last executing test programs: 1m27.510455448s ago: executing program 2 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m27.4127833s ago: executing program 2 (id=203): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1m27.356330731s ago: executing program 2 (id=204): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_emit_ethernet(0x11, &(0x7f0000001b00)=ANY=[], 0x0) 1m27.271327092s ago: executing program 2 (id=208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 1m27.061773517s ago: executing program 2 (id=212): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 1m26.332303981s ago: executing program 2 (id=217): unshare(0x26000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1200000007"], 0x10) 1m26.289025052s ago: executing program 32 (id=217): unshare(0x26000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1200000007"], 0x10) 26.535875053s ago: executing program 1 (id=542): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 22.431477463s ago: executing program 1 (id=565): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 22.238853037s ago: executing program 1 (id=568): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r3 = epoll_create1(0x80000) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)={0x80000004}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x1, 0x0, 0x0) 21.05845649s ago: executing program 1 (id=574): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x4810, &(0x7f0000000580)={[{@nossd_spread}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@usebackuproot}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@enospc_debug}, {@notreelog}]}, 0x3, 0x5145, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h7+5j7CrrxIE/83o7L50Z0F9EfkZH3FK72um0xZfssnHKslmD6zpdWcnGuLa2Uxw72NqW1RI1pdWwhsCyK4n+sYQSY7b8AdsIBl0gdEmsIcuLYbNEIBDZLRgJLosaXCWxmzvnPHfOfc7cl7YzpQOfT9K5z73f5/Xcl97nnHOfAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArw9Hvvr5v20Wf+B3Fz/x9GUTn9m/4bIXvnTx2Y+EMDn7eEcW7ui/5qaJX9x20e377153853HLnlXb14uj4eB6p/O/M5XYq3HlodwV0cI3Wlg9WAW6MnvD8b63jIYwllhLlArMdWflUgbDj/oC+FgmAvUqvp+XwiDhcClj95/33XVxI19IawIIVTSNp6qZG30pYHze7NAfxrY0Z0Ffn08Uwt8rzMLwCmLb4bai/7wZH2GkfnLNXj99SxYx15d6fC6YmKkcb6fb1jkThX0pg9MntLTVqqORVF6exzxblsC77bSdr7B01b8IpV/Qzk+F6qEzq1T2zZfObMnPtIZxsa6GtW0SM/z4y99ccuJpJfM6zB2YGRBXofXP7zitq5VH37oztUrnjv07gPPn2o3f1zYpMX0YquE/DW3ZJ7HaMLnyRJ4+5W+JY360hVC2Pbp3/tIs3hp/j/SfP4fX87xtrMud6z1laFsbh4fGYyJF4eyuTkAAAAsGUthr+mOsXvfXyg+XEnqK83/R9s7/h8P+eeT+Wy0R0KYmE0cGA7hnNnHs8CtsblPDYfw9tnUZH1gQxI4EsKbZxOralUlJZbFEqNJ4KdDeWAiCRyNgckk8O0YuCEJfCUGDieBLTFwJAlcFANhun4cvz+Uj6PtQF8MbMo24uF4FsIvh2JrybZ6slYVAADAAslnhz31dwvnOpxqhji9PNzXKkM8A7thhkpSQzqDrU2rGtbQ3aqGzlY11Ma9r/nwSzV3tKq5dBpGR32Gm371Nx8NTZTm/+PN5/+VeTrSUTr+H8LG2b8xd2cemanFN03WZQAAAABOwcD/PvOtZvHS/H+ivfP/4z6RrkLm8GDcDbF9OITx+kBW7R+WA9lR74E8AAAAAEtB7Xh87Vj4dH6bnaKdzqfL+SdPMH888D8xb/7eI/dsatbf0vx/sr3z//vrb7NOHI29+PpwCMsKgR/GXlYDs0Zj4CcfqA/k4z8aN8C1sar8xIRaVdfGEptiYDwJHGxU4ke1EufUB/Inq9b4gdo4pvMShQAAAACcdnF3QDwuH8//P++36z7frFxp/r/pxM7/n50Hl07vnxkIYU13CF3pDwMe7M8WBoyBwY48cW9/VldXWtXV/SFcWB1YWtUz+fr/3ekag4/2ZVXFwDnnHXrp/GriW30hrCkGHvv4Le+pJvYkgVrjf9kXwtuqo00b/+6yrPGetPFvLAvhrYVArapPLQuh2lhvWtX9lfw6BmlV/1wJ4Q2FQK2q91ZC2BsAWKLif6Vbiw/u3nvV9s0zM1O7FjER9+H3hW3TM1NjW3bMbK006NPWpM91yxhdXR5Tu1e+eTJfouhjd2wcbCdd+53geLGtfD9+6cTB/H78LtQzO851PXV316dDfuc7yk2EwjepRkPuXOQh9xcrmXsSS/XH/L1hICy7cvfUrrEvbN6zZ9fa7G+72ddlf+NhpmxbrU23Vf98fWvj5dFwtazEyW6rlcVK1uy5Yuea3XuvWj19xebLpy6f+uza964bv2B8/fj7LlhTHdV49rfFUFfOV3Uy1OO3tDmuBRzqud2FSk7Hp8bJJzryzXWm9EdC4vWS2DGwsun/yaX5/87m8//4qRM/+fP1GRod/x+Jh/mzx+cO82+KgYPtHv8faXQ0v3ZiwGgS2BcD+xzmBwAA4LUhTvLj3sy4V/pnq777XLNypfn/vvZ+/79A6//Xlq6/pNEy/6tiifFG6/+ny/zX1v/f12j9/3SZ/9r6/wdfhfX/r6wFkk3yS+v/AwAArwWnb/3/lsv7pxcIKGVIl/f/QJohvUBAqYaWy/i3e4GAE17//6n//Kv/Dk2U5v83tDf/t3A/AAAAnDm+/Gef/3/N4qX5/8H25v+nf/2/0Oj8/9FGgclGCwNa/w8AAIAlqtH6fyPX9H+yWbnS/P9we/P/eNpFZ13uWOsrQ9madiFd0+7FodpPBgAAAGBp6AxjYz1t5q1bGXXDybf5eL4UaLN00TN/cuzEzv8/0t78v+53Gdc/vOK2rlUffuiVO1eveO7Quw88P3f8HwAAAFg87e6XAAAAAAAAAAAAAAAAXn3P/Mf+9c3ipd//h42zjzf6/X+87l/8fcEb63LHWluv/5ffv/RDt++dXbLwwaEQ3lEMbN+//ayQX5t/ZTFw3ydWvama2J+WuOfpi56tJj6ZBj64+uyXq4kLk8CmuEjim9NAvKriy8uTQFxe8d/TQNweh9NAbx742vJsHB3ptvrZYLatOtJt9cRgCMOFQG1b3TWYtdGRDvDGJFAb4OfSQBzgn+eBzrRXtw9kvYqBwVj05oGsVwAAnLHit8CesG16Zmo8foWPt+d2199GdUuWXZ1W2tV280/mS5N97I6Ng+2ku9LvonPXGu8JleoQ1pa+rhazdMyOcmFqabHp3thgyK1We+tsUC51opuut/GI+rIRjW3ZMbO1p+XA17fOsq67ZZa1pclOMUvn7CZto5Y2+tLGiNrcNm10Od7vDGNjXUmuP4jBkVCn1Sui3d/rF9f5a/QqKOb57LEDv25WX2n+P9Le/L9SHNfL+cUA9sUr6/3dsGX+AQAAYHF9bcNvvhn/ffSaBx5rlrc0/x9tb/4f92Dlh4KzvR1H4vX/DwyHMHtp/ZEscGts7lPDIbx9NjUZS2QX1L8klhjPArfGHSarYolNk/VVLYuBw0ngp0N54EgSOBoD+V6KQyHflfP3QyG8Zza1sb7EzlhiJAl8JAZGk8BYDIwngeUxMJEEXlieBybzQLxwwr/FQJiu31Z3LM+3FQAAwInI51k99XdDOs873N0qQ0erDP2tMnS2ylBpmqEnHG40inj/OzFDT0d5K8SHetJm+5JaShnixfAbdrzl1q0d/v9Rfc60YKnp2mk4I/U5Y4a7399dCU2U5v/j7c3/++tvs9aPxvn/3PX/ssAPY/e+Hk8dH42Bn3ygPpDvGDgaJ7vX1qqazEvkk/ZrY4mJGBhNAjtjYCIJbNqYBw6+qT6Qz7RrjR+oNT6dlygEAAAA4LSLOwjibpo4/79591cHmpUrzf8n2pv/x/YGio19JdZ6bHkId3XM9aYWWD2YBXpCCLvu2DzXj7cMhnBWYQdHrcRUf1aiN2k4/KAv+4V6DAzGxPf7sh8fxPuXPnr/fddVEzf2hbCisPel1sZTlayNvjRwfm8W6E8DO7qzQNzzUwt8rzMLwCmr7RWML6j8VJeakfnLNXj9vVauCZoOr7QPdJ588/3marGUdrjm+1RrTuxpa7r/lgVTensc8W5biu+2Ee+24hep/BvK8blQJXRundq2+cqZPfGR4i9ZSxbpeS7+SrWd9AK8DvedfG9bq6QdGE8+PsbnLzf/67AjVnf9wytu61r14YfuXL3iuUPvPvB8291oIP5Q+P4v/evgjwubd7FVQv6aW3KfJ5M+T5bEfwPJu3vU0xZC2PjCN65tFi/N/yfbm/93J7ezfhM35u7hEN5Z2LgPxs3/x8PZ52AhkH1KvqEcyA65/9dQw09OAAAAWGi13R21/QXT+W12Qng6Ty7nnwzh+PAJ5I/7Kybmzd9uv/v/+hMrmsVL8/9Nzef/y5JunsLx/1A8aO/4PyQc/5/Xmb4reln6wL5T2hVdqo5F0fL4/yvzl/NuK+VbuHdbb8scjv/Py/F/x//n4/h/C47/z+tMf9pK35J2+tIVQnjuj+59olm8NP/f2d783/p/9Yv2xUBt/b9Njdb/29lo/b99ScD6fwAAwMJqsNBcOs8rrd5XypCu3lfK0HKBwJZLDDZf/6/JOnuvmfX/Shu11fp/z5771G9DE6X5/7725v/x5TBQbH2h1//rXaT1/0Y3NqjqhhjYaWFAAAAAzkSN9k0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6rr7H/5na7P4A7+7+ImnL5v4zP4Nl73wpYvPfiSE6dnHO7JwR/81N0384raLbt9/97qb7zx2ybsqebme/Pb/1+WOtb4yFMLBwiODMfHiUPXOXODSD92+t7uaeHAohHcUA9v3bz+rmvj2UAgri4H7PrHqTdXE/rTEPU9f9Gw18ck08MHVZ79cTVyYBzrS7v7j8qy7HWl3r1sewnAhUOvuZ5bXV1Vr40/zQGfaxj8NZm3EwGAs+s3BrI0YmIklppeFsKY7hK60qgcqWVVdaVX/Usmq6kqr+nIlhAtDCN1pVU/3ZlV1pyN/pDerKgbOOe/QS+dXEwd7Q1hTDDz28VveU018LgnUGv+L3hDeVn3JpI1/pydrvCdt/MaeEN4aQuhNS/yqOyvRm5Z4pjuENxQCtcY/3R3C3sBrQvzwqftE2733qu2bZ2amdjVLhH0htMrTJNGbt9UXtk3PTI1t2TGztZL0qZGOQvr41Sc/9idf+uKW6u3H7tg42E66Oy/XM9vldT11d9ef6b2P/eovVlJ4OlMxf28YCMuu3D21a+wLm/fs2bU2+9tu9nXZ3648mm2rtUtlW60sVrJmzxU71+zee9Xq6Ss2Xz51+dRn17533fgF4+vH33fBmuqoxrO/CzHUW07/UM/tLlRyku9pCYnXQ+K8xaq5I5wZA2yc6Kz7dBs/0z/IS1/05zraEyqzH9ClaUUxS8fsKBdi0BtOcsQn8z2l5YjWliYOpSzr5slydX2W9aXJxFwtfVmW2e91pclhsbHO2U0a73eGsbGuRtthpP5ucfP+/BQ27+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqMng0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//9MYCIV") ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140080, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid=0x40003}) 19.219527606s ago: executing program 1 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 18.717120536s ago: executing program 1 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pselect6(0xfd37, &(0x7f0000000380), &(0x7f0000000600), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) 18.711868446s ago: executing program 33 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pselect6(0xfd37, &(0x7f0000000380), &(0x7f0000000600), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) 10.924138127s ago: executing program 5 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 9.491660545s ago: executing program 5 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.330413337s ago: executing program 5 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7fffffff, 0xc8d, 0x5}}]}, 0x40}}, 0x40000) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x1, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x6c1}]}, 0x34}}, 0x0) 4.222510047s ago: executing program 4 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x4003, 0x1) 3.344150734s ago: executing program 4 (id=663): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2.450143512s ago: executing program 5 (id=664): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 2.449985591s ago: executing program 3 (id=665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 2.448946942s ago: executing program 4 (id=667): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1000840, &(0x7f0000000a00)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@utf8no}, {@rodir}]}, 0x3, 0x35d, &(0x7f0000001f80)="$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") setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 2.356125353s ago: executing program 3 (id=669): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.882805623s ago: executing program 0 (id=670): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f00000000c0)='|K', 0x2, 0x40, 0x0, 0x0) 1.835405984s ago: executing program 0 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1.729956486s ago: executing program 6 (id=599): io_uring_setup(0xb3a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 1.693884417s ago: executing program 0 (id=672): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000380)="9ed8", 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) write$nbd(r3, &(0x7f0000000080)=ANY=[], 0x17) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 1.655821487s ago: executing program 0 (id=673): r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.622193138s ago: executing program 0 (id=674): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) 1.556405319s ago: executing program 4 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, &(0x7f0000000640)) 1.49605179s ago: executing program 5 (id=676): unshare(0x2c020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x2000008, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 1.122277838s ago: executing program 3 (id=677): r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) 572.619568ms ago: executing program 0 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d00001200fcdbdf2507"], 0x18}}, 0x0) 571.389968ms ago: executing program 4 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 508.276069ms ago: executing program 6 (id=680): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 463.45528ms ago: executing program 4 (id=681): r0 = socket$inet6(0xa, 0x800, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x11}, 0x800, 0x0, 0x3, 0x9, 0x1, 0xffff}, 0x20) setresuid(0xee00, 0xee00, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x2040600) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004888) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x4000010) 94.413798ms ago: executing program 3 (id=682): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) listen(r1, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 63.989498ms ago: executing program 3 (id=683): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2019}}}, 0x7) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x4080804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, 0xffffffffffffffff, 0xaf33d000) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x4000040) 44.316639ms ago: executing program 5 (id=693): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f00000000c0)='|K', 0x2, 0x40, 0x0, 0x0) 0s ago: executing program 3 (id=694): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}]]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): : (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.387527][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.390559][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.391687][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.393192][ T4319] device bridge_slave_1 entered promiscuous mode [ 33.399065][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.401268][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.407803][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.421041][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.430548][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.433405][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.438930][ T4328] team0: Port device team_slave_0 added [ 33.440880][ T4320] team0: Port device team_slave_0 added [ 33.442016][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.443206][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.444777][ T4326] device bridge_slave_0 entered promiscuous mode [ 33.453928][ T4328] team0: Port device team_slave_1 added [ 33.457908][ T4320] team0: Port device team_slave_1 added [ 33.459016][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.460184][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.461677][ T4326] device bridge_slave_1 entered promiscuous mode [ 33.464793][ T4319] team0: Port device team_slave_0 added [ 33.467139][ T4319] team0: Port device team_slave_1 added [ 33.469162][ T4325] team0: Port device team_slave_0 added [ 33.485979][ T4325] team0: Port device team_slave_1 added [ 33.487307][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.488373][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.492362][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.495689][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.496774][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.500607][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.507266][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.508362][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.512543][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.523545][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.525416][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.526524][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.530674][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.532826][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.533942][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.540842][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.542995][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.544160][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.548504][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.550740][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.551772][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.556007][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.559017][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.560720][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.561738][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.565693][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.625455][ T4319] device hsr_slave_0 entered promiscuous mode [ 33.664477][ T4319] device hsr_slave_1 entered promiscuous mode [ 33.715120][ T4326] team0: Port device team_slave_0 added [ 33.717104][ T4326] team0: Port device team_slave_1 added [ 33.795180][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.844583][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.894316][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.895531][ T4320] Cannot create hsr debugfs directory [ 33.955916][ T4328] device hsr_slave_0 entered promiscuous mode [ 33.994836][ T4328] device hsr_slave_1 entered promiscuous mode [ 34.034310][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.035430][ T4328] Cannot create hsr debugfs directory [ 34.075602][ T4325] device hsr_slave_0 entered promiscuous mode [ 34.134448][ T4325] device hsr_slave_1 entered promiscuous mode [ 34.174309][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.175477][ T4325] Cannot create hsr debugfs directory [ 34.176729][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.177842][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.181927][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.189743][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.190826][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.194941][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.295282][ T4326] device hsr_slave_0 entered promiscuous mode [ 34.334505][ T4326] device hsr_slave_1 entered promiscuous mode [ 34.384344][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.385540][ T4326] Cannot create hsr debugfs directory [ 34.446075][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.477722][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.515620][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.558487][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.639654][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.676204][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.718869][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.756466][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.818187][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.838098][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.878345][ T4325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.921851][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.955662][ T4325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.000679][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.035631][ T4325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.077604][ T4325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.114504][ T4323] Bluetooth: hci3: command 0x0409 tx timeout [ 35.114684][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 35.115568][ T4323] Bluetooth: hci0: command 0x0409 tx timeout [ 35.124112][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.179649][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.194512][ T4323] Bluetooth: hci4: command 0x0409 tx timeout [ 35.195505][ T4323] Bluetooth: hci2: command 0x0409 tx timeout [ 35.205780][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.259771][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.302434][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.318425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.320367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.330069][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.340834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.342442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.343932][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.345162][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.348294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.349801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.351542][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.352596][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.354004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.356554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.367653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.372442][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.373661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.375509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.382568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.389597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.390999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.396026][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.398972][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.401888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.403558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.406183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.408164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.413571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.416330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.417748][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.418869][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.420783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.430636][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.432014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.433531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.435646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.437102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.438560][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.439636][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.440994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.442350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.445986][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.452816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.454563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.460830][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.471001][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.473010][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.475266][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.477073][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.478515][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.479646][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.480972][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.482700][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.491709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.493681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.498669][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.500252][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.501947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.503502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.506170][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.507274][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.508703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.510192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.518171][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.519860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.521357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.523008][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.527037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.530163][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.536524][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.537880][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.539051][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.540939][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.542586][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.545470][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.547025][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.548199][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.549981][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.553864][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.557772][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.559195][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.560743][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.567820][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.569626][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.571413][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.572899][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.574062][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.576904][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.578340][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.579745][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.581309][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.584070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.586709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.588993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.590620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.593035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.598035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.599976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.608805][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.611199][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.614688][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.615946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.617392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.618732][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.619912][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.621197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.622569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.624004][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.625202][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.627975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.630381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.631987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.641183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.642742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.653979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.658117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.659820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.661412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.663142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.670741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.672375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.679572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.681508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.683988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.685915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.688898][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.694195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.696302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.705084][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.706758][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.712789][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.714082][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.725270][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.727269][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.739969][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.741535][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.743413][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.746399][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.755030][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.756334][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.759445][ T4319] device veth0_vlan entered promiscuous mode [ 35.765035][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.770997][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.772571][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.774972][ T4319] device veth1_vlan entered promiscuous mode [ 35.807567][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.809192][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.810593][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.812196][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.816503][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.824757][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.832949][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.835529][ T4320] device veth0_vlan entered promiscuous mode [ 35.837369][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.838737][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.852335][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.853625][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.861952][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.863694][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.866610][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.870177][ T4320] device veth1_vlan entered promiscuous mode [ 35.873967][ T4319] device veth0_macvtap entered promiscuous mode [ 35.882889][ T4319] device veth1_macvtap entered promiscuous mode [ 35.887324][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.888939][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.890365][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.891815][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.893169][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.895941][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.904080][ T4320] device veth0_macvtap entered promiscuous mode [ 35.911144][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.912610][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.914783][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.916394][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.919855][ T4320] device veth1_macvtap entered promiscuous mode [ 35.924024][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.926179][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.927676][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.929475][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.931071][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.932444][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.936414][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.938789][ T4325] device veth0_vlan entered promiscuous mode [ 35.943301][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.945402][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.957815][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.959543][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.962052][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.965563][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.966986][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.968317][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.969571][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.972739][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.974717][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.976853][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.978788][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.980367][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.982038][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.983516][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.990971][ T4325] device veth1_vlan entered promiscuous mode [ 35.993217][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.995525][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.997099][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.998586][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.000152][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.001640][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.003011][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.004858][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.006330][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.009352][ T4326] device veth0_vlan entered promiscuous mode [ 36.012951][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.016272][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.018661][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.023386][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.026555][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.028159][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.031243][ T4328] device veth0_vlan entered promiscuous mode [ 36.037512][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.038990][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.040401][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.041785][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.048801][ T4326] device veth1_vlan entered promiscuous mode [ 36.060195][ T4328] device veth1_vlan entered promiscuous mode [ 36.080770][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.081334][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.082092][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.083608][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.086469][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.088000][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.090544][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.092038][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.093533][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.096508][ T4325] device veth0_macvtap entered promiscuous mode [ 36.097904][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.117568][ T4325] device veth1_macvtap entered promiscuous mode [ 36.119033][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.120329][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.121901][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.128246][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.129607][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.132535][ T4326] device veth0_macvtap entered promiscuous mode [ 36.138682][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.140214][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.144168][ T4326] device veth1_macvtap entered promiscuous mode [ 36.156865][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.158575][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.160044][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.161714][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.163963][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.168181][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.169958][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.171439][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.173034][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.175407][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.177053][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.179239][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.180487][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.180851][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.181930][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.182822][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.185355][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.187106][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.188659][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.191689][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.193272][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.195952][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.198581][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.200157][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.201589][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.203174][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.205759][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.208296][ T4325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.209663][ T4325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.211056][ T4325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.212355][ T4325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.219360][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.221002][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.223928][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.231639][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.233280][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.236011][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.237529][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.241748][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.244127][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.248748][ T4328] device veth0_macvtap entered promiscuous mode [ 36.253348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.255277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.257020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.258886][ T4433] netlink: 'syz.0.1': attribute type 22 has an invalid length. [ 36.260168][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.263090][ T4433] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.264579][ T4433] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.265988][ T4433] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.267305][ T4433] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.272586][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.273984][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.275705][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.277185][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.282274][ T4328] device veth1_macvtap entered promiscuous mode [ 36.283741][ T4433] netlink: 'syz.0.1': attribute type 22 has an invalid length. [ 36.285446][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.286821][ T4433] Zero length message leads to an empty skb [ 36.290431][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.291731][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.293564][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.296129][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.347646][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.353138][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.356979][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.358681][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.360361][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.362045][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.363512][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.368487][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.370970][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.373620][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.379100][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.395790][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.397433][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.399010][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.400643][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.402260][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.403892][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.405943][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.407597][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.409766][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.414857][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.416716][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.747041][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.748925][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.820485][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.823524][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.825224][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.826568][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.827860][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.840563][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.841895][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.846311][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.847447][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.848948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.851020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.194465][ T4327] Bluetooth: hci0: command 0x041b tx timeout [ 37.204364][ T4323] Bluetooth: hci1: command 0x041b tx timeout [ 37.205547][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 37.267397][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.268624][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.272657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.275255][ T4335] Bluetooth: hci2: command 0x041b tx timeout [ 37.277521][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 37.307746][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.309073][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.310729][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.348009][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.349331][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.351093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.371804][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 37.992543][ T4457] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 38.054010][ T4463] loop3: detected capacity change from 0 to 256 [ 38.059553][ T4463] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.106047][ T4465] loop4: detected capacity change from 0 to 512 [ 38.116288][ T4465] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.120229][ T4465] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.175025][ T4465] EXT4-fs (loop4): 1 truncate cleaned up [ 38.176167][ T4465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.702340][ T4465] EXT4-fs (loop4): shut down requested (1) [ 39.096341][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 39.102194][ T4485] loop3: detected capacity change from 0 to 512 [ 39.173872][ T4487] loop0: detected capacity change from 0 to 256 [ 39.177445][ T4487] ======================================================= [ 39.177445][ T4487] WARNING: The mand mount option has been deprecated and [ 39.177445][ T4487] and is ignored by this kernel. Remove the mand [ 39.177445][ T4487] option from the mount to silence this warning. [ 39.177445][ T4487] ======================================================= [ 39.274589][ T4323] Bluetooth: hci3: command 0x040f tx timeout [ 39.274784][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 39.276976][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 39.355167][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 39.399924][ T4487] FAT-fs (loop0): Directory bread(block 64) failed [ 39.401180][ T4487] FAT-fs (loop0): Directory bread(block 65) failed [ 39.402543][ T4487] FAT-fs (loop0): Directory bread(block 66) failed [ 39.403708][ T4487] FAT-fs (loop0): Directory bread(block 67) failed [ 39.405053][ T4487] FAT-fs (loop0): Directory bread(block 68) failed [ 39.406222][ T4487] FAT-fs (loop0): Directory bread(block 69) failed [ 39.407509][ T4487] FAT-fs (loop0): Directory bread(block 70) failed [ 39.408787][ T4487] FAT-fs (loop0): Directory bread(block 71) failed [ 39.410019][ T4487] FAT-fs (loop0): Directory bread(block 72) failed [ 39.411225][ T4487] FAT-fs (loop0): Directory bread(block 73) failed [ 39.718572][ T4487] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 40.135809][ T4485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.214107][ T4499] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 40.267782][ T4499] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 40.335966][ T4503] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 40.389042][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 40.432702][ T4509] x_tables: duplicate entry at hook 2 [ 40.435430][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.438276][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.458926][ T4503] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 40.658359][ T4523] loop4: detected capacity change from 0 to 8192 [ 40.832899][ T4531] overlayfs: failed to clone upperpath [ 40.840652][ T4531] overlayfs: failed to clone upperpath [ 41.354558][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 41.355525][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 41.356457][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 41.434606][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 41.441386][ T4550] binder: 4549:4550 unknown command 0 [ 41.442421][ T4550] binder: 4549:4550 ioctl c0306201 20000080 returned -22 [ 41.458458][ T4550] binder: 4549:4550 tried to acquire reference to desc 0, got 1 instead [ 41.461719][ T4550] binder: 4549:4550 got transaction with invalid parent offset [ 41.463139][ T4550] binder: 4550:4549 failed to fixup parent [ 41.464219][ T4550] binder: 4549:4550 transaction call to 4549:0 failed 5/29201/-22, size 104-24 line 3549 [ 41.467616][ T4381] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.075962][ T4327] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 42.077548][ T4327] Bluetooth: hci2: Injecting HCI hardware error event [ 42.078946][ T4327] Bluetooth: hci2: hardware error 0x00 [ 42.607733][ C0] vcan0: j1939_tp_rxtimer: 0x000000006758358b: rx timeout, send abort [ 43.109624][ C0] vcan0: j1939_tp_rxtimer: 0x000000006758358b: abort rx timeout. Force session deactivation [ 44.316017][ T4327] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 52.142117][ T4585] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 52.149284][ T4587] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 52.180700][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 54.216463][ T4641] tipc: Started in network mode [ 54.217409][ T4641] tipc: Node identity 2, cluster identity 4711 [ 54.218301][ T4641] tipc: Node number set to 2 [ 54.301437][ T4645] netlink: 'syz.4.71': attribute type 10 has an invalid length. [ 54.353764][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.353878][ T4654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.360478][ T4645] bond0: (slave team0): Enslaving as an active interface with an up link [ 54.365653][ T4654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.388749][ T4655] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:e487:88ff:fe77:e3cd error=-28 [ 54.471613][ T4666] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 54.473478][ T4666] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 54.483499][ T4668] binder: 4667:4668 tried to acquire reference to desc 0, got 1 instead [ 54.488945][ T4668] binder: 4667:4668 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 54.490446][ T4655] infiniband syz!: set active [ 54.490995][ T4366] binder: release 4667:4668 transaction 10 out, still active [ 54.492688][ T4366] binder: undelivered TRANSACTION_COMPLETE [ 54.493823][ T4655] infiniband syz!: added team_slave_0 [ 54.520893][ T4655] RDS/IB: syz!: added [ 54.521811][ T4655] smc: adding ib device syz! with port count 1 [ 54.522840][ T4655] smc: ib device syz! port 1 has pnetid [ 54.526779][ T4443] binder: send failed reply for transaction 10, target dead [ 54.663319][ T4671] overlayfs: failed to clone upperpath [ 55.067453][ T4683] af_packet: tpacket_rcv: packet too big, clamped from 1480 to 4294967272. macoff=96 [ 55.208009][ T4685] loop2: detected capacity change from 0 to 256 [ 55.286521][ T4685] netlink: 277 bytes leftover after parsing attributes in process `syz.2.87'. [ 55.322063][ T4690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.325003][ T4690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.831158][ T4693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 55.941268][ T4704] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 55.943589][ T4704] SQUASHFS error: Failed to read block 0x0: -5 [ 56.050748][ T4706] loop3: detected capacity change from 0 to 512 [ 56.062548][ T4706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.063703][ T4706] EXT4-fs: Ignoring removed nobh option [ 56.069121][ T4706] EXT4-fs: Ignoring removed nobh option [ 56.137137][ T4706] EXT4-fs: Conflicting test_dummy_encryption options [ 56.485905][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 56.754506][ T4724] tipc: Started in network mode [ 56.755381][ T4724] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 56.756580][ T4724] tipc: Enabled bearer , priority 0 [ 56.759227][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.786971][ T4753] loop4: detected capacity change from 0 to 2048 [ 56.796052][ T4739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.798925][ T4751] netlink: 'syz.3.110': attribute type 4 has an invalid length. [ 56.817166][ T4754] netlink: 'syz.3.110': attribute type 4 has an invalid length. [ 56.824101][ T4753] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 56.831480][ T4753] UDF-fs: Scanning with blocksize 512 failed [ 56.857103][ T4753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.960286][ T4765] TC_ACT_REPEAT abuse ? [ 56.961740][ T4765] TC_ACT_REPEAT abuse ? [ 56.963992][ T4765] TC_ACT_REPEAT abuse ? [ 56.970658][ T4764] TC_ACT_REPEAT abuse ? [ 56.973300][ T4764] TC_ACT_REPEAT abuse ? [ 57.021099][ T4772] binder: 4770:4772 unknown command 0 [ 57.021996][ T4772] binder: 4770:4772 ioctl c0306201 20000080 returned -22 [ 57.037871][ T4772] binder: 4770:4772 tried to acquire reference to desc 0, got 1 instead [ 57.039823][ T4772] binder: 4770:4772 got transaction with out-of-order buffer fixup [ 57.043804][ T4772] binder: 4772:4770 failed to fixup parent [ 57.045731][ T4772] binder: 4770:4772 transaction call to 4770:0 failed 21/29201/-22, size 4216-24 line 3549 [ 57.048079][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.083524][ T4777] binder: 4776:4777 tried to acquire reference to desc 0, got 1 instead [ 57.088826][ T4777] binder: tried to use weak ref as strong ref [ 57.089965][ T4777] binder: 4776:4777 got transaction with invalid handle, 0 [ 57.091264][ T4777] binder: 4777:4776 translate handle failed [ 57.092375][ T4777] binder: 4776:4777 transaction call to 4776:0 failed 26/29201/-22, size 72-24 line 3402 [ 57.095970][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.240912][ T4783] loop3: detected capacity change from 0 to 32768 [ 57.276951][ T4783] XFS (loop3): Mounting V5 Filesystem [ 57.302113][ T4783] XFS (loop3): Ending clean mount [ 57.310725][ T4783] XFS (loop3): Quotacheck needed: Please wait. [ 57.329760][ T4783] XFS (loop3): Quotacheck: Done. [ 57.378945][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 57.727831][ T4815] loop1: detected capacity change from 0 to 256 [ 57.730426][ C1] TC_ACT_REPEAT abuse ? [ 57.777680][ T4815] FAT-fs (loop1): Directory bread(block 64) failed [ 57.779066][ T4815] FAT-fs (loop1): Directory bread(block 65) failed [ 57.780317][ T4815] FAT-fs (loop1): Directory bread(block 66) failed [ 57.781354][ T4815] FAT-fs (loop1): Directory bread(block 67) failed [ 57.782467][ T4815] FAT-fs (loop1): Directory bread(block 68) failed [ 57.783538][ T4815] FAT-fs (loop1): Directory bread(block 69) failed [ 57.784668][ T4815] FAT-fs (loop1): Directory bread(block 70) failed [ 57.785700][ T4815] FAT-fs (loop1): Directory bread(block 71) failed [ 57.786799][ T4815] FAT-fs (loop1): Directory bread(block 72) failed [ 57.787826][ T4815] FAT-fs (loop1): Directory bread(block 73) failed [ 57.916119][ T112] tipc: Node number set to 12429994 [ 57.994465][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 58.233797][ T4820] IPVS: lc: FWM 3 0x00000003 - no destination available [ 58.254570][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 58.605526][ T4320] XFS (loop3): Unmounting Filesystem [ 58.715871][ T112] TC_ACT_REPEAT abuse ? [ 58.829785][ T4830] loop1: detected capacity change from 0 to 32768 [ 58.869809][ T4830] XFS (loop1): Mounting V5 Filesystem [ 58.891693][ T4830] XFS (loop1): Ending clean mount [ 58.893442][ T4830] XFS (loop1): Quotacheck needed: Please wait. [ 58.910994][ T4830] XFS (loop1): Quotacheck: Done. [ 59.048769][ T4852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'. [ 59.052522][ T4328] XFS (loop1): Unmounting Filesystem [ 59.406603][ T4861] binder: 4860:4861 tried to acquire reference to desc 0, got 1 instead [ 59.408707][ T4861] binder: 4860:4861 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.411158][ T4861] binder: 4861 RLIMIT_NICE not set [ 59.412453][ T4861] binder: send failed reply for transaction 35 to 4860:4861 [ 59.414082][ T4861] binder: 4860:4861 ioctl c0306201 200001c0 returned -14 [ 59.476941][ T4865] nbd4: detected capacity change from 0 to 1024 [ 59.480283][ T51] block nbd4: Send control failed (result -89) [ 59.481484][ T51] block nbd4: Request send failed, requeueing [ 59.483171][ T4327] block nbd4: Receive control failed (result -32) [ 59.485290][ T51] block nbd4: Dead connection, failed to find a fallback [ 59.486450][ T51] block nbd4: shutting down sockets [ 59.487356][ T4865] block nbd4: NBD_DISCONNECT [ 59.487368][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.488566][ T4865] block nbd4: Send disconnect failed -89 [ 59.489526][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.492626][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.494108][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.496358][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.497754][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.499276][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.500750][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.501975][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.503312][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.504611][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.506040][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.507275][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.507946][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 59.508633][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.511148][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.512457][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 59.512563][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.517911][ T4637] ldm_validate_partition_table(): Disk read failed. [ 59.519137][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.520518][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.521829][ T51] Buffer I/O error on dev nbd4, logical block 0, async page read [ 59.523233][ T4637] Dev nbd4: unable to read RDB block 0 [ 59.524442][ T4637] nbd4: unable to read partition table [ 59.530884][ T4637] ldm_validate_partition_table(): Disk read failed. [ 59.532564][ T4637] Dev nbd4: unable to read RDB block 0 [ 59.533665][ T4637] nbd4: unable to read partition table [ 59.535843][ T4865] ldm_validate_partition_table(): Disk read failed. [ 59.537308][ T4865] Dev nbd4: unable to read RDB block 0 [ 59.538590][ T4865] nbd4: unable to read partition table [ 59.597797][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 59.613665][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 60.103511][ T4879] device vcan1 entered promiscuous mode [ 60.118022][ T4883] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 61.425895][ T4907] overlayfs: failed to clone upperpath [ 61.873877][ T4926] loop4: detected capacity change from 0 to 1024 [ 61.898026][ T4926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.917824][ T4926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.962341][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 62.374632][ T4917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.373615][ T4961] binder_user_error: 1 callbacks suppressed [ 63.373624][ T4961] binder: 4960:4961 tried to acquire reference to desc 0, got 1 instead [ 63.384849][ T112] binder_debug: 2 callbacks suppressed [ 63.384860][ T112] binder: release 4960:4961 transaction 40 out, still active [ 63.386837][ T112] binder: undelivered TRANSACTION_COMPLETE [ 63.397057][ T4967] loop3: detected capacity change from 0 to 512 [ 63.400060][ T112] binder: send failed reply for transaction 40, target dead [ 63.410580][ T4967] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.411670][ T4967] EXT4-fs: inline encryption not supported [ 63.412606][ T4967] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.422073][ T4967] EXT4-fs (loop3): Test dummy encryption mode enabled [ 63.423320][ T4967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.448119][ T4967] EXT4-fs (loop3): 1 truncate cleaned up [ 63.450845][ T4967] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.464156][ T4967] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 64.092718][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 64.645811][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.649330][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.911355][ T5006] loop4: detected capacity change from 0 to 512 [ 64.964628][ T5006] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 65.039772][ T5010] overlayfs: statfs failed on './file0' [ 65.073902][ T5014] tipc: Started in network mode [ 65.080299][ T5014] tipc: Node identity 7f000001, cluster identity 4711 [ 65.082152][ T5014] net_ratelimit: 1 callbacks suppressed [ 65.082159][ T5014] TC_ACT_REPEAT abuse ? [ 65.083740][ T5014] tipc: Enabled bearer , priority 10 [ 65.101055][ T5014] loop3: detected capacity change from 0 to 16 [ 65.104454][ C0] TC_ACT_REPEAT abuse ? [ 65.111783][ T5014] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 65.152558][ T5014] tipc: Enabled bearer , priority 10 [ 65.154107][ T4637] blk_print_req_error: 44 callbacks suppressed [ 65.154118][ T4637] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.155468][ C0] TC_ACT_REPEAT abuse ? [ 65.214705][ C0] TC_ACT_REPEAT abuse ? [ 65.242759][ T5028] loop2: detected capacity change from 0 to 1024 [ 65.278309][ T5028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.287441][ T5030] binder: 5029:5030 tried to acquire reference to desc 0, got 1 instead [ 65.298940][ T5030] binder: 5029:5030 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.301064][ T5030] binder: 5030 RLIMIT_NICE not set [ 65.301949][ T5030] binder: undelivered transaction 45, put_user failed [ 65.308964][ T5030] binder: 5029:5030 ioctl c0306201 20000680 returned -14 [ 65.310810][ T4382] binder: undelivered TRANSACTION_COMPLETE [ 65.361380][ C0] TC_ACT_REPEAT abuse ? [ 65.376099][ T5028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.486241][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 65.494457][ C0] TC_ACT_REPEAT abuse ? [ 65.634448][ C0] TC_ACT_REPEAT abuse ? [ 65.756514][ T4373] TC_ACT_REPEAT abuse ? [ 65.758355][ T112] TC_ACT_REPEAT abuse ? [ 65.774449][ C0] TC_ACT_REPEAT abuse ? [ 66.033702][ T5047] loop4: detected capacity change from 0 to 256 [ 66.051947][ T5047] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 66.087313][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 66.194424][ T4373] tipc: Node number set to 2130706433 [ 66.256805][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f7e3b754: rx timeout, send abort [ 66.258386][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f7e3b754: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 66.273878][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.279522][ T4327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.285349][ T4327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.287545][ T4327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.289065][ T4327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.290419][ T4327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.376743][ T465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.457399][ T465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.515805][ T465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.608364][ T465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.773123][ T5051] chnl_net:caif_netlink_parms(): no params data found [ 66.881608][ T5079] loop3: detected capacity change from 0 to 8 [ 66.885971][ T5079] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 66.992360][ T5079] process 'syz.3.225' launched './file2' with NULL argv: empty string added [ 66.999250][ T5079] cramfs: Error -5 while decompressing! [ 67.000257][ T5079] cramfs: 000000006f5a6705(26)->0000000014cbbbb3(4096) [ 67.001642][ T5079] cramfs: Error -3 while decompressing! [ 67.002576][ T5079] cramfs: 0000000018545f6a(26)->0000000084be5224(4096) [ 67.003771][ T5079] cramfs: Error -3 while decompressing! [ 67.004687][ T5079] cramfs: 000000008f125e88(16)->00000000ecd3f1f5(4096) [ 67.006108][ T5079] cramfs: Error -5 while decompressing! [ 67.007010][ T5079] cramfs: 000000006f5a6705(26)->0000000014cbbbb3(4096) [ 67.134885][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.137339][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.141104][ T5051] device bridge_slave_0 entered promiscuous mode [ 67.143322][ T4637] udevd[4637]: incorrect cramfs checksum on /dev/loop3 [ 67.156876][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.158342][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.160334][ T5051] device bridge_slave_1 entered promiscuous mode [ 67.202609][ T5051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.211461][ T5051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.222585][ T4637] udevd[4637]: incorrect cramfs checksum on /dev/loop3 [ 67.228721][ T465] tipc: Left network mode [ 67.237609][ T5051] team0: Port device team_slave_0 added [ 67.242385][ T5051] team0: Port device team_slave_1 added [ 67.248798][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.249948][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.253832][ T5051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.257239][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.258360][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.262343][ T5051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.293172][ T5089] binder: 5088:5089 tried to acquire reference to desc 0, got 1 instead [ 67.295884][ T5089] binder: 5088:5089 ioctl c0306201 200005c0 returned -14 [ 67.297512][ T14] binder: undelivered TRANSACTION_COMPLETE [ 67.320228][ T14] binder: undelivered transaction 51, process died. [ 67.519041][ T5051] device hsr_slave_0 entered promiscuous mode [ 67.537489][ T5051] device hsr_slave_1 entered promiscuous mode [ 67.584645][ T5051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.585893][ T5051] Cannot create hsr debugfs directory [ 67.701911][ T5119] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 67.705166][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.707073][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.719478][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.721332][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.722820][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.723982][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.018246][ T5119] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 68.027713][ T5121] team0: Device gre2 is of different type [ 68.077256][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 68.078732][ T5124] device bridge_slave_1 left promiscuous mode [ 68.079706][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.115751][ T5124] device bridge_slave_0 left promiscuous mode [ 68.116854][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.197448][ T5124] bond0: (slave bridge0): Releasing backup interface [ 68.213062][ T5130] loop4: detected capacity change from 0 to 4096 [ 68.249591][ T5130] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 68.278853][ T5130] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 68.316704][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 68.473794][ T5051] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.548635][ T5140] loop1: detected capacity change from 0 to 128 [ 68.558364][ T5140] EXT4-fs (loop1): Test dummy encryption mode enabled [ 68.583244][ T5051] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.587872][ T5140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.669867][ T5147] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 68.703536][ T5147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.705373][ T5051] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.719046][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 68.772461][ T5152] bond1: (slave veth3): Enslaving as an active interface with a down link [ 68.774041][ T5153] lo speed is unknown, defaulting to 1000 [ 68.775456][ T5153] lo speed is unknown, defaulting to 1000 [ 68.776599][ T5153] lo speed is unknown, defaulting to 1000 [ 68.778734][ T5153] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 68.782339][ T5153] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 68.796984][ T5158] bond1: (slave veth0_to_bond): making interface the new active one [ 68.799576][ T5158] device veth0_to_bond entered promiscuous mode [ 68.801012][ T5158] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 68.848931][ T5160] netlink: 6 bytes leftover after parsing attributes in process `syz.3.244'. [ 68.866464][ T5147] bond1: (slave veth5): Enslaving as an active interface with a down link [ 68.867938][ T5051] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.906165][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 68.913089][ T5153] lo speed is unknown, defaulting to 1000 [ 68.971435][ T5153] lo speed is unknown, defaulting to 1000 [ 68.972706][ T5153] lo speed is unknown, defaulting to 1000 [ 68.973811][ T5153] lo speed is unknown, defaulting to 1000 [ 68.988595][ T5153] lo speed is unknown, defaulting to 1000 [ 68.990529][ T5153] lo speed is unknown, defaulting to 1000 [ 69.600026][ T22] cfg80211: failed to load regulatory.db [ 69.744537][ T5195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.872348][ T5218] loop3: detected capacity change from 0 to 1024 [ 69.887211][ T5051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.906614][ T27] audit: type=1326 audit(69.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.1.257" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d5c0a8 code=0x0 [ 69.964613][ T4327] Bluetooth: Wrong link type (-22) [ 70.424524][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 70.539096][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 70.588470][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.590275][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.643014][ T5051] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.648652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.650364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.651893][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.653015][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.661021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.679930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.682017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.683695][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.684803][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.686755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.688680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.690561][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.692690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.694844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.702541][ T465] device hsr_slave_0 left promiscuous mode [ 70.733765][ T465] device hsr_slave_1 left promiscuous mode [ 70.784713][ T465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.786117][ T465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.789642][ T465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.791044][ T465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.792569][ T465] device bridge_slave_1 left promiscuous mode [ 70.793707][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.845286][ T465] device bridge_slave_0 left promiscuous mode [ 70.846308][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.047296][ T5269] loop1: detected capacity change from 0 to 4096 [ 71.155997][ T465] device veth1_macvtap left promiscuous mode [ 71.191751][ T465] device veth0_macvtap left promiscuous mode [ 71.193760][ T465] device veth1_vlan left promiscuous mode [ 71.224213][ T465] device veth0_vlan left promiscuous mode [ 71.324616][ T5269] ntfs: volume version 3.1. [ 71.535664][ T5272] loop4: detected capacity change from 0 to 32768 [ 71.549009][ T5272] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 71.551683][ T5272] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 71.573025][ T5272] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 71.581551][ T4401] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 71.583167][ T4401] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 71.597954][ T4401] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 14ms [ 71.599783][ T4401] gfs2: fsid=syz:syz.0: jid=0: Done [ 71.601195][ T5272] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 71.880967][ T5277] loop1: detected capacity change from 0 to 2048 [ 71.910149][ T5277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.474300][ T4323] Bluetooth: hci2: command 0x040f tx timeout [ 73.046242][ T465] team0 (unregistering): Port device team_slave_1 removed [ 73.205023][ T465] team0 (unregistering): Port device team_slave_0 removed [ 73.365063][ T465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.495487][ T5293] loop4: detected capacity change from 0 to 32768 [ 73.501829][ T5293] XFS (loop4): Mounting V5 Filesystem [ 73.511745][ T5293] XFS (loop4): Ending clean mount [ 73.514147][ T5293] XFS (loop4): Quotacheck needed: Please wait. [ 73.531387][ T5293] XFS (loop4): Quotacheck: Done. [ 73.546210][ T465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.594595][ T4326] XFS (loop4): Unmounting Filesystem [ 73.754458][ T5280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 74.036432][ T5306] ptrace attach of "./syz-executor exec"[4326] was attempted by ""[5306] [ 74.554314][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 76.296530][ T465] bond0 (unregistering): Released all slaves [ 76.538587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.540466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.545904][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.547481][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.549027][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.551373][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.685114][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.729391][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 76.732397][ T5276] lo speed is unknown, defaulting to 1000 [ 76.865703][ T5051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.867399][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.868798][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.870411][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 77.662849][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.664808][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.670840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.672496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.673953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.675402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.677791][ T5051] device veth0_vlan entered promiscuous mode [ 77.691954][ T5051] device veth1_vlan entered promiscuous mode [ 77.731575][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.733466][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.736950][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.738577][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.742315][ T5051] device veth0_macvtap entered promiscuous mode [ 77.745401][ T5051] device veth1_macvtap entered promiscuous mode [ 77.752497][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.759301][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.771232][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.794179][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.796119][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.797848][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.799401][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.800995][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.803333][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.806646][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.808362][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.810261][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.819408][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.822850][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.824996][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.826573][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.828273][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.830054][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.831817][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.833294][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.836366][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.838894][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.841408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.843114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.117643][ T5051] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.119888][ T5051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.121371][ T5051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.122920][ T5051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.197697][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.201865][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.269295][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.272353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.275868][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.279408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.841173][ T5401] loop3: detected capacity change from 0 to 512 [ 78.937273][ T5401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.530944][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 80.559826][ T5435] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 80.574131][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.620157][ T5435] team0: Port device bond0 added [ 81.143135][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 81.227428][ T5460] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 81.243726][ T5460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.471386][ T5460] bond2: (slave gretap1): making interface the new active one [ 81.682169][ T5460] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 81.684512][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 81.929071][ T5467] device veth0_to_bond left promiscuous mode [ 82.003283][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.313'. [ 82.386087][ T5498] netlink: 16 bytes leftover after parsing attributes in process `syz.5.317'. [ 82.439466][ T5506] net_ratelimit: 9 callbacks suppressed [ 82.439477][ T5506] Set syz1 is full, maxelem 9 reached [ 82.470931][ T27] audit: type=1326 audit(82.460:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.475797][ T27] audit: type=1326 audit(82.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.483571][ T27] audit: type=1326 audit(82.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.495550][ T27] audit: type=1326 audit(82.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.499916][ T27] audit: type=1326 audit(82.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.508294][ T27] audit: type=1326 audit(82.460:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.515089][ T27] audit: type=1326 audit(82.460:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.521638][ T27] audit: type=1326 audit(82.460:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.535909][ T27] audit: type=1326 audit(82.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.545513][ T27] audit: type=1326 audit(82.470:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb9f5c0a8 code=0x7ffc0000 [ 82.680371][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.822370][ T5529] team0: Port device bond0 removed [ 82.826564][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.828351][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.832376][ T5529] bond0: (slave bond_slave_0): Releasing backup interface [ 82.862002][ T5529] bond0: (slave bond_slave_1): Releasing backup interface [ 82.916304][ T5529] team0: Failed to send options change via netlink (err -105) [ 82.917881][ T5529] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 82.919842][ T5529] team0: Port device team_slave_0 removed [ 82.926904][ T5529] team0: Failed to send options change via netlink (err -105) [ 82.928312][ T5529] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 82.930223][ T5529] team0: Port device team_slave_1 removed [ 82.931643][ T5529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.932964][ T5529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.936181][ T5529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.937517][ T5529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.942169][ T5529] bond0: (slave wlan1): Releasing backup interface [ 83.016582][ T5530] team0: Failed to send options change via netlink (err -105) [ 83.017924][ T5530] team0: Mode changed to "activebackup" [ 83.218479][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 84.061864][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 84.086004][ T5573] overlayfs: upper fs does not support file handles, falling back to index=off. [ 84.648698][ T5592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'. [ 84.707688][ T5597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 85.003927][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.006837][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.041020][ T5621] loop5: detected capacity change from 0 to 8192 [ 85.061820][ T5621] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.067390][ T5621] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 85.069008][ T5621] REISERFS (device loop5): using journaled data mode [ 85.069942][ T5621] reiserfs: using flush barriers [ 85.073128][ T5621] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.076550][ T5621] REISERFS (device loop5): checking transaction log (loop5) [ 85.092164][ T5621] REISERFS (device loop5): Using r5 hash to sort names [ 85.100613][ T5621] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.106519][ T5621] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 85.137359][ T5621] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.148668][ T5621] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.155282][ T5621] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 85.193516][ T5618] loop1: detected capacity change from 0 to 40427 [ 85.197826][ T5618] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 85.199576][ T5618] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 85.229124][ T5618] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.262468][ T5618] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 85.263960][ T5618] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.785687][ T5643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 85.830705][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 85.866673][ T5646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.869346][ T5646] bond1: (slave bond2): Enslaving as an active interface with an up link [ 85.885313][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 85.889369][ T5646] bond1 (unregistering): (slave bond2): Releasing backup interface [ 85.940759][ T5646] bond1 (unregistering): Released all slaves [ 86.033231][ T5652] loop5: detected capacity change from 0 to 1024 [ 86.172062][ T5660] syz.0.367 uses obsolete (PF_INET,SOCK_PACKET) [ 86.824090][ T5678] binder: 5677:5678 tried to acquire reference to desc 0, got 1 instead [ 86.826441][ T5678] binder: 5677:5678 got reply transaction with bad transaction stack, transaction 62 has target 5677:0 [ 86.828461][ T5678] binder: 5677:5678 transaction reply to 0:0 failed 69/29201/-71, size 0-0 line 2970 [ 86.830647][ T3898] binder: release 5677:5678 transaction 62 out, still active [ 86.831962][ T3898] binder: undelivered TRANSACTION_COMPLETE [ 86.832852][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.852174][ T3898] binder: send failed reply for transaction 62, target dead [ 86.886634][ T5683] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 86.894857][ T5684] netlink: 'syz.3.375': attribute type 13 has an invalid length. [ 87.379103][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.380504][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.588015][ T5702] netlink: 220 bytes leftover after parsing attributes in process `syz.0.379'. [ 88.083334][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.100072][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.382805][ T5684] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.384446][ T5684] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.385790][ T5684] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.387137][ T5684] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.580147][ T3898] lo speed is unknown, defaulting to 1000 [ 88.582969][ T5683] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.585575][ T5683] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 88.587299][ T5683] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 88.688394][ T5690] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.690397][ T5690] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 88.708542][ T5719] loop3: detected capacity change from 0 to 32768 [ 88.729535][ T5719] XFS (loop3): Mounting V5 Filesystem [ 88.749972][ T5719] XFS (loop3): Ending clean mount [ 88.751806][ T5719] XFS (loop3): Quotacheck needed: Please wait. [ 88.771156][ T5719] XFS (loop3): Quotacheck: Done. [ 88.777757][ T5708] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 88.942064][ T4320] XFS (loop3): Unmounting Filesystem [ 89.099798][ T5757] binder: 5756:5757 tried to acquire reference to desc 0, got 1 instead [ 89.102139][ T5757] binder_alloc: 5756: binder_alloc_buf, no vma [ 89.108945][ T5757] binder: cannot allocate buffer: vma cleared, target dead or dying [ 89.108985][ T5757] binder: 5756:5757 transaction call to 5756:0 failed 81/29189/-3, size 0-0 line 3239 [ 89.112809][ T4374] binder: release 5756:5757 transaction 74 out, still active [ 89.114311][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 89.133098][ T4381] binder: undelivered TRANSACTION_ERROR: 29189 [ 89.189262][ T5768] loop5: detected capacity change from 0 to 512 [ 89.200997][ T5768] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.223077][ T5768] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.223471][ T5773] netlink: 'syz.0.397': attribute type 11 has an invalid length. [ 89.238327][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 89.240721][ T5768] EXT4-fs (loop5): 1 truncate cleaned up [ 89.241680][ T5768] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 89.545495][ T5051] EXT4-fs (loop5): unmounting filesystem. [ 89.726123][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.730246][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.742125][ T5804] overlayfs: failed to clone upperpath [ 89.743956][ T5804] overlayfs: failed to clone upperpath [ 90.281832][ T4327] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 90.284937][ T4327] Bluetooth: hci2: Injecting HCI hardware error event [ 90.288910][ T4327] Bluetooth: hci2: hardware error 0x00 [ 90.379106][ T5820] loop1: detected capacity change from 0 to 512 [ 90.381862][ T5820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.388051][ T5820] EXT4-fs (loop1): 1 truncate cleaned up [ 90.389153][ T5820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.418707][ T5820] EXT4-fs (loop1): shut down requested (1) [ 90.458898][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 91.622340][ T5837] netlink: 'syz.4.415': attribute type 4 has an invalid length. [ 91.679920][ T5467] wlan1: Creating new IBSS network, BSSID ae:48:38:e9:94:94 [ 91.682128][ T5837] netlink: 'syz.4.415': attribute type 4 has an invalid length. [ 91.687101][ T5840] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 91.767879][ T5840] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 91.826554][ T5865] loop1: detected capacity change from 0 to 256 [ 91.848374][ T5867] IPVS: lc: FWM 3 0x00000003 - no destination available [ 92.558365][ T4327] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 93.543094][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 93.550255][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 94.400881][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 94.445523][ T4416] wlan1: Trigger new scan to find an IBSS to join [ 95.224834][ T5932] binder: 5931:5932 ioctl c0306201 20000080 returned -14 [ 95.228100][ T5932] binder: 5931:5932 tried to acquire reference to desc 0, got 1 instead [ 95.231177][ T5932] binder: 5931:5932 got transaction with invalid fd, 280 [ 95.232572][ T5932] binder_debug: 1 callbacks suppressed [ 95.232584][ T5932] binder: 5932:5931 translate fd array failed [ 95.235140][ T5932] binder: 5931:5932 transaction async to 5931:0 failed 86/29201/-9, size 96-24 line 3495 [ 95.240011][ T5932] loop5: detected capacity change from 0 to 512 [ 95.335754][ T5932] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 95.338913][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.347661][ T5051] EXT4-fs (loop5): unmounting filesystem. [ 95.673630][ T5947] loop5: detected capacity change from 0 to 256 [ 95.675180][ T5947] exfat: Deprecated parameter 'namecase' [ 95.676175][ T5947] exfat: Deprecated parameter 'codepage' [ 95.677041][ T5947] exfat: Bad value for 'codepage' [ 95.715480][ T5949] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 96.089787][ T5955] bond2: (slave gretap1): making interface the new active one [ 96.090192][ T5954] loop5: detected capacity change from 0 to 1024 [ 96.093059][ T5955] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 96.101567][ T5954] EXT4-fs: Ignoring removed nobh option [ 96.127767][ T5954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.164337][ T5954] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 96.211957][ T5949] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 96.727280][ T5979] loop5: detected capacity change from 0 to 256 [ 96.744080][ T5979] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.746216][ T5979] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 96.752890][ T5979] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 97.625272][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.627621][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.628891][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.635689][ T6008] device bridge_slave_0 left promiscuous mode [ 97.640407][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.675597][ T6008] device bridge_slave_1 left promiscuous mode [ 97.676861][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.706323][ T6008] bond0: (slave bond_slave_0): Releasing backup interface [ 97.742769][ T6008] bond0: (slave bond_slave_1): Releasing backup interface [ 97.804120][ T6008] team0: Failed to send options change via netlink (err -105) [ 97.806877][ T6008] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 97.812272][ T6008] team0: Port device team_slave_0 removed [ 97.817934][ T6008] team0: Failed to send options change via netlink (err -105) [ 97.819364][ T6008] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 97.821713][ T6008] team0: Port device team_slave_1 removed [ 97.827135][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.828399][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.830143][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.831373][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.150614][ T6012] team0: Failed to send options change via netlink (err -105) [ 98.152812][ T11] wlan1: Trigger new scan to find an IBSS to join [ 98.152902][ T6012] team0: Mode changed to "activebackup" [ 99.318661][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 99.318671][ T27] audit: type=1326 audit(99.310:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.3.461" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f15c0a8 code=0x0 [ 99.601454][ T6058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.403239][ T6071] loop5: detected capacity change from 0 to 2048 [ 100.431190][ T6071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.234760][ T6093] loop3: detected capacity change from 0 to 512 [ 101.236518][ T6093] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.274186][ T6093] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 101.276544][ T6093] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.473: invalid indirect mapped block 2683928664 (level 1) [ 101.285870][ T6093] EXT4-fs (loop3): Remounting filesystem read-only [ 101.287442][ T6093] EXT4-fs (loop3): 1 truncate cleaned up [ 101.288323][ T6093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.310520][ T6101] IPVS: lc: FWM 3 0x00000003 - no destination available [ 101.311874][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 101.359068][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 102.495603][ T6119] loop3: detected capacity change from 0 to 2048 [ 102.638131][ T6119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.824924][ T4607] wlan1: Creating new IBSS network, BSSID 6a:73:7b:e1:3e:04 [ 105.503271][ T6169] binder: 6165:6169 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 105.528917][ T6166] binder: 6165:6166 got transaction to invalid handle, 1 [ 105.530199][ T6166] binder: 6166:6165 cannot find target node [ 105.531175][ T6166] binder: 6165:6166 transaction call to 0:0 failed 89/29201/-22, size 0-0 line 3054 [ 105.532953][ T6166] binder: 6165:6166 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 105.540317][ T6166] binder: 6166 RLIMIT_NICE not set [ 105.861397][ T6138] loop3: detected capacity change from 0 to 32768 [ 105.922136][ T4431] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.968455][ T6185] IPVS: lc: FWM 3 0x00000003 - no destination available [ 105.969739][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 107.134901][ T6202] loop5: detected capacity change from 0 to 256 [ 108.199311][ T6202] FAT-fs (loop5): Directory bread(block 64) failed [ 108.200373][ T6202] FAT-fs (loop5): Directory bread(block 65) failed [ 108.201361][ T6202] FAT-fs (loop5): Directory bread(block 66) failed [ 108.202388][ T6202] FAT-fs (loop5): Directory bread(block 67) failed [ 108.203407][ T6202] FAT-fs (loop5): Directory bread(block 68) failed [ 108.204486][ T6202] FAT-fs (loop5): Directory bread(block 69) failed [ 108.205657][ T6202] FAT-fs (loop5): Directory bread(block 70) failed [ 108.206615][ T6202] FAT-fs (loop5): Directory bread(block 71) failed [ 108.207562][ T6202] FAT-fs (loop5): Directory bread(block 72) failed [ 108.208512][ T6202] FAT-fs (loop5): Directory bread(block 73) failed [ 108.323749][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.502'. [ 109.394985][ T6224] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 110.281267][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.347049][ T6241] loop3: detected capacity change from 0 to 256 [ 110.651799][ T6241] FAT-fs (loop3): Directory bread(block 64) failed [ 110.653040][ T6241] FAT-fs (loop3): Directory bread(block 65) failed [ 110.654362][ T6241] FAT-fs (loop3): Directory bread(block 66) failed [ 110.655477][ T6241] FAT-fs (loop3): Directory bread(block 67) failed [ 110.656735][ T6241] FAT-fs (loop3): Directory bread(block 68) failed [ 110.657894][ T6241] FAT-fs (loop3): Directory bread(block 69) failed [ 110.659225][ T6241] FAT-fs (loop3): Directory bread(block 70) failed [ 110.660409][ T6241] FAT-fs (loop3): Directory bread(block 71) failed [ 110.661693][ T6241] FAT-fs (loop3): Directory bread(block 72) failed [ 110.662862][ T6241] FAT-fs (loop3): Directory bread(block 73) failed [ 110.759651][ T6241] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 111.222563][ T6248] binder: 6247:6248 ioctl c0306201 20000080 returned -14 [ 111.712544][ T6248] binder: 6247:6248 tried to acquire reference to desc 0, got 1 instead [ 111.714746][ T6248] binder: 6247:6248 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 111.716990][ T6248] binder: 6248 RLIMIT_NICE not set [ 111.717816][ T6248] binder: undelivered transaction 94, put_user failed [ 111.718959][ T6248] binder: 6247:6248 ioctl c0306201 20002200 returned -14 [ 111.720681][ T4381] binder: undelivered TRANSACTION_COMPLETE [ 111.775735][ T6257] overlayfs: failed to clone upperpath [ 111.779769][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 111.832129][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 111.857719][ T6265] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 111.868863][ T6265] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 111.982311][ T6265] bond1 (unregistering): Released all slaves [ 112.899668][ T6288] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 113.148341][ T6299] netlink: 220 bytes leftover after parsing attributes in process `syz.5.535'. [ 113.495920][ T6288] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 114.034399][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 125.394055][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 125.408613][ T6321] netlink: 'syz.5.532': attribute type 1 has an invalid length. [ 125.416492][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.532'. [ 125.452432][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 125.475362][ T6343] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 125.506648][ T6343] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 125.532403][ T6349] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 125.566743][ T6343] bond3 (unregistering): Released all slaves [ 125.871801][ T6351] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 125.917377][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.918491][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.110890][ T6356] loop5: detected capacity change from 0 to 40427 [ 126.122385][ T6356] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 126.123728][ T6356] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 126.151643][ T6356] F2FS-fs (loop5): Found nat_bits in checkpoint [ 126.158912][ T6349] loop3: detected capacity change from 0 to 32768 [ 126.160559][ T6349] gfs2: Bad value for 'statfs_percent' [ 126.164485][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 126.177002][ T6356] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 126.178161][ T6356] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 126.206609][ T6368] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.194406][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 127.313814][ T6388] binder: 6387:6388 tried to acquire reference to desc 0, got 1 instead [ 127.316761][ T6388] binder: 6387:6388 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 127.333543][ T6388] binder: 6388 RLIMIT_NICE not set [ 127.334510][ T6388] binder: 6388 RLIMIT_NICE not set [ 127.335349][ T6388] binder: send failed reply for transaction 99 to 6387:6388 [ 127.336667][ T6388] binder: 6387:6388 ioctl c0306201 20000440 returned -14 [ 127.347868][ T4382] binder: undelivered TRANSACTION_COMPLETE [ 127.348945][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.409715][ T6392] netlink: 'syz.5.548': attribute type 4 has an invalid length. [ 127.787115][ T4323] Bluetooth: hci4: hardware error 0x09 [ 127.930516][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'. [ 128.223992][ T6405] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 128.238530][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 128.253095][ T6405] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 128.261193][ T6409] binder: 6408:6409 tried to acquire reference to desc 0, got 1 instead [ 128.263399][ T6409] binder_alloc: 6408: pid 6408 spamming oneway? 2 buffers allocated for a total size of 5120 [ 128.268466][ T6409] binder: undelivered TRANSACTION_COMPLETE [ 128.269604][ T6409] binder: undelivered TRANSACTION_COMPLETE [ 128.278138][ T14] binder: undelivered transaction 105, process died. [ 128.279384][ T14] binder: undelivered transaction 104, process died. [ 128.296318][ T6411] binder: 6410:6411 tried to acquire reference to desc 0, got 1 instead [ 128.298933][ T14] binder: undelivered TRANSACTION_COMPLETE [ 128.300590][ T6405] bond1 (unregistering): Released all slaves [ 128.310310][ T14] binder: undelivered transaction 110, process died. [ 129.402703][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 130.084581][ T4323] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 130.283480][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.365163][ T6444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.474476][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 130.793306][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 130.914722][ T6452] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 130.935752][ T6452] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 131.329789][ T6452] bond1 (unregistering): Released all slaves [ 131.343864][ T6460] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 131.358992][ T6460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.377543][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 131.524382][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 131.644097][ T6472] loop3: detected capacity change from 0 to 8192 [ 131.812407][ T6465] loop1: detected capacity change from 0 to 32768 [ 131.831762][ T6465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.574 (6465) [ 131.855231][ T6465] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.857098][ T6465] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 132.160024][ T6465] BTRFS info (device loop1): metadata ratio 4 [ 132.161230][ T6465] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 132.162805][ T6465] BTRFS info (device loop1): force lzo compression, level 0 [ 132.163974][ T6465] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 132.182911][ T6465] BTRFS info (device loop1): trying to use backup root at mount time [ 132.184201][ T6465] BTRFS info (device loop1): doing ref verification [ 132.185296][ T6465] BTRFS info (device loop1): disabling tree log [ 132.189428][ T6465] BTRFS info (device loop1): using free space tree [ 132.564417][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 132.740044][ T1574] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 132.742577][ T6465] BTRFS warning (device loop1): couldn't read tree root [ 132.743858][ T6465] BTRFS warning (device loop1): try to load backup roots slot 1 [ 132.774278][ T5467] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 132.781713][ T6465] BTRFS warning (device loop1): couldn't read tree root [ 132.782961][ T6465] BTRFS warning (device loop1): try to load backup roots slot 2 [ 132.801402][ T6465] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 132.818759][ T6465] BTRFS warning (device loop1): couldn't read tree root [ 132.819898][ T6465] BTRFS warning (device loop1): try to load backup roots slot 3 [ 132.836652][ T6465] BTRFS info (device loop1): enabling ssd optimizations [ 132.840040][ T6465] BTRFS info (device loop1): rebuilding free space tree [ 133.112669][ T6465] BTRFS info (device loop1): checking UUID tree [ 133.175808][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.584'. [ 133.177652][ T6522] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 133.195783][ T6522] device team1 entered promiscuous mode [ 133.519218][ T6523] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.595376][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 133.848345][ T4327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.851340][ T4327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.852985][ T4327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.855235][ T4327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.857680][ T4327] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.859061][ T4327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.868894][ T6282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.878773][ T6530] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 133.894676][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 133.907452][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.916540][ T6537] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 133.921881][ T6538] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 134.016855][ T6538] bond1 (unregistering): Released all slaves [ 134.359972][ T6282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.376372][ T6531] lo speed is unknown, defaulting to 1000 [ 134.411202][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 134.644411][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 134.847954][ T6282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.957389][ T6282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.961547][ T6540] lo speed is unknown, defaulting to 1000 [ 134.993391][ T6560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.594'. [ 135.030416][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 135.049526][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.050743][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.052339][ T6540] device bridge_slave_0 entered promiscuous mode [ 135.057970][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.059230][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.060749][ T6540] device bridge_slave_1 entered promiscuous mode [ 135.078347][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.081310][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.095871][ T6540] team0: Port device team_slave_0 added [ 135.098433][ T6540] team0: Port device team_slave_1 added [ 135.124789][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.126317][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.130777][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.133445][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.136222][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.140995][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.205515][ T6540] device hsr_slave_0 entered promiscuous mode [ 135.263020][ T6540] device hsr_slave_1 entered promiscuous mode [ 135.314946][ T6540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.316254][ T6540] Cannot create hsr debugfs directory [ 135.328093][ T6579] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 135.353435][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.360009][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.384767][ T6577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.674339][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 135.683236][ T6540] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.726134][ T6540] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.792917][ T6611] binder: 6610:6611 tried to acquire reference to desc 0, got 1 instead [ 136.086843][ T4323] Bluetooth: hci3: command 0x0409 tx timeout [ 136.097441][ T6611] binder: 6610:6611 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 136.099413][ T6611] binder: 6611 RLIMIT_NICE not set [ 136.100136][ T6611] binder: 6611 RLIMIT_NICE not set [ 136.101081][ T6611] binder: send failed reply for transaction 121 to 6610:6611 [ 136.102269][ T6611] binder: 6610:6611 ioctl c0306201 20000440 returned -14 [ 136.104126][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 136.105868][ T1964] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.127719][ T6615] loop5: detected capacity change from 0 to 256 [ 136.139033][ T6615] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 136.148709][ T6540] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 136.186045][ T6540] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 136.190655][ T6618] binder: 6617:6618 tried to acquire reference to desc 0, got 1 instead [ 136.192929][ T6618] binder: 6617:6618 ioctl c0306201 200005c0 returned -14 [ 136.196817][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 136.209888][ T5692] binder: undelivered transaction 126, process died. [ 136.217612][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 136.322606][ T6619] tipc: Enabling of bearer rejected, already enabled [ 136.763859][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.803916][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.807868][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.809525][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.879937][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.882733][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.884542][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.889768][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.891005][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.992158][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.993789][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.995905][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.997631][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.998765][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.415878][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.421250][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.492226][ T6655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.503577][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.835570][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 138.154618][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 138.157283][ T6282] bond2: (slave gretap1): Releasing active interface [ 138.158424][ T6282] bond2: (slave gretap1): the permanent HWaddr of slave - e2:a5:18:a6:16:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 138.161167][ T6282] bond2: (slave gretap2): making interface the new active one [ 138.246718][ T6282] bond2: (slave gretap2): Releasing active interface [ 138.620269][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.622391][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.626317][ T6680] loop5: detected capacity change from 0 to 1024 [ 138.626739][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.629428][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.634359][ T6674] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 138.661165][ T6680] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 138.726740][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 138.730751][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.732442][ T6675] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 138.745918][ T5051] EXT4-fs (loop5): unmounting filesystem. [ 138.749933][ T6677] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 138.781303][ T6677] bond3 (unregistering): Released all slaves [ 138.838533][ T6540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.840213][ T6540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.844686][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.846987][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.848576][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.850041][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.851683][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.853249][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.855697][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.620'. [ 138.858469][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.870826][ T6688] tipc: Started in network mode [ 138.871775][ T6688] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 138.873172][ T6688] tipc: Enabling of bearer rejected, failed to enable media [ 138.874666][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 139.797714][ T6710] loop3: detected capacity change from 0 to 8 [ 139.867345][ T6710] SQUASHFS error: zlib decompression failed, data probably corrupt [ 139.868701][ T6710] SQUASHFS error: Failed to read block 0x9b: -5 [ 139.869824][ T6710] SQUASHFS error: Unable to read metadata cache entry [99] [ 139.870903][ T6710] SQUASHFS error: Unable to read inode 0x127 [ 139.914357][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.522578][ T4323] Bluetooth: hci3: command 0x040f tx timeout [ 140.680860][ T6282] bond0: (slave wlan1): Releasing backup interface [ 140.954422][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.128610][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.131144][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.132535][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.004366][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 142.056989][ T6788] loop3: detected capacity change from 0 to 512 [ 142.065039][ T6788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.066149][ T6788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.067185][ T6788] ext4: Unknown parameter 'euid<00000000000000000000' [ 142.116418][ T6368] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.182499][ T6282] device hsr_slave_0 left promiscuous mode [ 142.207147][ T6282] device hsr_slave_1 left promiscuous mode [ 142.242360][ T6798] overlayfs: failed to clone lowerpath [ 142.334835][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.338469][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.344630][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.346253][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.347740][ T6282] device bridge_slave_1 left promiscuous mode [ 142.351154][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.397113][ T6282] device bridge_slave_0 left promiscuous mode [ 142.398324][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.554627][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 142.565133][ T6282] device veth1_macvtap left promiscuous mode [ 142.573572][ T6282] device veth0_macvtap left promiscuous mode [ 142.585127][ T6282] device veth1_vlan left promiscuous mode [ 142.598425][ T6282] device veth0_vlan left promiscuous mode [ 142.849206][ T6282] bond2 (unregistering): Released all slaves [ 142.856041][ T6282] bond1 (unregistering): Released all slaves [ 143.034435][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 146.117221][ T6282] team0 (unregistering): Port device team_slave_1 removed [ 146.317425][ T6282] team0 (unregistering): Port device team_slave_0 removed [ 146.515139][ T6282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.694847][ T6282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.707227][ T6282] bond0 (unregistering): Released all slaves [ 149.946135][ T6854] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 149.947357][ T6854] netlink: 17 bytes leftover after parsing attributes in process `syz.0.656'. [ 149.963875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.966940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.046042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.047704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.049492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.050723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.052449][ T6540] device veth0_vlan entered promiscuous mode [ 150.079833][ T6540] device veth1_vlan entered promiscuous mode [ 150.103351][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.105537][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.106854][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.108380][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.112720][ T6540] device veth0_macvtap entered promiscuous mode [ 150.115905][ T6540] device veth1_macvtap entered promiscuous mode [ 150.121144][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.122782][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.130828][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.133022][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.135107][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.233631][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.302419][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.436980][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.438622][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.440748][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.443006][ T6540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.444227][ T6540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.446144][ T6540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.447459][ T6540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.450785][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.452275][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.463029][ T6895] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 150.482839][ T6895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.524182][ T6895] bond3: (slave vlan2): making interface the new active one [ 150.532215][ T6895] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 150.534129][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 150.582106][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.584451][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.588047][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.623467][ T5123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.625628][ T5123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.630561][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.686438][ T6908] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 150.689609][ T6908] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.699149][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.700485][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.967841][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 151.972451][ T6963] tipc: Enabling of bearer rejected, failed to enable media [ 152.056693][ T6968] lo speed is unknown, defaulting to 1000 [ 158.714294][ T4327] Bluetooth: hci0: command 0x0406 tx timeout [ 158.714305][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 161.764565][ C0] Unable to handle kernel paging request at virtual address dfff800000000068 [ 161.766284][ C0] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 161.767521][ C0] Mem abort info: [ 161.768075][ C0] ESR = 0x0000000096000006 [ 161.768762][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 161.769699][ C0] SET = 0, FnV = 0 [ 161.770330][ C0] EA = 0, S1PTW = 0 [ 161.770981][ C0] FSC = 0x06: level 2 translation fault [ 161.771849][ C0] Data abort info: [ 161.772404][ C0] ISV = 0, ISS = 0x00000006 [ 161.773134][ C0] CM = 0, WnR = 0 [ 161.773761][ C0] [dfff800000000068] address between user and kernel address ranges [ 161.775206][ C0] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 161.776287][ C0] Modules linked in: [ 161.776914][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 161.778071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 161.779561][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 161.780705][ C0] pc : find_match+0xa0/0xb0c [ 161.781444][ C0] lr : find_match+0x74/0xb0c [ 161.782186][ C0] sp : ffff8000080065e0 [ 161.782867][ C0] x29: ffff800008006600 x28: 1fffe0001880e0c4 x27: dfff800000000000 [ 161.784026][ C0] x26: 0000000000000340 x25: ffff0000c4070637 x24: 0000000000000201 [ 161.785185][ C0] x23: 0000000000000002 x22: ffff0000c4070620 x21: 0000000000000000 [ 161.786386][ C0] x20: 1fffe0001880e0c6 x19: 0000000000000000 x18: 0000000051763cb3 [ 161.787633][ C0] x17: 0000000000000000 x16: ffff8000082d0e24 x15: 0000000000000000 [ 161.788758][ C0] x14: 000000000000c0fe x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 161.789942][ C0] x11: ff008000107b6b40 x10: 0000000000000000 x9 : ffff8000150e4800 [ 161.791143][ C0] x8 : 0000000000000068 x7 : ffff800008006990 x6 : 0000000000000002 [ 161.792324][ C0] x5 : ffff800008006990 x4 : ffff800008006980 x3 : 0000000000000002 [ 161.793569][ C0] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 161.794922][ C0] Call trace: [ 161.795433][ C0] find_match+0xa0/0xb0c [ 161.796101][ C0] rt6_nh_find_match+0xcc/0x138 [ 161.796906][ C0] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 161.797703][ C0] __find_rr_leaf+0x3b8/0x5c8 [ 161.798438][ C0] fib6_table_lookup+0x308/0x8b8 [ 161.799230][ C0] ip6_pol_route+0x1f4/0x1024 [ 161.799957][ C0] ip6_pol_route_output+0x60/0x94 [ 161.800817][ C0] fib6_rule_lookup+0x258/0x4a8 [ 161.801648][ C0] ip6_route_output_flags_noref+0x250/0x314 [ 161.802568][ C0] ip6_route_output_flags+0xe4/0x368 [ 161.803400][ C0] ip6_dst_lookup_tail+0x168/0x12c0 [ 161.804266][ C0] ip6_dst_lookup_flow+0x54/0xe0 [ 161.805147][ C0] geneve_get_v6_dst+0x648/0x954 [ 161.805991][ C0] geneve_xmit+0x970/0x2f18 [ 161.806681][ C0] dev_hard_start_xmit+0x244/0x8e0 [ 161.807455][ C0] __dev_queue_xmit+0x155c/0x309c [ 161.808160][ C0] neigh_resolve_output+0x550/0x650 [ 161.808919][ C0] ip6_finish_output2+0xd60/0x1844 [ 161.809707][ C0] ip6_finish_output+0x594/0x930 [ 161.810459][ C0] ip6_output+0x274/0x500 [ 161.811070][ C0] ndisc_send_skb+0xc38/0x1680 [ 161.812072][ C0] ndisc_send_rs+0x378/0x514 [ 161.812765][ C0] addrconf_rs_timer+0x2f4/0x574 [ 161.813488][ C0] call_timer_fn+0x1b8/0x964 [ 161.814161][ C0] __run_timers+0x460/0x6bc [ 161.814797][ C0] run_timer_softirq+0x7c/0x114 [ 161.815639][ C0] handle_softirqs+0x318/0xc6c [ 161.816401][ C0] __do_softirq+0x14/0x20 [ 161.817083][ C0] ____do_softirq+0x14/0x20 [ 161.817790][ C0] call_on_irq_stack+0x30/0x48 [ 161.818578][ C0] do_softirq_own_stack+0x20/0x2c [ 161.819391][ C0] __irq_exit_rcu+0x23c/0x43c [ 161.820100][ C0] irq_exit_rcu+0x14/0x84 [ 161.820782][ C0] el1_interrupt+0x38/0x54 [ 161.821388][ C0] el1h_64_irq_handler+0x18/0x24 [ 161.822091][ C0] el1h_64_irq+0x64/0x68 [ 161.822728][ C0] arch_local_irq_enable+0xc/0x18 [ 161.823444][ C0] default_idle_call+0x68/0xdc [ 161.824144][ C0] do_idle+0x1d8/0x4bc [ 161.824792][ C0] cpu_startup_entry+0x5c/0x74 [ 161.825564][ C0] rest_init+0x2d4/0x2f0 [ 161.826231][ C0] start_kernel+0x0/0x554 [ 161.826940][ C0] start_kernel+0x4a4/0x554 [ 161.827583][ C0] __primary_switched+0xb8/0xc0 [ 161.828323][ C0] Code: 96047f81 f94002c8 910d011a d343ff48 (387b6908) [ 161.829438][ C0] ---[ end trace 0000000000000000 ]--- [ 162.066147][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 162.067323][ C0] SMP: stopping secondary CPUs [ 162.068019][ C0] Kernel Offset: disabled [ 162.068674][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 162.069604][ C0] Memory Limit: none [ 162.311101][ C0] Rebooting in 86400 seconds..