last executing test programs: 23.617657085s ago: executing program 1 (id=720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 13.023104033s ago: executing program 1 (id=721): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000000680)={[{@norecovery}, {@stripe={'stripe', 0x3d, 0x2}}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}, {@user_xattr}, {@test_dummy_encryption_v1}]}, 0x1, 0x612, &(0x7f0000000a00)="$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") open(0x0, 0x8000, 0x112) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000380)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0x6}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000400)=[0x10001, 0x2a]) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000740)={[], [{@euid_gt}, {@fowner_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_gt}, {@fowner_lt}]}, 0x0, 0x790, &(0x7f0000006a80)="$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") gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001440)="e430715d8da05e2908c74fff3010da2933bb3e8229a42bec8042d7f7f905231e193ea4ce928d2aa82907d3a062950155294e89d56d7e345e9cf7c77fcd9c8d1c47d5e93c102308543cc6eb5e4b3fcc7c33229afe92ae1aa4ed576c50e924d4ca3e8bd66dbb7bd41ef30709f55b477a7c2f28532a6d9d54940b160bb594fec1b5f563b62e71759a2b4d5111a958d5e3fab511e4bf6748952c6679fa17e6e243ae05929e7b2ed360b71ec5e1530eaf0a990ac0aa9adacbfed591b65993fa2bb9e27d31816994ece7adb0ce797c9a0da587627a045dec76c8d70d956aa459d0c90c041009a4ae1a354d76537290164bbc0c3d16e8657440166f51db90dc5ba6898bc856f300ca3ce8906ffd179a1dcf7ce7a135cce49b8686acc2bf70759ebc8e3d1ca91e8f5081ee4864378fd6533066e3cede853a54815e93776ab55edd1abebdeee4e89eeb673d21e5060ded0990efdb9ae8d2034ad6d7d8aee268e7d0bad0e146187a7a7d92bc373212c357425edb3880186dc84777e9142586c008f3aeb8537d35bf7b324ba4a43b3ce8a57dc2a91831aa1ff14864c8ef4111f7070eb7ece234842b6c3e29be579b0e0ad310455d6f55b76bd67b0cc6dff38953bc33f28a4200f9250e5b17606a2936d83698e3e15351178d46baf3e8f14365d4e14b117f05c97dc40c3efc300c2b32308339559a331a5f75b2d95b23bc29a67e880c6c05b705348791c3750f685de29e7e0bdf3fc50d3903a26c17fc0fb79e553bc2f75b8df3ec00e14347a9e4b4cb72e52234e05f8c50611b44052242cd2d4d4c9c1d695c83066ccb1fd43e0a6ccbdf36ebc5f50532b0bfe4aad077af7e72a66c1711583edbcbf9ad2d7e92155bd88793d350fda8d83f1d9d9997d06105c4a0edff6c66afd9e3ae6f1e71c673e99305f46790a680d34bd24c9779208de14b5ff1fab98994777ceaec6e7b8663eed4bf11acfb0f59331ea8ff367db495c4578adfe9044d6665b1fee653aa341a0a6026a7503e0895f794f8e7c4507a16989aac7362e635f3fda9ec70417004ccb0abae6a0eb28a7a1cb06007bb438fcf875906913a581b7b86280e7f4ce41bce5604727d5d9d235e4bff5f407341a790d1f1cf852cbcaeb942a846a82acf92016ca4141d12d08dc6324dbcc9ee4757b38963e5a832998752efa29c1d27811b0ba7426d64bbeef9fa39deacf556e72b310b3707c8c75bc20c9f4f803bcb4cde08a8289a2820dfb63373a7b09433b32a54d5cb4e2650618e1951f7cf6d1f87df3598959af41d654f358d5e1e03f07d053ddd9ff2e20f254e9464bce9be94d59a0694ee396981e995237d498034c24554354656bb8fcc7cdd5671ad992691f2b4e6a788aecc3ec53dce7fd27a465d3dbf5aa1ca681a56099285cbb60f2b3268f5b653813f29360bff669d1d9b34d4095f46dda7b2bc21fa95bfff471c9e30799b2add922c16d698c87132f2ff8a8c13c30e57a9c0a56fe7df2358710dbb58d3abd0c7aa2867690e10ffd0cfef019c12c0d6664185602e92d55744f65afbc61f5482e5bae61ffecccca2b1655575784a3d45b226ca7ad0c1a5fe2fc070706a66508813a9b513a70720d046a3f2ed53c85b95a6fd645d1f7c6da91f7389f3dbdc98df2047b0705a30c11a6ab312147342c9ad62e6e1371287c2d23bf92a3dd82e877208bdd6dda7052a804523a0938e0c8419793b5a507bda2870ee76f7adb2555baf0ecdea8fe0ca24b6958f4b32bd6253baaa4875ae38a57416322e4298b824b0a9eda6bfd0aafd8966d19d03a7a453f6d602b3723ae3bfa00700000009b05b6d4d1b9db95fb83154c9dea846521be40f60826871151b24fe2d2231d85334c02dcd6f7e5111e4787dd6b75158d10cd2ea446b731d8a4e9e010da9bd403071a1de708115ab9313b90cf207a4fd153f56efdcdbec4b2178194853cbc0e4a15a9419944924a42717f420f1fe8f01e3b111f62179e22fe2cf56c063788d4c1cbce6c9c83abb1a762ead0e9ff70900783b3290214206f0e209e283b1bd06d139968e4e71efd04b9d250b82fbb1e8ef8125036093a910859d386a12cad0c65f6cdf6c146c4214637b30310d9b189f0b2a61dda9307b5cf43bf16fe476ad64fd6aba9d97ec4f453c931488da0175d0323215bd618e49df89cff5f891ee22ba5b987c3f598ac53b1cf42378e21dc064bccc4f0590b3a4d62c86db9687c67677ced844d0cbb6e83034afda58f27d009c783690f41bcf98d898a71a76fe488dc77c8a3a02893ec5ab9d53964d059e2b44f21439d1e7bc1834d2cd8ea9790b3923422e8fda81cd6e070322b9418b7a46ca4a71b41da3703d09ca140ff71778620b4b59b75de2becca14a99f0df569133678ee82f7cbd3009bf1b49080304879651d804978fb575db2826eeafd6840b17137c4984d4d30098ba4a1c5ecb09b1bc22585ae7758c733d5f232da4593a586dc2b3b3343b02ba2aa67183f89dda2d0fa192e707f9bcca782ccc4f6bb28a4e29bf7870ad844afad3307c4e1bd65b16fb9f0e0a619d30694b1fbd30d42079d712c24deaa40159d3c6208c97ce4be9d194b7116e21aab49e818e660d50004c1d56c2aa8c3b988a76ff5ede6d544e6ea4ac4235305a419d087558a843a4a4dccfe6916f21dd30d98bf138e5800300000026344ea26fa71e0259d2938affe37257b380765e139e3b0335df1d1e46b76eadac1f1e7f31e2eb12ef8e1bae8c8ccecfcabadd582ca2a14e31ea2c9837f1edff4e739700890ded3e45b5532f0315f50c2b9467175a876b906227499e07f72950f5fbb4d6de9d681d253ce262107ebc0740be050a6cdd9706566c41f38365bdb2e5b9de7099fe033c75443201484b1da0313b3dd10a4c1ace1a971bfed0680fd631ee644855fbf80efefbf53acb1ecda25a9dd20dfeea20330ec130d979d1bdf69be6eb499e722f2d56b82d9be7299cbdc8dbe702709fe1724ccbdb30fa75c9577d3476f981532d6429d384d9bb3cf2f3f62f50e474de754aeebccfe7e8fe279e3c3693ff8a4229eb6137ba9fc70e2c09f9f553834de2019da7005ac2d986586f2086aae9ce8259bb2ede5524336a8ff77638356f4a2455ae734db183eb873635258bd55b964645185ab5e067f9ce3dc2e63d9018444087d1d170ca06731783e2d87c212f2f6ec2f7f2db54da98654903df9372701b3f6c69f4820ea626ef50f25927f71f138c17bd674e9c63a8a10531d3daf6f01a74a10ded572e0dfc918e26a336c2d323e250b15ecf0df727f656beadb6247b5bd2447de2d2fc8df4153b2c6d644f8e2f574407a99b356d00000000000000000000faf6f368a6af9ea9fe994964354145e9cf943f97cb84c60b7d59d03d2a8cf7069a7ed720a72188810c645dca89e098df0b4fbf", 0x969}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x304}, "2d5fe89b4c65d0fd", "313a19ff4c7d278bf34b54168b154d15", '}[\x00', "41d978cbf4bf3b5d"}, 0x28) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8000, &(0x7f0000000600)=ANY=[], 0xbe, 0x30b, &(0x7f0000001040)="$eJzs3c1rImccwPGfL1FjSPRQCm0peWgv7WVI7L1USgKlQksaS18gMIljK05VZiTFUBr3tNf9N1ZyzC2wm/0Dctnbnvay7MXLwl6E3ewszoxEE5OoG19Cvh8Iz8955jdvj4bfI8zY/O3BP8W8reX1qgRjSoIidTkVSbajbgEJeE3Eex3zmrp8vfD62edKRNKZzNqGUuvpzW9SSqml5Uf//nfwxXF14dfDpaOonCS3mq9SL04+Pvmk+W7z74KtCrYqlatKV9vl51V92zRUrmAXNaV+Ng3dNlShZBuW11+u+ruVSqWm9FJuMV6xDNtWeqmmikZNVcuqatWU/pdeKClN09RiXO6O1rLbVIbNyzY2NvT0iDvdGTEPN+74yl7L6nx4nji9PdnG+I4JAADMqr71f6u3/g/4bbC7/vfVpd6u/3/5/Y8fB6j/jyKX1P/l9j6urP/d+UHeLA9a/0cnfCFnX+ziomwjNHD9H7nxA8IYzF9cZM2LNA7k7BN978+DFTeg/gcAAAAAAAAAAAAAAAAAAAAA4DZoOU7CcSQo4iSC0o69v6h/w0jn9bSPE+PR8se30zpOuD3qjP8d0XXjXkzEvL+b3c16rdefzktBTDFkRRLy1n0/+Lx4/YfMWkC5kvLY3Pfz93ezod78VUlIsn/+qpevevPnJN6dn5KEfNQ/P9U3PyJffdmVr0lCnu5IWUzJue/rs/z/V5X6/qfMufx5yfW5Yw4AAAAAgNtI8+fOEek/f9fcFZru/H6rp9/LH+T7gZW+8/OwfBqe7rkDAAAAAHBX2LW9om6ahnVt8NDPuHbll/6KA2/5Q4O5Ic5iuCAwti0PFXzXufRnXZ1nMg+/Qf/rmf0ZOK/ZCSJXrBOWaPeVt+KXbmcp5I/KYDuVvWLUfypze8mpc26dbw8/e9M9cKFRhnvkYKL/hgAAAABMgFvrO/xYDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0zSJx4lN+xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAWfE+AAD//8dpFNU=") setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) 12.890484786s ago: executing program 4 (id=726): memfd_create(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x10, 0x98, 0x4}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x30}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) 12.826906428s ago: executing program 4 (id=728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) close(r0) 12.797582178s ago: executing program 2 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) setgroups(0x0, 0x0) getgroups(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, 0x5405, 0x0, 0x0) 12.415958458s ago: executing program 4 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc03, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f00000008c0)=']', 0x1, 0x40000, &(0x7f0000000900)={0x11, 0x15, 0x0, 0x1, 0x2}, 0x14) 12.090933475s ago: executing program 1 (id=733): syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000002c0)='./bus\x00', 0x1014494, &(0x7f0000000300)=ANY=[], 0xfe, 0xc24, &(0x7f0000000340)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) getdents64(r1, 0x0, 0x0) 11.991716398s ago: executing program 3 (id=734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000d80)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0x30, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)='\'', 0x1}], 0x1}, 0x20004014) 11.972572129s ago: executing program 1 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002240)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=@newtclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) 11.92066725s ago: executing program 2 (id=736): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0x82, 0x57b3, 0x3, 0x9}, 0x10) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000100)=""/17, 0x11, 0x40000020, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x40000000000007f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x3467028987bc7b9, 0x9200000000000000) 11.770530973s ago: executing program 2 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 9.921052598s ago: executing program 0 (id=738): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@rodir}, {@uni_xlate}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@numtail}, {@utf8no}, {@utf8no}]}, 0x3, 0x29e, &(0x7f0000000800)="$eJzs3c1qa1UUAOB1mn8dJANHItwDOnB0ufUJWuQKYkFQIqgDLd5ckCRcaCHQKsaOfAKfQPBtnIgv4AMoztqBeOT0JGnSnqSmlqTo9026utZe2ftk79JOsvv5a8P+sxfHz8++/jWazSR29mIvLpLoxE5MfRulfvm9PA8APHAXWRZ/ZIVGkTpZHFGL8u+rOxtZIABw7+Z//297LQDAZnz48Sfv7R8cPP0gTZsRw+9G3SSKr0V9/3l8GYPoxZNox58R2UwRv/PuwdOoprlOvDEcj7p55/Czn86LPyf2f4u47N+NdnTK+3fTwlz/eNStxUuT+fcG0Xv/h2jHK+X9b5X0R7ceb74+t/7H0Y6fv4gXMYhnk2ef9n+zm6ZvZ9+ff/Vpns37k/Go25iNm4yubHhrAAAAAAAAAAAAAAAAAAAAAAD4D3ucznQW79+ZXvxfFJuT8Qv1FfcDjefu53mSpmmWXO+vxqvVqG7ruQEAAAAAAAAAAAAAAAAAAOAhOT457R8OBr2jNYKPbpYqsZCZfqy/pD3+Wsw0ImKt2ReCR+t2RWWytEEScW1MPSJWtNeicdl5+1yV5aX8BW6UWvl6ekdJNfqHP2Z325TrQTLLtOZLj6KYK8+0imAu828nHTTjMpierv5hctvmNssOybKg8s/Xk5Ucv+Xt9bLTmysZ3Foxe/3lO711WXtJKYmI2uzNXP06tXvZwaufFAAAAAAAAAAAAAAAAAAAYMOuPvRbUjzbwoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAuu/v//GsF40nyjlLUjTk77WSXPVGNS2vIjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wdwAAAP//h9dhCg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100)=0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 9.813663731s ago: executing program 0 (id=739): memfd_create(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x10, 0x98, 0x4}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x30}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) 1.040043584s ago: executing program 0 (id=740): syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x336, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x300, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.038885884s ago: executing program 0 (id=741): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0xcde, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 995.219496ms ago: executing program 4 (id=742): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4208, r0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) r5 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) 994.224845ms ago: executing program 2 (id=743): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000000680)={[{@norecovery}, {@stripe={'stripe', 0x3d, 0x2}}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}, {@user_xattr}, {@test_dummy_encryption_v1}]}, 0x1, 0x612, &(0x7f0000000a00)="$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") open(0x0, 0x8000, 0x112) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000380)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0x6}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000400)=[0x10001, 0x2a]) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000740)={[], [{@euid_gt}, {@fowner_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_gt}, {@fowner_lt}]}, 0x0, 0x790, &(0x7f0000006a80)="$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") gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001440)="e430715d8da05e2908c74fff3010da2933bb3e8229a42bec8042d7f7f905231e193ea4ce928d2aa82907d3a062950155294e89d56d7e345e9cf7c77fcd9c8d1c47d5e93c102308543cc6eb5e4b3fcc7c33229afe92ae1aa4ed576c50e924d4ca3e8bd66dbb7bd41ef30709f55b477a7c2f28532a6d9d54940b160bb594fec1b5f563b62e71759a2b4d5111a958d5e3fab511e4bf6748952c6679fa17e6e243ae05929e7b2ed360b71ec5e1530eaf0a990ac0aa9adacbfed591b65993fa2bb9e27d31816994ece7adb0ce797c9a0da587627a045dec76c8d70d956aa459d0c90c041009a4ae1a354d76537290164bbc0c3d16e8657440166f51db90dc5ba6898bc856f300ca3ce8906ffd179a1dcf7ce7a135cce49b8686acc2bf70759ebc8e3d1ca91e8f5081ee4864378fd6533066e3cede853a54815e93776ab55edd1abebdeee4e89eeb673d21e5060ded0990efdb9ae8d2034ad6d7d8aee268e7d0bad0e146187a7a7d92bc373212c357425edb3880186dc84777e9142586c008f3aeb8537d35bf7b324ba4a43b3ce8a57dc2a91831aa1ff14864c8ef4111f7070eb7ece234842b6c3e29be579b0e0ad310455d6f55b76bd67b0cc6dff38953bc33f28a4200f9250e5b17606a2936d83698e3e15351178d46baf3e8f14365d4e14b117f05c97dc40c3efc300c2b32308339559a331a5f75b2d95b23bc29a67e880c6c05b705348791c3750f685de29e7e0bdf3fc50d3903a26c17fc0fb79e553bc2f75b8df3ec00e14347a9e4b4cb72e52234e05f8c50611b44052242cd2d4d4c9c1d695c83066ccb1fd43e0a6ccbdf36ebc5f50532b0bfe4aad077af7e72a66c1711583edbcbf9ad2d7e92155bd88793d350fda8d83f1d9d9997d06105c4a0edff6c66afd9e3ae6f1e71c673e99305f46790a680d34bd24c9779208de14b5ff1fab98994777ceaec6e7b8663eed4bf11acfb0f59331ea8ff367db495c4578adfe9044d6665b1fee653aa341a0a6026a7503e0895f794f8e7c4507a16989aac7362e635f3fda9ec70417004ccb0abae6a0eb28a7a1cb06007bb438fcf875906913a581b7b86280e7f4ce41bce5604727d5d9d235e4bff5f407341a790d1f1cf852cbcaeb942a846a82acf92016ca4141d12d08dc6324dbcc9ee4757b38963e5a832998752efa29c1d27811b0ba7426d64bbeef9fa39deacf556e72b310b3707c8c75bc20c9f4f803bcb4cde08a8289a2820dfb63373a7b09433b32a54d5cb4e2650618e1951f7cf6d1f87df3598959af41d654f358d5e1e03f07d053ddd9ff2e20f254e9464bce9be94d59a0694ee396981e995237d498034c24554354656bb8fcc7cdd5671ad992691f2b4e6a788aecc3ec53dce7fd27a465d3dbf5aa1ca681a56099285cbb60f2b3268f5b653813f29360bff669d1d9b34d4095f46dda7b2bc21fa95bfff471c9e30799b2add922c16d698c87132f2ff8a8c13c30e57a9c0a56fe7df2358710dbb58d3abd0c7aa2867690e10ffd0cfef019c12c0d6664185602e92d55744f65afbc61f5482e5bae61ffecccca2b1655575784a3d45b226ca7ad0c1a5fe2fc070706a66508813a9b513a70720d046a3f2ed53c85b95a6fd645d1f7c6da91f7389f3dbdc98df2047b0705a30c11a6ab312147342c9ad62e6e1371287c2d23bf92a3dd82e877208bdd6dda7052a804523a0938e0c8419793b5a507bda2870ee76f7adb2555baf0ecdea8fe0ca24b6958f4b32bd6253baaa4875ae38a57416322e4298b824b0a9eda6bfd0aafd8966d19d03a7a453f6d602b3723ae3bfa00700000009b05b6d4d1b9db95fb83154c9dea846521be40f60826871151b24fe2d2231d85334c02dcd6f7e5111e4787dd6b75158d10cd2ea446b731d8a4e9e010da9bd403071a1de708115ab9313b90cf207a4fd153f56efdcdbec4b2178194853cbc0e4a15a9419944924a42717f420f1fe8f01e3b111f62179e22fe2cf56c063788d4c1cbce6c9c83abb1a762ead0e9ff70900783b3290214206f0e209e283b1bd06d139968e4e71efd04b9d250b82fbb1e8ef8125036093a910859d386a12cad0c65f6cdf6c146c4214637b30310d9b189f0b2a61dda9307b5cf43bf16fe476ad64fd6aba9d97ec4f453c931488da0175d0323215bd618e49df89cff5f891ee22ba5b987c3f598ac53b1cf42378e21dc064bccc4f0590b3a4d62c86db9687c67677ced844d0cbb6e83034afda58f27d009c783690f41bcf98d898a71a76fe488dc77c8a3a02893ec5ab9d53964d059e2b44f21439d1e7bc1834d2cd8ea9790b3923422e8fda81cd6e070322b9418b7a46ca4a71b41da3703d09ca140ff71778620b4b59b75de2becca14a99f0df569133678ee82f7cbd3009bf1b49080304879651d804978fb575db2826eeafd6840b17137c4984d4d30098ba4a1c5ecb09b1bc22585ae7758c733d5f232da4593a586dc2b3b3343b02ba2aa67183f89dda2d0fa192e707f9bcca782ccc4f6bb28a4e29bf7870ad844afad3307c4e1bd65b16fb9f0e0a619d30694b1fbd30d42079d712c24deaa40159d3c6208c97ce4be9d194b7116e21aab49e818e660d50004c1d56c2aa8c3b988a76ff5ede6d544e6ea4ac4235305a419d087558a843a4a4dccfe6916f21dd30d98bf138e5800300000026344ea26fa71e0259d2938affe37257b380765e139e3b0335df1d1e46b76eadac1f1e7f31e2eb12ef8e1bae8c8ccecfcabadd582ca2a14e31ea2c9837f1edff4e739700890ded3e45b5532f0315f50c2b9467175a876b906227499e07f72950f5fbb4d6de9d681d253ce262107ebc0740be050a6cdd9706566c41f38365bdb2e5b9de7099fe033c75443201484b1da0313b3dd10a4c1ace1a971bfed0680fd631ee644855fbf80efefbf53acb1ecda25a9dd20dfeea20330ec130d979d1bdf69be6eb499e722f2d56b82d9be7299cbdc8dbe702709fe1724ccbdb30fa75c9577d3476f981532d6429d384d9bb3cf2f3f62f50e474de754aeebccfe7e8fe279e3c3693ff8a4229eb6137ba9fc70e2c09f9f553834de2019da7005ac2d986586f2086aae9ce8259bb2ede5524336a8ff77638356f4a2455ae734db183eb873635258bd55b964645185ab5e067f9ce3dc2e63d9018444087d1d170ca06731783e2d87c212f2f6ec2f7f2db54da98654903df9372701b3f6c69f4820ea626ef50f25927f71f138c17bd674e9c63a8a10531d3daf6f01a74a10ded572e0dfc918e26a336c2d323e250b15ecf0df727f656beadb6247b5bd2447de2d2fc8df4153b2c6d644f8e2f574407a99b356d00000000000000000000faf6f368a6af9ea9fe994964354145e9cf943f97cb84c60b7d59d03d2a8cf7069a7ed720a72188810c645dca89e098df0b4fbf", 