last executing test programs: 1m8.316445522s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) 1m8.142697739s ago: executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000008540)=0x80) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) r4 = dup(r3) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x5450, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) shutdown(r3, 0x0) 56.083123165s ago: executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000008540)=0x80) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) r4 = dup(r3) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x5450, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) shutdown(r3, 0x0) 44.986989834s ago: executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000008540)=0x80) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) r4 = dup(r3) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x5450, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) shutdown(r3, 0x0) 34.901307908s ago: executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000008540)=0x80) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) r4 = dup(r3) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x5450, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) shutdown(r3, 0x0) 25.425714058s ago: executing program 2: socket$inet(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x90) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',', @ANYRESDEC]) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_pts(r6, 0x520901) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000240)='./bus\x00', 0xa00800, &(0x7f0000004140)=ANY=[], 0x0, 0x1cf, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) 23.418515665s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@empty, 0x0, r2}) 23.12357106s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$eJzs28tvG8UfAPDvrpP019cvoZRHH0CgICIeSZMW6IEDIJA4FAkJDnCMkrQqdRvUBIlWFRSEygkhJO6II/8CJ7ggxAmJK9xRpQr10paT0dq7ie3YbuLaNcWfj7TtzO5sZr7eHXtmxw5gaE1m/yQRuyLi94gYr2UbC0zW/rtx7eLCzWsXF5KoVN76K6mWu37t4kJRtDhvZ56ZSiPSz5I40KLelfMXTs+Xy0vn8vzM6pn3Z1bOX3j21Jn5k0snl87OHTt29MjsC8/PPdeTOLM2Xd//0fLBfa+/+9Ubx79oiL8pjh6Z7HTwiUqlx9UN1u66dDIywIawJaWIyC7XaLX/j0cp1i/eeLz26UAbB/RVpVKp7Gx/+FIF+A9LojGvy8OwKD7os/lvsTUPAl7q3/Bj4K6+XJsAZXHfyLfakZFI8zKjTfPbXpqMiHcu/f1NtkV/nkMAADT4IRv/PNNq/JfG/XXl/p+vDU1ExD0RsSci7o2IvRFxX0S17AMR8eAW629eJNk4/kmvdBXYJmXjvxfzta3G8V8x+ouJUp7bXY1/NDlxqrx0OH9NpmJ0W5af7VDHj6/+9mW7Y/Xjv2zL6i/Ggnk7roxsazxncX51/nZirnf1k4j9I63iT9ZWApKI2BcR+7us49RT3x1sd+zW8XfQg3WmyrcRT9au/6Voir+QdF6fnPlflJcOzxR3xUa//Hr5zXb131b8PZBd/x0t7/+1+CeS+vXala3XcfmPz9vOabq9/8eSt6vpsXzfh/Orq+dmI8aS47VG1++fWz+3yBfls/inDrXu/3ti/ZU4EBHZTfxQRDwcEY/kbX80Ih6LiEMd4v/5lcff6z7+/sriX9zS9V9PjEXzntaJ0umfvm+odGJD/Dc7X/+j1dRUvmcz73+baVd3dzMAAADcfdKI2BVJOr2WTtPp6dr35ffGjrS8vLL69InlD84u1n4jMBGjafGka7zueehsPq0v8nNR+2pBkT+SPzf+urS9mp9eWC4vDjp4GHI72/T/zJ+lQbcO6Du/14Lhpf/D8NL/YXjp/zC8WvT/7YNoB3Dntfr8/3gA7QDuvKb+b9kPhoj5Pwwv/R+Gl/4PQ2lle9z6R/IdE8Vf6vJ0ibs0Eem/ohkSfUoM9n0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/4JAAD//3sE4iY=") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x7a44, 0x1700) 22.315773654s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000005c0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@noinit_itable}, {@nombcache}, {@jqfmt_vfsv0}, {@delalloc}, {@errors_remount}, {@auto_da_alloc}]}, 0x1, 0x522, &(0x7f0000000f80)="$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") setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040), 0x4) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 18.014715823s ago: executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000008540)=0x80) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) r4 = dup(r3) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x5450, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) shutdown(r3, 0x0) 16.956695464s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 16.772576203s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0) 3.586443681s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RSTATFS(r3, &(0x7f0000000080)={0x43}, 0x43) write$FUSE_LK(r3, &(0x7f0000002340)={0x28, 0xfffffffffffffffe}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x10}], 0x1}, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x8902, 0x0) 3.484392497s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x1}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8901, 0x0) 2.783676345s ago: executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x5450, 0x0) 1.883985722s ago: executing program 1: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r2) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5450, 0x0) 1.475116155s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 986.63718ms ago: executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = dup(r0) epoll_create1(0x0) fcntl$setpipe(0xffffffffffffffff, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) r2 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x5450, 0x0) 573.125783ms ago: executing program 4: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) write(r0, &(0x7f0000000040)="0984", 0x2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 555.503215ms ago: executing program 3: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="c98d", 0x2}], 0x1) r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="02", 0x358, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) 433.203314ms ago: executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) acct(&(0x7f0000000900)='./file0\x00') 393.72019ms ago: executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x33, 0x0, 0x0) 343.839398ms ago: executing program 3: writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="0200b4e47f", 0x5}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 290.635786ms ago: executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x10) 237.977524ms ago: executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000100)=0x20002, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100), 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0x20002) 195.31051ms ago: executing program 3: r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x31, &(0x7f00000000c0)="b211", 0x2) 142.941068ms ago: executing program 4: connect$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000080), 0x10) 97.508575ms ago: executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 90.591117ms ago: executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x26020480) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1428, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488) 0s ago: executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) kernel console output (not intermixed with test programs): criptor's value: 21 [ 206.346217][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.367141][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.377322][ T3573] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.398510][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.405381][ T3573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.428177][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.452773][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.476309][ T3573] usb 3-1: config 0 descriptor?? [ 206.486178][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.516030][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.546345][ T7692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.552510][ T3567] Bluetooth: hci2: command 0x040f tx timeout [ 206.572941][ T3573] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 206.608005][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.656392][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.671355][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.711033][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.837194][ T8023] loop1: detected capacity change from 0 to 1024 [ 206.953215][ T8023] EXT4-fs (loop1): Ignoring removed orlov option [ 206.964261][ T8023] EXT4-fs (loop1): Test dummy encryption mode enabled [ 206.992886][ T8023] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.030303][ T8023] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 207.071004][ T8023] EXT4-fs (loop1): invalid journal inode [ 207.102216][ T8023] EXT4-fs (loop1): can't get journal size [ 207.120158][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.134602][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.154612][ T8023] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 207.181948][ T7692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.238668][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.248498][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.310762][ T7692] device veth0_vlan entered promiscuous mode [ 207.356238][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.375172][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.416331][ T7692] device veth1_vlan entered promiscuous mode [ 207.450258][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.466888][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.576617][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.611364][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.639487][ T7692] device veth0_macvtap entered promiscuous mode [ 207.688823][ T7692] device veth1_macvtap entered promiscuous mode [ 207.772901][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.786872][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.797165][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.828492][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.872440][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.889480][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.901795][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.913479][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.936110][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.964012][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.001982][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.041185][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.051634][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.090210][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.110837][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.129795][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.141236][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.199387][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.211863][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.230406][ T7692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.241253][ T7692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.276111][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.311224][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.329906][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.333116][ T8091] loop4: detected capacity change from 0 to 2048 [ 208.386908][ T7692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.427207][ T7692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.459113][ T7692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.493945][ T8091] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 208.512295][ T8091] System zones: 0-7 [ 208.532344][ T7692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.565495][ T3567] usb 3-1: USB disconnect, device number 8 [ 208.617323][ T8091] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 208.634366][ T3623] Bluetooth: hci2: command 0x0419 tx timeout [ 208.666799][ T8091] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 208.758478][ T8117] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20002 [ 208.787319][ T8091] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 208.820583][ T8091] EXT4-fs (loop4): This should not happen!! Data will be lost [ 208.820583][ T8091] [ 208.840824][ T8091] EXT4-fs (loop4): Total free blocks count 0 [ 208.884702][ T8091] EXT4-fs (loop4): Free/Dirty block details [ 208.903934][ T8091] EXT4-fs (loop4): free_blocks=0 [ 208.942201][ T4979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.955360][ T8091] EXT4-fs (loop4): dirty_blocks=48 [ 208.960506][ T8091] EXT4-fs (loop4): Block reservation details [ 208.974924][ T4979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.030635][ T8091] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 209.044806][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.125735][ T4979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.153985][ T4979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.205605][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.454577][ T8158] serio: Serial port pts0 [ 209.583959][ T3567] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 209.994835][ T3567] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 210.025504][ T3567] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.061415][ T3567] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.102518][ T3567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.135260][ T3567] usb 3-1: config 0 descriptor?? [ 210.231116][ T3567] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 212.268194][ T3572] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 212.289316][ T6814] usb 3-1: USB disconnect, device number 9 [ 212.649308][ T3572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.686438][ T3572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.711279][ T3572] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 212.743806][ T3572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.764854][ T3572] usb 4-1: config 0 descriptor?? [ 212.846123][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 213.255985][ T3572] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 213.275051][ T3572] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 