ T6727] loop0: detected capacity change from 0 to 512 [ 163.614296][ T6727] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.705347][ T6727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.726754][ T6727] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.765475][ T6727] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.802087][ T6727] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.211: corrupted xattr entries [ 163.839027][ T6727] EXT4-fs (loop0): 1 orphan inode deleted [ 163.856570][ T6727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.880005][ T62] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 163.889886][ T62] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 164.063050][ T6727] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 164.549751][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.647812][ T6733] loop1: detected capacity change from 0 to 32768 [ 165.695378][ T6733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.214 (6733) [ 165.815725][ T6733] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.859726][ T6733] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 165.869026][ T6733] BTRFS info (device loop1): setting nodatacow, compression disabled [ 165.878520][ T6733] BTRFS info (device loop1): enabling auto defrag [ 165.885129][ T6733] BTRFS info (device loop1): max_inline at 0 [ 165.891299][ T6733] BTRFS info (device loop1): using free space tree [ 166.946694][ T6769] tty tty20: ldisc open failed (-12), clearing slot 19 [ 167.256614][ T6775] netlink: 'syz.2.220': attribute type 10 has an invalid length. [ 167.279750][ T6733] BTRFS error (device loop1): open_ctree failed: -4 [ 167.522511][ T6775] team0: Device vxcan1 is of different type [ 169.284785][ T6794] syz.1.225: attempt to access beyond end of device [ 169.284785][ T6794] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 169.299096][ T6794] syz.1.225: attempt to access beyond end of device [ 169.299096][ T6794] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 171.514585][ T6819] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 171.593290][ T6819] team0: Device vxcan1 is of different type [ 172.714409][ T5812] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.915301][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 173.021223][ T5812] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 173.030516][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.039039][ T5812] usb 4-1: Product: syz [ 173.043343][ T5812] usb 4-1: Manufacturer: syz [ 173.048241][ T5812] usb 4-1: SerialNumber: syz [ 173.126721][ T5812] usb 4-1: config 0 descriptor?? [ 173.475797][ T5812] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 173.497784][ T6829] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 173.504775][ T6829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.540923][ T6829] vhci_hcd vhci_hcd.0: Device attached [ 173.835427][ T5829] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 176.796926][ T5757] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 176.826780][ T5812] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 176.863708][ T5812] usb 4-1: USB disconnect, device number 3 [ 176.995212][ T5757] usb 1-1: config 0 has no interfaces? [ 177.005788][ T5829] usb 33-1: device descriptor read/64, error -71 [ 177.014248][ T5757] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 177.030320][ T5757] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 177.041014][ T5757] usb 1-1: Manufacturer: syz [ 177.063823][ T5757] usb 1-1: config 0 descriptor?? [ 177.072195][ T6859] loop2: detected capacity change from 0 to 512 [ 177.148679][ T6859] EXT4-fs (loop2): 1 truncate cleaned up [ 177.157693][ T6859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.247654][ T27] audit: type=1800 audit(1775198036.223:17): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.244" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 177.299049][ T5829] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 177.312254][ T6830] vhci_hcd: connection closed [ 177.323982][ T6040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.358135][ T42] vhci_hcd: stop threads [ 177.370375][ T42] vhci_hcd: release socket [ 177.379514][ T42] vhci_hcd: disconnect device [ 177.475211][ T5829] usb 33-1: enqueue for inactive port 0 [ 177.482538][ T5812] usb 1-1: USB disconnect, device number 2 [ 178.355245][ T5829] vhci_hcd: vhci_device speed not set [ 179.378281][ T6888] loop3: detected capacity change from 0 to 512 [ 179.448080][ T6888] EXT4-fs (loop3): 1 truncate cleaned up [ 179.470663][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.551078][ T27] audit: type=1800 audit(1775198038.523:18): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.257" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 179.601142][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.355733][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 181.769458][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 192, setting to 8 [ 182.515407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 182.637809][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 182.683577][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.802145][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 182.845827][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 182.867616][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.886018][ T9] usb 3-1: config 0 descriptor?? [ 182.902557][ T6899] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.134851][ T9] usb 3-1: USB disconnect, device number 5 [ 184.052264][ T6944] Illegal XDP return value 4294967262 on prog (id 11) dev syz_tun, expect packet loss! [ 184.071751][ T6946] netlink: 'syz.2.278': attribute type 10 has an invalid length. [ 184.100547][ T6946] team0: Device vxcan1 is of different type [ 194.600472][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.611403][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.313824][ T7056] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 195.339817][ T7056] netlink: 'syz.3.318': attribute type 4 has an invalid length. [ 195.433809][ T7056] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.318'. [ 195.526902][ T7056] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 195.562738][ T7056] netlink: 'syz.3.318': attribute type 4 has an invalid length. [ 195.570652][ T7056] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.318'. [ 199.051374][ T7091] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 199.061174][ T7091] team0: Device vxcan1 is of different type [ 201.879226][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 201.885410][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 201.901617][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 202.485789][ T7119] loop2: detected capacity change from 0 to 40427 [ 202.497273][ T7119] F2FS-fs (loop2): invalid crc value [ 202.723312][ T7119] F2FS-fs (loop2): Found nat_bits in checkpoint [ 203.261414][ T7119] F2FS-fs (loop2): Start checkpoint disabled! [ 203.319669][ T7119] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 203.941404][ T42] kworker/u4:2: attempt to access beyond end of device [ 203.941404][ T42] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 203.994357][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 208.686307][ T7204] netlink: 'syz.0.369': attribute type 10 has an invalid length. [ 208.714292][ T7204] team0: Device vxcan1 is of different type [ 217.181508][ T7292] vlan2: entered promiscuous mode [ 217.200123][ T7292] ip6gretap0: entered promiscuous mode [ 218.144417][ T7302] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 218.167611][ T7302] team0: Device vxcan1 is of different type [ 227.408536][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 235.168360][ T7446] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 235.178433][ T7446] team0: Device vxcan1 is of different type [ 244.813000][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'. [ 245.752162][ T7539] sched: RT throttling activated [ 254.315305][ T7646] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 256.049666][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058365][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.209959][ T7700] capability: warning: `syz.1.539' uses deprecated v2 capabilities in a way that may be insecure [ 259.721754][ T7712] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 259.792095][ T7712] team0: Device vxcan1 is of different type [ 262.933629][ T7755] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 262.943343][ T7755] team0: Device vxcan1 is of different type [ 271.389393][ T7874] netlink: 'syz.0.604': attribute type 10 has an invalid length. [ 271.427364][ T7874] team0: Device vxcan1 is of different type [ 274.658161][ T7910] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 275.776663][ T7926] netlink: 'syz.2.623': attribute type 10 has an invalid length. [ 275.809149][ T7926] team0: Device vxcan1 is of different type [ 279.428730][ T7971] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 279.438160][ T7971] team0: Device vxcan1 is of different type [ 280.231481][ T27] audit: type=1326 audit(1775198139.203:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89179c819 code=0x7ffc0000 [ 280.274350][ T27] audit: type=1326 audit(1775198139.203:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89179c819 code=0x7ffc0000 [ 280.321609][ T27] audit: type=1326 audit(1775198139.203:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd89179c819 code=0x7ffc0000 [ 280.442860][ T27] audit: type=1326 audit(1775198139.203:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd89179c819 code=0x7ffc0000 [ 283.320365][ T8011] process 'syz.3.655' launched './file1' with NULL argv: empty string added [ 285.016170][ T8029] 9pnet_fd: p9_fd_create_unix (8029): problem connecting socket: ./file0: -111 [ 288.408474][ T8077] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 288.536810][ T8077] team0: Device vxcan1 is of different type [ 291.189746][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.199148][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.698586][ T8137] 9pnet_fd: Insufficient options for proto=fd [ 292.195978][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.255944][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.486560][ T8120] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.496550][ T8120] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.506035][ T8120] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.533752][ T8120] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.822365][ T8123] netlink: 'syz.3.689': attribute type 13 has an invalid length. [ 293.856799][ T8123] netlink: 'syz.3.689': attribute type 17 has an invalid length. [ 294.011080][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.036079][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.064668][ T8123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.095599][ T8143] netlink: 'syz.0.697': attribute type 10 has an invalid length. [ 294.107311][ T8143] team0: Device vxcan1 is of different type [ 294.974543][ T8180] autofs4:pid:8180:autofs_fill_super: called with bogus options [ 298.617621][ T8256] netlink: 572 bytes leftover after parsing attributes in process `syz.0.744'. [ 298.655373][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.744'. [ 299.656359][ T8304] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 300.841365][ T8335] batadv_slave_1: entered promiscuous mode [ 300.861774][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 301.127482][ T8335] hsr_slave_1 (unregistering): left promiscuous mode [ 301.290416][ T8334] batadv_slave_1: left promiscuous mode [ 301.459576][ T8348] netlink: 'syz.1.782': attribute type 10 has an invalid length. [ 301.469283][ T8348] team0: Device vxcan1 is of different type [ 307.119058][ T8496] netlink: 277 bytes leftover after parsing attributes in process `syz.3.846'. [ 307.510533][ T8502] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 307.520413][ T8502] team0: Device vxcan1 is of different type [ 308.640337][ T8516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.197793][ T8537] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 309.208702][ T8537] team0: Device vxcan1 is of different type [ 314.423891][ T8624] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.479204][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.491430][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.252230][ T8688] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 320.263044][ T8688] team0: Device vxcan1 is of different type [ 333.746570][ T8862] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 333.756573][ T8862] team0: Device vxcan1 is of different type [ 336.012950][ T8892] syz.1.991 uses obsolete (PF_INET,SOCK_PACKET) [ 336.422843][ T27] audit: type=1326 audit(1775198195.393:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 336.481019][ T27] audit: type=1326 audit(1775198195.393:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 336.550707][ T27] audit: type=1326 audit(1775198195.433:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 336.583247][ T27] audit: type=1326 audit(1775198195.433:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 336.612199][ T27] audit: type=1326 audit(1775198195.433:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 336.683653][ T27] audit: type=1326 audit(1775198195.433:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 336.894450][ T27] audit: type=1326 audit(1775198195.433:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 337.164707][ T27] audit: type=1326 audit(1775198195.433:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 337.186067][ T8914] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 337.292338][ T8914] Cannot find del_set index 0 as target [ 337.312471][ T27] audit: type=1326 audit(1775198195.433:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1b47f9c819 code=0x7ffc0000 [ 338.796292][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 346.373957][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'. [ 348.651670][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 350.367471][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 350.748113][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 351.264159][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 351.870150][ T9144] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 352.691412][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 354.481808][ T6839] IPVS: starting estimator thread 0... [ 354.596607][ T9190] IPVS: using max 16 ests per chain, 38400 per kthread [ 354.651445][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 354.990262][ T9200] netlink: 'syz.1.1101': attribute type 10 has an invalid length. [ 355.029485][ T9200] team0: Device vxcan1 is of different type [ 356.428749][ T27] audit: type=1326 audit(1775198215.403:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.500632][ T27] audit: type=1326 audit(1775198215.403:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.550676][ T27] audit: type=1326 audit(1775198215.443:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.592550][ T27] audit: type=1326 audit(1775198215.443:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.655097][ T27] audit: type=1326 audit(1775198215.443:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.712646][ T27] audit: type=1326 audit(1775198215.443:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.745532][ T27] audit: type=1326 audit(1775198215.443:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.773633][ T27] audit: type=1326 audit(1775198215.443:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.813012][ T27] audit: type=1326 audit(1775198215.443:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 356.850076][ T27] audit: type=1326 audit(1775198215.443:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7efd0079c819 code=0x7ffc0000 [ 357.223424][ T9239] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 357.262086][ T9239] team0: Device vxcan1 is of different type [ 358.067129][ T9248] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 358.112451][ T9248] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 358.125701][ T9248] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 358.495518][ T9255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.503332][ T9255] IPv6: NLM_F_CREATE should be set when creating new route [ 358.510682][ T9255] IPv6: NLM_F_CREATE should be set when creating new route [ 359.323227][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 359.333805][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 359.348371][ T9266] netlink: 'syz.2.1132': attribute type 13 has an invalid length. [ 359.362070][ T9266] netlink: 'syz.2.1132': attribute type 14 has an invalid length. [ 359.565987][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'. [ 360.845239][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'. [ 361.559768][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 363.452500][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'. [ 365.769555][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'. [ 365.796574][ T9405] tipc: Started in network mode [ 365.803830][ T9405] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 365.828701][ T9405] tipc: Enabling of bearer rejected, failed to enable media [ 367.666536][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 367.822461][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 370.521775][ T9475] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 379.026345][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.032870][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.835330][ T9598] 9pnet: p9_errstr2errno: server reported unknown error [ 380.225377][ T9616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.216376][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 383.216391][ T27] audit: type=1326 audit(1775198242.193:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.1.1267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89179c819 code=0x0 [ 383.767111][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.810723][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.824407][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.842027][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.851999][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.867183][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.926463][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.941029][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.960551][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 383.980625][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1274'. [ 385.168085][ T9654] netlink: 'syz.1.1267': attribute type 13 has an invalid length. [ 385.200870][ T9654] netlink: 'syz.1.1267': attribute type 14 has an invalid length. [ 388.575809][ T27] audit: type=1326 audit(1775198247.553:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.2.1291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f381a59c819 code=0x0 [ 390.014666][ T9723] __nla_validate_parse: 144 callbacks suppressed [ 390.014686][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 390.287339][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 390.335186][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 390.435481][ T9721] netlink: 'syz.2.1291': attribute type 13 has an invalid length. [ 390.450187][ T9721] netlink: 'syz.2.1291': attribute type 14 has an invalid length. [ 393.555462][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 393.765490][ T27] audit: type=1326 audit(1775198252.743:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9770 comm="syz.3.1316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b47f9c819 code=0x0 [ 395.314414][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 395.351439][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 395.395113][ T9773] netlink: 'syz.3.1316': attribute type 13 has an invalid length. [ 395.430003][ T9773] netlink: 'syz.3.1316': attribute type 14 has an invalid length. [ 399.265911][ T27] audit: type=1326 audit(1775198258.243:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.3.1337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b47f9c819 code=0x0 [ 402.362193][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 402.400688][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 402.445941][ T9853] netlink: 'syz.3.1337': attribute type 13 has an invalid length. [ 402.520107][ T9853] netlink: 'syz.3.1337': attribute type 14 has an invalid length. [ 406.857781][ T27] audit: type=1326 audit(1775198265.823:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.0.1355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd0079c819 code=0x0 [ 413.792039][ T27] audit: type=1326 audit(1775198272.763:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9954 comm="syz.3.1372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b47f9c819 code=0x0 [ 414.591220][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 414.607598][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 414.619224][ T9966] netlink: 'syz.3.1372': attribute type 13 has an invalid length. [ 414.630052][ T9966] netlink: 'syz.3.1372': attribute type 14 has an invalid length. [ 416.626503][ T9993] netlink: 'syz.0.1383': attribute type 10 has an invalid length. [ 416.641555][ T9993] team0: Device vxcan1 is of different type [ 417.534884][ T27] audit: type=1326 audit(1775198276.503:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.2.1387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f381a59c819 code=0x0 [ 418.591453][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 418.617720][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 418.637512][T10016] netlink: 'syz.2.1387': attribute type 13 has an invalid length. [ 418.655028][T10016] netlink: 'syz.2.1387': attribute type 14 has an invalid length. [ 419.565306][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 420.969479][ T27] audit: type=1326 audit(1775198279.943:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.2.1400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f381a59c819 code=0x0 [ 424.579251][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 424.937116][T10090] overlayfs: failed to clone upperpath [ 426.273193][ T27] audit: type=1326 audit(1775198285.243:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.1.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89179c819 code=0x0 [ 427.997671][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 431.055375][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 431.220466][T10163] netlink: 'syz.0.1434': attribute type 10 has an invalid length. [ 431.236742][T10163] team0: Device vxcan1 is of different type [ 432.638523][ T27] audit: type=1326 audit(1775198291.613:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.2.1440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f381a59c819 code=0x0 [ 434.444719][T10203] netlink: 'syz.1.1447': attribute type 10 has an invalid length. [ 434.468424][T10203] team0: Device vxcan1 is of different type [ 436.204912][ T27] audit: type=1326 audit(1775198295.073:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.0.1456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd0079c819 code=0x0 [ 437.134422][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 437.591464][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1456'. [ 438.449663][T10253] capability: warning: `syz.0.1462' uses 32-bit capabilities (legacy support in use) [ 439.285031][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 440.359078][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.365579][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.790555][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 442.002237][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 444.030476][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 444.305451][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 448.603221][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1499'. [ 453.371374][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 453.489675][T10431] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1515'. [ 454.891918][T10443] netlink: 'syz.3.1518': attribute type 10 has an invalid length. [ 454.914242][T10443] team0: Device vxcan1 is of different type [ 456.381785][ T27] audit: type=1326 audit(1775198315.353:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.1.1524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89179c819 code=0x0 [ 457.268816][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'. [ 457.295185][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1524'. [ 457.332609][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 457.645817][T10472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1527'. [ 460.137548][T10501] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1538'. [ 461.678663][T10518] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 461.703379][T10518] team0: Device vxcan1 is of different type [ 463.393981][T10536] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1549'. [ 464.670169][T10554] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 464.685927][T10554] team0: Device vxcan1 is of different type [ 467.069333][T10573] overlayfs: failed to clone upperpath [ 467.409190][T10582] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1565'. [ 468.654730][T10595] netlink: 'syz.3.1570': attribute type 10 has an invalid length. [ 468.669844][T10595] team0: Device vxcan1 is of different type [ 471.853677][T10621] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1578'. [ 483.696661][T10719] netlink: 'syz.0.1614': attribute type 10 has an invalid length. [ 483.706299][T10719] team0: Device vxcan1 is of different type [ 497.627595][T10859] netlink: 'syz.0.1657': attribute type 10 has an invalid length. [ 497.637133][T10859] team0: Device vxcan1 is of different type [ 498.504834][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'. [ 501.699294][T10909] netlink: 'syz.2.1671': attribute type 10 has an invalid length. [ 501.816331][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.822814][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.952208][T10947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.408174][T10986] fuse: Bad value for 'fd' [ 510.475804][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 512.300852][T11012] netlink: 'syz.0.1703': attribute type 10 has an invalid length. [ 512.315882][T11012] team0: Device vxcan1 is of different type [ 514.022026][T11028] overlayfs: failed to clone upperpath [ 514.128494][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'. [ 514.615209][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 517.768267][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 523.765326][T11138] tipc: Enabling of bearer rejected, failed to enable media [ 528.951936][ T27] audit: type=1326 audit(1775198387.923:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.2.1768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f381a59c819 code=0x0 [ 530.405316][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1773'. [ 531.114338][ T27] audit: type=1326 audit(1775198390.083:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.1.1784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89179c819 code=0x0 [ 532.862693][ T27] audit: type=1326 audit(1775198391.833:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.3.1796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b47f9c819 code=0x0 [ 532.906613][T11280] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1794'. [ 534.481338][T11343] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1801'. [ 534.840319][ T27] audit: type=1326 audit(1775198393.813:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.0.1808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd0079c819 code=0x0 [ 537.666547][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 537.712193][T11390] sit1: entered allmulticast mode [ 537.909685][ T27] audit: type=1326 audit(1775198396.883:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.1.1821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89179c819 code=0x0 [ 541.715814][ T27] audit: type=1326 audit(1775198400.693:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.3.1835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b47f9c819 code=0x0 [ 544.829537][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 545.114493][ T27] audit: type=1326 audit(1775198404.073:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.3.1847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b47f9c819 code=0x0 [ 546.718715][T11494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'. [ 546.964340][T11504] xt_hashlimit: size too large, truncated to 1048576 [ 547.164035][ T27] audit: type=1326 audit(1775198406.113:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.1.1862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89179c819 code=0x0 [ 549.128124][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 549.490212][T11544] xt_hashlimit: size too large, truncated to 1048576 [ 558.701895][T11630] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 558.711491][T11630] team0: Device vxcan1 is of different type [ 561.691314][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 561.945344][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 562.167773][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 562.652874][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 562.675179][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 563.247073][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.253488][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.340553][T11708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1924'. [ 571.167692][T11753] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1939'. [ 581.697377][T11834] netem: invalid attributes len -24 [ 581.702731][T11834] netem: change failed [ 595.629369][T11969] xt_TPROXY: Can be used only with -p tcp or -p udp [ 597.322116][T11976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2015'. [ 597.366329][T11979] syz.3.2014 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 601.177110][T12023] cgroup: No subsys list or none specified [ 613.150857][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2062'. [ 614.735435][T12164] overlayfs: failed to resolve './file0': -2 [ 614.762386][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 617.399756][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 619.998588][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 621.306458][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2105'. [ 622.423519][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2109'. [ 623.707391][T12264] netlink: 'syz.0.2115': attribute type 4 has an invalid length. [ 623.792261][T12268] netlink: 'syz.0.2115': attribute type 4 has an invalid length. [ 624.682044][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2119'. [ 624.697741][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.704222][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.058537][T12289] netlink: 'syz.2.2120': attribute type 10 has an invalid length. [ 627.197407][T12301] fuse: Bad value for 'fd' [ 627.527851][T12312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2131'. [ 628.549416][T12320] netlink: 'syz.1.2132': attribute type 10 has an invalid length. [ 628.559296][T12320] team0: Device vxcan1 is of different type [ 629.049765][T12326] ip6t_rpfilter: unknown options [ 631.024442][T12338] ipip0: entered allmulticast mode [ 631.101698][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2140'. [ 642.222635][T12446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2176'. [ 644.757902][T12470] overlayfs: failed to resolve './file0': -2 [ 645.485942][T12486] fuse: Bad value for 'fd' [ 646.188938][T12499] overlayfs: failed to resolve './file0': -2 [ 646.501298][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 647.184946][T12510] overlayfs: failed to clone upperpath [ 649.832946][T12566] fuse: Bad value for 'fd' [ 650.562460][T12587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 656.206387][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 657.073254][T12671] netlink: 'syz.3.2266': attribute type 287 has an invalid length. [ 657.122271][ T27] audit: type=1326 audit(1775198772.096:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.2.2267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f381a59c819 code=0x0 [ 666.356037][ T27] audit: type=1326 audit(1775198781.326:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.0.2296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd0079c819 code=0x0 [ 670.229057][T12780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 670.746027][T12780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 670.760583][T12780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 670.770743][T12780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 670.780551][T12780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 670.788947][T12780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.171091][T12777] chnl_net:caif_netlink_parms(): no params data found [ 672.363501][T11328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.542916][T11328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.235219][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.187 [ 673.316529][T12780] Bluetooth: hci1: command tx timeout [ 674.500299][T11328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.484906][T12780] Bluetooth: hci1: command tx timeout [ 675.546432][T12777] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.563965][T12777] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.593354][T12777] bridge_slave_0: entered allmulticast mode [ 675.631243][T12777] bridge_slave_0: entered promiscuous mode [ 675.782039][T12777] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.822584][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.835186][T12777] bridge_slave_1: entered allmulticast mode [ 675.848951][T12777] bridge_slave_1: entered promiscuous mode [ 675.941065][T11328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.123670][T12777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.262454][T12777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.909634][T12777] team0: Port device team_slave_0 added [ 677.164228][T12777] team0: Port device team_slave_1 added [ 677.409097][T12777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.435108][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.547075][T12777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.558680][T12780] Bluetooth: hci1: command tx timeout [ 678.003737][T12777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.166480][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.325810][T12777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.442136][T12777] hsr_slave_0: entered promiscuous mode [ 678.491784][T12777] hsr_slave_1: entered promiscuous mode [ 678.516086][T12777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.523911][T12777] Cannot create hsr debugfs directory [ 679.635127][T12780] Bluetooth: hci1: command tx timeout [ 686.373549][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.393176][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.729664][T12914] netlink: 'syz.0.2340': attribute type 10 has an invalid length. [ 686.740004][T12914] team0: Device vxcan1 is of different type [ 689.620331][T12948] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 689.636982][T12948] team0: Device vxcan1 is of different type [ 690.927329][T11328] hsr_slave_0: left promiscuous mode [ 690.933692][T11328] hsr_slave_1: left promiscuous mode [ 690.940576][T11328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.948187][T11328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.956913][T11328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.964642][T11328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.974919][T11328] bridge_slave_1: left allmulticast mode [ 690.980623][T11328] bridge_slave_1: left promiscuous mode [ 691.006921][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.022055][T11328] bridge_slave_0: left allmulticast mode [ 691.029268][T11328] bridge_slave_0: left promiscuous mode [ 691.041054][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.103320][T11328] veth1_macvtap: left promiscuous mode [ 691.109049][T11328] veth0_macvtap: left promiscuous mode [ 691.114650][T11328] veth1_vlan: left promiscuous mode [ 691.122538][T11328] veth0_vlan: left promiscuous mode [ 692.636786][T11328] team0 (unregistering): Port device team_slave_1 removed [ 692.692443][T11328] team0 (unregistering): Port device team_slave_0 removed [ 692.749670][T11328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.802090][T11328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.219591][T11328] bond0 (unregistering): Released all slaves [ 693.578261][T12777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 693.612008][T12777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 693.643735][T12777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 693.697088][T12777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 695.826660][T12777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.936055][T12777] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.982673][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.991160][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.038061][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.045379][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.623823][T12777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.249792][T12777] veth0_vlan: entered promiscuous mode [ 703.898335][T12777] veth1_vlan: entered promiscuous mode [ 704.000719][T12777] veth0_macvtap: entered promiscuous mode [ 704.071739][T12777] veth1_macvtap: entered promiscuous mode [ 704.166092][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.203460][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.407969][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.558327][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.747656][T12777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.317817][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.414591][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.475127][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.530089][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.586658][T12777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.310833][T12777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.393045][T12777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.455115][T12777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.498716][T12777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.056639][T11323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.125785][T11323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.299187][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.384545][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.860117][T13101] loop1: detected capacity change from 0 to 256 [ 711.974671][T13101] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 712.043910][T13101] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 712.087724][T13101] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 714.101325][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'. [ 714.254926][T13127] netlink: 75 bytes leftover after parsing attributes in process `syz.2.2392'. [ 714.306367][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 714.675834][T11323] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.815188][T13139] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2396'. [ 714.937764][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 714.949154][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 714.958787][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 714.971032][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 714.979381][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 715.034076][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.339500][T11323] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.409265][T11323] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.668090][T11323] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.076918][ T5782] Bluetooth: hci0: command tx timeout [ 718.022575][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 718.434519][T13144] chnl_net:caif_netlink_parms(): no params data found [ 718.844376][T13144] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.875669][T13144] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.910446][T13144] bridge_slave_0: entered allmulticast mode [ 718.936918][T13144] bridge_slave_0: entered promiscuous mode [ 718.966841][T13144] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.014637][T13144] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.047765][T13144] bridge_slave_1: entered allmulticast mode [ 719.072508][T13144] bridge_slave_1: entered promiscuous mode [ 719.155047][ T5782] Bluetooth: hci0: command tx timeout [ 719.179474][T13159] loop1: detected capacity change from 0 to 40427 [ 719.254987][T13159] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 719.264683][T13144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.290090][T13159] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 719.313214][T13144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.374565][T13159] F2FS-fs (loop1): invalid crc value [ 719.542139][T13144] team0: Port device team_slave_0 added [ 719.641425][T13144] team0: Port device team_slave_1 added [ 719.713108][T13144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.720222][T13144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.765207][T13144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.805762][T13144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.812944][T13144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.863838][T13144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.885454][T13196] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2405'. [ 720.561810][T13144] hsr_slave_0: entered promiscuous mode [ 720.605658][T13144] hsr_slave_1: entered promiscuous mode [ 720.623861][T13144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.645043][T13144] Cannot create hsr debugfs directory [ 720.744678][T13213] loop1: detected capacity change from 0 to 512 [ 720.786318][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 720.842522][T13213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.007014][T13213] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2408: iget: checksum invalid [ 721.242245][ T5782] Bluetooth: hci0: command tx timeout [ 721.282614][T12777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.316408][ T5782] Bluetooth: hci0: command tx timeout [ 725.385191][T11323] hsr_slave_0: left promiscuous mode [ 725.393901][T11323] hsr_slave_1: left promiscuous mode [ 725.407384][T11323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.421618][T11323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.430891][T11323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.438990][T11323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.454344][T11323] bridge_slave_1: left allmulticast mode [ 725.460772][T11323] bridge_slave_1: left promiscuous mode [ 725.467177][T11323] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.480356][T11323] bridge_slave_0: left allmulticast mode [ 725.495172][T11323] bridge_slave_0: left promiscuous mode [ 725.506268][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.613642][T11323] veth1_macvtap: left promiscuous mode [ 725.623252][T11323] veth0_macvtap: left promiscuous mode [ 725.633842][T11323] veth1_vlan: left promiscuous mode [ 725.652464][T11323] veth0_vlan: left promiscuous mode [ 727.001232][T11323] team0 (unregistering): Port device team_slave_1 removed [ 727.060450][T11323] team0 (unregistering): Port device team_slave_0 removed [ 727.118274][T11323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.174111][T11323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.633845][T11323] bond0 (unregistering): Released all slaves [ 727.833875][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 727.867057][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 728.107050][T13267] loop1: detected capacity change from 0 to 1024 [ 728.114456][T13267] ======================================================= [ 728.114456][T13267] WARNING: The mand mount option has been deprecated and [ 728.114456][T13267] and is ignored by this kernel. Remove the mand [ 728.114456][T13267] option from the mount to silence this warning. [ 728.114456][T13267] ======================================================= [ 728.310180][T13267] EXT4-fs: Ignoring removed mblk_io_submit option [ 728.781642][T13267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.992708][T13144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 729.079555][T13267] ================================================================== [ 729.087694][T13267] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 729.095549][T13267] Read of size 18446744073709551588 at addr ffff88807b010040 by task syz.1.2422/13267 [ 729.105206][T13267] [ 729.107553][T13267] CPU: 0 PID: 13267 Comm: syz.1.2422 Not tainted syzkaller #0 [ 729.115032][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.125114][T13267] Call Trace: [ 729.128502][T13267] [ 729.131453][T13267] dump_stack_lvl+0x18c/0x250 [ 729.136178][T13267] ? read_lock_is_recursive+0x20/0x20 [ 729.141585][T13267] ? show_regs_print_info+0x20/0x20 [ 729.146846][T13267] ? load_image+0x400/0x400 [ 729.151405][T13267] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 729.156876][T13267] ? __virt_addr_valid+0x18c/0x540 [ 729.162004][T13267] ? __virt_addr_valid+0x469/0x540 [ 729.167203][T13267] print_report+0xa8/0x210 [ 729.171727][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 729.177270][T13267] kasan_report+0x117/0x150 [ 729.181772][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 729.187248][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 729.192737][T13267] kasan_check_range+0x241/0x290 [ 729.197761][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 729.203221][T13267] __asan_memmove+0x29/0x70 [ 729.207726][T13267] ext4_xattr_set_entry+0x94b/0x1e90 [ 729.213185][T13267] ext4_xattr_block_set+0xae8/0x32b0 [ 729.218488][T13267] ? ext4_destroy_inode+0x200/0x200 [ 729.223696][T13267] ? proc_nr_inodes+0x230/0x230 [ 729.228648][T13267] ? do_raw_spin_unlock+0x121/0x230 [ 729.233894][T13267] ? _raw_spin_unlock+0x28/0x40 [ 729.238801][T13267] ? ext4_xattr_block_find+0x350/0x350 [ 729.244317][T13267] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 729.249745][T13267] ext4_xattr_set_handle+0x1280/0x14c0 [ 729.255251][T13267] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 729.261280][T13267] ? __ext4_journal_start_sb+0x259/0x560 [ 729.266964][T13267] ext4_xattr_set+0x252/0x340 [ 729.271687][T13267] ? end_current_label_crit_section+0x170/0x170 [ 729.277973][T13267] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 729.283587][T13267] ? posix_xattr_acl+0x93/0xb0 [ 729.288616][T13267] ? ext4_xattr_trusted_get+0x40/0x40 [ 729.294039][T13267] __vfs_setxattr+0x431/0x470 [ 729.298770][T13267] __vfs_setxattr_noperm+0x12d/0x5e0 [ 729.304110][T13267] vfs_setxattr+0x16b/0x2f0 [ 729.308649][T13267] ? xattr_permission+0x470/0x470 [ 729.313708][T13267] ? __mnt_want_write+0x223/0x2a0 [ 729.318780][T13267] ? path_setxattr+0x3a1/0x5d0 [ 729.323582][T13267] path_setxattr+0x3f3/0x5d0 [ 729.328300][T13267] ? simple_xattrs_free+0x150/0x150 [ 729.333559][T13267] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 729.339582][T13267] ? lock_chain_count+0x20/0x20 [ 729.344473][T13267] __x64_sys_lsetxattr+0xb8/0xd0 [ 729.349442][T13267] do_syscall_64+0x55/0xa0 [ 729.353860][T13267] ? clear_bhb_loop+0x40/0x90 [ 729.358559][T13267] ? clear_bhb_loop+0x40/0x90 [ 729.363282][T13267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.369236][T13267] RIP: 0033:0x7f232bb9c819 [ 729.373648][T13267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.393364][T13267] RSP: 002b:00007f232ca39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 729.402084][T13267] RAX: ffffffffffffffda RBX: 00007f232be15fa0 RCX: 00007f232bb9c819 [ 729.410102][T13267] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00002000000001c0 [ 729.418113][T13267] RBP: 00007f232bc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 729.426129][T13267] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 729.434137][T13267] R13: 00007f232be16038 R14: 00007f232be15fa0 R15: 00007ffd83b9df48 [ 729.442162][T13267] [ 729.445306][T13267] [ 729.447661][T13267] Allocated by task 13267: [ 729.452113][T13267] kasan_set_track+0x4e/0x70 [ 729.456829][T13267] __kasan_kmalloc+0x8f/0xa0 [ 729.461462][T13267] __kmalloc_node_track_caller+0xb2/0x230 [ 729.467228][T13267] kmemdup+0x2b/0x70 [ 729.471195][T13267] ext4_xattr_block_set+0x9ea/0x32b0 [ 729.476523][T13267] ext4_xattr_set_handle+0x1280/0x14c0 [ 729.482206][T13267] ext4_xattr_set+0x252/0x340 [ 729.486938][T13267] __vfs_setxattr+0x431/0x470 [ 729.491668][T13267] __vfs_setxattr_noperm+0x12d/0x5e0 [ 729.496995][T13267] vfs_setxattr+0x16b/0x2f0 [ 729.501545][T13267] path_setxattr+0x3f3/0x5d0 [ 729.506176][T13267] __x64_sys_lsetxattr+0xb8/0xd0 [ 729.511152][T13267] do_syscall_64+0x55/0xa0 [ 729.515634][T13267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.521572][T13267] [ 729.523923][T13267] The buggy address belongs to the object at ffff88807b010000 [ 729.523923][T13267] which belongs to the cache kmalloc-1k of size 1024 [ 729.538279][T13267] The buggy address is located 64 bytes inside of [ 729.538279][T13267] 1024-byte region [ffff88807b010000, ffff88807b010400) [ 