0x969}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x304}, "2d5fe89b4c65d0fd", "313a19ff4c7d278bf34b54168b154d15", '}[\x00', "41d978cbf4bf3b5d"}, 0x28) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8000, &(0x7f0000000600)=ANY=[], 0xbe, 0x30b, &(0x7f0000001040)="$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") setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) 993.872485ms ago: executing program 3 (id=744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 935.706137ms ago: executing program 1 (id=745): sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r1, &(0x7f00000010c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xd, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="b4000000000000007917b000000000002d000000000000009500740000000000"], &(0x7f0000001400)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001440)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x48) 914.238927ms ago: executing program 0 (id=746): syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000002c0)='./bus\x00', 0x1014494, &(0x7f0000000300)=ANY=[], 0xfe, 0xc24, &(0x7f0000000340)="$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") r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) getdents64(r1, 0x0, 0x0) 523.662657ms ago: executing program 3 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000000b40)={0x2020}, 0x2020) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000"], 0xffe) 436.999669ms ago: executing program 0 (id=748): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4620, @empty}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) 289.767703ms ago: executing program 3 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000002cc0), 0x56) sendmsg$kcm(r6, &(0x7f0000002d00)={&(0x7f0000002d40)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002e00)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 121.319837ms ago: executing program 2 (id=750): r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5801000010000500010000000000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB], 0xfffffffffffffe3d}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@remote, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0xff, 0x200000004, 0x40000000007, 0xfffffffc, 0x100000000, 0x4, 0x57, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x8000, 0xef, 0x10000}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a00030002b51112d439000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 100.011777ms ago: executing program 3 (id=751): memfd_create(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x10, 0x98, 0x4}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x30}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) 64.417608ms ago: executing program 4 (id=752): syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x342, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x30c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd46"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 43.224919ms ago: executing program 3 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc03, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x1, 0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000008c0)=']', 0x1, 0x40000, &(0x7f0000000900)={0x11, 0x15, r3, 0x1, 0x2}, 0x14) 5.68711ms ago: executing program 4 (id=754): syz_read_part_table(0x5dd, &(0x7f0000000100)="$eJzs3D2IJEUYBuC3u6fnZ11RjBc8uEQ0uFhRuAv02MxAM0FDDS4yMJKdjUTUwEwzA03OQNZYMzEQIyMRFhMRc5MVWUv6b2YYFdEVRXgemK7q6q+q+uvqDmvC/1tpN9Wm+7Vtskzy3qpr+j7lviSnz99KFn3QcjjWqZM8e/fJp47T7g25TlKN42WsbyaYfDLLW3dvvzZ2qHKy6VtlnlmSWWkzT/LuTq9xqotqmdyfOqf/4JPgb5il9IuVeb7Kx/mlzEspZTlerTYvzI1u+Usp/TKvx3Wsrz7/PTldTfX5ULy+F3Jv27963X3VObk+NTfJ0eM3bj063eLb2x793a0ONimOrYdT37pvnHev850XD/am2yZVdvI7X22/ktIMYfvfDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/72HXn643pzc7I/VUG+Td5rd0HUeTHJ0WZJcW+aBMvi9UVd/Nu1yqnz0xOc/jwO99PXi1e/qH/JjkqbJ7cM2B5sOLwzF2Rt9MeuPR2n+arq/ceeynn/4/mdj6pOmewhfXP/mojSLoeV8vPLKY9uoalZfeX4AAAAAAAAAAAAAAAAAAADonOX42tN1nvn02yrPJXW/+b/fXv9TSVVNYVVSSjlf9EU5TFIn+bILPG53xyvV7tnNKh8sk7J485H+bwX6bf/r4dpJSfXv5Mgf+zUAAP//+rZhOg==") 1.50247ms ago: executing program 2 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000d80)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0x30, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)='\'', 0x1}], 0x1}, 0x20004014) 0s ago: executing program 1 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002240)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=@newtclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 30.364860][ T4317] cgroup: Unknown subsys name 'net' [ 30.579648][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.894080][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.608607][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.610429][ T4341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.612942][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.614598][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.616100][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.618082][ T4337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.620956][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.621527][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.622476][ T4338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.623534][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.624783][ T4338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.625959][ T4337] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.627773][ T4338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.628933][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.629771][ T4338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.631256][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.631966][ T4338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.633153][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.635387][ T4337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.638329][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.640401][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.647519][ T4339] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.648950][ T4339] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.650280][ T4339] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.656890][ T4337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.658605][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.664823][ T4337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.682075][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.683820][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.685502][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.687318][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.688952][ T4331] rdma_rxe: rxe_register_device failed with error -23 [ 31.690306][ T4331] rdma_rxe: failed to add rxe_eth0 [ 31.691774][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.693173][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.698736][ T4329] rdma_rxe: rxe_register_device failed with error -23 [ 31.700020][ T4329] rdma_rxe: failed to add rxe_eth0 [ 31.703019][ T4330] rdma_rxe: rxe_register_device failed with error -23 [ 31.704201][ T4330] rdma_rxe: failed to add rxe_eth0 [ 31.718975][ T4339] infiniband rxe0: set active [ 31.723140][ T4339] infiniband rxe0: added rxe_eth0 [ 31.728153][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.744643][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.768931][ T4339] RDS/IB: rxe0: added [ 31.769808][ T4339] smc: adding ib device rxe0 with port count 1 [ 31.770912][ T4339] smc: ib device rxe0 port 1 has pnetid [ 31.777533][ T112] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.794837][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.826288][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 31.845612][ T4339] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.866464][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.872631][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.874212][ T4331] device bridge_slave_0 entered promiscuous mode [ 31.879109][ T4340] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.897324][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.898561][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.900318][ T4331] device bridge_slave_1 entered promiscuous mode [ 31.924994][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.938547][ T4339] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.941885][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.963119][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.995360][ T4331] team0: Port device team_slave_0 added [ 31.998191][ T4331] team0: Port device team_slave_1 added [ 32.043641][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.044872][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.052824][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.055340][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.056655][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.059356][ T4329] device bridge_slave_0 entered promiscuous mode [ 32.062538][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.063698][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.065613][ T4329] device bridge_slave_1 entered promiscuous mode [ 32.071625][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 32.075124][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.076210][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.082070][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.098481][ T3902] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.099711][ T3995] infiniband rxe0: set active [ 32.105622][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 32.110601][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.113130][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.121284][ T4329] team0: Port device team_slave_0 added [ 32.122356][ T112] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.159013][ T4331] device hsr_slave_0 entered promiscuous mode [ 32.207369][ T4331] device hsr_slave_1 entered promiscuous mode [ 32.258044][ T4329] team0: Port device team_slave_1 added [ 32.272691][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.273982][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.275485][ T4330] device bridge_slave_0 entered promiscuous mode [ 32.277784][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.279086][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.280927][ T4330] device bridge_slave_1 entered promiscuous mode [ 32.286695][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 32.299882][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.303690][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.309310][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.310535][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.315113][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.326943][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.328358][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.332474][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.335348][ T4330] team0: Port device team_slave_0 added [ 32.347872][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.349234][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.350845][ T4340] device bridge_slave_0 entered promiscuous mode [ 32.354622][ T4330] team0: Port device team_slave_1 added [ 32.358618][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.359809][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.361464][ T4340] device bridge_slave_1 entered promiscuous mode [ 32.381070][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.384069][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.385376][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.391063][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.438134][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.487329][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.527159][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.528498][ T4329] Cannot create hsr debugfs directory [ 32.531067][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.534779][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.535957][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.540546][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.542735][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.543894][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.545551][ T4339] device bridge_slave_0 entered promiscuous mode [ 32.556486][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.557807][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.559449][ T4339] device bridge_slave_1 entered promiscuous mode [ 32.565284][ T4340] team0: Port device team_slave_0 added [ 32.569913][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.578282][ T4340] team0: Port device team_slave_1 added [ 32.580085][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.638160][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.687209][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.727179][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.728492][ T4330] Cannot create hsr debugfs directory [ 32.739928][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.741088][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.745052][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.747911][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.749080][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.753302][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.757539][ T4339] team0: Port device team_slave_0 added [ 32.759593][ T4339] team0: Port device team_slave_1 added [ 