213.293683][ T3572] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 213.458252][ T3572] usb 4-1: USB disconnect, device number 5 [ 213.473824][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -2 [ 213.748399][ T8341] serio: Serial port pts0 [ 214.423814][ T3623] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 214.639796][ T8380] loop3: detected capacity change from 0 to 128 [ 214.778575][ T8380] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 214.841139][ T8380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.852209][ T3623] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 214.860347][ T8380] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.3: No space for directory leaf checksum. Please run e2fsck -D. [ 214.880613][ T3623] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 214.913316][ T8380] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz-executor.3: checksumming directory block 0 [ 214.939474][ T3623] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.239236][ T3623] usb 3-1: string descriptor 0 read error: -22 [ 215.249294][ T3623] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.282249][ T3623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.348832][ T3623] usb 3-1: 0:2 : does not exist [ 215.549921][ T6814] usb 3-1: USB disconnect, device number 10 [ 215.622477][ T8412] serio: Serial port pts1 [ 216.724570][ T8447] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.802392][ T8447] gretap0: refused to change device tx_queue_len [ 216.844452][ T8447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.998188][ T8457] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.533394][ T26] audit: type=1800 audit(1718823975.314:10): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 218.028426][ T26] audit: type=1800 audit(1718823975.814:11): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 218.140161][ T8501] loop4: detected capacity change from 0 to 512 [ 218.244184][ T8501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.700877][ T26] audit: type=1800 audit(1718823976.484:12): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1965 res=0 errno=0 [ 219.472912][ T8575] binder: 8539:8575 ioctl 4018620d 0 returned -22 [ 220.380548][ T26] audit: type=1800 audit(1718823978.164:13): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1953 res=0 errno=0 [ 220.965546][ T8638] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 221.296922][ T8650] binder: 8617:8650 ioctl 4018620d 0 returned -22 [ 222.184922][ T26] audit: type=1800 audit(1718823979.974:14): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1955 res=0 errno=0 [ 223.026547][ T8718] binder: 8684:8718 ioctl 4018620d 0 returned -22 [ 224.261579][ T8755] loop0: detected capacity change from 0 to 512 [ 224.375291][ T8755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 224.393617][ T8755] System zones: 1-12 [ 224.422051][ T8755] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 224.457433][ T8755] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 224.498391][ T8755] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 224.538244][ T8755] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 224.567881][ T8755] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 224.616839][ T8755] EXT4-fs (loop0): 1 truncate cleaned up [ 224.622636][ T8755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.682007][ T8755] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 225.242904][ T26] audit: type=1800 audit(1718823983.024:15): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1959 res=0 errno=0 [ 226.149745][ T8820] binder: 8782:8820 ioctl 4018620d 0 returned -22 [ 228.091966][ T8874] loop3: detected capacity change from 0 to 1024 [ 228.174077][ T8874] EXT4-fs (loop3): Ignoring removed nobh option [ 228.213495][ T8874] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.288535][ T8874] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,dioread_nolock,usrjquota=,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 229.751312][ T8914] loop4: detected capacity change from 0 to 1024 [ 229.827693][ T8914] EXT4-fs (loop4): Ignoring removed orlov option [ 229.880661][ T8914] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 229.906534][ T8914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 229.925282][ T8914] System zones: 0-1, 3-36 [ 229.938437][ T8914] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 230.302028][ T8934] serio: Serial port pts0 [ 231.122640][ T8962] serio: Serial port pts0 [ 231.848676][ T9005] sctp: [Deprecated]: syz-executor.3 (pid 9005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.848676][ T9005] Use struct sctp_sack_info instead [ 232.028926][ T9016] loop4: detected capacity change from 0 to 512 [ 232.130227][ T9016] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.176864][ T9016] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set [ 232.197179][ T9016] Quota error (device loop4): write_blk: dquota write failed [ 232.206048][ T9016] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 232.220512][ T9016] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor.4: Failed to acquire dquot type 1 [ 232.242168][ T9016] EXT4-fs (loop4): 1 truncate cleaned up [ 232.262333][ T9016] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 232.663427][ T9039] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 232.863015][ T26] audit: type=1800 audit(1718823990.644:16): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 232.872272][ T9016] syz-executor.4 (9016) used greatest stack depth: 19200 bytes left [ 232.882914][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.536845][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 234.603574][ T4938] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.717478][ T4938] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.770935][ T9147] loop4: detected capacity change from 0 to 512 [ 234.932423][ T4938] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.057638][ T4938] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.036072][ T9168] chnl_net:caif_netlink_parms(): no params data found [ 236.171870][ T9220] loop3: detected capacity change from 0 to 512 [ 236.293502][ T9220] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 236.334478][ T9220] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 236.353179][ T9220] EXT4-fs (loop3): 1 truncate cleaned up [ 236.393846][ T9220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.553942][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.582756][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.602744][ T9168] device bridge_slave_0 entered promiscuous mode [ 236.662905][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.710862][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.763996][ T9168] device bridge_slave_1 entered promiscuous mode [ 237.026111][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.045968][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.111217][ T4938] device hsr_slave_0 left promiscuous mode [ 237.139141][ T4938] device hsr_slave_1 left promiscuous mode [ 237.170482][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.234212][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.253391][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.278800][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.330741][ T4938] device bridge_slave_1 left promiscuous mode [ 237.365221][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.387349][ T4938] device bridge_slave_0 left promiscuous mode [ 237.413993][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.424047][ T3623] Bluetooth: hci2: command 0x0409 tx timeout [ 237.475370][ T4938] device veth1_macvtap left promiscuous mode [ 237.481516][ T4938] device veth0_macvtap left promiscuous mode [ 237.496250][ T4938] device veth1_vlan left promiscuous mode [ 237.514493][ T4938] device veth0_vlan left promiscuous mode [ 237.880108][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 237.901912][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 237.934242][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.950743][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.108316][ T4938] bond0 (unregistering): Released all slaves [ 238.228935][ T9168] team0: Port device team_slave_0 added [ 238.251551][ T9168] team0: Port device team_slave_1 added [ 238.372436][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.408832][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.511669][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.548266][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.556315][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.709980][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.742003][ T9303] loop2: detected capacity change from 0 to 1024 [ 238.797999][ T9303] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 238.875691][ T9303] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 238.915581][ T9303] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 238.927493][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.947438][ T9168] device hsr_slave_0 entered promiscuous mode [ 238.962399][ T9168] device hsr_slave_1 entered promiscuous mode [ 238.981976][ T9303] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,acl,auto_da_alloc,nojournal_checksum,journal_dev=0x0000000000000004,grpjquota=,auto_da_alloc=0x0000000000000040,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 239.014786][ T9168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.039493][ T9168] Cannot create hsr debugfs directory [ 239.515620][ T3572] Bluetooth: hci2: command 0x041b tx timeout [ 240.546106][ T9168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.570482][ T9168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.596312][ T9168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.639018][ T9168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.915512][ T9364] loop4: detected capacity change from 0 to 1024 [ 240.951806][ T9351] chnl_net:caif_netlink_parms(): no params data found [ 240.977961][ T9364] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 241.056473][ T9364] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 241.062365][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.084478][ T9364] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 241.204059][ T9364] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,acl,auto_da_alloc,nojournal_checksum,journal_dev=0x0000000000000004,grpjquota=,auto_da_alloc=0x0000000000000040,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 241.268915][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.288092][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.307816][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.377016][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.395649][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.474481][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.481584][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.560787][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.606476][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.630695][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.637868][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.725042][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 241.851437][ T9351] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.863153][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.882047][ T9351] device bridge_slave_0 entered promiscuous mode [ 241.907158][ T9351] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.925394][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.942966][ T9351] device bridge_slave_1 entered promiscuous mode [ 241.960259][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.976350][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.014676][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.113287][ T9168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.162011][ T9168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.199552][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.235382][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.269610][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.299207][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.332260][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.370874][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.429348][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.439880][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.451323][ T9351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.510734][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.531360][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.571824][ T6814] Bluetooth: hci3: command 0x0409 tx timeout [ 242.580073][ T9351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.771916][ T9351] team0: Port device team_slave_0 added [ 242.816369][ T9351] team0: Port device team_slave_1 added [ 243.004732][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.018489][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.093578][ T9351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.183183][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.203001][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.259152][ T9351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.277273][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.295066][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.307931][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.411279][ T9351] device hsr_slave_0 entered promiscuous mode [ 243.438169][ T9351] device hsr_slave_1 entered promiscuous mode [ 243.459177][ T9351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.484655][ T9351] Cannot create hsr debugfs directory [ 243.556848][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.575013][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.660690][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.695088][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.723943][ T9168] device veth0_vlan entered promiscuous mode [ 243.745704][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 243.766000][ T4938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.820191][ T9168] device veth1_vlan entered promiscuous mode [ 243.840469][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.862371][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.901938][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.962616][ T4938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.022431][ T9168] device veth0_macvtap entered promiscuous mode [ 244.065452][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.084409][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.114716][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.142361][ T9504] loop2: detected capacity change from 0 to 1024 [ 244.179483][ T4938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.214458][ T9168] device veth1_macvtap entered promiscuous mode [ 244.249692][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.259230][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.294273][ T9504] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 244.319252][ T9504] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 244.343289][ T4938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.373869][ T9504] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 244.388497][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.432358][ T9504] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,acl,auto_da_alloc,nojournal_checksum,journal_dev=0x0000000000000004,grpjquota=,auto_da_alloc=0x0000000000000040,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 244.466547][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.477015][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.531216][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.569801][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.581027][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.591317][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.602124][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.678673][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.703925][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 244.715152][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.747951][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.783574][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.849446][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.863001][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.873946][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.884518][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.913335][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.930603][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.945172][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.966429][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.992922][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.014635][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.035037][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.045281][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.056618][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.069318][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.079831][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.089528][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.101811][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.134496][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.178350][ T9168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.206801][ T9168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.248863][ T9168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.265005][ T9168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.546612][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.566217][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.637480][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.691273][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.714828][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.753534][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.233520][ T9351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.273238][ T9351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.289143][ T9351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.310864][ T9351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.568514][ T4938] device hsr_slave_0 left promiscuous mode [ 246.590911][ T4938] device hsr_slave_1 left promiscuous mode [ 246.607080][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.665402][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.686905][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.703012][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.726137][ T4938] device bridge_slave_1 left promiscuous mode [ 246.744233][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.754883][ T4938] device bridge_slave_0 left promiscuous mode [ 246.774056][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.784308][ T6814] Bluetooth: hci3: command 0x040f tx timeout [ 246.820546][ T4938] device veth1_macvtap left promiscuous mode [ 246.853578][ T4938] device veth0_macvtap left promiscuous mode [ 246.866343][ T4938] device veth1_vlan left promiscuous mode [ 246.872192][ T4938] device veth0_vlan left promiscuous mode [ 247.530372][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 247.563559][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 247.602426][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.620267][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.701642][ T4938] bond0 (unregistering): Released all slaves [ 247.808867][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.863306][ T9351] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.884590][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.893051][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.941402][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.955631][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.964509][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.971580][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.979828][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.988953][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.000191][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.007318][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.022288][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.084201][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.099980][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.103441][ T9671] loop2: detected capacity change from 0 to 512 [ 248.110640][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.126017][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.134709][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.143396][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.182527][ T9671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 248.190861][ T9671] System zones: 1-12 [ 248.197574][ T9671] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1) [ 248.226417][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.237548][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.258185][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.261933][ T9671] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 361: padding at end of block bitmap is not set [ 248.273183][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.290080][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.295291][ T9671] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 248.300303][ T9351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.323968][ T9671] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 33619980 len 1 [ 248.344679][ T9671] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0) [ 248.387767][ T9622] chnl_net:caif_netlink_parms(): no params data found [ 248.396958][ T9671] EXT4-fs (loop2): 1 truncate cleaned up [ 248.422969][ T9671] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,nojournal_checksum,grpid,data_err=ignore,data=writeback,,errors=continue. Quota mode: none. [ 248.479811][ T9671] EXT4-fs error (device loop2): dx_probe:822: inode #2: comm syz-executor.2: Directory hole found for htree index block [ 248.565103][ T9622] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.572177][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.594971][ T9622] device bridge_slave_0 entered promiscuous mode [ 248.639789][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.664956][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.691505][ T9622] device bridge_slave_1 entered promiscuous mode [ 248.787000][ T9622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.839705][ T9622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.864526][ T3570] Bluetooth: hci3: command 0x0419 tx timeout [ 248.943859][ T3570] Bluetooth: hci2: command 0x0409 tx timeout [ 248.959794][ T9622] team0: Port device team_slave_0 added [ 249.031734][ T9622] team0: Port device team_slave_1 added [ 249.075510][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.102100][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.129563][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.174879][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.203279][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.272228][ T9622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.305465][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.314202][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.414539][ T9622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.454210][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.481675][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.638158][ T9622] device hsr_slave_0 entered promiscuous mode [ 249.663651][ T9622] device hsr_slave_1 entered promiscuous mode [ 249.672365][ T9622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.684374][ T9622] Cannot create hsr debugfs directory [ 249.694198][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.702662][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.722113][ T9351] device veth0_vlan entered promiscuous mode [ 249.757337][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.766531][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.790127][ T9351] device veth1_vlan entered promiscuous mode [ 249.797627][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.884013][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.894406][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.905521][ T9351] device veth0_macvtap entered promiscuous mode [ 249.943484][ T9351] device veth1_macvtap entered promiscuous mode [ 249.982906][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.996270][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.012177][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.035063][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.048600][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.059575][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.070241][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.099388][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.113565][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.140022][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.155253][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.164306][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.173205][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.208000][ T9622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.242924][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.259404][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.269913][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.280793][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.291014][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.302706][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.313161][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.325449][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.337291][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.345978][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.355749][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.370874][ T9351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.380457][ T9351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.391577][ T9351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.411876][ T9351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.431990][ T9622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.542730][ T9622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.647997][ T4979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.673150][ T4979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.704945][ T9622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.750749][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.794594][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.814600][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.834859][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.977580][ T9622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.022693][ T9622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.027380][ T3572] Bluetooth: hci2: command 0x041b tx timeout [ 251.096336][ T9622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.141352][ T9622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.434491][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.487704][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.505685][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.555283][ T9622] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.576593][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.595014][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.627344][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.634461][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.725982][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.736366][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.778433][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.813260][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.820423][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.869090][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.908299][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.932816][ T9798] loop2: detected capacity change from 0 to 512 [ 251.971317][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.981960][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.013539][ T9798] EXT4-fs (loop2): Ignoring removed nobh option [ 252.014760][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.056259][ T9806] serio: Serial port pts0 [ 252.071574][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.087259][ T9798] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 252.096311][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.104267][ T9798] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 252.114170][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.125298][ T9798] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz-executor.2: casefold flag without casefold feature [ 252.158938][ T9622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.235197][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.254797][ T9798] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz-executor.2: unexpected EA_INODE flag [ 252.285081][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.315235][ T9798] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 13 (err -117) [ 252.324231][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.344241][ T9798] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 252.394502][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.415797][ T9798] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 252.912779][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.930739][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.957260][ T9622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.039102][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.053491][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.104365][ T3570] Bluetooth: hci2: command 0x040f tx timeout [ 253.113205][ T9821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.150587][ T9622] device veth0_vlan entered promiscuous mode [ 253.199394][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.217463][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.258962][ T9622] device veth1_vlan entered promiscuous mode [ 253.274655][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.282507][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.301029][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.369920][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.388510][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.422217][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.456880][ T9622] device veth0_macvtap entered promiscuous mode [ 253.525597][ T9622] device veth1_macvtap entered promiscuous mode [ 253.551398][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.562902][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.573109][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.588843][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.599558][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.610478][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.620988][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.633175][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.643112][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.653802][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.666129][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.679628][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.689987][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.713433][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.723338][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.740746][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.757279][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.768998][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.793884][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.813742][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.845636][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.863744][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.885969][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.906800][ T9622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.926455][ T9622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.945468][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.977913][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.990649][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.022862][ T9622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.039339][ T9622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.064683][ T9622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.074444][ T9622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.127978][ T4938] device hsr_slave_0 left promiscuous mode [ 254.145738][ T4938] device hsr_slave_1 left promiscuous mode [ 254.156567][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.173770][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.183285][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.207365][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.245606][ T4938] device bridge_slave_1 left promiscuous mode [ 254.251778][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.308851][ T4938] device bridge_slave_0 left promiscuous mode [ 254.324325][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.356756][ T4938] device veth1_macvtap left promiscuous mode [ 254.375090][ T4938] device veth0_macvtap left promiscuous mode [ 254.381258][ T4938] device veth1_vlan left promiscuous mode [ 254.433843][ T4938] device veth0_vlan left promiscuous mode [ 255.071474][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 255.128746][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 255.171628][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.183911][ T3572] Bluetooth: hci2: command 0x0419 tx timeout [ 255.224350][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.487818][ T4938] bond0 (unregistering): Released all slaves [ 255.515044][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.521732][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.676539][ T9921] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.788610][ T598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.807494][ T598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.878404][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.888350][ T4977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.917071][ T4977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.974507][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.044238][T10048] loop1: detected capacity change from 0 to 2048 [ 258.092207][T10048] EXT4-fs (loop1): Ignoring removed orlov option [ 258.230700][T10050] chnl_net:caif_netlink_parms(): no params data found [ 258.265531][T10048] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 258.475466][ T154] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 258.576403][ T154] EXT4-fs (loop1): Remounting filesystem read-only [ 258.625529][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.671094][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.711609][T10050] device bridge_slave_0 entered promiscuous mode [ 258.756794][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.784578][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.803040][T10050] device bridge_slave_1 entered promiscuous mode [ 258.829961][T10073] tipc: Started in network mode [ 258.863830][T10073] tipc: Node identity 6, cluster identity 9 [ 258.875239][T10073] tipc: Node number set to 6 [ 258.976029][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.011144][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.129216][T10084] loop2: detected capacity change from 0 to 512 [ 259.189783][T10050] team0: Port device team_slave_0 added [ 259.249773][T10050] team0: Port device team_slave_1 added [ 259.321886][T10084] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.385068][T10084] ext4 filesystem being mounted at /root/syzkaller-testdir953529669/syzkaller.UW3lgy/309/file0 supports timestamps until 2038 (0x7fffffff) [ 259.414090][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.421094][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.447121][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.531719][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.571787][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.614206][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.703861][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.930231][T10050] device hsr_slave_0 entered promiscuous mode [ 259.946324][T10050] device hsr_slave_1 entered promiscuous mode [ 260.023873][T10050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.041747][T10050] Cannot create hsr debugfs directory [ 260.063809][ T3601] Bluetooth: hci2: command 0x0409 tx timeout [ 260.432486][T10050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.556728][T10050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.728468][T10050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.832434][T10050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.122280][T10050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.145411][T10050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.209656][T10050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.237783][T10050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.449863][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 261.463666][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.545683][T10050] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.562640][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.580433][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.613052][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.634567][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.654758][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.661879][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.680955][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.724563][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.734897][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.741968][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.822423][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.842069][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.922995][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.973523][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.006289][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.044702][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.053494][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.124778][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.152205][ T1291] Bluetooth: hci2: command 0x041b tx timeout [ 262.192900][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.214497][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.222862][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.273949][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.306982][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.587250][ T4938] device hsr_slave_0 left promiscuous mode [ 262.593935][ T6814] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.606381][ T4938] device hsr_slave_1 left promiscuous mode [ 262.649624][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.663386][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.683105][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.738829][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.781872][ T4938] device bridge_slave_1 left promiscuous mode [ 262.788432][ T6814] usb 2-1: device descriptor read/64, error -71 [ 262.800310][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.820156][ T4938] device bridge_slave_0 left promiscuous mode [ 262.831528][T10216] loop3: detected capacity change from 0 to 1024 [ 262.835531][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.852799][ T4938] device veth1_macvtap left promiscuous mode [ 262.859250][ T4938] device veth0_macvtap left promiscuous mode [ 262.867790][ T4938] device veth1_vlan left promiscuous mode [ 262.873667][ T4938] device veth0_vlan left promiscuous mode [ 262.983242][T10216] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.063921][ T6814] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 263.113952][T10220] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 263.161728][ T6660] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir3808437812/syzkaller.eo7kNo/311/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 263.188261][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.202993][ T6660] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 263.224978][ T6660] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir3808437812/syzkaller.eo7kNo/311/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 263.226201][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 263.259959][ T6814] usb 2-1: device descriptor read/64, error -71 [ 263.262581][ T6660] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 263.286709][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.297963][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 263.304915][ T6660] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir3808437812/syzkaller.eo7kNo/311/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 263.333502][ T6660] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 263.353726][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.367312][ T6660] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir3808437812/syzkaller.eo7kNo/311/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 263.385136][ T6814] usb usb2-port1: attempt power cycle [ 263.393764][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.405346][ T6660] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 263.406231][ T6660] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir3808437812/syzkaller.eo7kNo/311/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 263.433250][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.452681][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.462176][ T6660] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 263.487926][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.565523][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.873949][ T26] audit: type=1804 audit(1718824021.654:17): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir953529669/syzkaller.UW3lgy/334/file0" dev="sda1" ino=1954 res=1 errno=0 [ 263.885161][ T4938] bond0 (unregistering): Released all slaves [ 263.933949][ T6814] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 264.033900][ T6814] usb 2-1: device descriptor read/8, error -71 [ 264.130945][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.144312][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.157331][T10050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.222618][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.234147][ T3573] Bluetooth: hci2: command 0x040f tx timeout [ 264.241161][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.304029][ T6814] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 264.321271][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.333439][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.391640][T10050] device veth0_vlan entered promiscuous mode [ 264.397923][ T6814] usb 2-1: device descriptor read/8, error -71 [ 264.412319][T10050] device veth1_vlan entered promiscuous mode [ 264.433045][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.441614][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.456397][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.500801][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.509645][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.524576][ T6814] usb usb2-port1: unable to enumerate USB device [ 264.538220][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.561431][T10050] device veth0_macvtap entered promiscuous mode [ 264.595281][T10050] device veth1_macvtap entered promiscuous mode [ 264.622128][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.672781][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.708577][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.733875][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.754154][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.775716][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.799102][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.820988][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.846562][T10050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.859864][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.870315][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.879089][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.888261][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.902111][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.942561][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.976072][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.007546][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.033823][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.057193][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.078490][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.100202][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.126191][T10050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.153594][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.165510][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.203919][T10050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.212637][T10050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.241775][T10050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.270589][T10050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.486635][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.520591][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.561894][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.650715][ T4977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.668604][ T4977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.743041][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.864637][T10249] chnl_net:caif_netlink_parms(): no params data found [ 266.236726][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.263898][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.315175][T10249] device bridge_slave_0 entered promiscuous mode [ 266.342100][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.350024][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.358835][T10249] device bridge_slave_1 entered promiscuous mode [ 266.405756][T10249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.435647][T10249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.510787][T10249] team0: Port device team_slave_0 added [ 266.537183][T10249] team0: Port device team_slave_1 added [ 266.637067][T10249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.692476][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.741779][T10249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.780701][T10249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.799963][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.862129][T10249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.931220][T10249] device hsr_slave_0 entered promiscuous mode [ 266.944074][ T3573] Bluetooth: hci4: command 0x0409 tx timeout [ 266.974877][T10249] device hsr_slave_1 entered promiscuous mode [ 266.982880][T10249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.008429][T10249] Cannot create hsr debugfs directory [ 267.258109][T10249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.371391][T10249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.481257][T10249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.583649][T10249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.886101][T10249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.906807][T10249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.934428][T10249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.965989][ T4938] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.988245][T10249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.368084][T10249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.416702][ T4938] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.440929][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.449616][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.478578][T10249] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.504888][ T4938] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.551101][T10326] chnl_net:caif_netlink_parms(): no params data found [ 268.576974][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.595244][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.612515][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.619681][ T6814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.658159][ T4938] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.689793][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.700723][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.717346][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.734148][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.741275][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.777045][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.788789][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.838267][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.852842][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.872048][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.936502][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.967582][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.017152][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.047382][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.080336][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.110728][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.148112][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 269.180144][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.320484][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.355622][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.422854][T10326] device bridge_slave_0 entered promiscuous mode [ 269.475179][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.504537][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.512876][T10326] device bridge_slave_1 entered promiscuous mode [ 269.675910][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.857432][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.896070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.903554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.002921][T10249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.032594][T10326] team0: Port device team_slave_0 added [ 270.083169][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 270.105636][T10326] team0: Port device team_slave_1 added [ 270.259001][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.270027][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.354263][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.361321][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.413787][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.446567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.458505][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.507347][T10249] device veth0_vlan entered promiscuous mode [ 270.515652][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.522610][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.583732][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.616925][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.625405][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.654602][T10249] device veth1_vlan entered promiscuous mode [ 270.816761][T10326] device hsr_slave_0 entered promiscuous mode [ 270.842309][T10326] device hsr_slave_1 entered promiscuous mode [ 270.854525][T10326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.874680][T10326] Cannot create hsr debugfs directory [ 270.922131][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.934498][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.994730][T10249] device veth0_macvtap entered promiscuous mode [ 271.059776][T10249] device veth1_macvtap entered promiscuous mode [ 271.184096][ T1291] Bluetooth: hci4: command 0x040f tx timeout [ 271.257318][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.303831][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.344451][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.367437][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.395520][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.413847][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.433792][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.467694][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.504483][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.535446][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.566527][T10249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.615090][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.633656][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.642466][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.681343][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.717741][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.748723][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.773759][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.813819][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.845901][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.876935][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.913756][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.933756][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.953796][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.973765][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.998488][T10249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.045468][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.056506][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.105655][T10249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.121111][T10249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.130748][T10249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.141299][T10249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.154500][ T1291] Bluetooth: hci2: command 0x041b tx timeout [ 272.375767][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.409770][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.467989][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.604494][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.612724][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.699107][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.963075][T10326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.032401][T10326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.076157][ T4938] device hsr_slave_0 left promiscuous mode [ 273.100057][ T4938] device hsr_slave_1 left promiscuous mode [ 273.115475][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.144406][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.189071][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.217254][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.245622][ T4938] device bridge_slave_1 left promiscuous mode [ 273.264516][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.274947][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 273.310812][ T4938] device bridge_slave_0 left promiscuous mode [ 273.322929][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.389907][ T4938] device hsr_slave_0 left promiscuous mode [ 273.398740][ T4938] device hsr_slave_1 left promiscuous mode [ 273.412836][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.429763][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.451675][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.477430][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.506514][ T4938] device bridge_slave_1 left promiscuous mode [ 273.519905][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.564207][ T4938] device bridge_slave_0 left promiscuous mode [ 273.571705][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.616791][ T4938] device veth1_macvtap left promiscuous mode [ 273.631995][ T4938] device veth0_macvtap left promiscuous mode [ 273.664035][ T4938] device veth1_vlan left promiscuous mode [ 273.669893][ T4938] device veth0_vlan left promiscuous mode [ 273.688532][ T4938] device veth1_macvtap left promiscuous mode [ 273.722531][ T4938] device veth0_macvtap left promiscuous mode [ 273.732217][ T4938] device veth1_vlan left promiscuous mode [ 273.742342][ T4938] device veth0_vlan left promiscuous mode [ 274.234148][T10374] Bluetooth: hci2: command 0x040f tx timeout [ 274.566870][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 274.589483][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 274.612522][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.640315][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.732077][ T4938] bond0 (unregistering): Released all slaves [ 275.041398][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 275.057960][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 275.071631][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.088004][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.162640][ T4938] bond0 (unregistering): Released all slaves [ 275.210275][T10326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.243807][T10470] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.253327][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.269007][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.336824][T10472] device bond_slave_0 entered promiscuous mode [ 275.336869][T10477] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 275.359570][T10472] device bond_slave_1 entered promiscuous mode [ 275.391190][T10472] device macvtap1 entered promiscuous mode [ 275.407547][T10472] device bond0 entered promiscuous mode [ 275.418788][T10472] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 275.431525][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.453199][T10473] device bond0 left promiscuous mode [ 275.460059][T10473] device bond_slave_0 left promiscuous mode [ 275.466088][T10473] device bond_slave_1 left promiscuous mode [ 275.479017][T10473] device macvtap1 left promiscuous mode [ 275.526143][T10326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.549281][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.840062][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.914037][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 276.029278][T10326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.098262][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.116269][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.158928][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.235994][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.256532][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.288561][T10372] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.295669][T10372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.332062][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.344516][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 276.417544][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.429649][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.462403][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.487206][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.494391][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.607074][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.629625][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.685744][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.725955][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.752560][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.783076][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.855155][T10326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.881394][T10326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.920263][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.975427][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.000547][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.042220][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.101327][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.144668][ T26] audit: type=1804 audit(1718824034.934:18): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2386058623/syzkaller.AwHt72/357/bus" dev="sda1" ino=1938 res=1 errno=0 [ 277.182817][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.261178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 277.270495][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 277.293711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 277.303043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 277.512871][ T26] audit: type=1800 audit(1718824035.294:19): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=1938 res=0 errno=0 [ 277.818437][ T26] audit: type=1326 audit(1718824035.474:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f5bbf29 code=0x7ffc0000 [ 277.848620][T10548] loop1: detected capacity change from 0 to 1024 [ 277.858253][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 277.873280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 277.888537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 277.899833][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 277.914973][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 278.114295][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.121814][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.129655][ T26] audit: type=1326 audit(1718824035.914:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f5bbf29 code=0x7ffc0000 [ 278.157216][T10537] loop4: detected capacity change from 0 to 1764 [ 278.194066][T10548] hfsplus: invalid catalog btree flag [ 278.209815][T10548] hfsplus: failed to load catalog file [ 278.221722][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.231557][T10555] 9pnet: Insufficient options for proto=fd [ 278.453882][ T26] audit: type=1326 audit(1718824036.204:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9d1f5bbf29 code=0x7ffc0000 [ 278.529348][T10550] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 278.820205][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.845470][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.857746][ T26] audit: type=1326 audit(1718824036.204:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f5bbf29 code=0x7ffc0000 [ 278.937158][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.978365][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.012053][ T26] audit: type=1326 audit(1718824036.204:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9d1f5bbf29 code=0x7ffc0000 [ 279.027079][T10326] device veth0_vlan entered promiscuous mode [ 279.073650][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.081915][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.126014][ T26] audit: type=1326 audit(1718824036.204:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1f5bbf29 code=0x7ffc0000 [ 279.138355][T10326] device veth1_vlan entered promiscuous mode [ 279.245821][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.247912][ T26] audit: type=1326 audit(1718824036.204:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9d1f5bbf29 code=0x7ffc0000 [ 279.302758][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.383317][T10582] loop2: detected capacity change from 0 to 512 [ 279.441594][T10582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 279.515760][T10582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 279.603037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.612892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.623594][T10582] EXT4-fs (loop2): 1 truncate cleaned up [ 279.674724][T10326] device veth0_macvtap entered promiscuous mode [ 279.681950][T10582] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.959520][T10326] device veth1_macvtap entered promiscuous mode [ 279.996119][T10582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz-executor.2: bg 0: bad block bitmap checksum [ 280.089211][T10598] loop3: detected capacity change from 0 to 1024 [ 280.111452][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:426: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 280.124718][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.205753][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.224955][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 280.291275][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.363941][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 0 [ 280.391023][T10598] hfsplus: bad catalog entry type [ 280.404893][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 280.431099][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.453548][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 1024 [ 280.653588][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 280.714360][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.726300][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.737375][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.749285][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.846005][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.891813][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.962013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.963848][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 2048 [ 281.112189][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 281.157017][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 3072 [ 281.161402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.191603][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 281.220451][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 4096 [ 281.386551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.597170][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 281.626259][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.045994][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 5120 [ 282.065995][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.076212][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 282.133908][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 6144 [ 282.149513][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.173812][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.184060][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.202019][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 282.228358][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.253802][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 7168 [ 282.254999][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.284210][ T6962] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 282.320557][ T6962] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor.2: path (unknown): directory fails checksum at offset 8192 [ 282.353547][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.372691][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.378096][ T4976] hfsplus: b-tree write err: -5, ino 4 [ 282.424401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.441058][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.456538][T10326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.479270][T10326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.505036][T10326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.514177][T10326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.545878][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.594769][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.601905][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.557826][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.571455][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.620200][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.787528][ T4057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.986475][ T4057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.005604][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.510286][T10670] loop3: detected capacity change from 0 to 1024 [ 284.795231][T10670] hfsplus: bad catalog entry type [ 285.612202][ T4939] hfsplus: b-tree write err: -5, ino 4 [ 286.978460][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.065636][T10697] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.072751][T10697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.549874][T10695] loop3: detected capacity change from 0 to 40427 [ 287.642338][T10695] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 287.692035][T10695] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.696509][T10689] chnl_net:caif_netlink_parms(): no params data found [ 287.730814][T10695] F2FS-fs (loop3): invalid crc value [ 287.800263][T10695] F2FS-fs (loop3): Found nat_bits in checkpoint [ 287.955616][T10695] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 287.983445][T10695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 287.993563][T10705] ptrace attach of "/root/syz-executor.1 exec"[9351] was attempted by "/root/syz-executor.1 exec"[10705] [ 288.135615][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.142713][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.153717][T10689] device bridge_slave_0 entered promiscuous mode [ 288.166384][T10699] chnl_net:caif_netlink_parms(): no params data found [ 288.211062][T10723] loop4: detected capacity change from 0 to 512 [ 288.227400][ T26] audit: type=1804 audit(1718824046.014:27): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2521430227/syzkaller.fIHbcd/11/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 288.256035][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.263113][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.320023][T10689] device bridge_slave_1 entered promiscuous mode [ 288.427997][T10723] EXT4-fs (loop4): orphan cleanup on readonly fs [ 288.452134][T10723] EXT4-fs error (device loop4): ext4_quota_enable:6387: comm syz-executor.4: inode #65535: comm syz-executor.4: iget: illegal inode # [ 288.516452][T10723] EXT4-fs error (device loop4): ext4_quota_enable:6390: comm syz-executor.4: Bad quota inode: 65535, type: 2 [ 288.542469][T10723] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-117, ino=65535). Please run e2fsck to fix. [ 288.565755][ T3569] Bluetooth: hci0: command 0x0406 tx timeout [ 288.587046][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.649994][T10723] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 288.704616][T10723] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.707827][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.744731][T10699] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.752840][T10699] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.761157][T10699] device bridge_slave_0 entered promiscuous mode [ 288.770846][T10723] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 288.855688][T10699] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.864283][ T1065] Bluetooth: hci1: command 0x0409 tx timeout [ 288.865122][T10699] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.905907][T10699] device bridge_slave_1 entered promiscuous mode [ 288.912326][T10723] EXT4-fs warning (device loop4): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 288.912326][T10723] [ 288.948943][T10689] team0: Port device team_slave_0 added [ 289.028203][T10689] team0: Port device team_slave_1 added [ 289.077443][T10699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.186164][ T1065] Bluetooth: hci2: command 0x0409 tx timeout [ 289.206815][T10699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.272764][T10735] syz-executor.4[10735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.272869][T10735] syz-executor.4[10735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.296493][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.350217][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.382094][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.411012][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.426342][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.478144][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.502047][T10739] loop4: detected capacity change from 0 to 1024 [ 289.516804][T10699] team0: Port device team_slave_0 added [ 289.560896][ T4938] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.601735][T10699] team0: Port device team_slave_1 added [ 289.660770][T10739] hfsplus: bad catalog entry type [ 289.688908][ T4938] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.145877][T10689] device hsr_slave_0 entered promiscuous mode [ 290.219648][T10689] device hsr_slave_1 entered promiscuous mode [ 290.305537][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.361273][T10689] Cannot create hsr debugfs directory [ 290.402185][ T4938] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.430288][ T4939] hfsplus: b-tree write err: -5, ino 4 [ 290.448554][T10699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.463843][T10699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.579562][T10699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.402518][ T3569] Bluetooth: hci1: command 0x041b tx timeout [ 291.412414][ T3569] Bluetooth: hci2: command 0x041b tx timeout [ 291.605762][T10699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.652036][T10699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.936676][T10699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.004158][ T4938] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.310469][T10699] device hsr_slave_0 entered promiscuous mode [ 292.333258][T10699] device hsr_slave_1 entered promiscuous mode [ 292.342296][T10699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.359168][T10699] Cannot create hsr debugfs directory [ 292.634710][ T3569] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 292.955414][ T3569] usb 5-1: Using ep0 maxpacket: 32 [ 293.137001][ T3569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 293.356955][ T3569] usb 5-1: can't read configurations, error -61 [ 293.472607][T10374] Bluetooth: hci2: command 0x040f tx timeout [ 293.493018][T10374] Bluetooth: hci1: command 0x040f tx timeout [ 293.569734][ T4938] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.614224][ T3569] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 293.707796][ T4938] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.883640][ T4938] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.904190][ T3569] usb 5-1: Using ep0 maxpacket: 32 [ 293.977282][ T4938] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.112186][ T3569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 294.131839][ T3569] usb 5-1: can't read configurations, error -61 [ 294.151657][ T3569] usb usb5-port1: attempt power cycle [ 294.583867][ T3569] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 294.694679][ T3569] usb 5-1: Using ep0 maxpacket: 32 [ 294.894048][ T3569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 294.927996][ T3569] usb 5-1: can't read configurations, error -61 [ 295.104041][ T3569] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 295.244078][ T3569] usb 5-1: device descriptor read/8, error -71 [ 295.417007][ T3569] usb usb5-port1: unable to enumerate USB device [ 296.203169][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 296.209356][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 296.638631][ T4938] device hsr_slave_0 left promiscuous mode [ 296.749660][ T4938] device hsr_slave_1 left promiscuous mode [ 296.883488][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.951843][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.072795][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.120455][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.177397][ T4938] device bridge_slave_1 left promiscuous mode [ 297.183611][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.199800][ T4938] device bridge_slave_0 left promiscuous mode [ 297.206798][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.308868][ T4938] device hsr_slave_0 left promiscuous mode [ 297.318907][ T4938] device hsr_slave_1 left promiscuous mode [ 297.326055][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.333477][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.347204][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.355529][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.384123][ T4938] device bridge_slave_1 left promiscuous mode [ 297.397860][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.414692][ T4938] device bridge_slave_0 left promiscuous mode [ 297.420905][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.501526][ T4938] device veth1_macvtap left promiscuous mode [ 297.539823][ T4938] device veth0_macvtap left promiscuous mode [ 297.702660][ T4938] device veth1_vlan left promiscuous mode [ 297.709331][ T4938] device veth0_vlan left promiscuous mode [ 298.401138][ T4938] device veth1_macvtap left promiscuous mode [ 298.409787][ T4938] device veth0_macvtap left promiscuous mode [ 298.428178][ T4938] device veth1_vlan left promiscuous mode [ 298.465510][ T4938] device veth0_vlan left promiscuous mode [ 299.047866][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 299.063432][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 299.077901][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.093518][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.172065][ T4938] bond0 (unregistering): Released all slaves [ 299.303222][ T4938] team0 (unregistering): Port device team_slave_1 removed [ 299.320119][ T4938] team0 (unregistering): Port device team_slave_0 removed [ 299.333644][ T4938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.355848][ T4938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.490656][ T4938] bond0 (unregistering): Released all slaves [ 299.591760][T10689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.611175][T10689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.621780][T10689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.663018][T10689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.807638][T10699] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.841044][T10699] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.863161][T10699] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.874368][T10699] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.949707][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.996359][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.006564][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.030090][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.049882][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.063046][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.078541][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.085667][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.135500][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.143633][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.160745][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.172669][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.179792][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.194208][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.209847][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.221072][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.237903][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.292586][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.301801][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.318853][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.329508][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.341816][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.361721][T10699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.381277][T10689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.417332][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.437021][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.460100][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.494944][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.509650][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.597146][T10699] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.633633][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.642505][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.680035][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.687212][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.721469][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.752918][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.767377][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.804417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.811598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.886299][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.912352][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.973146][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.992720][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.010886][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.047681][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.071108][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.103239][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.121942][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.153182][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.176166][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.192260][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.216748][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.241199][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.268726][T10699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.322941][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.336550][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.393003][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.410429][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.439466][T10689] device