last executing test programs: 1m42.876509541s ago: executing program 2 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="5a384a217a2d82c5ec7bde148b403544b4bdb579f3e3fbf170a3469a03b7ba2a91da2bb5fefdfb5ee8c9a765bd0aa2e8b8b401f3b58de521f3e6db76caf7b9ea41905fac2631a75e5d2e09e06515ff14b80da52516075f57e7407448ffbd076beeb37ba4a5553141482cafea7fcf5fb2b03efdf1b49c8c8170587ce2a60a85024c7adbc4b334ecb3167e533aa35d2741012c718c73d8650095eed7a7569fa74c352893ad1a22c5a77af8f2e7970aed14104738b5cd78bf4f9227f55d2ffb78093c957d1bff072137969865ccfca5afbe63fe8f1a6684bb1eaecbf9172186d97535ff934b122eb8e8262e97bd6fad21d3a14a3786585270769d87b6477cfe0740555c6da4d5e600ae4d5af479dc1ffef196e1332ad95c1c58bc9d1cdac91ef22c1c8f32008601d4fe42493b4cf49166688aa5ed31c4b0dd072f6e4209d418914c3df34c2bbf7726603ffa60954980a1de421eb16f23729f3d9c822089d1f5ed131be61fae0e87ed82495a55162fef5ec693639d3772513e0e1dd42f674da3c9e7dd19bcacd8c68f39e7c51b3b021b1c88b3044a33b28781c3b945b720000587415401aa2187cf293f6e1f0877262954823a45e40630d06b6bb31d1fabd80fbdbcf9ebc9b8dd416dbc156eae3bd7926994196f9fa280c6642db7906dcfc4f5aacfe58f7798742b134e98faf62d2dddd2503240ed38d50809662fcb3f6086b01aa8fc52d0eaf04d3d2a36beaee875fc3d2cb2b97496ac90ea79d279ab0cc8a442df0859765930d95bd82f8282144d1d8dd8eab0285c7743b776421010d7b74acf7bcc6c6e9d38713de9c99df8ac8469590b23ae358de52a6f2d7e00286675b4e2fc168d3f2b9ca6388cb87b97acc90639a1d1d16013910a795d2590f559ceea19f0a0be189c346eaf27d8c53aed71ef8c819cdf0d7239bde7831fc23be532bc065d1812b070655ae6dff2c3261d35ff1a404ef927c028e726107fe26808352e944335b6e9895c6112b49862089e7b37c16efbf7dd7d5569c2dd14915154465c94b50ff43452d66c797bac0acb102cec36acfc561beb71d92ba83d6fa24ccdd5290779c5ee075b9baf835f21b2d76a74c42af035079e62b09ccf512b1cdde4ed0679c230d4739ecec880123845a8b17762a5dd9873dcdeebf809a42899a49b2693c2d87efb3b8a2f2bdda5dacd8084d91d71c603f2c7f0a9e8db7080e575aa8baaae6791530b74e6d9bd887379058673a579de4ab71988b8fef429d45560cabc32553103d1e7156608bba760dde9ea3452a4958ef0dc4d1176de951ace0e05033cc974e80bcde9601e267d80578565d49a497cc981d4e304978262124cf712231335266ea736481669706bd5f997f793f428a7d3ee5bda9b702f88c8c95541441f9f88b7a3b643e4a3aaa32fcc537063e447ba5928e7da583033c1642acc16b42d8baea677a2ba9a189ac745e6c8762257644c5dcc1ed8c60663a17ecd8be62830bd16b9eee4dfcf6cb13d0067f36f4d811fe961d2553a02fb7f117f07099d5c4747345531e807f13a90049a56c7816d76c503c5b7d04394955ba8e53a54309e811ac396ede3142dd41f9a1f695b72e8b75d68db27ff9c5e5fac36337f41aac853add254a4e8f2e3912d77ace9a27e58951d055a5f492accdd4bccb7379533b9b01f10042c294e8afb407c8dc752785f0e6078aa76f0f8598d9c26a6e6cd3948d1b1d6bcf51d7a1b9050fef9be16fe4bc4e40686813940c1748e00602ec782118395e7c07022ca8ac248f5c3b53a45cec6bb7f962add742b68c36cde15ff0f76c1fc596bca8d42c03722f6e78260cb30f47c84d567a089e1ab987c304e1bf70b668d1a35e72980ea7b9ec5a91c49c2a8962bb5f337434ea2ad80438f55ae50040390141eb4a9c2b47ea88adc9034f6d308449e4f40a2c1339a77ffa6e7239dab74f08bf1cc126bf318f47d5bbca4c9f4c9724fca344f93b0fc264ab7fc4d487861798e3d4fc5ce64de71e47bdb31b90d6e3046463082d3eaed3556115084c9111b6d9b0195ea7856aa83259a37bc6e512b762203cb1cd337666bc0620272de220e76f1cbb6ead7d1161610a0ac6c41dec1affb8ed57dd67910ba24545a89d230a1f6e8d86d979f497d1beede4918fbd4b61923d89dbd3440685863c4d1bb3d81973ba48a63133d9251e643c4647ad4aac03dc6db40ad92da439a3543df9483df651aea2c0bafb7f351166d75c746afeb330d610891c1c4f01a04668eff5e8ee2481ee358aa7b28f14c50b010e2c511354cbdea3c058f01f2e83f0db5a8a6e8235eb6eb15f2fb3dd9cd62bce66e5e46f50fc14e5710a4d97256ba724ae7a3cdfab2df2c3eaf131fff623a26b2aa6c9bca974bdb61938ac8cae4f0f1ec85788d0054a386772e38740d7bf1d0acd9d2f140d71e3353d2d97e0eb153685fef685bf06bee0c10e6df49a757018a29bd745a9680775219cb5248367e4c4990e25735948c94039f76c86168a687660ef7d8e2684ea650472198637c944ad226737dd2abf3c71d4f01eb482f80e5e62a16491a4ce110e51a7b5b6dcb2f788d2a929dc3a55b97f9bbf9bac9232a4193f359dde048c46ca16c654c712b8152779b3c495733801bcdd12b5b4b87380fc71cc9442c549dc7b40d351ea690b4b92ec510f23cd232a528b4ca474f3915df278f1574d6dda0e38c52b67cdce8724a920a026569ac8229f73580908e54111b638f93a94c632667d36381fdb6cc7fa6c97c60fb719e5aab698f0a553f47726ecd81207b4c9545f3f3c719ef6c0e847b97b8d0767d66306210ff653ecc97032eaf2504b85d2562bbb94160799046cda1b8877706ecbc100eb4a1de99b727a863c825c19b64a3c5d2db34224ab34e9efc99b792c0eafdd5eaa8e5319aee0effb9e40ae3e1cefd2216cae96cd423ae9b4048e89cf56c28c2d3dc9b05522d84e13f193a96d37c85545625ce39cf33d9de4f96ed7d2c0e813eac440f030595ef467030c1b3381e0e4ca4f36a8e5f9cb4e09bd398d707c5c38f4252182173b1f877f87e933fe59cfc10f88169625c2293d34a22062399543cf88a1097026d6f2effdfc05a50b1519dbae43289f64580a85978aa63ed218c958209c07ddfa9ee021c30b6ac427230bd5b45e86f1e0c47278680237527099fab4c3009e5c356c93a7041610616166b8c287eba20a43eb02351767996c9d1b20f058ff969547f79f381f45463f412d08407eb6f472ca7639c17994f4d9d4e9cb9464b4a096c96582e406ea972898400c11b083d7abfb0a8a0616819d4723fd23aec2e26b1c8b57c7ab0256a055df78beca014eca7ee4d88acd12bd0fb91cc68081958f69c969a37da61445d8dc65f945c288ff465a7678129391997a33e86e412d56af4f556d68f1c9ac6c6eae2f153a7d4755ccd748f3ee17104221030038bf79309b37a232b804cd5673e7ce403e118a899f776e37499f180777bfca4a8e4d2b987b55de542cdb9b8209473a719762a5d3717f69c8539a3bc4bf5c79e7e45626384f9b2b76e465c06ad0f39eafde6408ed883bf629f3f3c84024c636c7fc3eeb61fb33bb03393c23eb5050d401535d877d8f37a660b4bf9994b71b55e65b02a30717b799d6beed60ae51a70c9eae4e1ac391363f9d9a5dda9d82679e906ea31242b08a2b88b48abcf108d1d8ccf6435f5a66f862a59fb4a1c68ade20b4ab39bfb54b6cb41a675310f99509197f56f2ddbf58c18e749e9d5d7fafcf04db05c6a46d0752500957580e31e247a850c8306299f5360ca7a852a5de2ae63df4f1a167ab010621fa21320218a3eb9e3ad88e04eb9d8ed4a57055e9c6b55bba9f28520c5eca8fa7b7863df61b1382f35c2b63076acf244bc81f6ad558bb96c7b6ddd066caf5039694e7db19b3ade35ac3b7b555ae4ed5c0fd90219a729b433d23f39deca9f70852dd1ce3e1b445c9d14be1d7dd3e8a9aa8031dcec3ae918f22eccabb7e23856d223550d672950f7b3278e230c7019e19a86e59275562e5b427968953011b51fd6bac313151f0adf3d90559312afde4cace169ae9a2148a756ef3fdf69c4ef0fc406a44c7d3f70cca1f5dccfbb876a9ce272a4428dcb5fe7eedf34aeb67925fef9af40782944806d85744d727873844a34d6a836d6e9fcf296ba5747703550501b1546f43650c8e80c5a6a3bba2b6657ffafa84ee54bf186d0854cb6a23844566e87823266a3f9f81b1b3e4fadafb9524f61fda29df9f85577b51ad58c9b6ba2491b4c9e91731b769b5ecf14b17bc87cc4c8a82feeb6be4a0f3837330f5e0e5f11888f26d781e5a69837b457e278c21553fac6c34fb597410045f991d60488468eec4dea940dcf5dc00ba5f608effa2ef3575df8c9b31e1796326df0879169cb9808cc4199236667453f5fa9240995748176f9ff98186b6e4cbd53444a32631afddf752bed4f2755e76c24185742b76976cf519de5c8b0262a07a506002d02e43a4d617b4d72e6cfb0d8c4155aef8d89f8d3541d21026bfa578c5f7e97a47b2603bf1f5405e776197f661e8d3c16a4d77b741191119efdaaf4560d06370fe13199a525da5e7e9b821ec5f5799297c45c3eb8715809619fe945cc78a8967e24df52e5d67e85bc1d73db843921fe2beecb6cc3a076fb73227e55eb78e58f618c2a9c66dcc85079f4772ebcc11781c936fba9698deec242d6a14f8bbcd51cce20bc91cc5ea62400eec677c3fc2a0883f7cd030fe3fb3f20c63bd82de9ab62b73f339741d50f94049153c3d1adc24b6b7fc6db720ae6e9c3d8993a85793e73c4791ba25344381bdd7508830adad11732db0e9a2ebc6266d7681984b318dcfa8f99898dcbddb9c635bf634db92bb277190e9c6b1fe0d7d27ccd2848196ef427100f6343bce66a3c2ce1a88aac1f722e75f128086c6eb9764e8fcd08bf4688512b2669dd1fc18ed0816b9f9fd026c88da2acc4a43ee8b2a5bd6689625273abf3b796be0c7e319a9c89cf255e933ff11b1ac859b5fb1bad6781afb42d33cba9564f7c0ae1b3b7d6c6c45b2ed8c0273310f5b98bda44b5c11341ffc5fc7a72634fc620a5832c9cf491bb3bf2bd8edb6a84d521701e8e6ffb9f1d55657b919988c5732540e84fae746e5a966299a7429a262b3403fb3f70c4c5524ea18cfb04bd2159cb914e6a98e267ce6971d0efdc5bb636d9cd15681693edb21f764e7c9bb0d5a07869fae818506f353428252aaa20cbf4bd8ce1ebc4a76ce54c5595bba9b244e0e4a7a537607afa38e41368a8c293fdbd8490d93dbb7f82a89a2d65def069a49290ee087d985c099da3763a2dd79dcb09959c392ebda65680a895a745d726f59086e61106b90900000016622668ce9a80418e91609c529c088326b1bd12d6959741cc19d44f2095dd9b2f1b4cc007c0fb26f77ff244c875c46f4f85e6c65e43f2275331001e1440afc31d8af2f404fb14235e5ef484a55631a581be353672e8a9b47455f50cf4b8bd9030e9b4b298b4b43e920389c5aae890d9ec4d128dd1fcb256d06ad807c03dbac97d5d4d128687585574fbdc595b253e70b9fc8dc4f92ad7f36a9a730e3b94db7897394ba7a334cd6d7b79dee3577035700c560ed50cd70a2855ceb7fa58abfe381027437df41ec4a7bf19b01d4a3dd2d11e98e1e6365777d826e41e75d75df7b11e383faf089c7fa02b1cc4dffe3371b7282a5209d22d6593226716e784db16e3f54ed2f84e3f042df105f2dd8bb2f2b3d530d01a90deaae4854a78cad97e7eb00ed3d12f414c86bf4938878ec66f24aba4ee61d41133e66503174081144ae0630f1fabae5400f0b6cc9119b3c4d1a7382570fe9de7bc91d32fdc8f8f212f25560414fe27528db1026a6f71a373766771bd63b45d09e730be1f46bb608c6e43bfb1ac74469ec6b63e3114209a1b023d7fc6f7d0b0624ca7fed9a197d0ea1760302d47d8f749cf4b4711f9096fae58e941f428d3d46c17590d55cb275352b207970ab498a9fc380c0e23943e7bbfaafa9fc50b2b019f4ee955f52ab2938518a643a20e753d9d6c3144ed8ffbb2638a7d6dff9ad3f085a815e99b1334144e33679add52d473d4c7eaf1740e2bbd5469286b78b1f8853d2e24abd329666cd8c496051b7df363184d633abdc206f84d8119ab15ecc43bd4d3dc75c7c7d0e49764139be5d1c6ffa01ac8829e32d5e6d795f2760b55f6d2a4e487d6c8d24a4fd84f5ebd9b4cd8cd3868fe20658f79e22c29b34c07c127d4bde9cf7d1c3fbf92395012968c0923bc1e040d283d128a84d651de93459773d28990ee096f313334dacac65b09b8ecd5ab776f065ccd253c261bbce2ef637e4be0f384bf9d0705fe276be81a2aa8db6b882055ec11df91d13be28bf3e51c4269a6af8edc79fc9cffb97a7477fd121eb188f7a35e50d1830db8c388604030d26e67745f9cdf609d36463f0214a74b4277245215916379f78c8584a474f1eb28e14bdfef3fc02c09846952a23993bc2eeda301d6e4c58346b0a9ab96b59dfd6429bb90258a1fdc38de55443237e3559cccd7547307918ba6cf18091b3bc538da982c05adebeab41a59c2ee78e8c5dd4d4411a91179dcbaafd602ca0333ee6c6668abe24c836bdd5a5261aadac11fd8f1682044a819b6a3cd85015efcb685eede35ef046a11407e939fcfb7b4edb3f046c7d27947ba9a89e4f7068103ebcb0855d4923c4b9ee3ec5d476c4b72c1f6ed8ad1d991f6ef2f0eaa78758fdca67ede06e552b9df7532cc3f1d407fa23d9f5962e0305cedbff19a96b801f6f93a6fcec281fd30f57cffe8a26e2419f4b6a819281b3eb3bc7195e8cf4b8f3080f73c7b1fae8e7e606b5c8bcc493f8c1cae298995241957ee13d4fea8c92e63f16744bebdce3b8c57cb0f7716ccc950ef38c3133a0296ecd512191b8e9b68d3b232d2b7462174ed3d0f1bc6a0f5027fa4f88e99abaf6017f722f916726ec3eb59f19abd628b733654e4a24227889a99d01fb1e1cf7fb60f1d0a4671d5a7d47b56efaee313c53bfcb970e0878865e914f9e1884bee7f4fb787084315656b34c22dbf42aac3ebac5a500f8ce5d9bc47653f9e37a4d58e3c905db02e5ccf89701f9879831ec147baa80f122eeea1e3c9872669b0a29a24ea60e21d87bd51156f1e13e7d5132cec711f665df124cf7182c75103f35ba36ef96d36524a2525c88ae1fbe4192664080fc2735a789ae7f7b7774aaa9f18e6a8cfe46b714aed5d082ccb8001ca6bf33bd3a833681071fe6143a2daef7a637046c5dfeaa89d9285cf9052b02f699681a276f688b473b751d4da6be75a7d142e6b74897ea18812532579a7f495e4b77af68f5057b74e039adbc16624ecaec8aa058c491a1968e9f3d133304e6e1c150b8b10db993ce67e502bec06b239454ab0eb19af034afb8756a06e0550be1a63e31a85fda372bc5d6f2759adabf29d90eed494bed32cca3cbcdb874a982e0a9e0d81708814c88d88ae30344ae1b7527486e18c63c1c5b6fc74a241c63eab588ed78a295471229b1b5c20cc230bc6d81cdbff66b8d901e6d61cd5f385b31d0b492f36ab440b193fa86c9114fca2f2d1a4f73d9a05b1a26822135c86941ec989a6fd3962af599d3e8a0b9d87cf08205a2d4c2498c1682402a629ff583cdd4abd3ce46e76bb5cea903f01a9e88408584991b2bf5633671d9c4303e1045a6224d59dc3bdead4f4db2c555c92b296551d1f79db944d7e632bb6f6ccc93fb3cd69ab6b97e592e41529917fb5bc21226912815717a277e5edb3577519b8fe9f3885f08c6b24d957be1e119b7d592012fedf58c51344317c209d882fcc3212b39f45b0001b620ae8a3756ff1c5567557694a10da1ec3918d935a3a632f82ab8a3a909b663ac2de45d4a24c3e625eb73ba7c6f6460e2742b05cb438008691e2fae34e709b078759b7c766e7c093633b3224ebc2e1d76bc708f439760f31ddb1ac76251093ecb2e6a917e0910a06dde3acfdce6c24cae79944cce15a8fa07abc9ab6de33861abd43ff1e5948d217acc7aa3fd1a561abdddbad0ea60fb5088c8be468227fae9ac182c98de0b8833aba584f05023cbc4593a155463fc98a5e895d3297208913b4af3c81e7749db4580f6b19a247cc1cb15dc57d8cb2bc164f450fd252d2a903fa8e99ff99616ba949f323e6f9b69a1ff7e0ae57f9473164c1f60014a8e296d3bca29488346ea0220b8d9937a04d0e5a06a8ac25020c5e63c3f887c3c586601b652f9e2bc97ad88a8f1b895ec380da4b525472e290cf29a3ded06308fac229da619325e5221912a828e03e8ded81df5f709b452ce392a3a39c1aadd4612f8acf6247f4dcd082c1253f65279364c99a97757816a86ecddc05ad48a32158565d44aef33c0a6768fcb7af6c9ec8618efa0e8680761d00052f65a80a327bc74a1ad5975621e6c74e4e7b471c882ed63ac777eb34c6346cf603cbdfc14e76198fa83af5a742fbf385c9d528e6586653f24ed5374d70a4a5ea1ac7b4b04b49635f84b18a281921671df2bdc037ca182b9b645bc250c2001c36a46e8a4e4e850acf535edde1b4a233269d8ef7738d5532c75c71670921f8b4ea656ceb4a4066a04bb8a540988cc14e938b141fe51bf0d647de78bedd148cde21eff2428ebac2e4b40c466f2bac3100a16ba6fcffe361e752873c1e92104582ab48dedb3b93ddd29d81fac27b84e9a2538468f91172171e710aa992f3d488360be5f1a8ebf06223ff30d55953beea4abb0b3f6364834be74e9c6b6cf1a498bea069834892678217d12a0196df373e84e7c5c3c8e33d5666892bf2405f5f16203d5d8058f9c9ff54e7cdb429d2dddd14fd0009a9c36e4c4585b373228eec0fdc4d156950e4810f44867968937b4c8efeeebc32737b5a8a1a09c0308e65d528c877d3fa494b1c323baa49fe1c451a4fe1d4badf29e39d5387478b99f17f37fbe2fcb0fb1855a62476bcda1121a38a086c529fbe7b5764e2ae6c686a02051619740baada5a2fb76dc37f4ad80757dcaded49cb38e56674b4797ed403261d83a57832062c9dfc138c447d2543dfb21b44b423ce536b7472342ae0f788a36ea087f500b6476181d5379d7e8d70d8311e9e020f95750d314ab4e2fd4b8229cb354eba745eea10c66c7d0d1128fdfe91d6c7b1d0489264861f5404f6319a9ddc0b1bd0288b62dd76b79f86f0588e3a353b3098e1629de6808c2dc8ee7e432d3f7a4cabf102ad524ce4c6a3a2c962675e985378d904c4d6efade29e3f95ffe80a984d932e53643da5f622d535de5887b04c9c7616f31a16d279f26c02213532e3798645e4a09aa0785ab6e330818140347a2a80abd1d8e271bbf916c492125e914830f28619536ec7a1c842331ef2921b267e3666c96a122447e30928db0d29c958f9e492b8568734eb7f84ccddb1e5dbc0b6cc16c1fda02a524654a0ef8d4d01aad02f1a8fba9dacdb1380e38637203030ef1a8115d62c7c72ac7f7bf74b4decbefdc0f101d804c7f42e68ee44bbaed6fc36f0251b5ae9f42853d0954e46900fd75972f9af23cdf864f2f285f0f31521c5ad6e549084734f8dd510919aeb820ebd723b7ed30a89d6e2af2df8c4d796eb29c508b7306512d698cc153f0d35540bf757f3e25d4c573e71c4b4c8402bde20481d3459f11b477bfc5dab01281fb8e6c76cdad4974c14e0d2cdd93ab64b0810c18e8346ee495d0fc49f3b97a3a40f2d445777951521bd638000808f2c258daa20461eaeb98ccfc952bcd10364ac586843eef5096113b62e57828e5326f752431839cd9e71e13a248873c61065cf311cd6a3b37c12d952474fc8022fb11031d8091622ced80b12018f8a80e84d883c3749a5fac55c6f05e4ea352bc954fea3299aab478c2ae73e787c6dad3df26bd9317c7569f752b956fd806dd1f6d82df9ac538b7c404d1b97402c8ed3e90e9462b6a8bbae259cf20648872b549e01721da0adc082d0f4e03cd38ac5ad787beea3cc3ae43966a1402c7e54a5dd3d3d0cc62ad3a8283b74c2d3779375bae563de07ea3b1945c0bbce91fe1a824e04906255f4165f4e3d727ecca00e9abc587de38b825c6c7f86f4409642d6684205f90a03a880bd317c5aec106a461f3f158f152f26f7b4747213f631c5eb27f2b05ceb5da505ba05e82478e53021c484b08859dbccca5e1e6e38115995db6ba34891a604ab46574f8455f44a0e40658d944110a27908fc9d3b2147d2b3cad2bd9edae0a463b5800cc32f6f944cc7f35e06d67dc7fb227e3dffe2b11c29f8003a8aefd7469ae7488b2af5f3e4a843d40ec183262fa37d82a50cfbebc77253ac7259212fc492a6c33cc4fbc86e78f506a74be94e5edb9e6eb283a9f8a83101f3b3f13429c4a0032a0954c18b3455d2243a2c84ce1c9e8345a2d75f42ba376985fbabd979ffcd97aa6ed6452f1e1fd42a13e8f01271136652de2148fb54af4f3b93813014cfb5476423b0ec06172e0eeba8503a4e16faff749f8fc9b12a822ffae780416d3678432c0d658d5a712d2397291acf14d12412df8e9c353858b7fefbfe3bfb90699c5a4ea50cb895211e35170247eca1d44803beed64a61357cb0fc1f5babacfbac2c027ab56c7f010246f9bd5214b3349e751ab8a6dd7e69eebcf564684fe29c1e035f01caee11cd6a49dbe11a05920f41d3d9ac59d03483a33714603c0d1b5fe38ba9f517d170ded57fcd394bfe25e660e38a089993301ad58ae20cffb4a8d78f987e5fadc6be770249eae31a65c0d5b40156c225c0e1889b5c3a41b13597d7b6f290086f0f2f682e7c63c6f0a3f3b2fa88846cf0ac84b78a54a29c8155a0db21ed3e823d20284cedf75fdb40f6fd3e1099981cbc5f119846bd4ec29e55d0178e9a227b013519c28bdf8e9e04b5e4957719188ecc9331f598bb0719cb97c2408e884601c011b01d86652ba537c1f8713c608dad4994d4ed7f786771cfc51f0495406353b4850b77e9dea4fd684cfeaf6b2763499be4df9b6fb4c624b320da8d84ea25793aee5bd16bfaf5406cfded9f58c3f535f54c03bb1b20f4106a2465dcc3a758c1f1a924e567b99feda45d0742f073558db72c4eac0b729ba726fa086c21b8f4464b908c84e744c0c27a67911889b77c5e5dd8e87106825d939207da3a74289a197174ff2c1cd89d1659f398821f8f2cf0c81dbba69d6933896913904ced56cc50acbd337c36dacf175b264b9e9518d856ccccaaab6d0d329eee8383474e434a2d68c51256f57900e18adb4799ffc2f45fe0f550cd49242f494b9c45e16ef1c005e31f8523f2eb6c4598ccbed376f3a638264fc6fb128a2e63c8490ee3c5b2b2c8ac19f647de6e22ec7574a67ea49c9a5c404fa7b39ad98d2d017f2056239df839a2719be27d993767c1b46decdea2e31f4c8e73d7514bbae8f026048754fdae46017eae25ae6ca1288f3441aa6d0f962f1c62eea19663c8fb895148b36ef2ee1afa363d50f3053ffdcbda2e96e13c619b13b9fa6b31dca929126cf3bf1be8c9374c6fa652bae273679924172c1e4dd4e3f9a5f892532138d91375438c1dc98434d238ec81166aa28f878ef9f130676f55e3ecc808f718e7cedbf40dcb270368762d8", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 1m41.933897565s ago: executing program 2 (id=97): r0 = socket$xdp(0x2c, 0x3, 0x0) syslog(0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x200c17a) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x10c000, 0x800, 0x0, 0x1}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.05005914s ago: executing program 2 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") mount$binderfs(0x0, 0x0, 0x0, 0x80086, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c10, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x81, 0x29b, &(0x7f00000015c0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x42002, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r2}, 0x10) 1m40.29996301s ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce458195ad2b947a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m39.757282819s ago: executing program 2 (id=111): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m36.732503034s ago: executing program 2 (id=125): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 1m35.719040535s ago: executing program 32 (id=125): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 1m18.811603231s ago: executing program 3 (id=197): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0) mount$9p_virtio(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0) 1m17.844980351s ago: executing program 3 (id=205): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x1}, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m16.593437938s ago: executing program 3 (id=209): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x7f}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$l2tp6(0xa, 0x2, 0x73) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) 1m16.150835115s ago: executing program 3 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlinkat(&(0x7f0000000140)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') getdents64(r2, 0x0, 0x2e) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) 1m15.836904027s ago: executing program 3 (id=213): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) 1m14.605894808s ago: executing program 3 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m14.594877285s ago: executing program 33 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.116246775s ago: executing program 5 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@netkit}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) 4.564414352s ago: executing program 1 (id=551): sendto(0xffffffffffffffff, 0x0, 0x0, 0x4e000, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001dc0), 0x0, 0x100, 0x0) accept4(r1, 0x0, 0x0, 0x81000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000380)={0x0, 0xea60}, 0x10) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 4.492817898s ago: executing program 6 (id=556): writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c0000001e00190f00003fffffffda060200000000e80001dd0008040d000800", 0x20}], 0x1) 4.481227676s ago: executing program 1 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) 4.334105139s ago: executing program 0 (id=558): socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.070888379s ago: executing program 0 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 4.060471858s ago: executing program 5 (id=560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r6, r4, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c) dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x11000, 0x0, 0x0}, &(0x7f0000000080)=0x40) 4.009983398s ago: executing program 4 (id=561): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000003380), 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) r2 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.998188376s ago: executing program 5 (id=562): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() io_pgetevents(0x0, 0xe5, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.96722551s ago: executing program 4 (id=563): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) 2.945292149s ago: executing program 0 (id=564): r0 = socket(0x1e, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) connect$tipc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x88000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 2.945101849s ago: executing program 1 (id=565): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 2.944960339s ago: executing program 6 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32, @ANYRES32], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xe}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.943561909s ago: executing program 5 (id=567): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000200)={[{@debug}, {@noblock_validity}, {@abort}, {@nodioread_nolock}, {@errors_continue}, {@data_err_ignore}, {@nodiscard}, {@barrier}]}, 0x4, 0xbc8, &(0x7f0000002380)="$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") ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x2, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) setresuid(0x0, 0x0, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x1008800, &(0x7f0000000540)=ANY=[], 0xfe, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000002200)={0x10, 0x0, "2d92ccbd93dd1de85f5c4f986f7b62d7"}) 2.874044936s ago: executing program 4 (id=568): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x150}}, 0x804) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c00000010003904fcffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="19000000422200001800128008000100677265000c00028008000600031e6fe72a84fcbef4894b37277f00000108007d3d524d000014"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 2.064048675s ago: executing program 1 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.031707899s ago: executing program 6 (id=570): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x2) fchdir(r2) r3 = dup(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) r5 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) 1.98619292s ago: executing program 4 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet_smc(0x2b, 0x1, 0x0) 1.985938931s ago: executing program 0 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.185304381s ago: executing program 6 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000004a40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x80, @empty, 0x1}, 0x1c, 0x0}}], 0x5a, 0x0) 1.110289167s ago: executing program 4 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) 718.100614ms ago: executing program 1 (id=575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "000000000000959b", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "00000400", "1e00"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 717.748904ms ago: executing program 0 (id=576): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xb, 0x80, 0x2, 0xbe3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x1, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x4, 0x12f, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x9, 0x6c7, 0x1000, 0xc0fe626c, 0x3, 0x0, 0x2007, 0x492e0401, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x4, 0x6, 0x0, 0x5, 0xfffffffa, 0x100, 0x8d4, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0xffffffff, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x9, 0x38, 0x8, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaeb, 0x4, 0x25], [0x9, 0xbb31, 0x6, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x101, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x3, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="1a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 717.570374ms ago: executing program 0 (id=577): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3a, 0x1c, 0x7ffd, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100, @loopback}, {0x12, 0x7c, 0x0, @multicast2}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 619.434615ms ago: executing program 5 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 595.732421ms ago: executing program 1 (id=579): socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 98.134188ms ago: executing program 6 (id=580): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 97.877288ms ago: executing program 4 (id=581): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha384\x00'}}) 29.155226ms ago: executing program 6 (id=582): socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 0s ago: executing program 1 (id=584): sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x407}}}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) open(0x0, 0x48062, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300", @ANYBLOB='\b'], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): : hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.238827][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.240031][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.241486][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.242562][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.243620][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.245325][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.246719][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.247786][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.251731][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.253468][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.254832][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.255999][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.257815][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.258947][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.259079][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.260328][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.261674][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.262927][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.263526][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.264504][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.265571][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.266674][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.268862][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.268977][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.271781][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.307079][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.312526][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.314251][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.316915][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.390304][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 31.418883][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.420066][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.421818][ T4321] device bridge_slave_0 entered promiscuous mode [ 31.429124][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.430470][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.432067][ T4321] device bridge_slave_1 entered promiscuous mode [ 31.452755][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.456378][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 31.464224][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.483444][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.494046][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 31.505365][ T4321] team0: Port device team_slave_0 added [ 31.507403][ T4321] team0: Port device team_slave_1 added [ 31.515311][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.516802][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.518193][ T4325] device bridge_slave_0 entered promiscuous mode [ 31.519800][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 31.535382][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.536753][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.538192][ T4325] device bridge_slave_1 entered promiscuous mode [ 31.539881][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.540921][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.544618][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.551991][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.553048][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.556979][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.573040][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.574175][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.575657][ T4320] device bridge_slave_0 entered promiscuous mode [ 31.579521][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.580632][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.582050][ T4332] device bridge_slave_0 entered promiscuous mode [ 31.583995][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.585164][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.589464][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.647607][ T4321] device hsr_slave_0 entered promiscuous mode [ 31.696773][ T4321] device hsr_slave_1 entered promiscuous mode [ 31.736674][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.737812][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.739354][ T4320] device bridge_slave_1 entered promiscuous mode [ 31.742011][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.743482][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.745167][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.749148][ T4332] device bridge_slave_1 entered promiscuous mode [ 31.750642][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.751767][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.753172][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.757415][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.769844][ T4325] team0: Port device team_slave_0 added [ 31.772268][ T4325] team0: Port device team_slave_1 added [ 31.781913][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.790162][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.792369][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.794602][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.796303][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.797787][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.801647][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.806579][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.808808][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.812352][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.813377][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.817390][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.836801][ T4320] team0: Port device team_slave_0 added [ 31.839125][ T4329] team0: Port device team_slave_0 added [ 31.843014][ T4332] team0: Port device team_slave_0 added [ 31.844605][ T4320] team0: Port device team_slave_1 added [ 31.851722][ T4329] team0: Port device team_slave_1 added [ 31.854499][ T4332] team0: Port device team_slave_1 added [ 31.867280][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.868307][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.872170][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.874634][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.875697][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.879980][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.927587][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.966979][ T4325] device hsr_slave_1 entered promiscuous mode [ 32.006539][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.007774][ T4325] Cannot create hsr debugfs directory [ 32.020451][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.021497][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.025254][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.037548][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.038771][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.042939][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.045058][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.046233][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.050469][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.061532][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.062546][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.066352][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.127596][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.169186][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.208868][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.210097][ T4329] Cannot create hsr debugfs directory [ 32.249930][ T4320] device hsr_slave_0 entered promiscuous mode [ 32.288996][ T4320] device hsr_slave_1 entered promiscuous mode [ 32.326512][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.327730][ T4320] Cannot create hsr debugfs directory [ 32.397491][ T4332] device hsr_slave_0 entered promiscuous mode [ 32.437246][ T4332] device hsr_slave_1 entered promiscuous mode [ 32.476536][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.477729][ T4332] Cannot create hsr debugfs directory [ 32.536857][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.563101][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.597541][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.644623][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.694709][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.737817][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.780503][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.820276][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.889433][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.929655][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.978159][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.021109][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.074853][ T4320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.107639][ T4320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.148020][ T4320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.212525][ T4320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.265728][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.297082][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 33.298139][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 33.299102][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 33.308072][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.361736][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.376709][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 33.376792][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 33.409204][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.411888][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.474878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.477201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.481684][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.489710][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.496205][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.501019][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.502530][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.503869][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.505384][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.508310][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.509494][ T1813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.511058][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.522327][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.523887][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.525442][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.526510][ T1813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.528619][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.530248][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.532487][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.533972][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.535648][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.536759][ T1813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.538680][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.542951][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.544755][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.553818][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.555408][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.566403][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.571712][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.573175][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.574613][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.576119][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.577160][ T1813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.579051][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.580678][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.582260][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.583896][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.585432][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.588031][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.589608][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.591102][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.592931][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.594304][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.595581][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.597501][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.599066][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.600509][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.611594][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.613104][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.614517][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.616013][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.627949][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.631955][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.640376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.641892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.645958][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.660144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.661741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.663132][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.664236][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.665459][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.668677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.670143][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.671136][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.676425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.678625][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.680485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.684305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.689967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.692851][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.702422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.704223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.705768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.708811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.710221][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.711286][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.712541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.714181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.726638][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.730784][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.732465][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.733806][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.735044][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.736221][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.738789][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.740136][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.741563][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.742914][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.743945][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.749466][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.755454][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.758427][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.759990][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.765850][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.768173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.769411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.770698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.772194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.773650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.779757][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.782335][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.790949][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.792869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.794926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.809696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.811316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.812883][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.814468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.816009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.818205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.819842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.821251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.824853][ T4321] device veth0_vlan entered promiscuous mode [ 33.838442][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.840450][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.841881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.843399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.845018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.848681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.850126][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.851107][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.852808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.854478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.855744][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.856883][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.859208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.860791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.862378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.863891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.865343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.867702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.869701][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.871184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.876883][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.878556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.879913][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.881371][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.888548][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.890046][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.891481][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.892949][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.894533][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.895824][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.902150][ T4321] device veth1_vlan entered promiscuous mode [ 33.904223][ T4325] device veth0_vlan entered promiscuous mode [ 33.923328][ T4325] device veth1_vlan entered promiscuous mode [ 33.930624][ T4321] device veth0_macvtap entered promiscuous mode [ 33.933047][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.934560][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.936259][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.942061][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.947769][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.949066][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.950206][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.951719][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.953179][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.954706][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.960856][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.964284][ T4321] device veth1_macvtap entered promiscuous mode [ 33.967205][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.968829][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.970916][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.989328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.990914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.996247][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.001771][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.003331][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.008943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.010380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.012564][ T4325] device veth0_macvtap entered promiscuous mode [ 34.015201][ T4325] device veth1_macvtap entered promiscuous mode [ 34.032811][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.034302][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.035786][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.040781][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.041906][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.043081][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.044835][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.049377][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.050970][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.052963][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.054953][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.067144][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.070222][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.072700][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.074004][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.075288][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.076871][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.081014][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.082590][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.084113][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.085432][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.087071][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.088471][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.090065][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.091298][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.095138][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.098020][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.099299][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.100666][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.108251][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.118855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.120136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.122009][ T4329] device veth0_vlan entered promiscuous mode [ 34.135461][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.151325][ T4329] device veth1_vlan entered promiscuous mode [ 34.171893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.173472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.174781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.176234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.206066][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.207725][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.209897][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.211061][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.214070][ T4329] device veth0_macvtap entered promiscuous mode [ 34.219774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.221187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.222724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.224126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.225700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.228716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.237207][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.238419][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.239740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.243369][ T4332] device veth0_vlan entered promiscuous mode [ 34.253639][ T1813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.254370][ T4332] device veth1_vlan entered promiscuous mode [ 34.254813][ T1813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.257449][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.258754][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.260332][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.262136][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.263554][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.269185][ T4329] device veth1_macvtap entered promiscuous mode [ 34.283670][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.285261][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.295330][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.297662][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.299397][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.300981][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.303134][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.306193][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.308714][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.312973][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.314809][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.319474][ T4332] device veth0_macvtap entered promiscuous mode [ 34.324410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.326056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.330171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.345325][ T4320] device veth0_vlan entered promiscuous mode [ 34.349202][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.350773][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.352171][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.353684][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.355756][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.367797][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.369195][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.374390][ T4402] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 34.381482][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.382825][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.392658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.394212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.395896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.398683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.401474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.402790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.406317][ T4332] device veth1_macvtap entered promiscuous mode [ 34.426296][ T4320] device veth1_vlan entered promiscuous mode [ 34.433768][ T4320] device veth0_macvtap entered promiscuous mode [ 34.445178][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.448972][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.450392][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.452342][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.453849][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.455299][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.457575][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.458661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.460021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.461416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.462926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.464567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.466318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.471134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.472556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.478393][ T4320] device veth1_macvtap entered promiscuous mode [ 34.482450][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.484378][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.485965][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.494942][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.496409][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.498509][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.499995][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.501676][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.504499][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.528467][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.529766][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.533163][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.537543][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.539023][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.540513][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.542041][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.542141][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.543465][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.546179][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.550004][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.551962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.553363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.554895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.557334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.561715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.563051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.564571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.569944][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.571597][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.573503][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.575148][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.632519][ T4409] loop1: detected capacity change from 0 to 16 [ 34.637501][ T4409] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 34.845941][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.847736][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.849208][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.850735][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.852874][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.854676][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.863735][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.867385][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.870337][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.874252][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.875968][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.891611][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.893144][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.894547][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.896035][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.942807][ T4411] loop2: detected capacity change from 0 to 512 [ 34.951422][ T4411] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.955333][ T4411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.972758][ T4411] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.976602][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.977871][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.980083][ T4411] EXT4-fs (loop2): 1 truncate cleaned up [ 34.981307][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.982179][ T4411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.016027][ T1813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.018061][ T1813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.019871][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.083900][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.085315][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.087085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.103398][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.104698][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.105876][ T97] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.366888][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 35.366961][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 35.369131][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 35.449123][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 35.456596][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 35.487452][ T4423] loop1: detected capacity change from 0 to 1024 [ 35.821593][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 35.899135][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 35.906372][ T4425] team0 (unregistering): Failed to send options change via netlink (err -105) [ 35.908511][ T4425] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 35.910654][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 37.082077][ C0] vcan0: j1939_tp_rxtimer: 0x0000000002f53642: rx timeout, send abort [ 37.193796][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 37.446505][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 37.447550][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 37.447745][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 37.517039][ T4453] batman_adv: batadv0: Adding interface: dummy0 [ 37.518221][ T4453] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.524410][ T4453] batman_adv: batadv0: Interface activated: dummy0 [ 37.527721][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 37.528021][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 37.537690][ T4453] batadv0: mtu less than device minimum [ 37.540397][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.543565][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.546726][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.549649][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.552622][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.555537][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.558556][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.561523][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.564432][ T4453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.591125][ C0] vcan0: j1939_tp_rxtimer: 0x00000000820c2a5a: rx timeout, send abort [ 37.592468][ C0] vcan0: j1939_tp_rxtimer: 0x0000000002f53642: abort rx timeout. Force session deactivation [ 38.080915][ C0] vcan0: j1939_tp_rxtimer: 0x000000004318bed0: rx timeout, send abort [ 38.092521][ C0] vcan0: j1939_tp_rxtimer: 0x00000000820c2a5a: abort rx timeout. Force session deactivation [ 38.582188][ C0] vcan0: j1939_tp_rxtimer: 0x000000004318bed0: abort rx timeout. Force session deactivation [ 38.729717][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 38.732162][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 38.762270][ T4481] binder: 4478:4481 tried to acquire reference to desc 0, got 1 instead [ 38.798392][ T14] binder: release 4478:4481 transaction 5 out, still active [ 38.836847][ T14] binder: undelivered TRANSACTION_COMPLETE [ 39.124225][ T4489] netlink: 'syz.1.28': attribute type 13 has an invalid length. [ 39.134036][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.138519][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.139852][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.148416][ T14] binder: send failed reply for transaction 5, target dead [ 39.526926][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 39.527886][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 39.529099][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 39.832615][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 39.836298][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 40.517564][ T4514] Invalid ELF header magic: != ELF [ 40.866949][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 40.881247][ T4512] device vlan2 entered promiscuous mode [ 40.884081][ T4512] device bridge0 entered promiscuous mode [ 41.009851][ T4522] binder: 4521:4522 tried to acquire reference to desc 0, got 1 instead [ 41.013962][ T4522] binder: 4521:4522 got transaction with invalid data ptr [ 41.015234][ T4522] binder: 4521:4522 transaction async to 4521:0 failed 10/29201/-14, size 0-24 line 3333 [ 41.019485][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.024529][ T4524] loop2: detected capacity change from 0 to 736 [ 41.549054][ T4538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 42.330336][ T4551] fuse: Bad value for 'fd' [ 43.057945][ T4536] loop2: detected capacity change from 0 to 131072 [ 43.063238][ T4536] ======================================================= [ 43.063238][ T4536] WARNING: The mand mount option has been deprecated and [ 43.063238][ T4536] and is ignored by this kernel. Remove the mand [ 43.063238][ T4536] option from the mount to silence this warning. [ 43.063238][ T4536] ======================================================= [ 43.069798][ T4567] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 43.095446][ T4536] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 43.101037][ T4569] device vlan2 entered promiscuous mode [ 43.104459][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 43.229837][ T4572] loop1: detected capacity change from 0 to 512 [ 43.232984][ T4572] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.244715][ T4572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.446084][ T4572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.520655][ T4581] binder: 4580:4581 tried to acquire reference to desc 0, got 1 instead [ 43.541152][ T4369] binder: release 4580:4581 transaction 16 out, still active [ 43.542467][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 43.543546][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 43.565441][ T4369] binder: undelivered transaction 15, process died. [ 43.566937][ T4369] binder: send failed reply for transaction 16, target dead [ 43.983407][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 44.068355][ T4592] device syzkaller0 entered promiscuous mode [ 44.069109][ T4596] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.070543][ T4596] overlayfs: failed to set xattr on upper [ 44.071320][ T4596] overlayfs: ...falling back to index=off,metacopy=off. [ 44.590140][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.591713][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.029040][ T4600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.030266][ T4600] IPv6: NLM_F_CREATE should be set when creating new route [ 45.118170][ T4612] binder: 4611:4612 ioctl 4018620d 0 returned -22 [ 45.127317][ T4418] wlan1: Trigger new scan to find an IBSS to join [ 45.485258][ T4616] syz.1.63 (4616): drop_caches: 2 [ 46.734098][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.735692][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.928928][ T4635] loop1: detected capacity change from 0 to 256 [ 47.079952][ T4635] FAT-fs (loop1): Directory bread(block 64) failed [ 47.081342][ T4635] FAT-fs (loop1): Directory bread(block 65) failed [ 47.082601][ T4635] FAT-fs (loop1): Directory bread(block 66) failed [ 47.083789][ T4635] FAT-fs (loop1): Directory bread(block 67) failed [ 47.084992][ T4635] FAT-fs (loop1): Directory bread(block 68) failed [ 47.086074][ T4635] FAT-fs (loop1): Directory bread(block 69) failed [ 47.087303][ T4635] FAT-fs (loop1): Directory bread(block 70) failed [ 47.088361][ T4635] FAT-fs (loop1): Directory bread(block 71) failed [ 47.089568][ T4635] FAT-fs (loop1): Directory bread(block 72) failed [ 47.090709][ T4635] FAT-fs (loop1): Directory bread(block 73) failed [ 48.475760][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.493264][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.564719][ T4656] binder: BINDER_SET_CONTEXT_MGR already set [ 48.565783][ T4656] binder: 4653:4656 ioctl 4018620d 20004a80 returned -16 [ 48.571249][ T4656] binder: tried to use weak ref as strong ref [ 48.572275][ T4656] binder: 4653:4656 Acquire 1 refcount change on invalid ref 0 ret -22 [ 48.573803][ T4656] binder: 4653:4656 got transaction to invalid handle, 1 [ 48.574919][ T4656] binder: 4656:4653 cannot find target node [ 48.575795][ T4656] binder: 4653:4656 transaction call to 0:0 failed 23/29201/-22, size 0-0 line 3045 [ 48.581699][ T4656] binder: 4653:4656 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.583796][ T4656] binder: 4656 RLIMIT_NICE not set [ 48.956974][ T4658] binder: 4653:4658 got reply transaction with no transaction stack [ 49.066542][ T4658] binder: 4653:4658 transaction reply to 0:0 failed 24/29201/-71, size 240-0 line 2946 [ 49.223150][ T4603] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.224498][ T4603] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.225902][ T4603] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.227308][ T4603] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.397202][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.398488][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.503808][ T4336] Bluetooth: hci3: Malformed Event: 0x48 [ 50.086595][ T4515] wlan1: Trigger new scan to find an IBSS to join [ 50.269727][ T4689] binder: 4688:4689 tried to acquire reference to desc 0, got 1 instead [ 50.271854][ T4689] binder: release 4688:4689 transaction 29 out, still active [ 50.296690][ T4689] binder: undelivered TRANSACTION_COMPLETE [ 50.366734][ T4505] binder: send failed reply for transaction 29, target dead [ 50.783755][ T4702] tipc: Started in network mode [ 50.784740][ T4702] tipc: Node identity ac1414aa, cluster identity 4711 [ 50.786340][ T4702] tipc: Enabled bearer , priority 10 [ 50.787394][ T4694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.824111][ T4702] tipc: Enabling of bearer rejected, failed to enable media [ 51.359485][ T4706] loop1: detected capacity change from 0 to 164 [ 51.407301][ T4515] wlan1: Creating new IBSS network, BSSID 0a:40:17:52:4d:07 [ 51.462567][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.549663][ T4718] ptrace attach of "./syz-executor exec"[4329] was attempted by " [ 51.796775][ T112] tipc: Node number set to 2886997162 [ 53.213844][ T4749] binder: 4748:4749 tried to acquire reference to desc 0, got 1 instead [ 53.215585][ T4747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 53.215730][ T4749] binder: 4748:4749 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.219049][ T4749] binder: 4749 RLIMIT_NICE not set [ 53.220816][ T4749] binder: 4748:4749 transaction reply to 0:0 failed 35/29201/-71, size 0-0 line 2961 [ 53.222326][ T4749] binder_alloc: 4748: binder_alloc_buf, no vma [ 53.228555][ T4749] binder: cannot allocate buffer: vma cleared, target dead or dying [ 53.229727][ T4751] loop3: detected capacity change from 0 to 128 [ 53.238993][ T4751] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 53.275509][ T4755] loop0: detected capacity change from 0 to 2048 [ 53.317567][ T4757] loop2: detected capacity change from 0 to 512 [ 53.319006][ T4757] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.322332][ T4757] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 53.324006][ T4757] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 53.330660][ T4755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 53.588990][ T4764] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 53.887875][ T4314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.898204][ T4757] loop2: detected capacity change from 0 to 256 [ 53.899568][ T4314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.950476][ T4770] capability: warning: `syz.2.108' uses deprecated v2 capabilities in a way that may be insecure [ 53.952997][ T4770] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 53.955793][ T4770] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.418024][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 54.439618][ T4770] overlayfs: cannot set trusted.overlay.origin xattr on upper [ 56.548320][ T4806] loop0: detected capacity change from 0 to 32768 [ 57.356322][ T4819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 57.483836][ T4806] XFS (loop0): Mounting V5 Filesystem [ 57.516789][ T4806] XFS (loop0): Ending clean mount [ 58.436440][ C1] sched: RT throttling activated [ 58.559174][ T4325] XFS (loop0): Unmounting Filesystem [ 58.575138][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.583359][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.584985][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.586929][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.588405][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.589733][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.658388][ T97] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.771246][ T97] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.331248][ T97] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.627788][ T4837] chnl_net:caif_netlink_parms(): no params data found [ 60.032089][ T4877] loop3: detected capacity change from 0 to 256 [ 61.190712][ T4877] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.192486][ T4877] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 61.208959][ T4877] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 61.306976][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 61.374593][ T4881] loop0: detected capacity change from 0 to 512 [ 61.428234][ T97] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.447559][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.451519][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.454938][ T4837] device bridge_slave_0 entered promiscuous mode [ 61.467759][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.468985][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.470472][ T4837] device bridge_slave_1 entered promiscuous mode [ 61.484463][ T4837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.485668][ T4881] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.487746][ T4837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.500937][ T4837] team0: Port device team_slave_0 added [ 61.504054][ T4837] team0: Port device team_slave_1 added [ 61.514178][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.515267][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.520745][ T4837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.523154][ T4881] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 61.523445][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.525320][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.529522][ T4837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.530749][ T4892] loop1: detected capacity change from 0 to 512 [ 61.560801][ T4881] EXT4-fs (loop0): unmounting filesystem. [ 61.580781][ T4892] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.140: iget: bad i_size value: 38620345925642 [ 61.588044][ T4837] device hsr_slave_0 entered promiscuous mode [ 61.592951][ T4892] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.140: couldn't read orphan inode 15 (err -117) [ 61.608196][ T4892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.661950][ T4837] device hsr_slave_1 entered promiscuous mode [ 62.006601][ T4837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.008594][ T4837] Cannot create hsr debugfs directory [ 62.027609][ T4892] loop1: detected capacity change from 512 to 1 [ 62.032583][ T4904] syz.1.140: attempt to access beyond end of device [ 62.032583][ T4904] loop1: rw=2049, sector=56, nr_sectors = 14 limit=1 [ 62.036127][ T4904] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 16 starting block 28) [ 62.042558][ T4904] Buffer I/O error on device loop1, logical block 28 [ 62.043676][ T4904] Buffer I/O error on device loop1, logical block 29 [ 62.044661][ T4904] Buffer I/O error on device loop1, logical block 30 [ 62.053179][ T4904] Buffer I/O error on device loop1, logical block 31 [ 62.054257][ T4904] Buffer I/O error on device loop1, logical block 32 [ 62.055326][ T4904] Buffer I/O error on device loop1, logical block 33 [ 62.056323][ T4904] Buffer I/O error on device loop1, logical block 34 [ 62.074871][ T4904] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.140: bg 0: block 5: invalid block bitmap [ 62.080692][ T4904] syz.1.140: attempt to access beyond end of device [ 62.080692][ T4904] loop1: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 62.097305][ T4904] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 62.098929][ T4904] EXT4-fs (loop1): I/O error while writing superblock [ 62.103232][ T4904] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 57 with error 28 [ 62.105324][ T4904] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.105324][ T4904] [ 62.110239][ T4904] EXT4-fs (loop1): Total free blocks count 0 [ 62.112417][ T4904] EXT4-fs (loop1): Free/Dirty block details [ 62.113311][ T4904] EXT4-fs (loop1): free_blocks=0 [ 62.114247][ T4904] EXT4-fs (loop1): dirty_blocks=57 [ 62.115024][ T4904] EXT4-fs (loop1): Block reservation details [ 62.122031][ T4904] EXT4-fs (loop1): i_reserved_data_blocks=57 [ 62.173857][ T4321] syz-executor: attempt to access beyond end of device [ 62.173857][ T4321] loop1: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 62.176220][ T4321] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 62.361689][ T4837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.401951][ T4926] tipc: Started in network mode [ 62.403335][ T4926] tipc: Node identity 42aec014b502, cluster identity 4711 [ 62.404709][ T4926] tipc: Enabled bearer , priority 0 [ 62.406065][ T4921] device syzkaller0 entered promiscuous mode [ 62.475338][ T4837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.488710][ T4928] binder_user_error: 3 callbacks suppressed [ 62.488718][ T4928] binder: 4927:4928 tried to acquire reference to desc 0, got 1 instead [ 62.491795][ T4928] binder: 4927:4928 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.493855][ T4928] binder: 4928 RLIMIT_NICE not set [ 62.494643][ T4928] binder: 4928 RLIMIT_NICE not set [ 62.495650][ T4928] binder: 4928 RLIMIT_NICE not set [ 62.503551][ T4463] binder_debug: 6 callbacks suppressed [ 62.503560][ T4463] binder: undelivered TRANSACTION_COMPLETE [ 62.505420][ T4463] binder: undelivered transaction 42, process died. [ 62.506902][ T4463] binder: undelivered TRANSACTION_COMPLETE [ 62.519186][ T4837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.533339][ T4932] Bluetooth: MGMT ver 1.22 [ 62.590077][ T4925] tipc: Resetting bearer [ 62.651185][ T4837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.670519][ T4934] 9pnet_fd: Insufficient options for proto=fd [ 62.701052][ T4920] tipc: Resetting bearer [ 62.757173][ T4920] tipc: Disabling bearer [ 62.763725][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.765958][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.774477][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.784521][ T4934] net_ratelimit: 10 callbacks suppressed [ 62.784536][ T4934] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 62.791436][ C1] Illegal XDP return value 16128 on prog (id 19) dev veth0_to_bridge, expect packet loss! [ 63.209352][ T4953] loop3: detected capacity change from 0 to 256 [ 63.238584][ T4953] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.240307][ T4953] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 63.257521][ T4953] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 63.366854][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 63.737765][ T4958] binder: 4956:4958 tried to acquire reference to desc 0, got 1 instead [ 63.751883][ T4958] binder: 4956:4958 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.753849][ T4958] binder: 4958 RLIMIT_NICE not set [ 63.754645][ T4958] binder: 4958 RLIMIT_NICE not set [ 63.832387][ T4958] binder: 4958 RLIMIT_NICE not set [ 63.833231][ T4958] binder_alloc: 4956: binder_alloc_buf, no vma [ 63.834223][ T4958] binder: cannot allocate buffer: vma cleared, target dead or dying [ 63.834254][ T4958] binder: 4956:4958 transaction reply to 4956:4958 failed 48/29189/-3, size 0-0 line 3230 [ 64.231698][ T4958] binder: send failed reply for transaction 47 to 4956:4958 [ 64.247711][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 64.250887][ T4369] binder: undelivered TRANSACTION_ERROR: 29189 [ 64.285888][ T4369] binder: undelivered TRANSACTION_ERROR: 29190 [ 64.488012][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489515][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.524768][ T4837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.530786][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.532381][ T1813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.540398][ T4980] loop3: detected capacity change from 0 to 512 [ 64.572875][ T4980] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 64.574548][ T4980] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 64.576192][ T4980] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 64.580534][ T4980] EXT4-fs (loop3): group descriptors corrupted! [ 64.648427][ T4837] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.667082][ T4985] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 64.677848][ T4985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.679939][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.681411][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.682736][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.684315][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.685987][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.693061][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.694706][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.695896][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.699315][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.706158][ T4991] bond1: (slave ip6gretap1): making interface the new active one [ 65.003663][ T4991] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 65.051095][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.053178][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 65.054832][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.064433][ T4985] device veth3 entered promiscuous mode [ 65.067653][ T4985] bond1: (slave veth3): Enslaving as an active interface with a down link [ 65.073447][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.083356][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.093540][ T4837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.096143][ T4837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.190313][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.191925][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.194698][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.197396][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.200064][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.201841][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.203400][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.213302][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.514145][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 65.802771][ T5021] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 65.810057][ T5021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.821328][ T5023] bond1: (slave ip6gretap1): making interface the new active one [ 65.834353][ T5023] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 65.840378][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.841699][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.915834][ T4837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.472561][ T97] device hsr_slave_0 left promiscuous mode [ 67.526771][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 67.608205][ T97] device hsr_slave_1 left promiscuous mode [ 67.667305][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.668576][ T97] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.670581][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.671754][ T97] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.673306][ T97] device bridge_slave_1 left promiscuous mode [ 67.675003][ T97] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.730146][ T97] device bridge_slave_0 left promiscuous mode [ 67.731483][ T97] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.828704][ T5062] loop1: detected capacity change from 0 to 131072 [ 67.830715][ T5062] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 67.833666][ T5062] F2FS-fs (loop1): invalid crc value [ 67.836843][ T5062] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 67.849280][ T5062] F2FS-fs (loop1): recover fsync data on readonly fs [ 67.850517][ T5062] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix. [ 67.853721][ T5062] F2FS-fs (loop1): Bad quota inode 2:393216 [ 67.854768][ T5062] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 67.856749][ T5062] F2FS-fs (loop1): Cannot turn on quota_ino: -22 [ 67.859047][ T5062] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 67.877891][ T97] device veth1_macvtap left promiscuous mode [ 67.879252][ T97] device veth0_macvtap left promiscuous mode [ 67.880461][ T97] device veth1_vlan left promiscuous mode [ 67.881546][ T97] device veth0_vlan left promiscuous mode [ 68.960049][ T5095] loop3: detected capacity change from 0 to 512 [ 69.050441][ T5095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.419436][ T5095] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 69.609100][ T22] cfg80211: failed to load regulatory.db [ 71.446072][ T5125] loop1: detected capacity change from 0 to 8192 [ 71.454911][ T5125] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 71.828862][ T97] team0 (unregistering): Port device team_slave_1 removed [ 71.997808][ T97] team0 (unregistering): Port device team_slave_0 removed [ 72.168498][ T97] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.377307][ T97] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.848088][ T97] bond0 (unregistering): Released all slaves [ 74.198892][ T5080] netlink: 'syz.4.172': attribute type 4 has an invalid length. [ 74.207623][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.209215][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.248165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.249675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.251171][ T4837] device veth0_vlan entered promiscuous mode [ 74.252500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.253925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.268912][ T4837] device veth1_vlan entered promiscuous mode [ 74.305994][ T4837] device veth0_macvtap entered promiscuous mode [ 74.308264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.309810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.311188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.312785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.315197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.321817][ T4837] device veth1_macvtap entered promiscuous mode [ 74.332795][ T5141] loop3: detected capacity change from 0 to 8192 [ 74.364078][ T5141] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 74.422020][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.423840][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.425444][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.427461][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.428971][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.430543][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.447184][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.453716][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.455367][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.457552][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.470383][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.472088][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.473625][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.475177][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.551369][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.553073][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.555619][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.557601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.567900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.569679][ T5165] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 74.585931][ T5151] loop1: detected capacity change from 0 to 32768 [ 74.883847][ T5165] device bond1 entered promiscuous mode [ 74.892957][ T5165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.896051][ T4837] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.899489][ T4837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.901592][ T4837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.905042][ T4837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.932345][ T5165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'. [ 74.952350][ T5165] bond1: (slave bridge1): making interface the new active one [ 74.953560][ T5165] device bridge1 entered promiscuous mode [ 74.955781][ T5165] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 74.974230][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 74.981440][ T5151] JBD2: Ignoring recovery information on journal [ 74.989982][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.991381][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.998560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.012591][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.014045][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.015362][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.116039][ T5151] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 75.423552][ T5151] ocfs2: Unmounting device (7,1) on (node local) [ 75.493645][ T5198] binder_user_error: 2 callbacks suppressed [ 75.493654][ T5198] binder: 5196:5198 tried to acquire reference to desc 0, got 1 instead [ 75.497548][ T5198] binder: release 5196:5198 transaction 53 out, still active [ 75.514709][ T5198] binder: undelivered TRANSACTION_COMPLETE [ 75.515951][ T5198] binder: 5196:5198 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.526091][ T4313] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.536087][ T5198] binder: 5198 RLIMIT_NICE not set [ 75.537094][ T5198] binder: 5198 RLIMIT_NICE not set [ 75.555443][ T5198] binder: 5198 RLIMIT_NICE not set [ 75.556244][ T5198] binder: 5198:5196 reply target not found [ 75.557884][ T5198] binder: 5196:5198 transaction reply to 0:0 failed 54/29189/0, size 0-0 line 2975 [ 75.559345][ T5198] binder: send failed reply for transaction 53, target dead [ 75.601748][ T22] binder: undelivered TRANSACTION_ERROR: 29190 [ 76.358550][ T5211] sctp: [Deprecated]: syz.4.201 (pid 5211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.358550][ T5211] Use struct sctp_sack_info instead [ 76.444482][ T5219] loop1: detected capacity change from 0 to 16 [ 76.455311][ T5219] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.493306][ T5219] syz.1.204: attempt to access beyond end of device [ 76.493306][ T5219] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 77.615403][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 77.643043][ T5219] syz.1.204: attempt to access beyond end of device [ 77.643043][ T5219] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 77.645240][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 77.661479][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[8192] [ 77.663263][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[8192] [ 77.737823][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[8192] [ 77.739636][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[8192] [ 78.067321][ T5219] syz.1.204: attempt to access beyond end of device [ 78.067321][ T5219] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 78.071807][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[9000] [ 78.080279][ T5219] syz.1.204: attempt to access beyond end of device [ 78.080279][ T5219] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 78.094616][ T5219] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[9000] [ 78.175653][ T5260] loop1: detected capacity change from 0 to 1024 [ 78.193483][ T5260] hfsplus: failed to load extents file [ 78.615065][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.217'. [ 78.625550][ T5290] overlayfs: failed to clone upperpath [ 79.010096][ T5292] netlink: 1032 bytes leftover after parsing attributes in process `syz.5.217'. [ 79.042496][ T5301] tipc: Started in network mode [ 79.043365][ T5301] tipc: Node identity 4, cluster identity 4711 [ 79.044342][ T5301] tipc: Node number set to 4 [ 79.668782][ T5324] loop5: detected capacity change from 0 to 2048 [ 79.673424][ T5327] loop4: detected capacity change from 0 to 512 [ 79.696242][ T5324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.754503][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.758662][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.761065][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.762995][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.769887][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.771300][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.782767][ T5327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.159444][ T5340] loop1: detected capacity change from 0 to 512 [ 80.170159][ T5340] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.175039][ T5340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.201037][ T5340] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.230: inode has both inline data and extents flags [ 80.207821][ T5340] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.230: couldn't read orphan inode 15 (err -117) [ 80.213017][ T5340] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.222139][ T4660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.256355][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 80.418661][ T5340] netlink: 'syz.1.230': attribute type 30 has an invalid length. [ 80.635929][ T5340] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.637596][ T5340] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.638855][ T5340] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.640101][ T5340] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.666163][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 80.670927][ T5340] netlink: 'syz.1.230': attribute type 30 has an invalid length. [ 80.674059][ T5340] Zero length message leads to an empty skb [ 80.709573][ T4660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.719351][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 80.807902][ T4660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.251952][ T4660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.319556][ T5330] chnl_net:caif_netlink_parms(): no params data found [ 81.382006][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 81.415095][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 81.423925][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.425507][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.815038][ T5330] device bridge_slave_0 entered promiscuous mode [ 81.820028][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.828848][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.832864][ T5330] device bridge_slave_1 entered promiscuous mode [ 81.866709][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 82.422640][ T5330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.445408][ T5330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.461191][ T5393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.494670][ T5330] team0: Port device team_slave_0 added [ 82.500733][ T5330] team0: Port device team_slave_1 added [ 82.511672][ T5393] device veth0 entered promiscuous mode [ 82.529846][ T5393] bond2: (slave macvlan2): making interface the new active one [ 83.322130][ T5393] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 83.336220][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.337453][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.341041][ T5330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.343305][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.344379][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.348121][ T5330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.397786][ T5330] device hsr_slave_0 entered promiscuous mode [ 83.508586][ T5330] device hsr_slave_1 entered promiscuous mode [ 83.546632][ T5330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.547911][ T5330] Cannot create hsr debugfs directory [ 83.550529][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 83.926531][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 83.962481][ T5430] team0 (unregistering): Port device team_slave_0 removed [ 83.969233][ T5430] team0 (unregistering): Failed to send options change via netlink (err -105) [ 83.970703][ T5430] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 83.972795][ T5430] team0 (unregistering): Port device team_slave_1 removed [ 84.030872][ T4660] tipc: Disabling bearer [ 84.032719][ T4660] tipc: Left network mode [ 84.135706][ T5330] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.177863][ T5330] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.334463][ T5330] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.365519][ T5466] netlink: 104 bytes leftover after parsing attributes in process `syz.0.254'. [ 84.688618][ T5330] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.737682][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 84.740844][ T5463] device vlan3 entered promiscuous mode [ 84.741830][ T5463] device bridge0 entered promiscuous mode [ 85.344157][ T5485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.349573][ T5485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.018802][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 86.234310][ T5330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.242574][ T5330] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.254549][ T5330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.256007][ T5330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.278732][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.280261][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.281552][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.282907][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.284302][ T4875] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.285371][ T4875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.291701][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.293223][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.294541][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.295540][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.297200][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.298714][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.300381][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.302931][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.304372][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.305877][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.341162][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.342675][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.346338][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.348231][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.349781][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.351222][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.352574][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.460984][ T5330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.466156][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.467513][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.759651][ T5536] Invalid ELF header magic: != ELF [ 88.130252][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 88.230188][ T5497] team0 (unregistering): Port device team_slave_0 removed [ 88.244320][ T5497] team0 (unregistering): Port device team_slave_1 removed [ 88.879251][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 88.946779][ T5543] device vlan2 entered promiscuous mode [ 88.947840][ T5543] device bridge0 entered promiscuous mode [ 89.029601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.031607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.093031][ T5330] device veth0_vlan entered promiscuous mode [ 89.096269][ T5330] device veth1_vlan entered promiscuous mode [ 90.225091][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.226903][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.228450][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.229873][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.231322][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.232747][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.234695][ T5330] device veth0_macvtap entered promiscuous mode [ 90.238299][ T5330] device veth1_macvtap entered promiscuous mode [ 90.249865][ T5562] netlink: 'syz.4.270': attribute type 13 has an invalid length. [ 90.260311][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 90.262259][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 90.578084][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.579783][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.581154][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.780920][ T5591] device syzkaller0 entered promiscuous mode [ 90.805927][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.808367][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.809953][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.811497][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.812932][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.814582][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.815992][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.817790][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.821037][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.197718][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.199547][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.201898][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.203478][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.205028][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.214215][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.215903][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.217685][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.219408][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.221013][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.223456][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.642107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.643735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.646893][ T5330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.648214][ T5330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.649477][ T5330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.650745][ T5330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.654836][ T4660] device hsr_slave_0 left promiscuous mode [ 92.737246][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.738518][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.740092][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.741135][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.742540][ T4660] device bridge_slave_1 left promiscuous mode [ 92.743459][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.777059][ T4660] device bridge_slave_0 left promiscuous mode [ 92.777995][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.916578][ T4660] device veth1_macvtap left promiscuous mode [ 92.917513][ T4660] device veth0_macvtap left promiscuous mode [ 92.918463][ T4660] device veth1_vlan left promiscuous mode [ 92.919360][ T4660] device veth0_vlan left promiscuous mode [ 95.288227][ T4660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.499230][ T4660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.977604][ T4660] bond0 (unregistering): Released all slaves [ 97.342738][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.344072][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.349536][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.364759][ T5537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.366018][ T5537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.368547][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.217523][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.282'. [ 99.230825][ T5670] device vlan2 entered promiscuous mode [ 99.237027][ T5670] device bridge0 entered promiscuous mode [ 99.237571][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.284'. [ 99.240444][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.284'. [ 100.801570][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 100.803223][ T5695] batman_adv: batadv0: Interface deactivated: dummy0 [ 100.907693][ T5695] batman_adv: batadv0: Removing interface: dummy0 [ 102.150280][ T5747] loop4: detected capacity change from 0 to 1024 [ 102.171556][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.302'. [ 102.180944][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.302'. [ 104.119153][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.308'. [ 104.141504][ T5777] device vlan2 entered promiscuous mode [ 104.142571][ T5777] device bridge0 entered promiscuous mode [ 105.226814][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 105.822646][ T5839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.320'. [ 106.261100][ T5853] tipc: Started in network mode [ 106.261976][ T5853] tipc: Node identity 4, cluster identity 4711 [ 106.262914][ T5853] tipc: Node number set to 4 [ 107.481504][ T5887] loop1: detected capacity change from 0 to 1024 [ 107.496140][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 107.505949][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 108.030070][ T5906] loop6: detected capacity change from 0 to 32768 [ 108.040406][ T5906] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.333 (5906) [ 108.067727][ T5906] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 108.069425][ T5906] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 108.070865][ T5906] BTRFS info (device loop6): enabling disk space caching [ 108.071966][ T5906] BTRFS info (device loop6): force clearing of disk cache [ 108.073052][ T5906] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.074449][ T5906] BTRFS info (device loop6): use zstd compression, level 3 [ 108.075472][ T5906] BTRFS info (device loop6): disk space caching is enabled [ 108.594574][ T5920] device syzkaller0 entered promiscuous mode [ 108.636180][ T5900] loop4: detected capacity change from 0 to 1764 [ 108.744670][ T5906] BTRFS info (device loop6): enabling ssd optimizations [ 108.748621][ T5906] BTRFS info (device loop6): rebuilding free space tree [ 108.762715][ T5906] BTRFS info (device loop6): disabling free space tree [ 108.763871][ T5906] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.765395][ T5906] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.872401][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 109.210015][ T5330] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 109.674019][ T5632] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop6 scanned by udevd (5632) [ 109.678622][ T5974] loop1: detected capacity change from 0 to 512 [ 109.687716][ T5974] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.699927][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.6.339'. [ 109.715829][ T5974] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.341: invalid indirect mapped block 256 (level 2) [ 109.729477][ T5974] EXT4-fs (loop1): 2 truncates cleaned up [ 109.747307][ T5974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.824729][ T5982] device syzkaller0 entered promiscuous mode [ 110.467564][ T6013] loop5: detected capacity change from 0 to 512 [ 110.495950][ T6013] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 110.499293][ T6013] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 110.502534][ T6013] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.347: Failed to acquire dquot type 1 [ 110.504411][ T6018] loop6: detected capacity change from 0 to 256 [ 110.515668][ T6018] FAT-fs (loop6): Unrecognized mount option "short" or missing value [ 110.518810][ T6013] EXT4-fs (loop5): 1 truncate cleaned up [ 110.522223][ T6013] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 110.530575][ T6013] EXT4-fs (loop5): unmounting filesystem. [ 111.012926][ T1813] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 111.021772][ T1813] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1556 with error 28 [ 111.023693][ T1813] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.023693][ T1813] [ 111.025719][ T1813] EXT4-fs (loop1): Total free blocks count 0 [ 111.027004][ T1813] EXT4-fs (loop1): Free/Dirty block details [ 111.028078][ T1813] EXT4-fs (loop1): free_blocks=0 [ 111.029088][ T1813] EXT4-fs (loop1): dirty_blocks=1556 [ 111.030156][ T1813] EXT4-fs (loop1): Block reservation details [ 111.031404][ T1813] EXT4-fs (loop1): i_reserved_data_blocks=1556 [ 111.480758][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 114.567585][ T4330] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 114.569128][ T4330] Bluetooth: hci4: Injecting HCI hardware error event [ 114.570965][ T4336] Bluetooth: hci4: hardware error 0x00 [ 115.614486][ T6115] loop5: detected capacity change from 0 to 256 [ 115.698903][ T6118] loop1: detected capacity change from 0 to 1024 [ 115.719177][ T6118] EXT4-fs: inline encryption not supported [ 115.731629][ T6118] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.738891][ T6118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.741753][ T6118] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 115.743137][ T6118] System zones: 0-1, 3-36 [ 115.745972][ T6118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.006426][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 116.610169][ T6147] bridge0: port 3(vxlan0) entered blocking state [ 116.614573][ T6147] bridge0: port 3(vxlan0) entered disabled state [ 116.617416][ T6147] device vxlan0 entered promiscuous mode [ 116.638000][ T6140] loop1: detected capacity change from 0 to 32768 [ 116.642048][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.375'. [ 116.659739][ T6140] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.372 (6140) [ 116.725133][ T6140] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.727337][ T6140] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 116.729052][ T6140] BTRFS info (device loop1): setting nodatasum [ 116.729957][ T6140] BTRFS info (device loop1): using free space tree [ 116.832313][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 116.834094][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 117.147576][ T6140] BTRFS info (device loop1): enabling ssd optimizations [ 117.244027][ T6179] loop6: detected capacity change from 0 to 8192 [ 117.254172][ T6179] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.259845][ T6179] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 117.264159][ T6179] REISERFS (device loop6): using ordered data mode [ 117.269508][ T4321] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 117.276152][ T6179] reiserfs: using flush barriers [ 117.289056][ T4336] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 117.318863][ T6179] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.361407][ T6179] REISERFS (device loop6): checking transaction log (loop6) [ 117.435137][ T6190] tipc: Failed to remove unknown binding: 66,0,0/0:4225721779/4225721780 [ 117.439931][ T6190] tipc: Failed to remove unknown binding: 66,0,0/0:4225721779/4225721780 [ 117.441649][ T6194] tipc: Failed to remove unknown binding: 66,0,0/0:987775499/987775501 [ 117.447146][ T6179] REISERFS (device loop6): Using tea hash to sort names [ 117.451844][ T6179] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 117.666585][ T6201] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 117.670296][ T6201] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 118.851944][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'. [ 118.862181][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'. [ 119.084255][ T6215] loop1: detected capacity change from 0 to 128 [ 119.112986][ T6215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.418014][ T6219] EXT4-fs (loop1): unmounting filesystem. [ 120.247300][ T6242] process 'syz.6.388' launched './file0' with NULL argv: empty string added [ 120.512135][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 120.910090][ T6263] binder: 6262:6263 tried to acquire reference to desc 0, got 1 instead [ 120.913434][ T6263] binder: 6262:6263 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 120.915606][ T6263] binder: 6263 RLIMIT_NICE not set [ 120.916404][ T6263] binder: 6263 RLIMIT_NICE not set [ 120.920068][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 120.922487][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 120.923081][ T6263] binder: 6263 RLIMIT_NICE not set [ 120.923481][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 120.924317][ T6263] binder: 6262:6263 unknown command 0 [ 120.925571][ T4336] Workqueue: hci2 hci_rx_work [ 120.926756][ T6263] binder: 6262:6263 ioctl c0306201 20004a40 returned -22 [ 120.927029][ T4336] Call trace: [ 120.928464][ T4336] dump_backtrace+0x1c0/0x1ec [ 120.929109][ T4336] show_stack+0x2c/0x3c [ 120.929663][ T4336] __dump_stack+0x30/0x40 [ 120.930284][ T4336] dump_stack_lvl+0xf4/0x15c [ 120.930985][ T4336] dump_stack+0x1c/0x5c [ 120.931578][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 120.932289][ T4336] kobject_add_internal+0x598/0xb08 [ 120.933026][ T4336] kobject_add+0x140/0x20c [ 120.933669][ T4336] device_add+0x3f0/0xf90 [ 120.934256][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 120.934950][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 120.935738][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 120.935929][ T6188] binder: undelivered TRANSACTION_COMPLETE [ 120.936511][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 120.936535][ T4336] hci_event_packet+0x6b8/0xf18 [ 120.936547][ T4336] hci_rx_work+0x324/0xa80 [ 120.937468][ T6188] binder: undelivered transaction 60, process died. [ 120.938095][ T4336] process_one_work+0x7f8/0x13a4 [ 120.939209][ T6188] binder: undelivered TRANSACTION_COMPLETE [ 120.939333][ T4336] worker_thread+0x8c4/0xfec [ 120.942411][ T4336] kthread+0x250/0x2d8 [ 120.942975][ T4336] ret_from_fork+0x10/0x20 [ 120.944922][ T4336] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.946959][ T4336] Bluetooth: hci2: failed to register connection device [ 121.289951][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.403'. [ 121.329217][ T6271] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 121.598899][ T6279] loop4: detected capacity change from 0 to 128 [ 122.860838][ T97] kworker/u4:3: attempt to access beyond end of device [ 122.860838][ T97] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 122.949093][ T6299] lo: Caught tx_queue_len zero misconfig [ 123.096626][ T4336] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 123.865993][ T6334] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 124.827574][ T6348] loop4: detected capacity change from 0 to 40427 [ 124.853618][ T6348] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 124.864541][ T6348] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.872856][ T6348] F2FS-fs (loop4): invalid crc value [ 124.891779][ T6348] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.187051][ T6348] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 125.188877][ T6348] F2FS-fs (loop4): Start checkpoint disabled! [ 125.196063][ T6348] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 125.207116][ T6348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 125.318242][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 125.538225][ T6377] syz.4.420: attempt to access beyond end of device [ 125.538225][ T6377] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.584670][ T6373] bridge1: port 1(veth5) entered blocking state [ 125.586418][ T6373] bridge1: port 1(veth5) entered disabled state [ 125.594063][ T6373] device veth5 entered promiscuous mode [ 125.709061][ T4878] kworker/u4:16: attempt to access beyond end of device [ 125.709061][ T4878] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 125.709513][ T6387] loop5: detected capacity change from 0 to 128 [ 125.927606][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.928867][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.162606][ T4336] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 127.164146][ T4336] Bluetooth: hci0: Injecting HCI hardware error event [ 127.176240][ T4330] Bluetooth: hci0: hardware error 0x00 [ 127.360231][ T27] audit: type=1326 audit(127.350:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.365971][ T27] audit: type=1326 audit(127.350:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.381251][ T27] audit: type=1326 audit(127.370:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.389739][ T27] audit: type=1326 audit(127.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.405822][ T27] audit: type=1326 audit(127.370:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.412453][ T6414] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.438'. [ 127.420205][ T27] audit: type=1326 audit(127.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.429260][ T27] audit: type=1326 audit(127.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.435855][ T27] audit: type=1326 audit(127.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.443498][ T27] audit: type=1326 audit(127.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.452652][ T27] audit: type=1326 audit(127.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff91977ee8 code=0x7ffc0000 [ 127.476285][ T6421] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 127.492461][ T6421] device bond2 entered promiscuous mode [ 127.495626][ T6421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.510448][ T6421] bond2: (slave bridge2): making interface the new active one [ 127.511979][ T6421] device bridge2 entered promiscuous mode [ 127.513601][ T6421] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 127.515072][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 129.552052][ T6463] loop4: detected capacity change from 0 to 16 [ 129.553875][ T6463] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 129.614709][ T4330] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 129.765862][ T6474] loop4: detected capacity change from 0 to 8 [ 130.772852][ T6486] MPTCP: kernel_bind error, err=-98 [ 130.776949][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.784929][ T6485] device batadv_slave_0 entered promiscuous mode [ 132.535169][ T6535] loop6: detected capacity change from 0 to 16 [ 132.538932][ T6535] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 133.471450][ T6559] Set syz1 is full, maxelem 2 reached [ 133.778017][ T51] block nbd4: Attempted send on invalid socket [ 133.779171][ T51] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 133.781638][ T6579] vxfs: unable to read disk superblock at 1 [ 133.784024][ T51] block nbd4: Attempted send on invalid socket [ 133.785072][ T51] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 133.786984][ T6579] vxfs: unable to read disk superblock at 8 [ 133.787985][ T6579] vxfs: can't find superblock. [ 134.050835][ T6549] loop6: detected capacity change from 0 to 40427 [ 134.061905][ T6549] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 134.062877][ T6549] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 134.074447][ T6549] F2FS-fs (loop6): invalid crc value [ 134.110189][ T6549] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 134.152266][ T6549] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 134.153438][ T6549] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 134.350537][ T6597] syz.6.469: attempt to access beyond end of device [ 134.350537][ T6597] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.600905][ T5330] syz-executor: attempt to access beyond end of device [ 134.600905][ T5330] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 135.677076][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.679649][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.717371][ T4647] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.719055][ T4647] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.720909][ T6622] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 136.757537][ T6665] loop5: detected capacity change from 0 to 16 [ 136.760890][ T6665] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 137.480748][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.5.488'. [ 137.482599][ T6681] binder: 6679:6681 tried to acquire reference to desc 0, got 1 instead [ 137.495774][ T6189] binder: release 6679:6681 transaction 66 out, still active [ 137.497209][ T6189] binder: undelivered TRANSACTION_COMPLETE [ 137.498160][ T6189] binder: undelivered TRANSACTION_COMPLETE [ 137.508848][ T6189] binder: undelivered transaction 65, process died. [ 137.509877][ T6189] binder: send failed reply for transaction 66, target dead [ 137.574460][ T6687] loop5: detected capacity change from 0 to 2048 [ 137.614666][ T6687] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 137.807131][ T6694] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 137.814183][ T4336] Bluetooth: hci5: command 0x1003 tx timeout [ 138.005561][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.314115][ T6700] netlink: 'syz.1.492': attribute type 13 has an invalid length. [ 138.717821][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 138.781965][ T6710] netlink: 'syz.5.496': attribute type 1 has an invalid length. [ 138.796079][ T6710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.827766][ T6710] bond1: (slave ip6gretap1): making interface the new active one [ 138.829810][ T6710] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 139.210889][ T6722] loop5: detected capacity change from 0 to 16 [ 139.214795][ T6722] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 140.270518][ T6746] tipc: Started in network mode [ 140.271596][ T6746] tipc: Node identity 4, cluster identity 4711 [ 140.272780][ T6746] tipc: Node number set to 4 [ 140.855414][ T6758] loop6: detected capacity change from 0 to 1764 [ 141.222393][ T6768] binder: 6767:6768 tried to acquire reference to desc 0, got 1 instead [ 141.229505][ T5986] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.234331][ T6768] binder: 6767:6768 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 141.246366][ T6768] binder: 6768 RLIMIT_NICE not set [ 141.247595][ T6768] binder: 6768 RLIMIT_NICE not set [ 141.250701][ T6768] binder: 6768 RLIMIT_NICE not set [ 141.251549][ T6768] binder: 6767:6768 got transaction with invalid data ptr [ 141.260316][ T6768] binder: 6767:6768 transaction reply to 6767:6768 failed 72/29201/-14, size 240-0 line 3565 [ 141.261971][ T6768] binder: send failed reply for transaction 71 to 6767:6768 [ 141.337072][ T6185] binder: undelivered TRANSACTION_COMPLETE [ 141.338138][ T6185] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.339288][ T6185] binder: undelivered TRANSACTION_ERROR: 29190 [ 141.746197][ T6775] loop5: detected capacity change from 0 to 1024 [ 141.953043][ T6783] loop6: detected capacity change from 0 to 16 [ 141.962461][ T6783] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 142.251140][ T4447] hfsplus: b-tree write err: -5, ino 4 [ 142.714638][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.790106][ T6785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.842125][ T6807] ptrace attach of "./syz-executor exec"[5330] was attempted by " [ 146.671725][ T6851] tipc: Cannot configure node identity twice [ 146.822009][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.900138][ T6861] ptrace attach of "./syz-executor exec"[4320] was attempted by " [ 147.199198][ T6862] loop6: detected capacity change from 0 to 256 [ 148.963177][ T6896] loop5: detected capacity change from 0 to 128 [ 148.995623][ T6896] netlink: 'syz.5.546': attribute type 1 has an invalid length. [ 149.019151][ T6896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.044411][ T6896] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 149.045808][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 149.069125][ T6905] binder: 6904:6905 tried to acquire reference to desc 0, got 1 instead [ 149.071125][ T6905] binder: 6904:6905 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 149.073028][ T6905] binder: 6905 RLIMIT_NICE not set [ 149.073772][ T6905] binder: 6905 RLIMIT_NICE not set [ 149.074777][ T6905] binder: release 6904:6905 transaction 77 in, still active [ 149.075890][ T6905] binder: send failed reply for transaction 77 to 6904:6905 [ 149.078507][ T3897] binder: undelivered TRANSACTION_ERROR: 29189 [ 149.128324][ T6907] lo: Caught tx_queue_len zero misconfig [ 149.756917][ T6918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.781209][ T6918] device bond_slave_0 entered promiscuous mode [ 149.782446][ T6918] device bond_slave_1 entered promiscuous mode [ 149.821122][ T6918] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 149.823607][ T6918] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 149.849702][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 151.395605][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 151.409833][ T6959] loop5: detected capacity change from 0 to 4096 [ 151.414191][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 151.418945][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.568'. [ 151.432713][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 152.074680][ T6959] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8802c018, mo2=0102] [ 152.084574][ T6959] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.609101][ T7020] mmap: syz.0.577 (7020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.627249][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 153.714731][ T7025] device syzkaller0 entered promiscuous mode [ 153.876649][ T4336] Bluetooth: hci2: command 0x0406 tx timeout [ 154.561216][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 154.563574][ T7038] Unable to handle kernel paging request at virtual address ffff70003147bc00 [ 154.565142][ T7038] KASAN: maybe wild-memory-access in range [0xffff80018a3de000-0xffff80018a3de007] [ 154.569217][ T7038] Mem abort info: [ 154.570048][ T7038] ESR = 0x0000000096000006 [ 154.570755][ T7038] EC = 0x25: DABT (current EL), IL = 32 bits [ 154.572029][ T7038] SET = 0, FnV = 0 [ 154.572603][ T7038] EA = 0, S1PTW = 0 [ 154.573343][ T7038] FSC = 0x06: level 2 translation fault [ 154.574186][ T7038] Data abort info: [ 154.574891][ T7038] ISV = 0, ISS = 0x00000006 [ 154.575708][ T7038] CM = 0, WnR = 0 [ 154.579059][ T7038] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dfb9000 [ 154.580451][ T7038] [ffff70003147bc00] pgd=000000023ea48003, p4d=000000023ea48003, pud=000000023ea47003, pmd=0000000000000000 [ 154.582812][ T7038] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 154.583781][ T7038] Modules linked in: [ 154.584379][ T7038] CPU: 0 PID: 7038 Comm: syz.1.584 Not tainted syzkaller #0 [ 154.585433][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 154.586849][ T7038] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 154.588023][ T7038] pc : ip_route_output_key_hash_rcu+0xe38/0x1e38 [ 154.588936][ T7038] lr : ip_route_output_key_hash_rcu+0xdb8/0x1e38 [ 154.589938][ T7038] sp : ffff800022fb6930 [ 154.590613][ T7038] x29: ffff800022fb6980 x28: dfff800000000000 x27: 0000000000000001 [ 154.591806][ T7038] x26: 0000000080000000 x25: ffff0000da89dc00 x24: ffff0000d2bb4a20 [ 154.593053][ T7038] x23: 0000000000000000 x22: ffff80018a3de000 x21: ffff0000d3df4000 [ 154.594277][ T7038] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800011b8bf60 [ 154.596065][ T7038] x17: 1fffe00033ea877e x16: ffff8000082d7e60 x15: 0000000000000002 [ 154.597263][ T7038] x14: 0000000000000005 x13: 0000000000ff0100 x12: 0000000000080000 [ 154.598468][ T7038] x11: 0000000000002d9c x10: ffff80002265b000 x9 : ffff80018a3de000 [ 154.599709][ T7038] x8 : 1ffff0003147bc00 x7 : ffff8000105d2154 x6 : 0000000000000000 [ 154.601605][ T7038] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 154.602704][ T7038] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 154.603927][ T7038] Call trace: [ 154.604420][ T7038] ip_route_output_key_hash_rcu+0xe38/0x1e38 [ 154.605309][ T7038] ip_route_output_key_hash+0x1b0/0x300 [ 154.606228][ T7038] ip_route_output_flow+0x3c/0x160 [ 154.607085][ T7038] ipip6_tunnel_bind_dev+0x1a0/0x510 [ 154.607853][ T7038] ipip6_tunnel_init+0xd4/0x584 [ 154.608522][ T7038] register_netdevice+0x4a0/0x160c [ 154.609344][ T7038] ipip6_tunnel_create+0x130/0x330 [ 154.610098][ T7038] ipip6_newlink+0x1f4/0x634 [ 154.610762][ T7038] rtnl_newlink+0x1058/0x1a50 [ 154.611473][ T7038] rtnetlink_rcv_msg+0x698/0xcdc [ 154.612169][ T7038] netlink_rcv_skb+0x218/0x3e8 [ 154.612836][ T7038] rtnetlink_rcv+0x28/0x38 [ 154.613473][ T7038] netlink_unicast+0x60c/0x814 [ 154.614147][ T7038] netlink_sendmsg+0x6f4/0x9c0 [ 154.614914][ T7038] ____sys_sendmsg+0x5c8/0x938 [ 154.615704][ T7038] __sys_sendmsg+0x288/0x374 [ 154.616420][ T7038] __arm64_sys_sendmsg+0x80/0x94 [ 154.617096][ T7038] invoke_syscall+0x98/0x2b4 [ 154.617734][ T7038] el0_svc_common+0x138/0x258 [ 154.618450][ T7038] do_el0_svc+0x58/0x130 [ 154.619092][ T7038] el0_svc+0x58/0x128 [ 154.619739][ T7038] el0t_64_sync_handler+0x84/0xf0 [ 154.620486][ T7038] el0t_64_sync+0x18c/0x190 [ 154.622763][ T7038] Code: d538d089 8b080136 d343fec8 aa1703f4 (387c6908) [ 154.623819][ T7038] ---[ end trace 0000000000000000 ]--- [ 154.926577][ T7038] Kernel panic - not syncing: Oops: Fatal exception [ 154.927500][ T7038] SMP: stopping secondary CPUs [ 154.928301][ T7038] Kernel Offset: disabled [ 154.928978][ T7038] CPU features: 0x080000,000f0097,a65bfea7 [ 154.929828][ T7038] Memory Limit: none [ 155.222926][ T7038] Rebooting in 86400 seconds..