729.551607][T13267] [ 729.553955][T13267] The buggy address belongs to the physical page: [ 729.560471][T13267] page:ffffea0001ec0400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b010 [ 729.570747][T13267] head:ffffea0001ec0400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 729.579712][T13267] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 729.587724][T13267] page_type: 0xffffffff() [ 729.592081][T13267] raw: 00fff00000000840 ffff888017c41dc0 dead000000000100 dead000000000122 [ 729.600700][T13267] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 729.609401][T13267] page dumped because: kasan: bad access detected [ 729.615847][T13267] page_owner tracks the page as allocated [ 729.621589][T13267] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3471, tgid 3471 (kworker/u4:9), ts 562374868645, free_ts 562141306249 [ 729.644040][T13267] post_alloc_hook+0x1c1/0x200 [ 729.648926][T13267] get_page_from_freelist+0x1951/0x19e0 [ 729.654625][T13267] __alloc_pages+0x1f0/0x460 [ 729.659316][T13267] alloc_slab_page+0x5d/0x160 [ 729.664133][T13267] new_slab+0x87/0x2d0 [ 729.668255][T13267] ___slab_alloc+0xc5d/0x12f0 [ 729.672981][T13267] __kmem_cache_alloc_node+0x19e/0x250 [ 729.678490][T13267] __kmalloc_node_track_caller+0xa2/0x230 [ 729.684256][T13267] kmalloc_reserve+0x116/0x240 [ 729.689140][T13267] pskb_expand_head+0x185/0x1230 [ 729.694192][T13267] batadv_skb_head_push+0x166/0x200 [ 729.699595][T13267] batadv_send_skb_packet+0xeb/0x650 [ 729.704915][T13267] batadv_iv_send_outstanding_bat_ogm_packet+0x69c/0x850 [ 729.712082][T13267] process_scheduled_works+0xa5d/0x15d0 [ 729.717670][T13267] worker_thread+0xa55/0xfc0 [ 729.722398][T13267] kthread+0x2fa/0x390 [ 729.726493][T13267] page last free stack trace: [ 729.731266][T13267] free_unref_page_prepare+0x7b2/0x8c0 [ 729.737107][T13267] free_unref_page+0x32/0x2e0 [ 729.741839][T13267] __unfreeze_partials+0x1cf/0x210 [ 729.746978][T13267] put_cpu_partial+0x17c/0x250 [ 729.751781][T13267] __slab_free+0x319/0x400 [ 729.756291][T13267] qlist_free_all+0x75/0xd0 [ 729.760822][T13267] kasan_quarantine_reduce+0x143/0x160 [ 729.766314][T13267] __kasan_slab_alloc+0x22/0x80 [ 729.771273][T13267] slab_post_alloc_hook+0x6e/0x4b0 [ 729.776505][T13267] kmem_cache_alloc+0x11a/0x2d0 [ 729.781385][T13267] vm_area_dup+0x27/0x270 [ 729.785744][T13267] __split_vma+0x1b4/0xc60 [ 729.790197][T13267] mprotect_fixup+0xa19/0xca0 [ 729.794909][T13267] do_mprotect_pkey+0x7c2/0xcb0 [ 729.799800][T13267] __x64_sys_mprotect+0x80/0x90 [ 729.804694][T13267] do_syscall_64+0x55/0xa0 [ 729.809156][T13267] [ 729.811501][T13267] Memory state around the buggy address: [ 729.817240][T13267] ffff88807b00ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 729.825416][T13267] ffff88807b00ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 729.833508][T13267] >ffff88807b010000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 729.841604][T13267] ^ [ 729.847783][T13267] ffff88807b010080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 729.855964][T13267] ffff88807b010100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 729.864056][T13267] ================================================================== [ 729.910124][T13294] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 729.939963][T13144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 729.954817][T13267] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 729.962271][T13267] CPU: 0 PID: 13267 Comm: syz.1.2422 Not tainted syzkaller #0 [ 729.969770][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.979862][T13267] Call Trace: [ 729.983256][T13267] [ 729.986212][T13267] dump_stack_lvl+0x18c/0x250 [ 729.991718][T13267] ? show_regs_print_info+0x20/0x20 [ 729.996966][T13267] ? load_image+0x400/0x400 [ 730.001514][T13267] panic+0x2dc/0x730 [ 730.005444][T13267] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.011641][T13267] ? bpf_jit_dump+0xd0/0xd0 [ 730.016186][T13267] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 730.022205][T13267] ? _raw_spin_unlock+0x40/0x40 [ 730.027068][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 730.032539][T13267] check_panic_on_warn+0x84/0xa0 [ 730.037487][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 730.043040][T13267] end_report+0x6f/0x130 [ 730.047300][T13267] kasan_report+0x128/0x150 [ 730.051834][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 730.057307][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 730.062775][T13267] kasan_check_range+0x241/0x290 [ 730.067720][T13267] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 730.073199][T13267] __asan_memmove+0x29/0x70 [ 730.077715][T13267] ext4_xattr_set_entry+0x94b/0x1e90 [ 730.083105][T13267] ext4_xattr_block_set+0xae8/0x32b0 [ 730.088404][T13267] ? ext4_destroy_inode+0x200/0x200 [ 730.093614][T13267] ? proc_nr_inodes+0x230/0x230 [ 730.098488][T13267] ? do_raw_spin_unlock+0x121/0x230 [ 730.103702][T13267] ? _raw_spin_unlock+0x28/0x40 [ 730.108562][T13267] ? ext4_xattr_block_find+0x350/0x350 [ 730.114082][T13267] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 730.119664][T13267] ext4_xattr_set_handle+0x1280/0x14c0 [ 730.125178][T13267] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 730.131201][T13267] ? __ext4_journal_start_sb+0x259/0x560 [ 730.136849][T13267] ext4_xattr_set+0x252/0x340 [ 730.141627][T13267] ? end_current_label_crit_section+0x170/0x170 [ 730.147882][T13267] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 730.153449][T13267] ? posix_xattr_acl+0x93/0xb0 [ 730.158219][T13267] ? ext4_xattr_trusted_get+0x40/0x40 [ 730.163612][T13267] __vfs_setxattr+0x431/0x470 [ 730.168306][T13267] __vfs_setxattr_noperm+0x12d/0x5e0 [ 730.173629][T13267] vfs_setxattr+0x16b/0x2f0 [ 730.178177][T13267] ? xattr_permission+0x470/0x470 [ 730.183229][T13267] ? __mnt_want_write+0x223/0x2a0 [ 730.188361][T13267] ? path_setxattr+0x3a1/0x5d0 [ 730.193137][T13267] path_setxattr+0x3f3/0x5d0 [ 730.197788][T13267] ? simple_xattrs_free+0x150/0x150 [ 730.203013][T13267] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 730.209014][T13267] ? lock_chain_count+0x20/0x20 [ 730.213883][T13267] __x64_sys_lsetxattr+0xb8/0xd0 [ 730.218832][T13267] do_syscall_64+0x55/0xa0 [ 730.223269][T13267] ? clear_bhb_loop+0x40/0x90 [ 730.228042][T13267] ? clear_bhb_loop+0x40/0x90 [ 730.232825][T13267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.238819][T13267] RIP: 0033:0x7f232bb9c819 [ 730.243238][T13267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.262940][T13267] RSP: 002b:00007f232ca39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 730.271368][T13267] RAX: ffffffffffffffda RBX: 00007f232be15fa0 RCX: 00007f232bb9c819 [ 730.279349][T13267] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00002000000001c0 [ 730.287327][T13267] RBP: 00007f232bc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 730.295477][T13267] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 730.303456][T13267] R13: 00007f232be16038 R14: 00007f232be15fa0 R15: 00007ffd83b9df48 [ 730.311614][T13267] [ 730.314767][T13267] Kernel Offset: disabled [ 730.319084][T13267] Rebooting in 86400 seconds..