32.773538][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.774785][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.780191][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.818213][ T4340] device hsr_slave_0 entered promiscuous mode [ 32.857567][ T4340] device hsr_slave_1 entered promiscuous mode [ 32.897202][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.898614][ T4340] Cannot create hsr debugfs directory [ 32.903476][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.904764][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.909681][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.998504][ T4339] device hsr_slave_0 entered promiscuous mode [ 33.047322][ T4339] device hsr_slave_1 entered promiscuous mode [ 33.097123][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.098506][ T4339] Cannot create hsr debugfs directory [ 33.116936][ T4331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.163690][ T4331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.216798][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.269657][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.309512][ T4331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.348120][ T4331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.398611][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.440342][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.502008][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.553838][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.580047][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.616043][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.677475][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 33.677479][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 33.677567][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 33.678733][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 33.694040][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.723683][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.757237][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 33.781258][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.825636][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.893100][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.898251][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.902240][ T4339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.934271][ T4339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.988430][ T4339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.033758][ T4339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.068164][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.070260][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.074888][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.078497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.080018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.082305][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.086649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.088611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.090493][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.091687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.093315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.100565][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.102331][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.103861][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.105018][ T1712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.106428][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.108779][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.110360][ T1712] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.111664][ T1712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.113161][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.125327][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.128765][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.130569][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.132260][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.133909][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.135046][ T1712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.138886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.145832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.148408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.150059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.154097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.155659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.161986][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.163647][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.172333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.173829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.175411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.177652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.179192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.182400][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.185756][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.190261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.191995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.193541][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.194862][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.196337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.198774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.200414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.202109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.212206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.213770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.215446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.217588][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.218752][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.220274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.222153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.223870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.225475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.227006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.229658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.231522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.233242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.234868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.240561][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.246443][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.250726][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.254035][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.258220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.259901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.261549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.263107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.264472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.266149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.269399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.271187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.272567][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.273657][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.275829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.281559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.283324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.291654][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.293284][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.294838][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.296094][ T1712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.298073][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.303654][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.305447][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.308864][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.310628][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.316735][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.323270][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.325092][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.326715][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.338314][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.340089][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.344484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.346057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.351850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.353492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.359421][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.369526][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.372890][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.374437][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.378967][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.382397][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.384021][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.385524][ T1712] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.386826][ T1712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.405368][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.417658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.419401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.421012][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.422245][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.423726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.425489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.430412][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.432533][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.438007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.439813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.441968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.443563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.446522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.458970][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.460314][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.461770][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.463214][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.464693][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.466819][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.470660][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.482656][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.489813][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.503307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.504745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.515985][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.520175][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.521942][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.530339][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.533985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.535341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.552901][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.554688][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.556340][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.560369][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.562632][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.564348][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.568298][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.577733][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.585076][ T4329] device veth0_vlan entered promiscuous mode [ 34.589950][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.591941][ T4331] device veth0_vlan entered promiscuous mode [ 34.593894][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.595468][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.600125][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.601521][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.602800][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.604295][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.622706][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.624557][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.628777][ T4329] device veth1_vlan entered promiscuous mode [ 34.633055][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.634640][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.636318][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.643920][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.645499][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.647743][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.654939][ T4331] device veth1_vlan entered promiscuous mode [ 34.656514][ T4330] device veth0_vlan entered promiscuous mode [ 34.678635][ T4330] device veth1_vlan entered promiscuous mode [ 34.685543][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.687394][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.688823][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.690288][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.692506][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.695171][ T4329] device veth0_macvtap entered promiscuous mode [ 34.699938][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.701517][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.703253][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.714453][ T4329] device veth1_macvtap entered promiscuous mode [ 34.716146][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.718122][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.719712][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.721234][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.722750][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.728311][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.730031][ T4339] device veth0_vlan entered promiscuous mode [ 34.733505][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.735073][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.736540][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.738392][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.739939][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.741541][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.744334][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.750029][ T4340] device veth0_vlan entered promiscuous mode [ 34.752296][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.753816][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.755483][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.758374][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.759994][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.764171][ T4330] device veth0_macvtap entered promiscuous mode [ 34.765760][ T4340] device veth1_vlan entered promiscuous mode [ 34.771588][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.773193][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.774755][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.776427][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.779214][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.780773][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.782239][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.783727][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.788022][ T4339] device veth1_vlan entered promiscuous mode [ 34.790529][ T4331] device veth0_macvtap entered promiscuous mode [ 34.795695][ T4330] device veth1_macvtap entered promiscuous mode [ 34.803816][ T4331] device veth1_macvtap entered promiscuous mode [ 34.824648][ T4340] device veth0_macvtap entered promiscuous mode [ 34.831732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.833450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.834914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.836479][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.839580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.841118][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.842793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.844349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.845886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.847842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.853415][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.855216][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.859917][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.863084][ T4340] device veth1_macvtap entered promiscuous mode [ 34.865496][ T4339] device veth0_macvtap entered promiscuous mode [ 34.868207][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.869802][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.871315][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.872950][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.875019][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.876392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.878133][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.879561][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.881091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.882806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.885435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.887044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.898390][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.900289][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.903577][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.904860][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.906599][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.909970][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.911395][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.913110][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.914819][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.919424][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.920966][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.922693][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.926986][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.929515][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.931181][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.933111][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.935565][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.937312][ T4339] device veth1_macvtap entered promiscuous mode [ 34.940569][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.942281][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.943912][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.945898][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.948789][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.950538][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.953081][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.954954][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.956531][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.962965][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.964605][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.966315][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.978202][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.979563][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.981390][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.982738][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.984179][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.985612][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.989343][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.002612][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.006430][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.010042][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.011873][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.013540][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.015302][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.016981][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.020278][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.022735][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.025804][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.029466][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.031117][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.032762][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.034308][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.035975][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.039180][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.043012][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.044641][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.046222][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.048976][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.061516][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.062983][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.064587][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.066191][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.070350][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.072102][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.073773][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.075459][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.078387][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.080207][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.081909][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.083631][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.086121][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.093351][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.094687][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.106663][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.108669][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.110431][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.115270][ T4339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.116896][ T4339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.119830][ T4339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.121309][ T4339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.132809][ T1609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.134202][ T1609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.148492][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.162119][ T4446] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.167418][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.168839][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.170346][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.198096][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.199624][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.201297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.203223][ T4449] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 35.209643][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 35.216772][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.219804][ T1609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.221160][ T1609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.223813][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.224087][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.238538][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.239947][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.249605][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.251006][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.256538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.258989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.267972][ T1609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.269316][ T1609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.270699][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.365954][ T27] audit: type=1326 audit(35.350:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.0.8" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd7a228 code=0x7ffc0000 [ 35.370689][ T27] audit: type=1326 audit(35.350:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.0.8" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8dd7a228 code=0x7ffc0000 [ 35.376432][ T27] audit: type=1326 audit(35.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.0.8" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd7a228 code=0x7ffc0000 [ 35.395397][ T27] audit: type=1326 audit(35.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.0.8" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffff8dd7a228 code=0x7ffc0000 [ 35.403154][ T27] audit: type=1326 audit(35.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.0.8" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd7a228 code=0x7ffc0000 [ 35.408006][ T27] audit: type=1326 audit(35.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.0.8" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=444 compat=0 ip=0xffff8dd7a228 code=0x7ffc0000 [ 35.411795][ T27] audit: type=1326 audit(35.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.0.8" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd7a228 code=0x7ffc0000 [ 35.450119][ T4468] Zero length message leads to an empty skb [ 35.602365][ T4486] capability: warning: `syz.4.19' uses 32-bit capabilities (legacy support in use) [ 35.615098][ T4488] input: syz1 as /devices/virtual/input/input2 [ 35.757387][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 35.758569][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 35.759649][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 35.760155][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 35.852357][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 35.902105][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.903742][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.906156][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.908086][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.969927][ T4523] nftables ruleset with unbound set [ 36.771166][ T4573] batman_adv: batadv0: Adding interface: syzkaller0 [ 36.772313][ T4573] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.778847][ T4573] batman_adv: batadv0: Interface activated: syzkaller0 [ 37.066192][ T4572] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 37.129218][ T4572] batman_adv: batadv0: Removing interface: syzkaller0 [ 37.326320][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.328863][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.696085][ T4627] binder: 4626:4627 tried to acquire reference to desc 0, got 1 instead [ 37.699626][ T4627] binder: 4626:4627 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.702249][ T4627] binder: 4627 RLIMIT_NICE not set [ 37.703335][ T4627] binder: 4627 RLIMIT_NICE not set [ 37.704653][ T4409] binder: release 4626:4627 transaction 5 out, still active [ 37.706051][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 37.722801][ T4409] binder: release 4626:4627 transaction 5 in, still active [ 37.724129][ T4409] binder: send failed reply for transaction 5, target dead [ 37.837442][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 37.837818][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 37.838630][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 37.839699][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 37.917554][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 37.975771][ T4648] device syzkaller0 entered promiscuous mode [ 38.042984][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.044879][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.058596][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.060496][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.101252][ T4662] netlink: 'syz.4.89': attribute type 3 has an invalid length. [ 38.230640][ T4664] device syzkaller0 entered promiscuous mode [ 39.917900][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 39.919107][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 39.920346][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 39.921439][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 39.997292][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 49.151286][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.182756][ T4729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.184357][ T4729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.319290][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.320992][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.356355][ T4759] bridge0: port 3(syz_tun) entered blocking state [ 49.364816][ T4759] bridge0: port 3(syz_tun) entered disabled state [ 49.374885][ T4759] device syz_tun entered promiscuous mode [ 49.376531][ T4759] bridge0: port 3(syz_tun) entered blocking state [ 49.377759][ T4759] bridge0: port 3(syz_tun) entered forwarding state [ 49.387536][ T4759] bridge0: port 4(ip6gretap0) entered blocking state [ 49.388902][ T4759] bridge0: port 4(ip6gretap0) entered disabled state [ 49.390871][ T4759] device ip6gretap0 entered promiscuous mode [ 49.392223][ T4759] bridge0: port 4(ip6gretap0) entered blocking state [ 49.393418][ T4759] bridge0: port 4(ip6gretap0) entered forwarding state [ 49.689035][ T4781] loop3: detected capacity change from 0 to 256 [ 50.115819][ T4790] netlink: 44 bytes leftover after parsing attributes in process `syz.2.124'. [ 50.165563][ T4799] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4330] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4799] [ 50.946819][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 51.323302][ T4837] jffs2: notice: (4837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.819751][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.821426][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.140702][ T4879] loop4: detected capacity change from 0 to 512 [ 52.144729][ T4879] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.178534][ T4879] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.155: bad orphan inode 13 [ 52.180940][ T4879] ext4_test_bit(bit=12, block=18) = 1 [ 52.182064][ T4879] is_bad_inode(inode)=0 [ 52.182869][ T4879] NEXT_ORPHAN(inode)=0 [ 52.183739][ T4879] max_ino=32 [ 52.184313][ T4879] i_nlink=1 [ 52.185065][ T4879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.187352][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.215450][ T4884] loop1: detected capacity change from 0 to 128 [ 52.222424][ T4884] ======================================================= [ 52.222424][ T4884] WARNING: The mand mount option has been deprecated and [ 52.222424][ T4884] and is ignored by this kernel. Remove the mand [ 52.222424][ T4884] option from the mount to silence this warning. [ 52.222424][ T4884] ======================================================= [ 52.252085][ T4884] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 52.260612][ T4884] hpfs: filesystem error: improperly stopped [ 52.261825][ T4884] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 52.263137][ T4884] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 52.444488][ T4889] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.527116][ T4889] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.155: bg 0: block 248: padding at end of block bitmap is not set [ 52.532640][ T4889] Quota error (device loop4): write_blk: dquota write failed [ 52.534276][ T4889] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 52.536282][ T4889] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.155: Failed to acquire dquot type 1 [ 52.607928][ T4891] loop3: detected capacity change from 0 to 256 [ 52.609515][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.613100][ T7] usb 1-1: config 2 has an invalid interface number: 69 but max is 0 [ 52.614783][ T7] usb 1-1: config 2 has no interface number 0 [ 52.615958][ T7] usb 1-1: config 2 interface 69 has no altsetting 0 [ 52.620658][ T7] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 52.622470][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.624178][ T7] usb 1-1: Product: syz [ 52.624851][ T7] usb 1-1: Manufacturer: syz [ 52.632348][ T7] usb 1-1: SerialNumber: syz [ 52.931419][ T4911] input: syz0 as /devices/virtual/input/input3 [ 52.969997][ T4913] loop3: detected capacity change from 0 to 1024 [ 53.004571][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 53.032952][ T4913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.054656][ T7] snd_usb_podhd 1-1:2.69: Line 6 POD HD300 found [ 53.126469][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 53.434829][ T7] snd_usb_podhd 1-1:2.69: cannot get proper max packet size [ 53.436707][ T7] snd_usb_podhd 1-1:2.69: Line 6 POD HD300 now disconnected [ 53.438886][ T7] snd_usb_podhd: probe of 1-1:2.69 failed with error -22 [ 53.527702][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 53.529588][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 53.531463][ T4336] Bluetooth: hci2: hardware error 0x00 [ 53.670813][ T7] usb 1-1: USB disconnect, device number 2 [ 54.050375][ T4934] loop4: detected capacity change from 0 to 8192 [ 54.886486][ T4962] loop0: detected capacity change from 0 to 4096 [ 54.931280][ T4962] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 55.026422][ T4962] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 55.138393][ T4962] ntfs3: loop0: ino=5, "/" directory corrupted [ 55.576183][ T4973] loop2: detected capacity change from 0 to 1024 [ 55.578195][ T4329] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 55.595958][ T4329] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 56.058055][ T4336] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 56.058945][ T4977] loop2: detected capacity change from 0 to 128 [ 56.107924][ T4892] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.186530][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.192154][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.751388][ T5012] FAULT_INJECTION: forcing a failure. [ 56.751388][ T5012] name failslab, interval 1, probability 0, space 0, times 1 [ 56.753932][ T5012] CPU: 0 PID: 5012 Comm: syz.4.200 Not tainted syzkaller #0 [ 56.755189][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.756903][ T5012] Call trace: [ 56.757479][ T5012] dump_backtrace+0x1c4/0x1f0 [ 56.758293][ T5012] show_stack+0x2c/0x3c [ 56.759036][ T5012] __dump_stack+0x30/0x40 [ 56.759825][ T5012] dump_stack_lvl+0xf4/0x15c [ 56.760654][ T5012] dump_stack+0x1c/0x5c [ 56.761407][ T5012] should_fail_ex+0x3cc/0x524 [ 56.762254][ T5012] __should_failslab+0xc0/0x11c [ 56.763119][ T5012] should_failslab+0x10/0x28 [ 56.763950][ T5012] __kmem_cache_alloc_node+0x7c/0x318 [ 56.764924][ T5012] __kmalloc+0xc4/0x180 [ 56.765679][ T5012] io_wq_create+0x104/0xba4 [ 56.766483][ T5012] io_uring_alloc_task_context+0x228/0x4c4 [ 56.767494][ T5012] __io_uring_add_tctx_node+0x2ac/0x3dc [ 56.768487][ T5012] io_uring_install_fd+0x48/0xa0 [ 56.769403][ T5012] io_uring_create+0x740/0xb34 [ 56.770242][ T5012] __arm64_sys_io_uring_setup+0x2a4/0x2e8 [ 56.771245][ T5012] invoke_syscall+0x98/0x290 [ 56.772038][ T5012] el0_svc_common+0x13c/0x258 [ 56.772875][ T5012] do_el0_svc+0x5c/0x134 [ 56.773623][ T5012] el0_svc+0x58/0x12c [ 56.774342][ T5012] el0t_64_sync_handler+0x84/0xf0 [ 56.775239][ T5012] el0t_64_sync+0x18c/0x190 [ 56.840093][ T5015] device syzkaller0 entered promiscuous mode [ 57.025749][ T5025] loop1: detected capacity change from 0 to 1024 [ 57.068608][ T5027] device-mapper: table: 248:1: multipath: invalid initial priority group (-EINVAL) [ 57.071811][ T5027] device-mapper: ioctl: error adding target to table [ 57.222744][ T5032] loop0: detected capacity change from 0 to 40427 [ 57.351596][ T5034] loop1: detected capacity change from 0 to 128 [ 57.408899][ T5032] F2FS-fs (loop0): invalid crc value [ 57.541988][ T5032] F2FS-fs (loop0): Found nat_bits in checkpoint [ 57.552259][ T5032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 57.877717][ T5041] syz.0.207: attempt to access beyond end of device [ 57.877717][ T5041] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.055973][ T4329] syz-executor: attempt to access beyond end of device [ 58.055973][ T4329] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 58.185491][ T5053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.210'. [ 64.479315][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.480579][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.597158][ T5053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 68.995996][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.002546][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.053692][ T5079] loop4: detected capacity change from 0 to 2048 [ 69.064363][ T5079] ext4: Unknown parameter 'euid>00000000000000000000' [ 69.578137][ T5087] loop4: detected capacity change from 0 to 128 [ 69.643209][ T3436] cfg80211: failed to load regulatory.db [ 70.091448][ T5102] device syzkaller0 entered promiscuous mode [ 70.776379][ T5119] loop0: detected capacity change from 0 to 256 [ 70.780768][ T5119] exfat: Deprecated parameter 'namecase' [ 70.781862][ T5119] exfat: Deprecated parameter 'namecase' [ 70.966055][ T5119] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 71.683126][ T5128] loop1: detected capacity change from 0 to 64 [ 81.241451][ T5125] device macvlan0 entered promiscuous mode [ 81.331426][ T5146] loop0: detected capacity change from 0 to 2048 [ 81.336203][ T5146] ext4: Unknown parameter 'euid>00000000000000000000' [ 82.256340][ T5158] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10) [ 82.324693][ T5167] binder: 5166:5167 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.327399][ T5167] binder: 5167 RLIMIT_NICE not set [ 82.381270][ T5170] loop4: detected capacity change from 0 to 512 [ 82.699900][ T5170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.799947][ T5177] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 83.041719][ T5181] loop2: detected capacity change from 0 to 8192 [ 83.153237][ T5187] loop2: detected capacity change from 0 to 256 [ 83.518869][ T5200] loop3: detected capacity change from 0 to 2048 [ 83.524947][ T5200] ext4: Unknown parameter 'euid>00000000000000000000' [ 84.058957][ T5204] loop3: detected capacity change from 0 to 128 [ 84.108729][ T5143] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.129258][ T5216] loop2: detected capacity change from 0 to 8192 [ 84.190196][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 84.361187][ T5239] loop2: detected capacity change from 0 to 256 [ 84.473164][ T5230] binder: 5226:5230 tried to acquire reference to desc 0, got 1 instead [ 84.474795][ T5230] binder: 5226:5230 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.477053][ T5230] binder: 5230 RLIMIT_NICE not set [ 84.853796][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 85.559937][ T5262] loop3: detected capacity change from 0 to 2048 [ 85.569859][ T5262] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 85.572162][ T5262] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 85.575579][ T5262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.631578][ T5266] loop2: detected capacity change from 0 to 1024 [ 86.170421][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 86.387894][ T5291] set_capacity_and_notify: 1 callbacks suppressed [ 86.387903][ T5291] loop3: detected capacity change from 0 to 256 [ 86.822224][ T5293] loop0: detected capacity change from 0 to 8192 [ 86.876466][ T5289] binder: 5288:5289 tried to acquire reference to desc 0, got 1 instead [ 86.887962][ T5289] binder: 5288:5289 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.899977][ T5289] binder: 5289 RLIMIT_NICE not set [ 87.050583][ T5308] loop0: detected capacity change from 0 to 128 [ 87.053327][ T5308] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 87.122682][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 87.572657][ T5326] loop4: detected capacity change from 0 to 1024 [ 87.609453][ T5143] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.625835][ T5326] loop4: detected capacity change from 0 to 2048 [ 87.643455][ T5326] ext4: Unknown parameter 'euid>00000000000000000000' [ 87.745638][ T5334] loop3: detected capacity change from 0 to 8192 [ 88.152471][ T5338] loop4: detected capacity change from 0 to 128 [ 88.200562][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 88.203536][ T5211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.771531][ T5364] binder: 5363:5364 tried to acquire reference to desc 0, got 1 instead [ 88.773556][ T5364] binder: 5363:5364 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.784621][ T5364] binder: 5364 RLIMIT_NICE not set [ 88.810341][ T5375] loop2: detected capacity change from 0 to 8192 [ 88.881650][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 89.406579][ T5390] loop3: detected capacity change from 0 to 1024 [ 89.436494][ T5390] loop3: detected capacity change from 0 to 2048 [ 89.439342][ T5390] ext4: Unknown parameter 'euid>00000000000000000000' [ 89.458050][ T5211] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.156585][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 90.652846][ T5423] binder: 5422:5423 got transaction to invalid handle, 1 [ 90.654492][ T5423] binder: 5423:5422 cannot find target node [ 90.655815][ T5423] binder: 5422:5423 transaction call to 0:0 failed 22/29201/-22, size 0-0 line 3062 [ 90.660449][ T5423] binder: 5422:5423 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.662788][ T5423] binder: 5423 RLIMIT_NICE not set [ 91.063743][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.285251][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 91.854350][ T5461] set_capacity_and_notify: 5 callbacks suppressed [ 91.854359][ T5461] loop1: detected capacity change from 0 to 128 [ 91.891894][ T5467] loop3: detected capacity change from 0 to 256 [ 91.910511][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.009569][ T5463] binder: 5462:5463 got transaction to invalid handle, 1 [ 92.013030][ T5463] binder: 5463:5462 cannot find target node [ 92.015221][ T5463] binder: 5462:5463 transaction call to 0:0 failed 26/29201/-22, size 0-0 line 3062 [ 92.017644][ T5463] binder: 5462:5463 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.278933][ T5463] binder: 5463 RLIMIT_NICE not set [ 92.379566][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.422262][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 92.803320][ T5507] loop3: detected capacity change from 0 to 1024 [ 93.125936][ T5507] loop3: detected capacity change from 0 to 2048 [ 93.138328][ T5507] ext4: Unknown parameter 'euid>00000000000000000000' [ 93.179338][ T5211] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.539520][ T5522] loop3: detected capacity change from 0 to 128 [ 93.754713][ T5211] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.809896][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 93.842805][ T4336] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 93.860087][ T5535] loop1: detected capacity change from 0 to 4096 [ 93.896443][ T5535] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 93.941931][ T5036] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 93.946091][ T4331] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 93.952603][ T4331] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 93.956346][ T4331] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 93.960428][ T5036] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 93.963287][ T4331] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 94.010979][ T5528] binder: 5527:5528 got transaction to invalid handle, 1 [ 94.012375][ T5528] binder: 5528:5527 cannot find target node [ 94.013465][ T5528] binder: 5527:5528 transaction call to 0:0 failed 30/29201/-22, size 0-0 line 3062 [ 94.015485][ T5528] binder: 5527:5528 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 94.018851][ T5528] binder: 5528 RLIMIT_NICE not set [ 94.125432][ T5545] loop1: detected capacity change from 0 to 256 [ 94.603313][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 94.630304][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.677057][ T5567] loop4: detected capacity change from 0 to 1024 [ 94.975532][ T5211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.026648][ T5574] netlink: 'syz.1.381': attribute type 10 has an invalid length. [ 95.040156][ T5574] team0: Port device dummy0 added [ 95.043828][ T5574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.045532][ T5574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.064487][ T5567] loop4: detected capacity change from 0 to 2048 [ 95.066219][ T5567] ext4: Unknown parameter 'euid>00000000000000000000' [ 95.567171][ T5577] loop4: detected capacity change from 0 to 128 [ 95.644072][ T5211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.724681][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 95.905188][ T5607] syz.0.394 uses obsolete (PF_INET,SOCK_PACKET) [ 95.915966][ T5600] binder: tried to use weak ref as strong ref [ 95.917236][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 95.922785][ T5600] binder: 5598:5600 Acquire 1 refcount change on invalid ref 0 ret -22 [ 95.924440][ T5600] binder: 5598:5600 got transaction to invalid handle, 1 [ 95.925636][ T5600] binder: 5600:5598 cannot find target node [ 95.926680][ T5600] binder: 5598:5600 transaction call to 0:0 failed 33/29201/-22, size 0-0 line 3062 [ 95.929140][ T5600] binder: 5598:5600 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 95.929152][ T5600] binder: 5600 RLIMIT_NICE not set [ 95.929406][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.108059][ T5631] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 96.120887][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 96.150926][ T5628] ext4: Unknown parameter 'euid>00000000000000000000' [ 96.546329][ T5651] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 96.577331][ T5651] team0: Port device dummy0 added [ 96.849607][ T4414] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.019738][ T5660] netlink: 'syz.2.411': attribute type 10 has an invalid length. [ 97.031411][ T4414] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.032981][ T4414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.035610][ T4414] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.035803][ T5660] team0: Port device dummy0 added [ 97.037768][ T4414] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.039707][ T4414] usb 1-1: Manufacturer: syz [ 97.045662][ T4414] usb 1-1: config 0 descriptor?? [ 97.052090][ T4414] Registered IR keymap rc-hauppauge [ 97.053690][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.055855][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.117822][ T4414] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 97.122379][ T4414] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 97.124909][ T4414] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 97.251993][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 97.304843][ T5664] binder: tried to use weak ref as strong ref [ 97.306058][ T5664] binder: 5663:5664 Acquire 1 refcount change on invalid ref 0 ret -22 [ 97.308414][ T5664] binder: 5664:5663 cannot find target node [ 97.309475][ T5664] binder: 5663:5664 transaction call to 0:0 failed 36/29201/-22, size 0-0 line 3062 [ 97.311383][ T4409] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.344443][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 97.480605][ T5677] set_capacity_and_notify: 3 callbacks suppressed [ 97.480614][ T5677] loop4: detected capacity change from 0 to 256 [ 98.066048][ T5692] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 98.186822][ T4407] usb 1-1: USB disconnect, device number 3 [ 98.223405][ T5694] loop0: detected capacity change from 0 to 1024 [ 98.681959][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 98.695977][ T5704] loop0: detected capacity change from 0 to 128 [ 98.711694][ T5698] binder: 5698:5697 cannot find target node [ 98.711707][ T5698] binder: 5697:5698 transaction call to 0:0 failed 39/29201/-22, size 0-0 line 3062 [ 98.714004][ T4407] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.757693][ T5211] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.835686][ T5712] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 98.849618][ T5712] team0: Port device dummy0 added [ 98.853800][ T5712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.854311][ T5712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.971737][ T5720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.974097][ T5720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.023131][ T5722] loop2: detected capacity change from 0 to 256 [ 99.488221][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 99.625730][ T5734] binder_user_error: 8 callbacks suppressed [ 99.625738][ T5734] binder: 5733:5734 tried to acquire reference to desc 0, got 1 instead [ 99.629073][ T5734] binder_alloc: 5733: binder_alloc_buf, no vma [ 99.630550][ T5734] binder: cannot allocate buffer: vma cleared, target dead or dying [ 99.630729][ T5734] binder: 5733:5734 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 99.634340][ T5734] binder: 5734 RLIMIT_NICE not set [ 99.778779][ T5750] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 99.781738][ T5750] netlink: 'syz.0.441': attribute type 2 has an invalid length. [ 99.784142][ T5750] netlink: 'syz.0.441': attribute type 7 has an invalid length. [ 100.000496][ T5755] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 100.011201][ T5755] team0: Port device dummy0 added [ 100.016754][ T5755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.028314][ T5755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.378632][ T5762] loop1: detected capacity change from 0 to 1024 [ 100.428635][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.442961][ T5762] loop1: detected capacity change from 0 to 2048 [ 100.443198][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.447656][ T5762] ext4: Unknown parameter 'euid>00000000000000000000' [ 100.498559][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 100.589842][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.591581][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.784470][ T5786] loop1: detected capacity change from 0 to 128 [ 100.833093][ T5790] loop4: detected capacity change from 0 to 256 [ 100.918480][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.305567][ T5792] binder: 5791:5792 tried to acquire reference to desc 0, got 1 instead [ 101.311395][ T5792] binder_alloc: 5791: binder_alloc_buf, no vma [ 101.314020][ T5792] binder_debug: 2 callbacks suppressed [ 101.314053][ T5792] binder: cannot allocate buffer: vma cleared, target dead or dying [ 101.319100][ T5792] binder: 5791:5792 transaction call to 5791:0 failed 49/29189/-3, size 0-0 line 3247 [ 101.326889][ T5792] binder: 5791:5792 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.329917][ T5792] binder: 5792 RLIMIT_NICE not set [ 101.571188][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 101.601419][ T5804] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 101.612522][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.615143][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.620963][ T5805] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 101.622326][ T5805] netlink: 'syz.3.461': attribute type 2 has an invalid length. [ 101.624204][ T5805] netlink: 'syz.3.461': attribute type 7 has an invalid length. [ 101.676165][ T4411] binder: undelivered TRANSACTION_ERROR: 29189 [ 101.765534][ T5809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'. [ 102.176412][ T5824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.181441][ T5824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.250338][ T5828] loop0: detected capacity change from 0 to 1024 [ 102.299912][ T5211] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.330811][ T5828] loop0: detected capacity change from 0 to 2048 [ 102.331033][ T5211] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.332272][ T5828] ext4: Unknown parameter 'euid>00000000000000000000' [ 102.371254][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 102.572106][ T5834] loop0: detected capacity change from 0 to 128 [ 102.647223][ T5211] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.685373][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.476'. [ 102.734364][ T5836] binder: 5835:5836 tried to acquire reference to desc 0, got 1 instead [ 102.737014][ T5836] binder_alloc: 5835: binder_alloc_buf, no vma [ 102.738434][ T5836] binder: cannot allocate buffer: vma cleared, target dead or dying [ 102.738455][ T5836] binder: 5835:5836 transaction call to 5835:0 failed 54/29189/-3, size 0-0 line 3247 [ 102.741343][ T5836] binder: 5835:5836 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.743699][ T5836] binder: 5836 RLIMIT_NICE not set [ 102.900211][ T5851] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 102.906077][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.909364][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.150473][ T5859] loop0: detected capacity change from 0 to 256 [ 103.481220][ T4407] binder: undelivered TRANSACTION_ERROR: 29189 [ 103.616737][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 103.662574][ T5873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.488'. [ 103.664726][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 103.712475][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.716290][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.092506][ T5890] loop1: detected capacity change from 0 to 1024 [ 104.346600][ T5898] loop1: detected capacity change from 0 to 128 [ 104.400357][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.411838][ T5901] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 104.414929][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 104.434836][ T5901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.441961][ T5901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.506474][ T5907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.499'. [ 104.512725][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.500'. [ 104.672819][ T5912] binder: tried to use weak ref as strong ref [ 104.674011][ T5912] binder: 5911:5912 Acquire 1 refcount change on invalid ref 0 ret -22 [ 104.675690][ T5912] binder: 5911:5912 got transaction to invalid handle, 1 [ 104.676929][ T5912] binder: 5912:5911 cannot find target node [ 104.678505][ T5912] binder: 5911:5912 transaction call to 0:0 failed 57/29201/-22, size 0-0 line 3062 [ 104.681940][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.719895][ T5921] loop3: detected capacity change from 0 to 256 [ 105.238757][ T5930] loop1: detected capacity change from 0 to 8192 [ 105.292524][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.294601][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.336709][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 105.404935][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.511'. [ 105.507612][ T5942] device syzkaller0 entered promiscuous mode [ 105.576607][ T5944] binder: tried to use weak ref as strong ref [ 105.578265][ T5944] binder: 5943:5944 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.580194][ T5944] binder: 5943:5944 got transaction to invalid handle, 1 [ 105.590751][ T5944] binder: 5944:5943 cannot find target node [ 105.640027][ T5949] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 105.650778][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.652541][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.699265][ T5951] loop4: detected capacity change from 0 to 1024 [ 105.730346][ T5211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.743032][ T5951] loop4: detected capacity change from 0 to 2048 [ 105.743082][ T5211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.744892][ T5951] ext4: Unknown parameter 'euid>00000000000000000000' [ 105.991437][ T5958] loop4: detected capacity change from 0 to 128 [ 106.070654][ T5211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.139501][ T5960] loop1: detected capacity change from 0 to 8192 [ 106.467751][ T5975] device syzkaller0 entered promiscuous mode [ 106.510024][ T5974] binder: tried to use weak ref as strong ref [ 106.511408][ T5974] binder: 5972:5974 Acquire 1 refcount change on invalid ref 0 ret -22 [ 106.513188][ T5974] binder: 5972:5974 got transaction to invalid handle, 1 [ 106.514589][ T5974] binder_debug: 2 callbacks suppressed [ 106.514602][ T5974] binder: 5974:5972 cannot find target node [ 106.516772][ T5974] binder: 5972:5974 transaction call to 0:0 failed 63/29201/-22, size 0-0 line 3062 [ 106.521348][ T4407] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.581950][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.584423][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.717972][ T5987] netlink: 'syz.1.533': attribute type 10 has an invalid length. [ 106.719996][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.721776][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.301733][ T6005] ext4: Unknown parameter 'euid>00000000000000000000' [ 107.327217][ T6000] binder: 5999:6000 tried to acquire reference to desc 0, got 1 instead [ 107.329435][ T4414] binder: release 5999:6000 transaction 68 out, still active [ 107.330835][ T4414] binder: undelivered TRANSACTION_COMPLETE [ 107.343856][ T4414] binder: release 5999:6000 transaction 68 in, still active [ 107.345257][ T4414] binder: send failed reply for transaction 68, target dead [ 107.418205][ T6008] device syzkaller0 entered promiscuous mode [ 107.515046][ T6016] __nla_validate_parse: 7 callbacks suppressed [ 107.515055][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 107.609005][ T6023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.546'. [ 107.687453][ T6026] netlink: 'syz.4.549': attribute type 10 has an invalid length. [ 107.688837][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.689326][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.816016][ T6032] binder: BINDER_SET_CONTEXT_MGR already set [ 107.819959][ T6032] binder: 6031:6032 ioctl 4018620d 20000300 returned -16 [ 107.821685][ T6032] binder: 6032:6031 cannot find target node [ 107.823112][ T6032] binder: 6031:6032 transaction call to 0:0 failed 71/29201/-22, size 0-0 line 3062 [ 108.214878][ T6038] set_capacity_and_notify: 5 callbacks suppressed [ 108.214886][ T6038] loop0: detected capacity change from 0 to 8192 [ 108.477183][ T6048] loop0: detected capacity change from 0 to 256 [ 108.525727][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 108.622523][ T6057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.558'. [ 108.944522][ T3436] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.360195][ T6068] loop2: detected capacity change from 0 to 1024 [ 109.374798][ T6070] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 109.400579][ T5211] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.409767][ T6068] loop2: detected capacity change from 0 to 2048 [ 109.409949][ T5211] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.411168][ T6068] ext4: Unknown parameter 'euid>00000000000000000000' [ 109.472151][ T6072] loop4: detected capacity change from 0 to 8192 [ 109.644588][ T6088] loop2: detected capacity change from 0 to 128 [ 109.647297][ T4414] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.828692][ T4414] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.830263][ T4414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.832828][ T4414] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.834396][ T4414] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.835939][ T4414] usb 1-1: Manufacturer: syz [ 109.849366][ T4414] usb 1-1: config 0 descriptor?? [ 109.853998][ T4414] Registered IR keymap rc-hauppauge [ 109.938452][ T6096] binder: BINDER_SET_CONTEXT_MGR already set [ 109.941887][ T6096] binder: 6095:6096 ioctl 4018620d 20000300 returned -16 [ 109.943692][ T6096] binder_user_error: 6 callbacks suppressed [ 109.943697][ T6096] binder: 6095:6096 got transaction to invalid handle, 1 [ 109.946347][ T6096] binder: 6095:6096 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 109.949178][ T6096] binder: 6096 RLIMIT_NICE not set [ 109.956995][ T4414] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 109.959511][ T4414] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 109.961665][ T4414] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 110.082199][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 110.527729][ T6113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.574'. [ 110.842043][ T24] usb 1-1: USB disconnect, device number 4 [ 110.875936][ T6117] loop0: detected capacity change from 0 to 256 [ 111.318618][ T6127] loop1: detected capacity change from 0 to 8192 [ 111.392322][ T6140] loop1: detected capacity change from 0 to 1024 [ 111.418715][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.441098][ T6140] loop1: detected capacity change from 0 to 2048 [ 111.441196][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.444279][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.445170][ T6140] ext4: Unknown parameter 'euid>00000000000000000000' [ 111.445989][ T5211] Buffer I/O error on dev loop1, logical block 0, async page read [ 111.532892][ T6150] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 111.535453][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.540053][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.803679][ T6153] binder: BINDER_SET_CONTEXT_MGR already set [ 111.803708][ T6153] binder: 6152:6153 ioctl 4018620d 20000300 returned -16 [ 111.803837][ T6153] binder: 6152:6153 got transaction to invalid handle, 1 [ 111.803852][ T6153] binder_debug: 3 callbacks suppressed [ 111.803856][ T6153] binder: 6153:6152 cannot find target node [ 111.803863][ T6153] binder: 6152:6153 transaction call to 0:0 failed 77/29201/-22, size 0-0 line 3062 [ 111.803965][ T6153] binder: 6152:6153 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 111.803975][ T6153] binder: 6153 RLIMIT_NICE not set [ 111.804045][ T5211] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.195933][ T6172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.591'. [ 112.409478][ T4414] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.075451][ T6205] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 113.159431][ T6207] binder: 6206:6207 got transaction to invalid handle, 1 [ 113.160829][ T6207] binder: 6207:6206 cannot find target node [ 113.161855][ T6207] binder: 6206:6207 transaction call to 0:0 failed 81/29201/-22, size 0-0 line 3062 [ 113.164086][ T6207] binder: 6206:6207 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 113.167588][ T6207] binder: 6207 RLIMIT_NICE not set [ 113.347258][ T4409] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.829423][ T4409] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 113.831179][ T4409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.833699][ T4409] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 113.835312][ T4409] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 113.836738][ T4409] usb 1-1: Manufacturer: syz [ 113.841569][ T4409] usb 1-1: config 0 descriptor?? [ 113.844990][ T4409] Registered IR keymap rc-hauppauge [ 113.897255][ T4409] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 113.899788][ T4409] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 113.902075][ T4409] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 113.908681][ T6173] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.969018][ T6230] set_capacity_and_notify: 3 callbacks suppressed [ 113.969027][ T6230] loop2: detected capacity change from 0 to 1024 [ 113.996133][ T6230] loop2: detected capacity change from 0 to 2048 [ 114.003509][ T6230] ext4: Unknown parameter 'euid>00000000000000000000' [ 114.137583][ T6235] netlink: 44 bytes leftover after parsing attributes in process `syz.1.608'. [ 114.483238][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 114.536389][ T6239] loop2: detected capacity change from 0 to 8192 [ 114.926080][ T6270] loop4: detected capacity change from 0 to 1024 [ 114.933310][ T6273] loop2: detected capacity change from 0 to 256 [ 114.972560][ T6263] binder: 6262:6263 got transaction to invalid handle, 1 [ 114.974017][ T6263] binder: 6263:6262 cannot find target node [ 114.975170][ T6263] binder: 6262:6263 transaction call to 0:0 failed 85/29201/-22, size 0-0 line 3062 [ 114.978328][ T6263] binder: 6262:6263 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 114.982697][ T6263] binder: 6263 RLIMIT_NICE not set [ 115.143594][ T6270] loop4: detected capacity change from 0 to 128 [ 115.305292][ T4409] usb 1-1: USB disconnect, device number 5 [ 115.396854][ T6285] loop4: detected capacity change from 0 to 8192 [ 115.679348][ T6297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.628'. [ 115.712639][ T6173] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.174496][ T6318] loop0: detected capacity change from 0 to 1024 [ 116.175152][ T6319] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 116.178613][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.180744][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.224959][ T6318] loop0: detected capacity change from 0 to 2048 [ 116.229665][ T6318] ext4: Unknown parameter 'euid>00000000000000000000' [ 116.344236][ T6323] loop0: detected capacity change from 0 to 128 [ 116.417257][ T5211] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.671536][ T6338] binder: 6337:6338 got transaction to invalid handle, 1 [ 116.673017][ T6338] binder: 6338:6337 cannot find target node [ 116.674419][ T6338] binder: 6337:6338 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 116.676934][ T6338] binder: 6338 RLIMIT_NICE not set [ 116.948331][ T5211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.975983][ T6350] ext4: Unknown parameter 'euid>00000000000000000000' [ 117.210995][ T6356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 117.421639][ T4414] binder_debug: 1 callbacks suppressed [ 117.421660][ T4414] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.828506][ T6370] netlink: 'syz.0.655': attribute type 10 has an invalid length. [ 118.034091][ T6378] binder: BINDER_SET_CONTEXT_MGR already set [ 118.035268][ T6378] binder: 6377:6378 ioctl 4018620d 20000300 returned -16 [ 118.036796][ T6378] binder: 6377:6378 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.044207][ T6378] binder: 6378 RLIMIT_NICE not set [ 118.097166][ T4414] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.318429][ T4414] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 118.320134][ T4414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.322790][ T4414] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 118.325590][ T4414] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 118.331623][ T4414] usb 1-1: Manufacturer: syz [ 118.339193][ T4414] usb 1-1: config 0 descriptor?? [ 118.342612][ T4414] Registered IR keymap rc-hauppauge [ 118.397144][ T4414] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 118.403781][ T4414] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 118.410238][ T4414] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 118.544393][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 118.763921][ T6401] ext4: Unknown parameter 'euid>00000000000000000000' [ 118.994003][ T6405] set_capacity_and_notify: 10 callbacks suppressed [ 118.994012][ T6405] loop3: detected capacity change from 0 to 128 [ 119.076619][ T6407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.667'. [ 119.355899][ T5211] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.539867][ T14] usb 1-1: USB disconnect, device number 6 [ 119.824949][ T6443] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 119.841605][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.845327][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.863404][ T6446] loop2: detected capacity change from 0 to 1024 [ 120.140319][ T6453] loop2: detected capacity change from 0 to 128 [ 120.760938][ T6475] device syzkaller0 entered promiscuous mode [ 120.772502][ T6482] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 120.775310][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.781444][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.917989][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.919203][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.665781][ T6518] loop4: detected capacity change from 0 to 1024 [ 131.691674][ T6518] loop4: detected capacity change from 0 to 2048 [ 131.694891][ T6518] ext4: Unknown parameter 'euid>00000000000000000000' [ 131.866836][ T6538] loop4: detected capacity change from 0 to 128 [ 131.882051][ T6539] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 131.885446][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.887754][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.910534][ T6519] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.052351][ T6549] loop1: detected capacity change from 0 to 40427 [ 132.069322][ T6549] F2FS-fs (loop1): invalid crc value [ 132.080721][ T6549] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.090994][ T6549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.287354][ T6556] syz.1.710: attempt to access beyond end of device [ 132.287354][ T6556] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.597846][ T6562] device syzkaller0 entered promiscuous mode [ 132.814009][ T4331] syz-executor: attempt to access beyond end of device [ 132.814009][ T4331] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 143.549636][ T6610] loop1: detected capacity change from 0 to 1024 [ 143.586999][ T6611] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.609010][ T6610] loop1: detected capacity change from 0 to 2048 [ 143.614308][ T6610] ext4: Unknown parameter 'euid>00000000000000000000' [ 143.800167][ T6621] loop1: detected capacity change from 0 to 128 [ 143.930748][ T6627] loop2: detected capacity change from 0 to 40427 [ 143.987994][ T6627] F2FS-fs (loop2): invalid crc value [ 144.028902][ T6627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.044265][ T6627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.236272][ T6642] syz.2.729: attempt to access beyond end of device [ 144.236272][ T6642] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.485560][ T6648] loop1: detected capacity change from 0 to 2048 [ 144.500482][ T6648] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 144.502545][ T6648] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 144.504998][ T6648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.523442][ T6649] device syzkaller0 entered promiscuous mode [ 144.640433][ T4330] syz-executor: attempt to access beyond end of device [ 144.640433][ T4330] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 146.648727][ T6682] loop0: detected capacity change from 0 to 256 [ 155.631034][ T6693] loop2: detected capacity change from 0 to 1024 [ 156.017807][ T6706] loop0: detected capacity change from 0 to 2048 [ 156.033598][ T6706] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 156.036343][ T6706] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 156.046170][ T6706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.113775][ T6717] loop2: detected capacity change from 0 to 128 [ 156.149143][ T6702] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.297761][ T6722] device syzkaller0 entered promiscuous mode [ 156.560949][ T6731] device syzkaller0 entered promiscuous mode [ 156.595704][ T6735] loop4: detected capacity change from 0 to 2048 [ 156.640159][ T4336] ------------[ cut here ]------------ [ 156.641225][ T4336] WARNING: CPU: 1 PID: 4336 at net/bluetooth/hci_conn.c:683 hci_conn_timeout+0x204/0x41c [ 156.642936][ T4336] Modules linked in: [ 156.643692][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 156.645089][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 156.647041][ T4336] Workqueue: hci4 hci_conn_timeout [ 156.648080][ T4336] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 156.649658][ T4336] pc : hci_conn_timeout+0x204/0x41c [ 156.650667][ T4336] lr : hci_conn_timeout+0x204/0x41c [ 156.651699][ T4336] sp : ffff800022147b60 [ 156.652546][ T4336] x29: ffff800022147b60 x28: 0000000000000001 x27: ffff0000da172330 [ 156.654165][ T4336] x26: 0000000000000002 x25: ffff0000d6fe7400 x24: ffff0000c4fb9800 [ 156.655781][ T4336] x23: ffff0000c2f17218 x22: dfff800000000000 x21: 00000000ffffffff [ 156.657311][ T4336] x20: ffff0000da172000 x19: ffff0000da172330 x18: 1fffe00033c1c97e [ 156.658816][ T4336] x17: ffff80001641d000 x16: ffff800011bcb318 x15: 0000000000000002 [ 156.660338][ T4336] x14: 0000000000000001 x13: 1fffe0001b42e402 x12: 0000000000000000 [ 156.661828][ T4336] x11: ff00800010da0928 x10: 0000000000000000 x9 : ffff800010da0928 [ 156.663231][ T4336] x8 : ffff0000d404b800 x7 : 0000000000000000 x6 : 0000000000000000 [ 156.664726][ T4336] x5 : ffff8000195aadd8 x4 : 0000000000000008 x3 : ffff800010da0760 [ 156.666134][ T4336] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 156.667808][ T4336] Call trace: [ 156.668471][ T4336] hci_conn_timeout+0x204/0x41c [ 156.669420][ T4336] process_one_work+0x7e4/0x13bc [ 156.670370][ T4336] worker_thread+0x8cc/0xfe8 [ 156.671255][ T4336] kthread+0x254/0x2e0 [ 156.672015][ T4336] ret_from_fork+0x10/0x20 [ 156.672850][ T4336] irq event stamp: 3214 [ 156.673633][ T4336] hardirqs last enabled at (3213): [] _raw_spin_unlock_irq+0x3c/0x90 [ 156.675420][ T4336] hardirqs last disabled at (3214): [] el1_dbg+0x24/0x80 [ 156.676989][ T4336] softirqs last enabled at (0): [] copy_process+0x1370/0x38b4 [ 156.678630][ T4336] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 156.679942][ T4336] ---[ end trace 0000000000000000 ]--- [ 156.684333][ T6735] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 156.689727][ T6735] loop4: p2 start 2684354560 is beyond EOD, truncated [ 156.706089][ T6735] loop4: p3 start 4284289 is beyond EOD, truncated [ 156.707710][ T6735] loop4: p4 start 133120 is beyond EOD, truncated [ 156.709029][ T6735] loop4: p5 start 133120 is beyond EOD, truncated [ 156.710233][ T6735] loop4: p6 start 133120 is beyond EOD, truncated [ 156.711438][ T6735] loop4: p7 start 133120 is beyond EOD, truncated [ 156.712825][ T6735] loop4: p8 start 133120 is beyond EOD, truncated [ 156.714098][ T6735] loop4: p9 start 133120 is beyond EOD, truncated [ 156.715643][ T6735] loop4: p10 start 133120 is beyond EOD, truncated [ 156.716930][ T6735] loop4: p11 start 133120 is beyond EOD, truncated [ 156.718808][ T6735] loop4: p12 start 133120 is beyond EOD, truncated [ 156.720102][ T6735] loop4: p13 start 133120 is beyond EOD, truncated [ 156.721514][ T6735] loop4: p14 start 133120 is beyond EOD, truncated [ 156.722673][ T6735] loop4: p15 start 133120 is beyond EOD, truncated [ 156.723936][ T6735] loop4: p16 start 133120 is beyond EOD, truncated [ 156.725159][ T6735] loop4: p17 start 133120 is beyond EOD, truncated [ 156.726598][ T6735] loop4: p18 start 133120 is beyond EOD, truncated [ 156.727886][ T6735] loop4: p19 start 133120 is beyond EOD, truncated [ 156.729303][ T6735] loop4: p20 start 133120 is beyond EOD, truncated [ 156.730595][ T6735] loop4: p21 start 133120 is beyond EOD, truncated [ 156.731950][ T6735] loop4: p22 start 133120 is beyond EOD, truncated [ 156.733414][ T6735] loop4: p23 start 133120 is beyond EOD, truncated [ 156.734740][ T6735] loop4: p24 start 133120 is beyond EOD, truncated [ 156.736074][ T6735] loop4: p25 start 133120 is beyond EOD, truncated [ 156.737553][ T6735] loop4: p26 start 133120 is beyond EOD, truncated [ 156.738931][ T6735] loop4: p27 start 133120 is beyond EOD, truncated [ 156.740242][ T6735] loop4: p28 start 133120 is beyond EOD, truncated [ 156.741559][ T6735] loop4: p29 start 133120 is beyond EOD, truncated [ 156.742893][ T6735] loop4: p30 start 133120 is beyond EOD, truncated [ 156.744207][ T6735] loop4: p31 start 133120 is beyond EOD, truncated [ 156.745535][ T6735] loop4: p32 start 133120 is beyond EOD, truncated [ 156.746850][ T6735] loop4: p33 start 133120 is beyond EOD, truncated [ 156.748696][ T6735] loop4: p34 start 133120 is beyond EOD, truncated [ 156.750022][ T6735] loop4: p35 start 133120 is beyond EOD, truncated [ 156.751374][ T6735] loop4: p36 start 133120 is beyond EOD, truncated [ 156.752773][ T6735] loop4: p37 start 133120 is beyond EOD, truncated [ 156.754124][ T6735] loop4: p38 start 133120 is beyond EOD, truncated [ 156.755431][ T6735] loop4: p39 start 133120 is beyond EOD, truncated [ 156.756698][ T6735] loop4: p40 start 133120 is beyond EOD, truncated [ 156.758266][ T6735] loop4: p41 start 133120 is beyond EOD, truncated [ 156.759767][ T6735] loop4: p42 start 133120 is beyond EOD, truncated [ 156.761088][ T6735] loop4: p43 start 133120 is beyond EOD, truncated [ 156.762478][ T6735] loop4: p44 start 133120 is beyond EOD, truncated [ 156.763840][ T6735] loop4: p45 start 133120 is beyond EOD, truncated [ 156.765183][ T6735] loop4: p46 start 133120 is beyond EOD, truncated [ 156.766365][ T6735] loop4: p47 start 133120 is beyond EOD, truncated [ 156.767891][ T6735] loop4: p48 start 133120 is beyond EOD, truncated [ 156.769215][ T6735] loop4: p49 start 133120 is beyond EOD, truncated [ 156.770803][ T6735] loop4: p50 start 133120 is beyond EOD, truncated [ 156.772096][ T6735] loop4: p51 start 133120 is beyond EOD, truncated [ 156.773365][ T6735] loop4: p52 start 133120 is beyond EOD, truncated [ 156.774666][ T6735] loop4: p53 start 133120 is beyond EOD, truncated [ 156.775912][ T6735] loop4: p54 start 133120 is beyond EOD, truncated [ 156.777369][ T6735] loop4: p55 start 133120 is beyond EOD, truncated [ 156.778660][ T6735] loop4: p56 start 133120 is beyond EOD, truncated [ 156.779940][ T6735] loop4: p57 start 133120 is beyond EOD, truncated [ 156.781273][ T6735] loop4: p58 start 133120 is beyond EOD, truncated [ 156.782786][ T6735] loop4: p59 start 133120 is beyond EOD, truncated [ 156.784186][ T6735] loop4: p60 start 133120 is beyond EOD, truncated [ 156.785512][ T6735] loop4: p61 start 133120 is beyond EOD, truncated [ 156.786843][ T6735] loop4: p62 start 133120 is beyond EOD, truncated [ 156.788456][ T6735] loop4: p63 start 133120 is beyond EOD, truncated [ 156.789696][ T6735] loop4: p64 start 133120 is beyond EOD, truncated [ 156.790943][ T6735] loop4: p65 start 133120 is beyond EOD, truncated [ 156.792316][ T6735] loop4: p66 start 133120 is beyond EOD, truncated [ 156.793670][ T6735] loop4: p67 start 133120 is beyond EOD, truncated [ 156.795058][ T6735] loop4: p68 start 133120 is beyond EOD, truncated [ 156.796424][ T6735] loop4: p69 start 133120 is beyond EOD, truncated [ 156.798011][ T6735] loop4: p70 start 133120 is beyond EOD, truncated [ 156.799293][ T6735] loop4: p71 start 133120 is beyond EOD, truncated [ 156.800685][ T6735] loop4: p72 start 133120 is beyond EOD, truncated [ 156.802051][ T6735] loop4: p73 start 133120 is beyond EOD, truncated [ 156.803566][ T6735] loop4: p74 start 133120 is beyond EOD, truncated [ 156.805005][ T6735] loop4: p75 start 133120 is beyond EOD, truncated [ 156.806257][ T6735] loop4: p76 start 133120 is beyond EOD, truncated [ 156.807874][ T6735] loop4: p77 start 133120 is beyond EOD, truncated [ 156.809201][ T6735] loop4: p78 start 133120 is beyond EOD, truncated [ 156.810606][ T6735] loop4: p79 start 133120 is beyond EOD, truncated [ 156.811848][ T6735] loop4: p80 start 133120 is beyond EOD, truncated [ 156.813084][ T6735] loop4: p81 start 133120 is beyond EOD, truncated [ 156.814510][ T6735] loop4: p82 start 133120 is beyond EOD, truncated [ 156.815816][ T6735] loop4: p83 start 133120 is beyond EOD, truncated [ 156.817831][ T6735] loop4: p84 start 133120 is beyond EOD, truncated [ 156.818934][ T6735] loop4: p85 start 133120 is beyond EOD, truncated [ 156.820236][ T6735] loop4: p86 start 133120 is beyond EOD, truncated [ 156.821582][ T6735] loop4: p87 start 133120 is beyond EOD, truncated [ 156.822959][ T6735] loop4: p88 start 133120 is beyond EOD, truncated [ 156.824450][ T6735] loop4: p89 start 133120 is beyond EOD, truncated [ 156.826011][ T6735] loop4: p90 start 133120 is beyond EOD, truncated [ 156.827901][ T6735] loop4: p91 start 133120 is beyond EOD, truncated [ 156.829148][ T6735] loop4: p92 start 133120 is beyond EOD, truncated [ 156.830354][ T6735] loop4: p93 start 133120 is beyond EOD, truncated [ 156.831552][ T6735] loop4: p94 start 133120 is beyond EOD, truncated [ 156.832799][ T6735] loop4: p95 start 133120 is beyond EOD, truncated [ 156.834247][ T6735] loop4: p96 start 133120 is beyond EOD, truncated [ 156.835648][ T6735] loop4: p97 start 133120 is beyond EOD, truncated [ 156.837566][ T6735] loop4: p98 start 133120 is beyond EOD, truncated [ 156.838786][ T6735] loop4: p99 start 133120 is beyond EOD, truncated [ 156.840064][ T6735] loop4: p100 start 133120 is beyond EOD, truncated [ 156.841342][ T6735] loop4: p101 start 133120 is beyond EOD, truncated [ 156.842778][ T6735] loop4: p102 start 133120 is beyond EOD, truncated [ 156.844205][ T6735] loop4: p103 start 133120 is beyond EOD, truncated [ 156.845609][ T6735] loop4: p104 start 133120 is beyond EOD, truncated [ 156.846939][ T6735] loop4: p105 start 133120 is beyond EOD, truncated [ 156.848867][ T6735] loop4: p106 start 133120 is beyond EOD, truncated [ 156.850211][ T6735] loop4: p107 start 133120 is beyond EOD, truncated [ 156.851579][ T6735] loop4: p108 start 133120 is beyond EOD, truncated [ 156.852902][ T6735] loop4: p109 start 133120 is beyond EOD, truncated [ 156.854226][ T6735] loop4: p110 start 133120 is beyond EOD, truncated [ 156.855607][ T6735] loop4: p111 start 133120 is beyond EOD, truncated [ 156.857038][ T6735] loop4: p112 start 133120 is beyond EOD, truncated [ 156.858885][ T6735] loop4: p113 start 133120 is beyond EOD, truncated [ 156.860239][ T6735] loop4: p114 start 133120 is beyond EOD, truncated [ 156.861589][ T6735] loop4: p115 start 133120 is beyond EOD, truncated [ 156.863038][ T6735] loop4: p116 start 133120 is beyond EOD, truncated [ 156.864423][ T6735] loop4: p117 start 133120 is beyond EOD, truncated [ 156.865863][ T6735] loop4: p118 start 133120 is beyond EOD, truncated [ 156.867659][ T6735] loop4: p119 start 133120 is beyond EOD, truncated [ 156.869008][ T6735] loop4: p120 start 133120 is beyond EOD, truncated [ 156.870470][ T6735] loop4: p121 start 133120 is beyond EOD, truncated [ 156.871883][ T6735] loop4: p122 start 133120 is beyond EOD, truncated [ 156.873232][ T6735] loop4: p123 start 133120 is beyond EOD, truncated [ 156.874568][ T6735] loop4: p124 start 133120 is beyond EOD, truncated [ 156.875897][ T6735] loop4: p125 start 133120 is beyond EOD, truncated [ 156.877979][ T6735] loop4: p126 start 133120 is beyond EOD, truncated [ 156.879451][ T6735] loop4: p127 start 133120 is beyond EOD, truncated [ 156.880974][ T6735] loop4: p128 start 133120 is beyond EOD, truncated [ 156.882358][ T6735] loop4: p129 start 133120 is beyond EOD, truncated [ 156.883844][ T6735] loop4: p130 start 133120 is beyond EOD, truncated [ 156.885306][ T6735] loop4: p131 start 133120 is beyond EOD, truncated [ 156.886776][ T6735] loop4: p132 start 133120 is beyond EOD, truncated [ 156.888626][ T6735] loop4: p133 start 133120 is beyond EOD, truncated [ 156.890011][ T6735] loop4: p134 start 133120 is beyond EOD, truncated [ 156.891335][ T6735] loop4: p135 start 133120 is beyond EOD, truncated [ 156.892777][ T6735] loop4: p136 start 133120 is beyond EOD, truncated [ 156.894177][ T6735] loop4: p137 start 133120 is beyond EOD, truncated [ 156.895505][ T6735] loop4: p138 start 133120 is beyond EOD, truncated [ 156.896839][ T6735] loop4: p139 start 133120 is beyond EOD, truncated [ 156.898613][ T6735] loop4: p140 start 133120 is beyond EOD, truncated [ 156.899891][ T6735] loop4: p141 start 133120 is beyond EOD, truncated [ 156.901346][ T6735] loop4: p142 start 133120 is beyond EOD, truncated [ 156.902785][ T6735] loop4: p143 start 133120 is beyond EOD, truncated [ 156.904178][ T6735] loop4: p144 start 133120 is beyond EOD, truncated [ 156.905575][ T6735] loop4: p145 start 133120 is beyond EOD, truncated [ 156.906949][ T6735] loop4: p146 start 133120 is beyond EOD, truncated [ 156.908687][ T6735] loop4: p147 start 133120 is beyond EOD, truncated [ 156.910072][ T6735] loop4: p148 start 133120 is beyond EOD, truncated [ 156.911561][ T6735] loop4: p149 start 133120 is beyond EOD, truncated [ 156.913037][ T6735] loop4: p150 start 133120 is beyond EOD, truncated [ 156.914460][ T6735] loop4: p151 start 133120 is beyond EOD, truncated [ 156.915909][ T6735] loop4: p152 start 133120 is beyond EOD, truncated [ 156.917726][ T6735] loop4: p153 start 133120 is beyond EOD, truncated [ 156.919091][ T6735] loop4: p154 start 133120 is beyond EOD, truncated [ 156.920518][ T6735] loop4: p155 start 133120 is beyond EOD, truncated [ 156.922024][ T6735] loop4: p156 start 133120 is beyond EOD, truncated [ 156.923449][ T6735] loop4: p157 start 133120 is beyond EOD, truncated [ 156.924930][ T6735] loop4: p158 start 133120 is beyond EOD, truncated [ 156.926519][ T6735] loop4: p159 start 133120 is beyond EOD, truncated [ 156.928607][ T6735] loop4: p160 start 133120 is beyond EOD, truncated [ 156.929909][ T6735] loop4: p161 start 133120 is beyond EOD, truncated [ 156.931139][ T6735] loop4: p162 start 133120 is beyond EOD, truncated [ 156.932431][ T6735] loop4: p163 start 133120 is beyond EOD, truncated [ 156.933720][ T6735] loop4: p164 start 133120 is beyond EOD, truncated [ 156.935088][ T6735] loop4: p165 start 133120 is beyond EOD, truncated [ 156.936437][ T6735] loop4: p166 start 133120 is beyond EOD, truncated [ 156.938234][ T6735] loop4: p167 start 133120 is beyond EOD, truncated [ 156.939556][ T6735] loop4: p168 start 133120 is beyond EOD, truncated [ 156.940972][ T6735] loop4: p169 start 133120 is beyond EOD, truncated [ 156.942326][ T6735] loop4: p170 start 133120 is beyond EOD, truncated [ 156.943832][ T6735] loop4: p171 start 133120 is beyond EOD, truncated [ 156.945094][ T6735] loop4: p172 start 133120 is beyond EOD, truncated [ 156.946560][ T6735] loop4: p173 start 133120 is beyond EOD, truncated [ 156.948367][ T6735] loop4: p174 start 133120 is beyond EOD, truncated [ 156.949716][ T6735] loop4: p175 start 133120 is beyond EOD, truncated [ 156.951047][ T6735] loop4: p176 start 133120 is beyond EOD, truncated [ 156.952414][ T6735] loop4: p177 start 133120 is beyond EOD, truncated [ 156.953785][ T6735] loop4: p178 start 133120 is beyond EOD, truncated [ 156.955272][ T6735] loop4: p179 start 133120 is beyond EOD, truncated [ 156.956645][ T6735] loop4: p180 start 133120 is beyond EOD, truncated [ 156.958572][ T6735] loop4: p181 start 133120 is beyond EOD, truncated [ 156.959880][ T6735] loop4: p182 start 133120 is beyond EOD, truncated [ 156.961305][ T6735] loop4: p183 start 133120 is beyond EOD, truncated [ 156.962522][ T6735] loop4: p184 start 133120 is beyond EOD, truncated [ 156.963949][ T6735] loop4: p185 start 133120 is beyond EOD, truncated [ 156.965489][ T6735] loop4: p186 start 133120 is beyond EOD, truncated [ 156.966848][ T6735] loop4: p187 start 133120 is beyond EOD, truncated [ 156.968674][ T6735] loop4: p188 start 133120 is beyond EOD, truncated [ 156.969941][ T6735] loop4: p189 start 133120 is beyond EOD, truncated [ 156.971213][ T6735] loop4: p190 start 133120 is beyond EOD, truncated [ 156.972491][ T6735] loop4: p191 start 133120 is beyond EOD, truncated [ 156.973926][ T6735] loop4: p192 start 133120 is beyond EOD, truncated [ 156.975321][ T6735] loop4: p193 start 133120 is beyond EOD, truncated [ 156.976817][ T6735] loop4: p194 start 133120 is beyond EOD, truncated [ 156.978487][ T6735] loop4: p195 start 133120 is beyond EOD, truncated [ 156.979776][ T6735] loop4: p196 start 133120 is beyond EOD, truncated [ 156.981240][ T6735] loop4: p197 start 133120 is beyond EOD, truncated [ 156.982629][ T6735] loop4: p198 start 133120 is beyond EOD, truncated [ 156.984078][ T6735] loop4: p199 start 133120 is beyond EOD, truncated [ 156.985426][ T6735] loop4: p200 start 133120 is beyond EOD, truncated [ 156.986896][ T6735] loop4: p201 start 133120 is beyond EOD, truncated [ 156.988689][ T6735] loop4: p202 start 133120 is beyond EOD, truncated [ 156.989998][ T6735] loop4: p203 start 133120 is beyond EOD, truncated [ 156.991290][ T6735] loop4: p204 start 133120 is beyond EOD, truncated [ 156.992595][ T6735] loop4: p205 start 133120 is beyond EOD, truncated [ 156.993921][ T6735] loop4: p206 start 133120 is beyond EOD, truncated [ 156.995409][ T6735] loop4: p207 start 133120 is beyond EOD, truncated [ 156.996781][ T6735] loop4: p208 start 133120 is beyond EOD, truncated [ 156.998693][ T6735] loop4: p209 start 133120 is beyond EOD, truncated [ 156.999998][ T6735] loop4: p210 start 133120 is beyond EOD, truncated [ 157.001385][ T6735] loop4: p211 start 133120 is beyond EOD, truncated [ 157.002897][ T6735] loop4: p212 start 133120 is beyond EOD, truncated [ 157.004314][ T6735] loop4: p213 start 133120 is beyond EOD, truncated [ 157.005725][ T6735] loop4: p214 start 133120 is beyond EOD, truncated [ 157.007517][ T6735] loop4: p215 start 133120 is beyond EOD, truncated [ 157.008950][ T6735] loop4: p216 start 133120 is beyond EOD, truncated [ 157.010245][ T6735] loop4: p217 start 133120 is beyond EOD, truncated [ 157.011694][ T6735] loop4: p218 start 133120 is beyond EOD, truncated [ 157.013067][ T6735] loop4: p219 start 133120 is beyond EOD, truncated [ 157.014489][ T6735] loop4: p220 start 133120 is beyond EOD, truncated [ 157.015924][ T6735] loop4: p221 start 133120 is beyond EOD, truncated [ 157.017602][ T6735] loop4: p222 start 133120 is beyond EOD, truncated [ 157.018955][ T6735] loop4: p223 start 133120 is beyond EOD, truncated [ 157.020280][ T6735] loop4: p224 start 133120 is beyond EOD, truncated [ 157.021594][ T6735] loop4: p225 start 133120 is beyond EOD, truncated [ 157.023028][ T6735] loop4: p226 start 133120 is beyond EOD, truncated [ 157.024390][ T6735] loop4: p227 start 133120 is beyond EOD, truncated [ 157.025772][ T6735] loop4: p228 start 133120 is beyond EOD, truncated [ 157.027586][ T6735] loop4: p229 start 133120 is beyond EOD, truncated [ 157.028978][ T6735] loop4: p230 start 133120 is beyond EOD, truncated [ 157.030409][ T6735] loop4: p231 start 133120 is beyond EOD, truncated [ 157.031814][ T6735] loop4: p232 start 133120 is beyond EOD, truncated [ 157.033267][ T6735] loop4: p233 start 133120 is beyond EOD, truncated [ 157.034523][ T6735] loop4: p234 start 133120 is beyond EOD, truncated [ 157.035769][ T6735] loop4: p235 start 133120 is beyond EOD, truncated [ 157.037027][ T6735] loop4: p236 start 133120 is beyond EOD, truncated [ 157.038782][ T6735] loop4: p237 start 133120 is beyond EOD, truncated [ 157.040074][ T6735] loop4: p238 start 133120 is beyond EOD, truncated [ 157.041503][ T6735] loop4: p239 start 133120 is beyond EOD, truncated [ 157.042914][ T6735] loop4: p240 start 133120 is beyond EOD, truncated [ 157.044300][ T6735] loop4: p241 start 133120 is beyond EOD, truncated [ 157.045683][ T6735] loop4: p242 start 133120 is beyond EOD, truncated [ 157.047014][ T6735] loop4: p243 start 133120 is beyond EOD, truncated [ 157.048659][ T6735] loop4: p244 start 133120 is beyond EOD, truncated [ 157.049998][ T6735] loop4: p245 start 133120 is beyond EOD, truncated [ 157.051220][ T6735] loop4: p246 start 133120 is beyond EOD, truncated [ 157.052767][ T6735] loop4: p247 start 133120 is beyond EOD, truncated [ 157.054134][ T6735] loop4: p248 start 133120 is beyond EOD, truncated [ 157.055503][ T6735] loop4: p249 start 133120 is beyond EOD, truncated [ 157.056916][ T6735] loop4: p250 start 133120 is beyond EOD, truncated [ 157.058831][ T6735] loop4: p251 start 133120 is beyond EOD, truncated [ 157.060112][ T6735] loop4: p252 start 133120 is beyond EOD, truncated [ 157.061415][ T6735] loop4: p253 start 133120 is beyond EOD, truncated [ 157.062696][ T6735] loop4: p254 start 133120 is beyond EOD, truncated [ 157.064179][ T6735] loop4: p255 start 133120 is beyond EOD, truncated [ 158.717124][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 158.717141][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 158.717166][ T4337] Bluetooth: hci1: command 0x0406 tx timeout