veth0_vlan entered promiscuous mode [ 301.456473][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.471057][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.498284][T10689] device veth1_vlan entered promiscuous mode [ 301.560404][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.577254][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.609067][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.618812][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.630239][T10689] device veth0_macvtap entered promiscuous mode [ 301.659105][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.692124][T10689] device veth1_macvtap entered promiscuous mode [ 301.718032][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.733271][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.744538][T10699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.761355][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.784823][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.800901][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.812236][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.833865][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.845423][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.857468][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.876340][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.886457][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.905607][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.927999][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.947507][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.970799][T10975] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 301.975659][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.000422][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.023540][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.040209][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.086066][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.102162][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.134574][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.143340][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.197473][T10689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.222297][T10689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.256836][T10689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.281167][T10689] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.397515][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.406482][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.417673][T10993] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 302.427520][T10993] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 10993, name: syz-executor.3 [ 302.436991][T10993] 1 lock held by syz-executor.3/10993: [ 302.438596][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.442470][T10993] #0: ffffffff8c9455d8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 302.459455][T10993] irq event stamp: 360 [ 302.463632][T10993] hardirqs last enabled at (359): [] _raw_spin_unlock_irqrestore+0x8b/0x130 [ 302.474070][T10993] hardirqs last disabled at (360): [] _raw_spin_lock_irq+0xa9/0x110 [ 302.483707][T10993] softirqs last enabled at (340): [] ipv6_setsockopt+0x2f1f/0x43a0 [ 302.493256][T10993] softirqs last disabled at (338): [] release_sock+0x2c/0x1c0 [ 302.502726][T10993] Preemption disabled at: [ 302.502735][T10993] [<0000000000000000>] 0x0 [ 302.511465][T10993] CPU: 1 PID: 10993 Comm: syz-executor.3 Not tainted 5.15.161-syzkaller #0 [ 302.520042][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 302.530101][T10993] Call Trace: [ 302.533370][T10993] [ 302.536399][T10993] dump_stack_lvl+0x1e3/0x2d0 [ 302.541078][T10993] ? ipv6_setsockopt+0x2f1f/0x43a0 [ 302.546286][T10993] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 302.552021][T10993] ? panic+0x860/0x860 [ 302.556114][T10993] ___might_sleep+0x547/0x6a0 [ 302.560799][T10993] ? __might_sleep+0xc0/0xc0 [ 302.565406][T10993] down_read+0x21/0x2e0 [ 302.569825][T10993] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 302.575286][T10993] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 302.580570][T10993] ? kernfs_find_ns+0x500/0x500 [ 302.585419][T10993] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 302.591570][T10993] cgroup_get_from_path+0x5c/0x2e0 [ 302.596678][T10993] cgroup_mt_check_v1+0x1a0/0x2b0 [ 302.601702][T10993] xt_check_match+0x363/0xa30 [ 302.606371][T10993] ? xt_find_match+0x6d/0x200 [ 302.611053][T10993] ? mutex_unlock+0x10/0x10 [ 302.615568][T10993] ? xt_check_proc_name+0x110/0x110 [ 302.620901][T10993] ? pcpu_alloc+0x10c9/0x17c0 [ 302.625598][T10993] ? xt_find_match+0x1cf/0x200 [ 302.630444][T10993] translate_table+0x1669/0x2320 [ 302.635394][T10993] ? ip6t_register_table+0x7b0/0x7b0 [ 302.640671][T10993] ? __might_fault+0xb8/0x110 [ 302.645340][T10993] ? __lock_acquire+0x1ff0/0x1ff0 [ 302.650366][T10993] ? _copy_from_user+0x10f/0x170 [ 302.655296][T10993] ? copy_from_sockptr_offset+0x6b/0xa0 [ 302.660835][T10993] do_ip6t_set_ctl+0xdcb/0x1220 [ 302.665681][T10993] ? rcu_lock_release+0x20/0x20 [ 302.670535][T10993] ? ip6t_unregister_table_exit+0x1f0/0x1f0 [ 302.676416][T10993] ? __lock_acquire+0x1ff0/0x1ff0 [ 302.681435][T10993] ? __mutex_unlock_slowpath+0x218/0x750 [ 302.687054][T10993] ? nf_setsockopt+0x38/0x2b0 [ 302.691720][T10993] ? print_irqtrace_events+0x210/0x210 [ 302.697167][T10993] ? mutex_unlock+0x10/0x10 [ 302.701656][T10993] ? lockdep_hardirqs_on+0x94/0x130 [ 302.706842][T10993] ? __local_bh_enable_ip+0x164/0x1f0 [ 302.712203][T10993] nf_setsockopt+0x28a/0x2b0 [ 302.716800][T10993] ipv6_setsockopt+0x2f9a/0x43a0 [ 302.721724][T10993] ? schedule_preempt_disabled+0x20/0x20 [ 302.727350][T10993] ? ipv6_update_options+0x3f0/0x3f0 [ 302.732618][T10993] ? trace_hardirqs_on+0x30/0x80 [ 302.737560][T10993] ? try_to_wake_up+0x8a8/0x1300 [ 302.742495][T10993] ? validate_chain+0x112/0x5930 [ 302.747417][T10993] ? validate_chain+0x112/0x5930 [ 302.752341][T10993] ? __lock_acquire+0x1ff0/0x1ff0 [ 302.757364][T10993] ? plist_check_list+0x20d/0x220 [ 302.762374][T10993] ? plist_del+0x3ed/0x410 [ 302.766781][T10993] ? wake_up_q+0x9f/0xd0 [ 302.771011][T10993] ? reacquire_held_locks+0x660/0x660 [ 302.776373][T10993] ? futex_wake+0x607/0x750 [ 302.780866][T10993] ? reacquire_held_locks+0x660/0x660 [ 302.786222][T10993] ? mark_lock+0x98/0x340 [ 302.790532][T10993] ? aa_label_sk_perm+0x453/0x630 [ 302.795547][T10993] ? aa_sk_perm+0xa30/0xa30 [ 302.800050][T10993] ? __might_sleep+0xc0/0xc0 [ 302.804629][T10993] ? __lock_acquire+0x1295/0x1ff0 [ 302.809644][T10993] ? aa_sk_perm+0x8fc/0xa30 [ 302.814139][T10993] ? aa_af_perm+0x350/0x350 [ 302.818632][T10993] ? aa_sock_opt_perm+0x79/0x110 [ 302.823556][T10993] ? udpv6_setsockopt+0x77/0xa0 [ 302.828395][T10993] ? sock_common_recvmsg+0x240/0x240 [ 302.833669][T10993] __sys_setsockopt+0x57e/0x990 [ 302.838512][T10993] ? __ia32_sys_recv+0xb0/0xb0 [ 302.843268][T10993] ? syscall_enter_from_user_mode+0x2e/0x240 [ 302.849241][T10993] __x64_sys_setsockopt+0xb1/0xc0 [ 302.854257][T10993] do_syscall_64+0x3b/0xb0 [ 302.858674][T10993] ? clear_bhb_loop+0x15/0x70 [ 302.863359][T10993] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.869266][T10993] RIP: 0033:0x7f32cb057f29 [ 302.873677][T10993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 302.893269][T10993] RSP: 002b:00007f32c9bd10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.901674][T10993] RAX: ffffffffffffffda RBX: 00007f32cb18ef80 RCX: 00007f32cb057f29 [ 302.909631][T10993] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 302.917601][T10993] RBP: 00007f32cb0c7074 R08: 0000000000001488 R09: 0000000000000000 [ 302.925557][T10993] R10: 00000000200028c0 R11: 0000000000000246 R12: 0000000000000000 [ 302.933513][T10993] R13: 000000000000000b R14: 00007f32cb18ef80 R15: 00007ffc42f32ac8 [ 302.941483][T10993] [ 302.944492][T10993] [ 302.946795][T10993] ============================= [ 302.951615][T10993] [ BUG: Invalid wait context ] [ 302.956451][T10993] 5.15.161-syzkaller #0 Tainted: G W [ 302.963013][T10993] ----------------------------- [ 302.967843][T10993] syz-executor.3/10993 is trying to lock: [ 302.973537][T10993] ffffffff8ca52350 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2b0 [ 302.983008][T10993] other info that might help us debug this: [ 302.988874][T10993] context-{4:4} [ 302.992309][T10993] 1 lock held by syz-executor.3/10993: [ 302.997741][T10993] #0: ffffffff8c9455d8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 303.007468][T10993] stack backtrace: [ 303.011166][T10993] CPU: 1 PID: 10993 Comm: syz-executor.3 Tainted: G W 5.15.161-syzkaller #0 [ 303.021131][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 303.031185][T10993] Call Trace: [ 303.034453][T10993] [ 303.037389][T10993] dump_stack_lvl+0x1e3/0x2d0 [ 303.042070][T10993] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 303.047823][T10993] ? panic+0x860/0x860 [ 303.051890][T10993] __lock_acquire+0x14f5/0x1ff0 [ 303.056733][T10993] lock_acquire+0x1db/0x4f0 [ 303.061222][T10993] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 303.066672][T10993] ? read_lock_is_recursive+0x10/0x10 [ 303.072030][T10993] ? __might_sleep+0xc0/0xc0 [ 303.076615][T10993] down_read+0x45/0x2e0 [ 303.080762][T10993] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 303.086207][T10993] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 303.091653][T10993] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 303.096923][T10993] ? kernfs_find_ns+0x500/0x500 [ 303.101760][T10993] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 303.107899][T10993] cgroup_get_from_path+0x5c/0x2e0 [ 303.112996][T10993] cgroup_mt_check_v1+0x1a0/0x2b0 [ 303.118018][T10993] xt_check_match+0x363/0xa30 [ 303.122694][T10993] ? xt_find_match+0x6d/0x200 [ 303.127362][T10993] ? mutex_unlock+0x10/0x10 [ 303.131937][T10993] ? xt_check_proc_name+0x110/0x110 [ 303.137120][T10993] ? pcpu_alloc+0x10c9/0x17c0 [ 303.141781][T10993] ? xt_find_match+0x1cf/0x200 [ 303.146528][T10993] translate_table+0x1669/0x2320 [ 303.151508][T10993] ? ip6t_register_table+0x7b0/0x7b0 [ 303.156777][T10993] ? __might_fault+0xb8/0x110 [ 303.161439][T10993] ? __lock_acquire+0x1ff0/0x1ff0 [ 303.166450][T10993] ? _copy_from_user+0x10f/0x170 [ 303.171369][T10993] ? copy_from_sockptr_offset+0x6b/0xa0 [ 303.176898][T10993] do_ip6t_set_ctl+0xdcb/0x1220 [ 303.181753][T10993] ? rcu_lock_release+0x20/0x20 [ 303.186587][T10993] ? ip6t_unregister_table_exit+0x1f0/0x1f0 [ 303.192492][T10993] ? __lock_acquire+0x1ff0/0x1ff0 [ 303.197521][T10993] ? __mutex_unlock_slowpath+0x218/0x750 [ 303.203141][T10993] ? nf_setsockopt+0x38/0x2b0 [ 303.207802][T10993] ? print_irqtrace_events+0x210/0x210 [ 303.213247][T10993] ? mutex_unlock+0x10/0x10 [ 303.217734][T10993] ? lockdep_hardirqs_on+0x94/0x130 [ 303.222917][T10993] ? __local_bh_enable_ip+0x164/0x1f0 [ 303.228279][T10993] nf_setsockopt+0x28a/0x2b0 [ 303.232858][T10993] ipv6_setsockopt+0x2f9a/0x43a0 [ 303.237778][T10993] ? schedule_preempt_disabled+0x20/0x20 [ 303.243398][T10993] ? ipv6_update_options+0x3f0/0x3f0 [ 303.248666][T10993] ? trace_hardirqs_on+0x30/0x80 [ 303.253592][T10993] ? try_to_wake_up+0x8a8/0x1300 [ 303.258517][T10993] ? validate_chain+0x112/0x5930 [ 303.263522][T10993] ? validate_chain+0x112/0x5930 [ 303.268572][T10993] ? __lock_acquire+0x1ff0/0x1ff0 [ 303.273591][T10993] ? plist_check_list+0x20d/0x220 [ 303.278607][T10993] ? plist_del+0x3ed/0x410 [ 303.283020][T10993] ? wake_up_q+0x9f/0xd0 [ 303.287359][T10993] ? reacquire_held_locks+0x660/0x660 [ 303.292714][T10993] ? futex_wake+0x607/0x750 [ 303.297204][T10993] ? reacquire_held_locks+0x660/0x660 [ 303.302561][T10993] ? mark_lock+0x98/0x340 [ 303.306872][T10993] ? aa_label_sk_perm+0x453/0x630 [ 303.311886][T10993] ? aa_sk_perm+0xa30/0xa30 [ 303.316381][T10993] ? __might_sleep+0xc0/0xc0 [ 303.320965][T10993] ? __lock_acquire+0x1295/0x1ff0 [ 303.325984][T10993] ? aa_sk_perm+0x8fc/0xa30 [ 303.330476][T10993] ? aa_af_perm+0x350/0x350 [ 303.334964][T10993] ? aa_sock_opt_perm+0x79/0x110 [ 303.339886][T10993] ? udpv6_setsockopt+0x77/0xa0 [ 303.344721][T10993] ? sock_common_recvmsg+0x240/0x240 [ 303.350011][T10993] __sys_setsockopt+0x57e/0x990 [ 303.354865][T10993] ? __ia32_sys_recv+0xb0/0xb0 [ 303.359619][T10993] ? syscall_enter_from_user_mode+0x2e/0x240 [ 303.365585][T10993] __x64_sys_setsockopt+0xb1/0xc0 [ 303.370593][T10993] do_syscall_64+0x3b/0xb0 [ 303.374991][T10993] ? clear_bhb_loop+0x15/0x70 [ 303.379665][T10993] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.385551][T10993] RIP: 0033:0x7f32cb057f29 [ 303.389949][T10993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 303.409539][T10993] RSP: 002b:00007f32c9bd10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.417935][T10993] RAX: ffffffffffffffda RBX: 00007f32cb18ef80 RCX: 00007f32cb057f29 [ 303.425890][T10993] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 303.433942][T10993] RBP: 00007f32cb0c7074 R08: 0000000000001488 R09: 0000000000000000 [ 303.441914][T10993] R10: 00000000200028c0 R11: 0000000000000246 R12: 0000000000000000 2024/06/19 19:07:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 303.449875][T10993] R13: 000000000000000b R14: 00007f32cb18ef80 R15: 00007ffc42f32ac8 [ 303.457935][T10993] [ 303.485089][T10993] xt_cgroup: invalid path, errno=-2 [ 303.548576][T10374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready