last executing test programs:

1m12.217281132s ago: executing program 2 (id=96):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f00000000c0)="$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")
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES32=r0])
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f0000000000)={0x11, 0x2, r3, 0x1, 0xd8}, 0x14)

1m10.941169427s ago: executing program 2 (id=101):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0xfffffffe}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x804)

1m10.070952818s ago: executing program 2 (id=105):
socket(0x10, 0x803, 0x0)
socket(0x10, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r1=>0xffffffffffffffff])
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
keyctl$chown(0x4, r0, 0xee01, r1)
keyctl$setperm(0x5, r0, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0)

1m9.950645982s ago: executing program 2 (id=109):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$eJzs3M9vFdUeAPDv3PbSAo9HH49HAg+1gMbGxBYKCgs3mJi40MSIC1k2bSGVCxjahZBGLonBNYl7w9K408StLo0r/wBcuDAxJETZAG68Zu6dub29P3p7S2nT3s8nGThn5sycc2bmzD0zpzMB9K3R9J8k4l8RcS8i9taiyxOM1v57/HBx+snDxekoVyrn/kiq6R6l8Uy+3u4sMlaIKHyWNG7wbh6Yv37j0lSpNHstytX4xMLljyfmr994de7y1MXZi7NXJs+cOXXyxOnXJ19rLvJw10olrbPSej069OnVwwffPn/n3enB5o011qOjfK0/y12TRr5vO3ipcXvbwJ6GcNJar5sbWhhWbTg7DYtp+18sHT1fm520a0PA9lKpVCpDnReXK81utcwBtqwkNrsEwObIf+jT+998qs0pbkT3Y9M9OFu7AXr0cLFyM2L6cb3+g1HI0hSb7m9TK/SZejIaER+W//oynWKl5xC/rlOGAEDf++Fs1g1Moqn/V4gDDen+nY2hjETEfyJiX0T8NyL2R8T/IpalXSaJqKyQ//7mGfX8v81GEQr311q31Uj7f29kY1v5lOWbJxkZyGJ7IvIO8+zxbJ+MRXHowlxp9kSH7e/okn9j/y+d0vzzvmBWjvuDTZ3NmamFqbXVttWDWxGHBpvrnwymBy4fxkki4mBEHOphuyMN4blXvjpcjzTdVnSvf1Wl7XDEOoyfVe5GvFw7/uVYdvyXckwaxycLLeOTE8NRmj0+kZ4Fx9vm8dPPt9/rlH/X+n/3W/Mqb53+/tzTVrsuPf67Gs7/yMdvl+o/kkQk9fHa+YjKQG953P7l8+p2R4+1Llvr+b8j+aAaztvXJ1MLC9dOROxI3mmdP7m0bh7P06f1HzvWvv3vy9ZJ98T/IyI9iZ+LiOcjBvKyH4mIoxHRpmp1P7754kedlq3y/H9m0vrPtL3+LTv+S+P1qwzkK6dzBi4dufekw8Ujq//elY//qWpoLOLv6Hj9S5ZdIlZb0qfegQAAALAFFKL6t/+F8Xq4UBgfrz0D2h+7CqWr8wsvRMSVmdo7AiNRLFyYK83mD+RGopjkzz9HGuKTTfGT2XPjLwZ2VuPj01dLM5tdeehzu6ttPmlp/6nfe3zOC2xB2+g9NKBH3dr/gTsbVBBgw/n9h/7V0P47fdmi7C9lYHvy+w/9q137vxlfr/jugmsGbH0VbRn62srtv/v3NoGtazDer4errz37+Cf0Df1/6Eu9vtffW6Ay1H7RcLT5YsDwsynGzjZ5bUog7Vmt4waLEbG6xDvXkkXeBez8hYdCbxscitZFA7HSWkn77zhERLnjWule6VqeiwfW/eTPv4my3qfNN0vttLjKw/20Aff7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAtvJPAAAA//8tL8+m")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x8ca883, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48400, 0x100)
fadvise64(r0, 0x100, 0x7fffffffffffffff, 0x4)

1m7.591621825s ago: executing program 2 (id=120):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20)
recvmsg$can_j1939(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/126, 0x7e}], 0x1}, 0x22)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x40)

1m4.232466853s ago: executing program 2 (id=132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x8, 0x9, 0x1, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m4.011838961s ago: executing program 32 (id=132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x8, 0x9, 0x1, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.436480794s ago: executing program 5 (id=423):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020)

4.427842044s ago: executing program 1 (id=424):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.550911415s ago: executing program 3 (id=426):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x5e}, &(0x7f0000000180)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r4, 0x0, r0, 0x0, 0xffff, 0x2)

3.504189157s ago: executing program 5 (id=427):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r3, 0xb33)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0)

3.472174538s ago: executing program 1 (id=428):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

3.052503403s ago: executing program 4 (id=431):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40)

2.916905368s ago: executing program 4 (id=433):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfc)

2.244324351s ago: executing program 1 (id=434):
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0)

2.243819511s ago: executing program 5 (id=435):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x55bd, &(0x7f000000ac40)="$eJzs3X9sVWf9B/BzWwpl5Ev7ZTBYoAN0P2DIBm7oNtxoQEHWEevqNDNOCmPKBhsNKaLZmIWFKesmdU4TXcLAMgahaGeyiU5dRwK4uFhNFsYobCRWJvHHUIlU0cz03vtc7j2Xthec69xeL9Ke+9zPeZ7z3JPzx31f+pwbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBRFB3fU/mvt6PrS9ZvGLL7z2oNjV42dtKKi+eSYA1UX7L58wKzFw/fN7Lh7xKzO1Ueq1rfccVFXFCWS/RLp/vNnfvTGz9XMn1caBqz9eGpbXt7TIVNdD6caA3Oe7O6X+7MgiqKS2ADF6e3u4qx2In6AaHn+gL0qmbNt6eCFlbVbNz9Tf+XSrRPyXzrdSvt7Av0lfV11nrqWKpO/i2J7ZNpZl14i5xJN9Y9fcG/JiwAAzsiU6uQm83Y0/RY3026I12Ptyli7KdYO7xCashtnqvvNR2rcgT3Nc1y83h/z7D5OKioM6nGesXr6/Gfa1fH+sXYsapzBPHN3TUea0p7mWRer99c8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN5O3qhfsWbiZ14+WPLzCyesXnny8PWlFz/y5X8WLbv1lTcOVa/5U/vwfTM77h4xq3P1kar1LXdc1BVF5cl+iVT3xIwTr182uWremPVPfWfypucnHi9Ojxu2A7J2jvaHB1eXRdHCrEpnGPbo0Ciqzi0km9G38wu3Jx/MDQUAAADeSc5P/i7KtFNxsCSnnUimyUTyX5AKiyVzti0dvLCyduvmZ+qvXLp1wtmPV93DeJWnHS/TLj/1k8gKxiH+xsc7VQ+7Ls8bp3fxEeN5ftqLr75UNur6Hz9XccEtK298ZfR1T7bP/vrI44v3l981ZNWE8Vfl5f/y3vN/OHPyPwAAAP8J+T8+Tu/6yv+fWlB/212PfenYuPsOrxxy78P7N44oPXLLbVP3/X7kTZdeekXtzXn5f1zOIfPyf5hxyP9F0dnlfwAAAHg7+2/n/8q8cXrXV/7vGNly60P/d2hReXvns9uvWLFn4KJrLxl24JFLaibff8OQcRc25uX/KYXl/wHZ0w5PvhAmvKQsiqYUflIBAACAHOH/3U99tBDyeuqTg3heb5u/ZWzr67O/OGn8o4ca/lCxefJnNw57cueG2V/b9cK9D05uPzcv/1cWlv9L3pqXCwAAABSg+dB5o4Z/svKn0YNHb1/w3U/vevyBZZ+/5rK9XXMmrf1Z1bM7GvLyf3Vh+X9Q/7wcAAAA4DROTLxu0d92Hvn1DS0fe6D56G+/sKr4F7Oad+9vb2z++/Yxc1dPzcv/tYXl/3PS2/TKh1SnPeGvEL5RFkWl3Q/qUoW9UdOMTAEAAAB4k4Scfs+0F4vuHzzj/C01vzox4amX9nxi39wlG85bM6X5+fe0LfnQxU/k5f+63u//H+50ENb/59z/L2/9f1Yhdde/6W4MAAAAwLtR/nr+cHv81DcX9PT9+4Wu///+Vzf8OVHR8PT75v9kTtd7W360t236wycrfjfv+KOtlaOfvvzlvPzfUFj+L87evpnf/wcAAABn4X/t+/9uzhund33d/7/9uceqHr/6A1+5pqZ++o7ffPCqP742cnrj9ui15R/uWHzgI7t+mZf/mwrL/2E7JPvltYXzc19ZFI3qfpC+m+C2MN0lsUJrSVYhdeJjPWpCj3ShdVBWIaku1uP9ZVE0vvtBQ6zw/6HQFCscG5oubIwV2kMhfT1kCt+LFdrClfatoenpxgs/DIX0AovWsIJiSGZJRKzHX3vq0V04bY+OzMEBAADeVUJ4TmfZktxmFI+yrYm+djinrx2K+tqhuK8dBsR2iO/Y0/NRbW4hPP+Db9706qB7HtpQP23LpoUVjeeu+8cTU6fcWbd2Z/2yrmF/WbcuL/9vLCz/h1MxMLXpaf1/FNb/p7/XMLP+vzYUymOF1lCojt8xoDocIxV2G8MxyqvTPY6NyhQAAADgHS18LlDcz/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zde5yVdZ048O8Mc2GGYWZUzEtkiIliMMCYYpgJ8jP9SeCwWlpoQjDoyCDExQTdRNRdzRW8bd42gdRNy4hSU0uFl+YtqbwEm5qXFC+90li2JMl23dfMOd8z5zxnjnMQUMZ9v/+Y8z3n870+5zLn+zzP+T4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z65GVfeHmfj/xg/aKBS9aM/krfI4eMmHjMNTceu+Thb0/Z777f//8+aw975sydR68755Uxi285de+3QmhqL1eSKl5y6F/XNwweM7bv4tuvGbzskYF/qUjXm46HXm1/StN3zoutrusdwh0lIZQlA4NrUoHy9P2aWF/fmhB2CB2BTInm6lSJZMPhgaoQloaOQKaqu6pCqMkKHPvEfSsvbktcURXC3iGEymQbz1am2qhKBgZUpALVycCMslTgr++kZAJ3lqYCsMXimyHzol/RlJuhvvNyBV5/5VutYx+s5PB6xER94XxvjNrGncpSkXygaYuetrzq2Cby3h6rvNu6wbstbztf4mnL/iKV/obyTkeoMpROaZ46aW7rnPhIaWho6FGopm30PD+94azJm5PuNq/D2IH6rfI6XH1h73FLHj1qxK11I27oM2jRpi3tZqHNu61VhvRrrts8j9FInyfd4O2X9y2pny9dIYT9b5tw+5cvePnmhZeP2/WgJ3Ya/sZnd7+7+We3nDDh+MM3rPzq73+cN/+vf/f5f3w5x9vSnNyx1bdrU3Pz+EhNTKyvTc3NAQAAoNvoDntNX1nz39M/u+/4YY+PWlN96033nHrxfZ+/9mct+7U+PG6nHZ/fd/6P8ub//Yo7/h8P+ddkj3ZVCCPbE+fWhbBr++OpwM2xO1+tC2HP9lRTbmBUIrAqhN3aEwMzVSVK9Iwl+iUCr9amAyMTgQdjoCkRuDEGLkkEzouBFYnA5BhYlQgcFgOhJXcc+9Wmx1F0oCoGJqY24op4FsKfa2NriW31TKYqAACArSQ9OyzPvZt1rsOWZojTyxVVXWWIZ2AXzFCZqCE5g81MqwrWUNZVDaVd1ZAZ94J3H35ezSVd1Zx3GkZJboYrq2659EfDJ79x98yXNp52xCdee/Wx+mU//fT6a954akbl/Xtc/nDe/H/ou8//KzvpSEne8f8Qxrf/jblL05HWTHxiWzNlAQAAANgK3hp4wJe/U/a1eS/8/pHhn/z1tY+9vurhj+595m3rnj/jB9/6Ts39Y/Lm/yOLO/8/Tt17ZGUOq+NuiGl1IQzNDaSqPTg/kDrq3SsdAAAAgO4gczw+cyy8JX2bOkU7OZ/Oz9+0mfnjgf+Rnebf8K3l1+/4iUfmPFR728ynNj7+lVVjFh07641BV579yL6HHvTUqM/mzf+bijv/vzr3NtWJB2MvLq8LoWdW4KHYy7ZAu34x8MKhuYH0+B+MG+CiWFX6xIRMVRfFEhNjYGgisLRQiccyJXbNDaSfrEzj52bG0ZIukRUAAACA913cHRCPy8fz/1cuvOuy/7jxT5etPnDZnJNnPP7a9yoq3zlpxZ0n9rng3h6Ldxo1OW/+P3Hzzv9vnwfnnd7f2iuEIWUh9Ej+MGB1dWphwBioKUkn7qlO1dUjWdXC6hAObhtYsqoX0+v/lyXXGHyyKlVVDOza/6YNA9oSN1SFMCQ7sHbCsgPaEnMTgUzjX6wK4eNto002/pOeqcbLk41f1TOEPbICmaom9wyhrbGKZFX3V6avY5CsakVlCDtlBTJVDa8MYV4AoHvp+A1c/F86JTs8e978aZNaW5tnbcNE3IlfFaa2tDY3TJ7ROqWyQJ+mJHqfs47ROfmjK/bSN79Lr1G05phpdcWkY7+yTxIsiTvy884cTN+PX4bK28fZWJ5zd//kkPfdK7+JkPVVqtCQS7fxkKuzK+l4EvPqj/krQq/Qc+7s5lkNZ0yaM2fWsNTfYrM3pv7G40ypbTUsua2qO+tbES+PgstlJbzXbTUgu5Ihc6bPHDJ73vzBLdMnndx8cvNpwz/VOLxx2P6NQ4e0DSr9t4uRDuis5sRI31lW5LC24kh3z/7x7PvxoSEhsTUTbR+bW7/m8vBBj2v7Stx0+YRnFn90SeV3l5x0yRPnn3/2KafvfNuV07/fd8aEQVd+bum0r+fN/2e++/w/furED/70+gyFjv/Xx8P8qcc7DvNPjIGlxR7/ry90ND9zYkC/RGBBDCxwmB8AAIAPh7g7Mu7NjDula1/5xun/c8IRpYf+4ehfNA4btMuFt04bcOPrm07/2N7zl15bVpF//b8Fxf3+fyut/59Zuv6oQsv8D4wlhhZa/z+5zH9m/f8Fhdb/Ty7zn1n/f+kHsP7/3EwgsUn+bP1/AADgw+D9W/+/y+X9kxcIyMvQ5fL+yQsE5GXochn/Yi8QsNnr///852U7fOyI3fqWfeGJSXvdeeBvTpr+4C4/Gn31+k831n/zjLU/X543/7+kuPl/5ny8EL5U7AlwAAAAwLZxwr5fGrDwpSFfP2fGAz8cPHPnl647+/mR9/zyuE9uGtt3ffX6vp/Om/8vLW7+//6v/xcKnf/fr1CgqdDCgNb/AwAAoJsqtP7f3z5+1jev67fjxkH9zrz9raunlYzY+7lTf9160UOjD//Y2H9cOvnavPn/iuLm//G0i9Kc3LE3b9em1rQLyTXt1tdmfjIAAAAA3UNpaGgoLzJvzsKoo957m0+nlwJ9t3S23T6xeu2591739yE3n79w/fGn1x505B/KDrlzynUvLTxlj/41z63Lm/+vKm7+n/O7jNUX9h635NGjRrx9a92IG/oMWrSp4/g/AAAAsO0Uu18CAAAAAAAAAAAAAAD44B2z+idn/dcvxx535/D5Vz+68+Mn/+fXZ5/RMvkXrUesP+DZZTd8ap+83/+H8e3lCv3+P173L/6+oE9O7thq1+v/pe8fO2b5vPYlC1fXhrBXdmDawmk7hPS1+ffJDqw8ceAubYmFyRJ3P3fYy22Jk5KBIwfvuLEt8ZlEYGJcJHG3ZCBeVXFj70QgLq/4ZDIQt8eKZKAiHbiwd2ocJclt9Yea1LYqSW6rp2tCqMsKZLbVHTWpNkqSA7wiEcgM8GvJQBzguHSgNNmr5b1SvYqBmlh0Sa9UrwAA2G7Fb4HlYWpLa/PQ+BU+3u5elnsb5SxZdk5+tSVFNv+79NJka46ZVldMukfyu2jHtcbLQ2XbEIblfV3NzlLSPsqtU0sXm65PgSF3tdpbsVdM39xNV1F4RFWpETVMntE6pbzLge/fdZbGsi6zDMub7GRnKW3fpEXUUkRfOrJUFRpRkdumiC7H+6WhoaFHIteIGKwPObp6RRT7e/3sdf4KvQqy86wYfdCA45Y/d+DExU8eNH1a+Mhl74ycNGX2IVe8+NSyBaMGTeyRN/+vL27+X5k9ro3piwEsiFfWO7guhIlFjggAAAA+/E457bnLLrj/0ldfaBrw8owhl6787byr5pfV3nze4U/fffqbExadtKXxAcPfGHbqXb85d1Pj6Ieu7H31/dfsdGTdD/9fda95b60c9OYLd++VN//vV9z8P+7BSh8KTu3tWBWv/39uXQjtl9avTwVujsP9al0Ie7anmmKJ1AX1j4olhqYCN8cdJgNjiYlNuVX1jIEVicCrtenAqkTgwRhI76W4KaR35VxaG8IB7anxuSVmxhL1icDRMdAvEWiIgaGJQO8YGJkIvN47HWhKBB6NgdCSu61u7Z3eVgAAAJsjPc8qz70bkvO8FWVdZSjpKkN1VxlKu8pQ2VWGQqOI938cM5QnTl4pycpUnqy1KlFLXoZ4MfzN7ldehvBYbs5kwbym4/kHmfMNSnIzXHFmxYw3P99/8fFDxm6Y0Ljkc/N+Gv7h7blvXfDmL8+ve+6aTSV58/+hxc3/q3NvU60/GOf/Hdf/SwUeit27PJ463i8GXjg0N5DeMfBgnOxelKmqKV0iPWm/KJYYGQP9EoGZMTAyEZg4Ph1YuktuID3TzjR+bqbxlnSJrAAAAAC87+IOgribJs7/n1034YnpE3570GV95yw6f8VRX37618e9+ot7e9793f6LH24tWbcmb/4/srj5f2yvV3Zj58XerOsdwh0lHb3JBAbXpAJxP0ZN/Hl835oQdsjawZEp0VydKlGRaDg8UJX6hXpFsqq7qlJrDMT7xz5x38qL2xJXVIWwd9bel0wbz1am2qjKDVSFARWpQHWyxIyyVCDu+ckE7ixNBWCLZfYKxhdU+lSXjPrOyxV4/X1YrgmaHF7ePtBO8nX2m6ttpTL5QHqfasbmPW151bFN5L09Vnm3dcd3W713W/YXqfQ3lHc6QpWhdErz1ElzW+fER7J/yZpnGz3P2b9SLSa9FV6HC957b7tWmezA0MTHx9DOy3X+OiyJ1a2+sPe4JY8eNeLWuhE39Bm0aFPR3Sgg/lB41vCr6rM377ZWGdKvuW73edLk86Q7/hvo52kLIYy/d9xFQw+5cdHkkf2v3/mO2hGXf2nwLYcOfXZ8zdxdDh/72hfn583/m4qb/5clbtttihtzdl0I+2Zt3NVx84+uS30OZgVSn5I75QdSh9xfqi34yQkAAABbW2Z3R2Z/QUv6NnVCeHKenJ+/aTPzx/0VIzvNX2y/+19xyqoxEw/8bd8Jex1y8D5n3bXw6P3+Nun61/5YPWryA9/71Zrr8+b/E999/t8z0c0P8/H/4Pg/HyTH/zu1ve+K7pl8YMEW7YrOq45twvH/Tm3v7zbH/zvl+L/j/51x/L8Ljv93ant/2vK+Jc30pSuE8O+Xf/5vb9+zW7+Ny0q/N/WB+f2Pv+z7i5f/ZOdn/vmxf5oxY989f5U3/59Z3Pzf+n+dL9qXWf9vYqH1/2YWWv9vgfX/AACAbarAQnPJeV7e6n15GZKr9+Vl6HKBwC6XGLT+32av//fiv1y6cK9p475x4lmPHdz70frRa8cO+vtJr+659ronrxz2yAl//3be/H9BcfP/+HLold16d1n/r9/4AlVdEgMzLQwIAADA9qjQDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+WGf9cep5Ixc+/qemGV/ZsGLCd1p2fPyhqa83HfHDMcuPXnvKLqfc22ftYc+cufPodee8MmbxLafu/VYILe3lSlLFSw796/qGwWPG9l18+zWDlz0y8C+V6XrL07cfzckdW327NoSlWY/UxMT62rY7HYFjxyyfV9aWWF0bwl7ZgWkLp+3QlrixNoR9sgMrTxy4S1tiYbLE3c8d9nJb4qRk4MjBO25sS3wmHShJdvffeqe6W5Ls7sW9Q6jLCmS6e2rv3KoybRyRDpQm2/huTaqNGKiJRa+qSbURA62xREvPEIaUhdAjWdUjlamqeiSr+mllqqoeyarOrgzh4BBCWbKq5ytSVZUlR/5YRaqqGNi1/00bBrQlllWEMCQ7sHbCsgPaErMSgUzjx1SE8PG2l0yy8VvLU42XJxv/1/IQ9gghVCRLvFmWKlGRLPFiWQg7ZQU6NmJZCPMCHw7x02dK9oOz582fNqm1tXnWNkxUpNuqClNbWpsbJs9onVKZ6FMhJVnpd85572P/3YazJrfdrjlmWl0x6bJ0ufL2LjeW59zdf3vvfexXdXYlHc9HXv0xf0XoFXrOnd08q+GMSXPmzBqW+lts9sbU3x7paGpbDesu22pAdiVD5kyfOWT2vPmDW6ZPOrn55ObThn+qcXjjsP0bhw5pG1T679YY6bL3f6S7l2VV8n68/yUkJLpbojTn023o9v45nvdFv6Oj5aGy/QM6b1qRnaWkfZRbY9Cj3uOI38vXlC5HNCxv4pCXpbHrLPvnTSY6slSlsrR/rcubHGbXVNq+SeP90tDQ0KPQdqjPvZu9ed/Ygs37dHrTFZsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6XHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//C3vuzA==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xe, 0x30000, &(0x7f0000000480)="b9fb0307683a060000000037888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.116541176s ago: executing program 0 (id=436):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
socket(0xa, 0x3, 0xff)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

2.082330757s ago: executing program 4 (id=437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2.028302079s ago: executing program 3 (id=438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.027754719s ago: executing program 4 (id=439):
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.968202201s ago: executing program 3 (id=440):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$kcm(0x2, 0x5, 0x84)
close(r0)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.661912162s ago: executing program 0 (id=441):
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil)
munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ccf000/0x2000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

1.584335574s ago: executing program 1 (id=442):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.583966714s ago: executing program 0 (id=443):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00ef32ff1a8751f240789a4c4ac7909f079c126b1dec5a34ce5248c14762a2eab060bf8dc45f681c48b07540d3f8004a9ac9c8849c487a3e1998bb713c42866ee2afad6d"], 0x1, 0xd9c, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mount$cgroup(0x0, 0x0, 0x0, 0x4, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e84, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}})

1.583670414s ago: executing program 3 (id=444):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.581057654s ago: executing program 4 (id=445):
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}})

1.122667201s ago: executing program 5 (id=446):
socket$unix(0x1, 0x1, 0x0)
eventfd2(0x0, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
pipe2$9p(&(0x7f0000001900), 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

1.036370823s ago: executing program 1 (id=447):
r0 = socket$xdp(0x2c, 0x3, 0x0)
syslog(0x3, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x200c17a)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x10c000, 0x800, 0x0, 0x1}, 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.035880053s ago: executing program 0 (id=448):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="181a0000000000000000000023530080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

1.035525104s ago: executing program 3 (id=449):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000000))
io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, 0x0, 0x0)

393.976207ms ago: executing program 4 (id=450):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_usb_connect(0x3, 0x1c, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
r1 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5cb, &(0x7f00000006c0)="$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")
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f00000000c0))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x16}}}, 0x7)

224.889472ms ago: executing program 1 (id=451):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{0x1}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pS    \x00'}, 0x20)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800)

140.336965ms ago: executing program 5 (id=452):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

123.950086ms ago: executing program 3 (id=453):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

89.437567ms ago: executing program 0 (id=454):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4, 0x293, &(0x7f00000008c0)="$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")
pipe2(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x70)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
fsync(r0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x24000884)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2)

402.43µs ago: executing program 0 (id=455):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24042004)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xee00])
setregid(0x0, r0)
r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = fsmount(r1, 0x0, 0x82)
fchdir(r2)
socket$inet_sctp(0x2, 0x1, 0x84)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc)

0s ago: executing program 5 (id=456):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@multicast]})
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
[   30.810427][ T4308] cgroup: Unknown subsys name 'net'
[   31.033986][ T4308] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   31.291412][ T4308] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   31.989066][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   31.990362][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   31.992647][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   31.994344][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   31.995516][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   31.995686][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   31.996874][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   31.998236][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   31.999041][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   32.000042][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   32.001040][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   32.002798][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   32.005451][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   32.006658][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   32.008198][ T4337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   32.009412][ T4337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   32.010707][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   32.012202][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   32.017914][   T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   32.017998][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   32.021528][ T4337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   32.022894][ T4337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   32.029755][   T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   32.031366][   T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   32.032731][   T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   32.050784][   T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   32.052198][   T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   32.056067][   T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   32.057461][   T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   32.058745][   T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   32.120862][ T4326] chnl_net:caif_netlink_parms(): no params data found
[   32.144564][ T4321] chnl_net:caif_netlink_parms(): no params data found
[   32.174229][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.175440][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.176927][ T4326] device bridge_slave_0 entered promiscuous mode
[   32.180990][ T4322] chnl_net:caif_netlink_parms(): no params data found
[   32.189753][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.190965][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.193770][ T4321] device bridge_slave_0 entered promiscuous mode
[   32.195360][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.196453][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.197820][ T4326] device bridge_slave_1 entered promiscuous mode
[   32.200485][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.201662][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.203060][ T4321] device bridge_slave_1 entered promiscuous mode
[   32.205814][ T4330] chnl_net:caif_netlink_parms(): no params data found
[   32.219508][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.230844][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.233181][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.241930][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.249246][ T4321] team0: Port device team_slave_0 added
[   32.252870][ T4321] team0: Port device team_slave_1 added
[   32.269311][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.270495][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.272674][ T4330] device bridge_slave_0 entered promiscuous mode
[   32.274879][ T4326] team0: Port device team_slave_0 added
[   32.276508][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.277626][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.279049][ T4322] device bridge_slave_0 entered promiscuous mode
[   32.285212][ T4326] team0: Port device team_slave_1 added
[   32.290086][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.291162][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.295814][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.297878][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.299001][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.300489][ T4330] device bridge_slave_1 entered promiscuous mode
[   32.302909][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.304048][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.305483][ T4322] device bridge_slave_1 entered promiscuous mode
[   32.306942][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.308059][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.313101][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.316651][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.317787][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.322972][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.325004][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.326132][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.330161][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.336216][ T4332] chnl_net:caif_netlink_parms(): no params data found
[   32.353399][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.355740][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.359319][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.402407][ T4321] device hsr_slave_0 entered promiscuous mode
[   32.441904][ T4321] device hsr_slave_1 entered promiscuous mode
[   32.485784][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.522398][ T4326] device hsr_slave_0 entered promiscuous mode
[   32.561545][ T4326] device hsr_slave_1 entered promiscuous mode
[   32.601380][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.602661][ T4326] Cannot create hsr debugfs directory
[   32.610219][ T4322] team0: Port device team_slave_0 added
[   32.618856][ T4322] team0: Port device team_slave_1 added
[   32.626753][ T4330] team0: Port device team_slave_0 added
[   32.634567][ T4330] team0: Port device team_slave_1 added
[   32.640254][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.644334][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.645771][ T4332] device bridge_slave_0 entered promiscuous mode
[   32.650449][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.651817][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.655638][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.659915][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.661098][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.662740][ T4332] device bridge_slave_1 entered promiscuous mode
[   32.670807][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.672301][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.675947][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.679172][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.680234][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.684610][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.697536][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.700095][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.702647][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.703794][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.707778][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.733916][ T4332] team0: Port device team_slave_0 added
[   32.782445][ T4322] device hsr_slave_0 entered promiscuous mode
[   32.821739][ T4322] device hsr_slave_1 entered promiscuous mode
[   32.861352][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.862651][ T4322] Cannot create hsr debugfs directory
[   32.864339][ T4332] team0: Port device team_slave_1 added
[   32.878539][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.879683][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.884491][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.922395][ T4330] device hsr_slave_0 entered promiscuous mode
[   32.961524][ T4330] device hsr_slave_1 entered promiscuous mode
[   33.001451][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   33.002557][ T4330] Cannot create hsr debugfs directory
[   33.004744][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.006309][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   33.010375][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.012461][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   33.052331][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   33.099587][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   33.134530][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   33.272688][ T4332] device hsr_slave_0 entered promiscuous mode
[   33.311568][ T4332] device hsr_slave_1 entered promiscuous mode
[   33.351328][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   33.352590][ T4332] Cannot create hsr debugfs directory
[   33.364473][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.438762][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   33.477864][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   33.513127][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.586325][ T4322] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.605474][ T4322] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.642207][ T4322] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.696616][ T4322] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.758622][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   33.793419][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.832222][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.872320][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.948732][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.951085][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   34.000741][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   34.011595][ T4328] Bluetooth: hci2: command 0x0409 tx timeout
[   34.033065][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   34.072461][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   34.091420][ T4328] Bluetooth: hci3: command 0x0409 tx timeout
[   34.091462][   T47] Bluetooth: hci1: command 0x0409 tx timeout
[   34.092391][ T4328] Bluetooth: hci4: command 0x0409 tx timeout
[   34.093300][   T47] Bluetooth: hci0: command 0x0409 tx timeout
[   34.139504][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.143921][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.148890][ T4321] 8021q: adding VLAN 0 to HW filter on device team0
[   34.157232][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.164791][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.166359][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.167727][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.168895][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.174815][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.181141][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.185825][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.187266][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.188398][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.189770][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.192197][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.193703][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.195278][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.199065][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.203116][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.209011][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.210413][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.214739][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.216488][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.221073][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.223198][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.224826][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.226593][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.229925][ T4326] 8021q: adding VLAN 0 to HW filter on device team0
[   34.235111][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.237043][ T4322] 8021q: adding VLAN 0 to HW filter on device team0
[   34.238356][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.240381][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.242817][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.244321][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.257787][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.259254][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.260685][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.261858][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.265911][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.275312][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.276914][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.278529][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.279652][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.280982][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.283469][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.284998][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.286099][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.287604][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.289028][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.290439][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.308429][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.310058][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.311850][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.312961][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.314440][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.316165][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.317778][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.319359][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.320863][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.323821][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.325307][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.327338][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.328909][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.330428][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.332568][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.334167][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.335797][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.337248][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.338751][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.340130][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.345551][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.356461][ T4330] 8021q: adding VLAN 0 to HW filter on device team0
[   34.358196][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.359723][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.361227][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.362983][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.367898][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.369223][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.370623][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.373354][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.374837][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.376022][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.377361][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.378701][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.380815][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.384720][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.386837][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.389325][ T4332] 8021q: adding VLAN 0 to HW filter on device team0
[   34.398975][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.403783][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.405316][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.406688][ T1593] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.407914][ T1593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.409238][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.410345][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.416118][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.417798][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.419478][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.422291][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.431985][ T1593] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.433227][ T1593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.434742][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.440219][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.442359][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.443902][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.445528][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.446907][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.447946][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.459111][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   34.460711][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.472413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.473919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.475410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.477100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.478915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.480690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.483671][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.485602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.487043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.488516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.489978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.493013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.494352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.495715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.499793][ T4321] device veth0_vlan entered promiscuous mode
[   34.503704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.514590][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.516297][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.517488][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.520138][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.521941][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.523971][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.525841][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.527268][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.531114][ T4332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   34.536248][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.540246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.542155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.543740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.545235][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.547506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.550247][ T4321] device veth1_vlan entered promiscuous mode
[   34.559519][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.568055][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.569540][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.570996][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.572806][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.576262][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.589082][ T4321] device veth0_macvtap entered promiscuous mode
[   34.594156][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.595788][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.597566][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.599090][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.600628][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.610256][ T4321] device veth1_macvtap entered promiscuous mode
[   34.615422][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.616834][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.618333][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.637141][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.638626][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.640289][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.642173][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.645580][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.647679][ T4326] device veth0_vlan entered promiscuous mode
[   34.649584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.651131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.656457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.658009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.659560][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.660997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.663679][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.664904][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.666583][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.674540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.675757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.678475][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.682068][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.683386][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.684679][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.686135][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.690238][ T4326] device veth1_vlan entered promiscuous mode
[   34.694605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.696097][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.697416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.698655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.700219][ T4322] device veth0_vlan entered promiscuous mode
[   34.705821][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.716746][ T4322] device veth1_vlan entered promiscuous mode
[   34.724588][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.726052][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.727410][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.728904][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.738175][ T4326] device veth0_macvtap entered promiscuous mode
[   34.742456][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.743852][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.745746][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.748074][ T4326] device veth1_macvtap entered promiscuous mode
[   34.765280][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.766811][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.768263][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.769909][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.771244][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.787428][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.788715][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.790375][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.793948][ T4330] device veth0_vlan entered promiscuous mode
[   34.799788][ T4322] device veth0_macvtap entered promiscuous mode
[   34.804731][ T4322] device veth1_macvtap entered promiscuous mode
[   34.807861][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.809298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.810704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.813015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.816421][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.818014][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.821261][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.827333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.828922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.834891][ T4330] device veth1_vlan entered promiscuous mode
[   34.839362][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.841147][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.843648][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.845296][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.847544][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.850231][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.852524][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.854448][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.855962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.857338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.858772][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.860377][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.865171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.868390][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.869769][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.871177][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.873309][ T1593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.874477][ T1593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.879377][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.881189][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.884200][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.885403][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.886674][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.894192][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.895870][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.897378][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.898953][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.900905][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.906913][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.908521][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.910148][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.913422][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.915105][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.916574][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.920365][ T4322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.924270][ T4322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.925593][ T4322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.926874][ T4322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.935628][ T4332] device veth0_vlan entered promiscuous mode
[   34.966754][ T4332] device veth1_vlan entered promiscuous mode
[   35.012578][ T1593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.014370][ T1593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.022804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   35.024282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   35.025590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.026942][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.028362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.032460][ T4330] device veth0_macvtap entered promiscuous mode
[   35.042394][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   35.043848][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.045326][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.047312][ T1593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.047456][ T4332] device veth0_macvtap entered promiscuous mode
[   35.048470][ T1593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.050914][ T4332] device veth1_macvtap entered promiscuous mode
[   35.080098][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.081649][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   35.083568][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.087826][ T4330] device veth1_macvtap entered promiscuous mode
[   35.093598][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.095210][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.096655][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.098300][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.099660][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.101927][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.103995][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.107177][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.108530][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.109940][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.115542][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.117209][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.118800][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.120347][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.122337][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.123941][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.126037][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.143524][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.145170][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.146619][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.148194][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.149710][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.151934][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.153553][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.155110][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.157839][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.159706][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.161330][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.162779][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.163779][ T4405] loop3: detected capacity change from 0 to 512
[   35.164182][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.168018][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.169397][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.170859][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.174305][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.175629][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.175828][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.182135][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.191595][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.192899][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.198396][ T4405] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   35.206037][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.207590][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.209021][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.210603][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.214105][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.215797][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.217490][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.219085][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.220709][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.225373][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.229001][ T4405] EXT4-fs (loop3): 1 truncate cleaned up
[   35.229996][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   35.249402][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.250962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.265667][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.267642][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.269124][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.270520][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.274514][ T1593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.275756][ T1593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.277080][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.288839][ T1593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.290069][ T1593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.298742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.377241][ T4414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   35.382986][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.384202][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.385469][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.386618][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.404314][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.405744][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.874310][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.875913][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.101679][ T4331] Bluetooth: hci2: command 0x041b tx timeout
[   36.186549][   T47] Bluetooth: hci4: command 0x041b tx timeout
[   36.187606][   T47] Bluetooth: hci1: command 0x041b tx timeout
[   36.188574][   T47] Bluetooth: hci3: command 0x041b tx timeout
[   36.189475][   T47] Bluetooth: hci0: command 0x041b tx timeout
[   36.228399][ T4426] binder: 4425:4426 tried to acquire reference to desc 0, got 1 instead
[   36.230662][ T4426] binder: 4425:4426 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   36.233144][ T4426] binder: 4426 RLIMIT_NICE not set
[   36.234102][ T4426] binder: 4426 RLIMIT_NICE not set
[   36.235528][ T4426] binder: 4426 RLIMIT_NICE not set
[   36.236512][ T4426] binder_alloc: 4425: binder_alloc_buf, no vma
[   36.237689][ T4426] binder: cannot allocate buffer: vma cleared, target dead or dying
[   36.237722][ T4426] binder: 4425:4426 transaction reply to 4425:4426 failed 6/29189/-3, size 0-0 line 3230
[   36.240606][ T4426] binder: send failed reply for transaction 5 to 4425:4426
[   36.243934][   T24] binder: undelivered TRANSACTION_COMPLETE
[   36.245192][   T24] binder: undelivered TRANSACTION_ERROR: 29189
[   36.253110][   T24] binder: undelivered TRANSACTION_ERROR: 29190
[   36.721642][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   37.392714][ T4448] Zero length message leads to an empty skb
[   37.664391][ T4455] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   38.126826][ T4460] device syzkaller0 entered promiscuous mode
[   38.171439][ T4331] Bluetooth: hci2: command 0x040f tx timeout
[   38.251731][ T4331] Bluetooth: hci0: command 0x040f tx timeout
[   38.251757][   T47] Bluetooth: hci3: command 0x040f tx timeout
[   38.252830][ T4331] Bluetooth: hci1: command 0x040f tx timeout
[   38.254013][ T4328] Bluetooth: hci4: command 0x040f tx timeout
[   38.592342][ T4467] netlink: 'syz.3.21': attribute type 1 has an invalid length.
[   38.598930][ T4467] bond0: (slave veth3): Enslaving as an active interface with an up link
[   38.905091][   T24] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   38.936405][ T4467] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   38.945064][ T4467] netlink: 14 bytes leftover after parsing attributes in process `syz.3.21'.
[   39.033745][ T4467] bond0: (slave dummy0): Releasing backup interface
[   39.092732][   T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   39.094068][   T24] usb 1-1: config 0 has no interface number 0
[   39.095064][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   39.096876][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   39.098685][   T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   39.100004][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.102932][   T24] usb 1-1: config 0 descriptor??
[   39.104674][ T4462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   39.108502][   T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   39.332245][ T4462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.335508][ T4462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.342938][   T24] usb 1-1: USB disconnect, device number 2
[   39.397680][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.399063][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.418164][ T4476] loop1: detected capacity change from 0 to 4096
[   39.559580][ T4480] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET)
[   40.179458][   T27] audit: type=1326 audit(40.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.3.31" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff953771a8 code=0x0
[   40.261521][ T4337] Bluetooth: hci2: command 0x0419 tx timeout
[   40.333471][ T4328] Bluetooth: hci4: command 0x0419 tx timeout
[   40.334848][ T4337] Bluetooth: hci3: command 0x0419 tx timeout
[   40.336155][ T4328] Bluetooth: hci1: command 0x0419 tx timeout
[   40.337588][ T4328] Bluetooth: hci0: command 0x0419 tx timeout
[   40.618715][ T4504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'.
[   42.554359][ T4542] device syzkaller0 entered promiscuous mode
[   43.136549][ T4555] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   43.439296][ T4563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'.
[   43.918974][ T4568] loop4: detected capacity change from 0 to 32768
[   43.922659][ T4568] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.51 (4568)
[   43.927954][ T4568] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   43.930294][ T4568] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[   43.932424][ T4568] BTRFS info (device loop4): turning on sync discard
[   43.933535][ T4568] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   43.935152][ T4568] BTRFS info (device loop4): use zstd compression, level 3
[   43.936374][ T4568] BTRFS info (device loop4): turning on async discard
[   43.937436][ T4568] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   43.939130][ T4568] BTRFS info (device loop4): trying to use backup root at mount time
[   43.940496][ T4568] BTRFS info (device loop4): force zlib compression, level 3
[   43.942867][ T4568] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11
[   43.944596][ T4568] BTRFS info (device loop4): using free space tree
[   43.990450][ T4443] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   44.001391][ T4568] BTRFS error (device loop4): failed to load root extent
[   44.002565][ T4568] BTRFS warning (device loop4): try to load backup roots slot 1
[   44.003945][ T4443] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   44.006421][ T4568] BTRFS warning (device loop4): couldn't read tree root
[   44.007659][ T4568] BTRFS warning (device loop4): try to load backup roots slot 2
[   44.012717][ T4568] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[   44.020899][ T4568] BTRFS warning (device loop4): couldn't read tree root
[   44.027520][ T4568] BTRFS warning (device loop4): try to load backup roots slot 3
[   44.048698][ T4568] BTRFS info (device loop4): enabling ssd optimizations
[   44.050379][ T4568] BTRFS info (device loop4): rebuilding free space tree
[   44.063818][ T4568] BTRFS info (device loop4): checking UUID tree
[   44.157297][ T4332] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   44.231027][ T4596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   44.949586][ T4623] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   45.245520][ T4632] loop1: detected capacity change from 0 to 256
[   46.083925][ T4631] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   46.148319][ T4641] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[   46.216068][ T4636] netlink: 'syz.4.68': attribute type 4 has an invalid length.
[   46.217396][ T4636] netlink: 17 bytes leftover after parsing attributes in process `syz.4.68'.
[   47.006108][ T4657] loop2: detected capacity change from 0 to 512
[   47.043592][ T4657] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a816c018, mo2=0002]
[   47.045019][ T4657] System zones: 0-2, 18-18, 34-35
[   47.064647][ T4657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   47.355838][ T4670] loop1: detected capacity change from 0 to 4096
[   47.360733][ T4670] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   47.487643][ T4670] ntfs: volume version 3.1.
[   47.511550][ T4670] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $INDEX_ALLOCATION attribute has non zero lowest_vcn.
[   47.513352][ T4670] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x5 as bad.  Run chkdsk.
[   47.515464][ T4670] ntfs: (device loop1): load_system_files(): Failed to load root directory.
[   47.517981][ T4670] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files.
[   48.173992][ T4676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'.
[   48.281273][    C0] sched: RT throttling activated
[   48.314154][ T4679] netlink: 'syz.0.78': attribute type 6 has an invalid length.
[   48.315377][ T4679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'.
[   48.424543][ T4687] loop3: detected capacity change from 0 to 128
[   49.249072][ T4691] loop1: detected capacity change from 0 to 512
[   49.259629][ T4330] EXT4-fs (loop2): unmounting filesystem.
[   49.268215][ T4691] =======================================================
[   49.268215][ T4691] WARNING: The mand mount option has been deprecated and
[   49.268215][ T4691]          and is ignored by this kernel. Remove the mand
[   49.268215][ T4691]          option from the mount to silence this warning.
[   49.268215][ T4691] =======================================================
[   49.311677][ T4691] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   49.319456][ T4691] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.328068][ T4697] batman_adv: batadv0: Adding interface: dummy0
[   49.329008][ T4697] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.339473][ T4697] batman_adv: batadv0: Interface activated: dummy0
[   49.353044][ T4697] batadv0: mtu less than device minimum
[   49.355731][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.358868][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.361881][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.364955][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.367914][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.370876][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.374044][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.376997][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.379896][ T4697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.424526][ T4691] EXT4-fs (loop1): 1 truncate cleaned up
[   49.425437][ T4691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   49.619564][ T4322] EXT4-fs (loop1): unmounting filesystem.
[   49.865459][ T4720] dns_resolver: Unsupported server list version (6)
[   50.184351][ T4716] netlink: 10 bytes leftover after parsing attributes in process `syz.3.86'.
[   51.202610][ T4741] loop4: detected capacity change from 0 to 40427
[   51.213547][ T4741] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   51.214872][ T4741] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   51.219803][ T4741] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x216
[   51.224947][ T4741] F2FS-fs (loop4): invalid crc value
[   51.572648][ T4741] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   51.624886][ T4741] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   51.626230][ T4741] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   52.047474][ T4745] loop2: detected capacity change from 0 to 764
[   52.142124][ T4745] device syzkaller0 entered promiscuous mode
[   53.376985][ T4774] binder: 4773:4774 tried to acquire reference to desc 0, got 1 instead
[   53.383596][ T4774] binder: 4773:4774 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   53.385812][ T4774] binder: 4774 RLIMIT_NICE not set
[   53.386617][ T4774] binder: 4774 RLIMIT_NICE not set
[   53.387918][ T4367] binder: release 4773:4774 transaction 11 out, still active
[   53.389142][ T4367] binder: undelivered TRANSACTION_COMPLETE
[   53.398796][ T4367] binder: release 4773:4774 transaction 11 in, still active
[   53.399893][ T4367] binder: send failed reply for transaction 11, target dead
[   54.819950][ T4778] loop2: detected capacity change from 0 to 512
[   55.577266][ T4778] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.109: iget: bad i_size value: 38620345925642
[   55.580083][ T4778] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.109: couldn't read orphan inode 15 (err -117)
[   55.582982][ T4778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   55.649700][ T4804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'.
[   56.731371][ T4802] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   58.288145][ T4831] loop0: detected capacity change from 0 to 1024
[   58.289527][ T4831] EXT4-fs: Ignoring removed oldalloc option
[   58.290385][ T4831] EXT4-fs: Ignoring removed bh option
[   58.309990][ T4831] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   58.329834][ T4840] binder: 4839:4840 tried to acquire reference to desc 0, got 1 instead
[   58.354283][ T4844] loop3: detected capacity change from 0 to 128
[   58.360416][ T4831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   58.361650][   T22] binder: undelivered TRANSACTION_COMPLETE
[   58.362168][ T4844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   58.432298][   T22] binder: undelivered transaction 16, process died.
[   58.944280][ T4330] EXT4-fs (loop2): unmounting filesystem.
[   59.254303][ T4326] EXT4-fs (loop0): unmounting filesystem.
[   59.283158][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   59.342568][ T4857] netlink: 'syz.1.134': attribute type 13 has an invalid length.
[   59.548588][ T4862] binder: 4861:4862 tried to acquire reference to desc 0, got 1 instead
[   59.550283][ T4862] binder: 4861:4862 got reply transaction with bad transaction stack, transaction 21 has target 4861:0
[   59.599504][ T4862] binder: 4861:4862 transaction reply to 0:0 failed 22/29201/-71, size 0-0 line 2961
[   59.609090][ T4868] binder: 4861:4868 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   59.611232][ T4868] binder: 4868 RLIMIT_NICE not set
[   59.625645][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   59.627795][ T4868] binder: 4868 RLIMIT_NICE not set
[   59.631924][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.633880][ T4862] binder: 4861:4862 got reply transaction with no transaction stack
[   59.646309][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.891424][ T4862] binder: 4861:4862 transaction reply to 0:0 failed 23/29201/-71, size 0-0 line 2946
[   59.903815][   T22] binder: release 4861:4862 transaction 21 out, still active
[   59.905797][   T22] binder: undelivered TRANSACTION_COMPLETE
[   59.906693][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[   59.920800][ T4328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.926245][ T4328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.926621][ T4367] binder: undelivered TRANSACTION_ERROR: 29201
[   59.928384][ T4367] binder: release 4861:4868 transaction 21 in, still active
[   59.928549][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.929510][ T4367] binder: send failed reply for transaction 21, target dead
[   59.932810][ T4328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.934351][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   59.938536][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.597676][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'.
[   60.960007][ T4894] bond1: (slave gretap0): Enslaving as an active interface with an up link
[   60.976700][ T4897] loop0: detected capacity change from 0 to 512
[   61.001537][ T4897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.316774][ T4897] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.142: iget: bad i_size value: 38620345925642
[   61.319330][ T4897] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.142: couldn't read orphan inode 15 (err -117)
[   61.321740][ T4897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   61.463786][ T4894] bond1 (unregistering): (slave gretap0): Releasing backup interface
[   61.473922][ T4326] EXT4-fs (loop0): unmounting filesystem.
[   61.503864][ T4894] bond1 (unregistering): Released all slaves
[   61.511080][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'.
[   61.519900][ T4909] device bond1 entered promiscuous mode
[   61.521080][ T4909] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.525374][ T4910] device macvlan2 entered promiscuous mode
[   61.527228][ T4910] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   61.565197][ T4911] block nbd0: shutting down sockets
[   61.655814][ T4916] loop1: detected capacity change from 0 to 32768
[   61.660929][ T4916] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.147 (4916)
[   61.665144][ T4916] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   61.670033][ T4916] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   61.671751][ T4916] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   61.675359][ T4916] BTRFS info (device loop1): use zstd compression, level 3
[   61.677497][ T4916] BTRFS info (device loop1): using free space tree
[   61.705638][ T4761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.710067][ T4874] chnl_net:caif_netlink_parms(): no params data found
[   61.712573][ T4916] BTRFS info (device loop1): enabling ssd optimizations
[   61.793733][ T4761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.818488][ T4945] loop3: detected capacity change from 0 to 128
[   61.824735][ T4322] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   61.836209][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.837468][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.838950][ T4874] device bridge_slave_0 entered promiscuous mode
[   61.846003][ T4945] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   61.851208][ T4945] hpfs: filesystem error: improperly stopped
[   61.866391][ T4945] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   61.877440][ T4945] hpfs: You really don't want any checks? You are crazy...
[   61.878874][ T4945] hpfs: hpfs_map_sector(): read error
[   61.879763][ T4945] hpfs: code page support is disabled
[   61.880855][ T4945] hpfs: hpfs_map_4sectors(): unaligned read
[   61.883919][ T4761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.887430][ T4945] hpfs: hpfs_map_4sectors(): unaligned read
[   61.888349][ T4945] hpfs: filesystem error: unable to find root dir
[   61.920251][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.921813][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.923286][ T4874] device bridge_slave_1 entered promiscuous mode
[   61.929215][ T4874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.955679][ T4945] hpfs: hpfs_map_4sectors(): unaligned read
[   61.956799][ T4945] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[   61.958338][ T4874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.964642][ T4942] loop4: detected capacity change from 0 to 32768
[   61.965749][ T4945] hpfs: hpfs_map_4sectors(): unaligned read
[   61.966659][ T4945] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[   61.968876][ T4942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.149 (4942)
[   61.976020][ T4945] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[   61.987738][ T4942] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   61.989532][ T4942] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   61.995322][ T4942] BTRFS info (device loop4): max_inline at 3
[   61.996330][ T4942] BTRFS info (device loop4): max_inline at 0
[   61.997270][ T4942] BTRFS info (device loop4): enabling auto defrag
[   61.998260][ T4942] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   61.999686][ T4942] BTRFS info (device loop4): force zstd compression, level 3
[   62.000873][ T4942] BTRFS info (device loop4): using free space tree
[   62.055830][ T4328] Bluetooth: hci3: command 0x0409 tx timeout
[   62.077638][ T4959] loop0: detected capacity change from 0 to 1024
[   62.080498][ T4959] journal_path: Lookup failure for './file0/../file0'
[   62.081552][ T4959] EXT4-fs: error: could not find journal device path
[   62.126040][ T4761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.970340][ T4314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4314)
[   63.183417][ T4874] team0: Port device team_slave_0 added
[   63.185969][ T4874] team0: Port device team_slave_1 added
[   63.199189][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.200307][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.204558][ T4874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.206695][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.207751][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.273628][ T4988] net_ratelimit: 5287 callbacks suppressed
[   63.273641][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.275926][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.277192][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.278463][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.279541][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.280684][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.282005][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.283245][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.284558][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.285893][ T4988] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.645847][ T4874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.925590][ T4874] device hsr_slave_0 entered promiscuous mode
[   63.961605][ T4874] device hsr_slave_1 entered promiscuous mode
[   63.968279][ T4332] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   63.991815][ T4874] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.993420][ T4874] Cannot create hsr debugfs directory
[   64.115699][ T5004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'.
[   64.469724][ T4328] Bluetooth: hci3: command 0x041b tx timeout
[   64.498485][ T5009] bond2: (slave gretap0): Enslaving as an active interface with an up link
[   64.502751][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   64.503869][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   64.540516][ T5004] bond2 (unregistering): (slave gretap0): Releasing backup interface
[   64.558881][ T4995] block nbd3: shutting down sockets
[   64.594606][ T5004] bond2 (unregistering): Released all slaves
[   64.716123][ T5027] loop0: detected capacity change from 0 to 128
[   64.750727][ T5027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   64.834637][ T5037] loop3: detected capacity change from 0 to 16
[   64.843353][ T5037] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   65.543926][ T4326] EXT4-fs (loop0): unmounting filesystem.
[   65.554221][ T4874] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   65.574522][ T4874] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   65.598176][ T5052] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[   65.671202][ T4874] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   65.733284][ T5047] device syzkaller0 entered promiscuous mode
[   65.772781][ T4874] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   66.049340][ T4874] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.064019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.065424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.068195][ T4874] 8021q: adding VLAN 0 to HW filter on device team0
[   66.070530][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.072454][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.073921][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.075033][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.076904][   T27] audit: type=1326 audit(66.060:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.080338][   T27] audit: type=1326 audit(66.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.085088][   T27] audit: type=1326 audit(66.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.088600][   T27] audit: type=1326 audit(66.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.095981][ T5080] block nbd4: shutting down sockets
[   66.126299][   T27] audit: type=1326 audit(66.060:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.129933][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.131862][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.133388][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.134834][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.135870][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.140254][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.142334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.150223][   T27] audit: type=1326 audit(66.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffac15a06c code=0x7ffc0000
[   66.154090][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.156527][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.167330][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.168819][   T27] audit: type=1326 audit(66.060:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffac15a06c code=0x7ffc0000
[   66.176197][ T5093] loop1: detected capacity change from 0 to 128
[   66.177783][   T27] audit: type=1326 audit(66.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.180765][   T27] audit: type=1326 audit(66.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.187256][   T27] audit: type=1326 audit(66.060:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffac1771a8 code=0x7ffc0000
[   66.205983][ T5093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   66.234985][ T5091] binder: 5090:5091 tried to acquire reference to desc 0, got 1 instead
[   66.236946][ T5091] binder: 5090:5091 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   66.238891][ T5091] binder: 5091 RLIMIT_NICE not set
[   66.239679][ T5091] binder: 5091 RLIMIT_NICE not set
[   66.240472][ T5091] binder: send failed reply for transaction 28 to 5090:5091
[   66.241700][ T5091] binder: 5090:5091 transaction 28 fd fixups failed 29201/-12, line 4667
[   66.242833][ T5091] binder: 5090:5091 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   66.244576][ T5091] binder: 5091 RLIMIT_NICE not set
[   66.265505][ T4874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.587669][   T47] Bluetooth: hci3: command 0x040f tx timeout
[   66.840271][ T4874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.847683][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.849221][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.851369][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.852680][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.853786][ T5098] loop0: detected capacity change from 0 to 16
[   66.854167][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.855223][ T5098] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   66.856198][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.859101][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.992693][ T4996] binder: undelivered TRANSACTION_COMPLETE
[   66.993885][ T4996] binder: undelivered TRANSACTION_ERROR: 29201
[   67.062126][ T4322] EXT4-fs (loop1): unmounting filesystem.
[   67.175211][ T4874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.186592][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.188228][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.314618][ T5133] loop1: detected capacity change from 0 to 512
[   67.316049][ T5133] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.637874][ T5133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.794995][ T5133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   67.969568][ T4322] EXT4-fs (loop1): unmounting filesystem.
[   68.038434][ T5162] netlink: 'syz.4.188': attribute type 13 has an invalid length.
[   68.046503][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   68.058093][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.059591][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.097467][ T5169] binder: 5168:5169 tried to acquire reference to desc 0, got 1 instead
[   68.109153][ T5169] binder: 5168:5169 got transaction with invalid fd, -1
[   68.114114][ T5169] binder: 5169:5168 translate fd failed
[   68.114983][ T5169] binder: 5168:5169 transaction call to 5168:0 failed 44/29201/-9, size 80-24 line 3415
[   68.123599][   T24] binder: release 5168:5169 transaction 37 out, still active
[   68.124834][   T24] binder: undelivered TRANSACTION_COMPLETE
[   68.125937][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   68.126980][   T24] binder: send failed reply for transaction 37, target dead
[   68.198687][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'.
[   68.201746][ T5179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'.
[   68.248774][ T5163] block nbd1: shutting down sockets
[   68.263334][ T5161] device syzkaller0 entered promiscuous mode
[   68.479817][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.481611][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.579307][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   68.637639][ T4761] device hsr_slave_0 left promiscuous mode
[   68.651524][   T47] Bluetooth: hci3: command 0x0419 tx timeout
[   68.661895][ T4761] device hsr_slave_1 left promiscuous mode
[   68.771918][ T4761] batman_adv: batadv0: Interface deactivated: dummy0
[   68.774703][ T4761] batman_adv: batadv0: Removing interface: dummy0
[   68.806172][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.856327][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.907662][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.981248][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.144471][ T4761] device bridge_slave_1 left promiscuous mode
[   69.180964][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.320527][ T4761] device bridge_slave_0 left promiscuous mode
[   69.344745][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.615687][  T112] cfg80211: failed to load regulatory.db
[   69.617251][ T4761] device veth1_macvtap left promiscuous mode
[   69.618347][ T4761] device veth0_macvtap left promiscuous mode
[   69.619256][ T4761] device veth1_vlan left promiscuous mode
[   69.620193][ T4761] device veth0_vlan left promiscuous mode
[   71.133284][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'.
[   71.412819][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'.
[   72.282036][ T5235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.523504][ T4761] team0 (unregistering): Port device team_slave_1 removed
[   73.682543][ T4761] team0 (unregistering): Port device team_slave_0 removed
[   73.842582][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.042299][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.543219][ T4761] bond0 (unregistering): Released all slaves
[   75.856073][ T4874] device veth0_vlan entered promiscuous mode
[   75.861383][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.862885][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.868493][ T4874] device veth1_vlan entered promiscuous mode
[   75.875052][ T5230] netlink: 'syz.3.204': attribute type 1 has an invalid length.
[   76.219098][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.220614][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.230024][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'.
[   76.245891][ T5262] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.249923][ T4874] device veth0_macvtap entered promiscuous mode
[   76.264562][ T4874] device veth1_macvtap entered promiscuous mode
[   76.270671][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.279450][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.285788][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.287506][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.329202][ T5262] device bond1 entered promiscuous mode
[   76.333201][ T5262] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.335122][ T5262] team0: Port device bond1 added
[   76.338604][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.340293][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.352140][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.354639][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.356203][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.357840][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.359356][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.361214][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.363475][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.367451][ T5262] device ip6gretap1 entered promiscuous mode
[   76.368854][ T5262] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   77.399798][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.413827][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.415537][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   77.417602][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.419464][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.431229][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.433170][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.434677][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.436189][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.437770][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.439392][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.467561][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.470297][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.472100][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.485148][ T4874] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.486581][ T4874] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.488084][ T4874] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.489492][ T4874] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.539279][ T5297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'.
[   77.578868][ T5299] netlink: 260 bytes leftover after parsing attributes in process `syz.4.216'.
[   77.741883][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.743129][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.744861][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.765388][ T1593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.766643][ T1593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.767971][ T1593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.742287][ T5334] device syzkaller0 entered promiscuous mode
[   79.282442][ T5355] device syzkaller0 entered promiscuous mode
[   79.363672][ T5361] net_ratelimit: 5266 callbacks suppressed
[   79.363689][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.365755][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.366872][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.368024][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.369172][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.370359][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.371725][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.372946][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.374180][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.375447][ T5361] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   79.600119][ T5362] loop1: detected capacity change from 0 to 16
[   79.606250][ T5362] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   80.199804][   T27] kauditd_printk_skb: 20 callbacks suppressed
[   80.199813][   T27] audit: type=1326 audit(80.180:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.486495][   T27] audit: type=1326 audit(80.470:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.489852][   T27] audit: type=1326 audit(80.470:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.495274][   T27] audit: type=1326 audit(80.470:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.498908][   T27] audit: type=1326 audit(80.470:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.503390][   T27] audit: type=1326 audit(80.470:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.506789][   T27] audit: type=1326 audit(80.470:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.510064][   T27] audit: type=1326 audit(80.470:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.542977][ T5370] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[   80.554303][   T27] audit: type=1326 audit(80.530:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.563659][   T27] audit: type=1326 audit(80.530:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff883771a8 code=0x7ffc0000
[   80.570778][ T5382] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.231'.
[   80.669982][ T5398] device syzkaller0 entered promiscuous mode
[   81.337626][ T5394] veth0_to_hsr: Caught tx_queue_len zero misconfig
[   82.160161][ T5430] loop5: detected capacity change from 0 to 16
[   82.170581][ T5430] MTD: Attempt to mount non-MTD device "/dev/loop5"
[   82.702542][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'.
[   82.717183][ T5439] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[   82.784780][ T5439] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.799466][ T5446] binder: 5445:5446 tried to acquire reference to desc 0, got 1 instead
[   82.849371][ T4996] binder: release 5445:5446 transaction 49 out, still active
[   82.850486][ T4996] binder: undelivered TRANSACTION_COMPLETE
[   82.871200][ T4996] binder: send failed reply for transaction 49, target dead
[   82.903226][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'.
[   83.949986][ T5439] bond1: (slave gretap1): making interface the new active one
[   83.991746][ T5439] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   83.994275][ T5474] netlink: 'syz.3.251': attribute type 1 has an invalid length.
[   84.038987][ T5474] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.043226][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   84.264574][ T5482] device ipip0 entered promiscuous mode
[   84.306956][ T5482] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.308557][ T5482] bond1: (slave ipip0): The slave device specified does not support setting the MAC address
[   84.332129][ T5482] bond1: (slave ipip0): Error -95 calling set_mac_address
[   84.365632][ T5489] bond1: (slave ip6gretap1): making interface the new active one
[   84.367522][ T5489] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   84.386179][ T5487] netlink: 'syz.5.253': attribute type 1 has an invalid length.
[   84.387442][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.253'.
[   84.732903][ T5501] device syzkaller0 entered promiscuous mode
[   84.748927][ T5503] netlink: 16 bytes leftover after parsing attributes in process `syz.5.256'.
[   84.985310][ T5512] loop4: detected capacity change from 0 to 16
[   84.989800][ T5512] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   85.324238][ T5517] netlink: 'syz.5.261': attribute type 1 has an invalid length.
[   85.390701][ T5521] netlink: 14 bytes leftover after parsing attributes in process `syz.5.261'.
[   85.400000][ T5523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.403765][ T5523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.981422][ T5537] device syzkaller0 entered promiscuous mode
[   86.146981][ T5541] loop5: detected capacity change from 0 to 256
[   86.156958][ T5541] FAT-fs (loop5): Directory bread(block 64) failed
[   86.160793][ T5541] FAT-fs (loop5): Directory bread(block 65) failed
[   86.162069][ T5541] FAT-fs (loop5): Directory bread(block 66) failed
[   86.163160][ T5541] FAT-fs (loop5): Directory bread(block 67) failed
[   86.164254][ T5541] FAT-fs (loop5): Directory bread(block 68) failed
[   86.165355][ T5541] FAT-fs (loop5): Directory bread(block 69) failed
[   86.166436][ T5541] FAT-fs (loop5): Directory bread(block 70) failed
[   86.167558][ T5541] FAT-fs (loop5): Directory bread(block 71) failed
[   86.168808][ T5541] FAT-fs (loop5): Directory bread(block 72) failed
[   86.169863][ T5541] FAT-fs (loop5): Directory bread(block 73) failed
[   86.237516][ T5543] loop3: detected capacity change from 0 to 1024
[   86.238962][ T5543] EXT4-fs: Ignoring removed oldalloc option
[   86.240590][ T5543] EXT4-fs: Ignoring removed bh option
[   86.253327][ T5543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   86.275424][ T5543] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   86.509513][ T5552] loop0: detected capacity change from 0 to 1024
[   86.520257][ T5552] EXT4-fs: Ignoring removed bh option
[   86.522011][ T5552] EXT4-fs: Ignoring removed oldalloc option
[   86.523698][ T5552] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.558403][ T5552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   87.111392][ T5552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[   87.112916][ T5552] System zones: 0-1, 3-36
[   87.237057][ T5552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   87.987515][ T5572] loop5: detected capacity change from 0 to 1024
[   87.988884][ T5572] journal_path: Lookup failure for './file0/../file0'
[   87.989924][ T5572] EXT4-fs: error: could not find journal device path
[   88.429915][ T4326] EXT4-fs (loop0): unmounting filesystem.
[   88.635291][ T4321] EXT4-fs (loop3): unmounting filesystem.
[   89.064538][ T5582] loop0: detected capacity change from 0 to 16
[   89.068694][ T5582] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   89.657369][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.277'.
[   89.661075][ T5588] device syzkaller0 entered promiscuous mode
[   90.164869][ T5590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.271153][ T5595] loop3: detected capacity change from 0 to 40427
[   90.277626][ T5595] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   90.279171][ T5595] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   90.282755][ T5590] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.289224][ T5595] F2FS-fs (loop3): invalid crc value
[   90.295730][ T5595] F2FS-fs (loop3): Found nat_bits in checkpoint
[   90.309828][ T5595] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   90.311109][ T5595] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   90.439988][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'.
[   90.505703][ T5607] Injecting memory failure for pfn 0x14336b at process virtual address 0x20b6b000
[   90.508688][ T5607] Memory failure: 0x14336b: recovery action for unsplit thp: Ignored
[   90.797418][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'.
[   92.695568][ T5650] "syz.0.294" (5650) uses obsolete ecb(arc4) skcipher
[   93.054230][ T5656] loop4: detected capacity change from 0 to 16
[   93.055680][ T5656] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   93.149184][ T5657] process 'syz.1.292' launched './file0' with NULL argv: empty string added
[   93.398805][ T5641] loop5: detected capacity change from 0 to 1764
[   94.128592][ T5693] loop3: detected capacity change from 0 to 1024
[   94.130245][ T5693] journal_path: Lookup failure for './file0/../file0'
[   94.131373][ T5693] EXT4-fs: error: could not find journal device path
[   95.339281][ T5481] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.565483][ T5704] Unsupported ieee802154 address type: 0
[   96.523834][ T5723] loop5: detected capacity change from 0 to 128
[   97.103683][ T5723] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   97.124087][ T5718] device syzkaller0 entered promiscuous mode
[   97.169007][ T4874] EXT4-fs (loop5): unmounting filesystem.
[   97.193498][ T5737] 9pnet: p9_errstr2errno: server reported unknown error �VmI�L�◅N
[   98.224729][ T5760] Bluetooth: MGMT ver 1.22
[   98.868587][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'.
[  103.865823][ T4328] Bluetooth: hci2: Malformed Event: 0x48
[  104.700034][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'.
[  104.868898][ T5937] loop4: detected capacity change from 0 to 64
[  105.703298][ T5951] loop1: detected capacity change from 0 to 256
[  105.712810][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'.
[  105.747149][ T5952] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.752102][ T5952] bond2: (slave bond3): Enslaving as an active interface with an up link
[  106.409079][ T5952] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  106.420539][ T5952] bond2: (slave gretap1): Error: Slave device does not support XDP
[  106.437079][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'.
[  106.609438][ T5980] loop4: detected capacity change from 0 to 512
[  106.651919][ T5980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.164197][ T5980] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.356: invalid indirect mapped block 256 (level 2)
[  107.177756][ T5980] EXT4-fs (loop4): 2 truncates cleaned up
[  107.178779][ T5980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  107.195854][ T5997] loop1: detected capacity change from 0 to 512
[  107.786316][ T4332] EXT4-fs (loop4): unmounting filesystem.
[  107.853479][ T6011] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  107.857021][ T6011] fuse: Bad value for 'user_id'
[  107.868115][ T6011] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  107.939777][ T6013] loop0: detected capacity change from 0 to 256
[  109.857663][ T6036] loop1: detected capacity change from 0 to 1024
[  110.221593][ T6034] loop4: detected capacity change from 0 to 32768
[  110.235190][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'.
[  110.236789][ T6042] device bridge_slave_1 left promiscuous mode
[  110.238625][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.266823][ T6034] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  110.581557][ T6042] device bridge_slave_0 left promiscuous mode
[  110.588009][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.646479][  T155] hfsplus: b-tree write err: -5, ino 25
[  110.648961][  T155] hfsplus: b-tree write err: -5, ino 4
[  110.650022][  T155] hfsplus: b-tree write err: -5, ino 2
[  111.035640][ T6050] loop1: detected capacity change from 0 to 164
[  111.072561][ T4332] (syz-executor,4332,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76
[  111.157342][ T4332] ocfs2: Unmounting device (7,4) on (node local)
[  111.536866][ T6058] binder: BINDER_SET_CONTEXT_MGR already set
[  111.537983][ T6058] binder: 6057:6058 ioctl 4018620d 20004a80 returned -16
[  111.542561][ T6061] binder: 6059:6061 tried to acquire reference to desc 0, got 1 instead
[  111.559506][ T6061] binder: 6059:6061 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  111.562795][ T6061] binder: 6061 RLIMIT_NICE not set
[  111.563713][ T6061] binder: 6061 RLIMIT_NICE not set
[  111.565304][ T6061] binder: 6061 RLIMIT_NICE not set
[  111.566345][ T6061] binder: 6059:6061 got transaction with invalid offsets ptr
[  111.567524][ T6061] binder: 6059:6061 transaction reply to 6059:6061 failed 59/29201/-14, size 0-240 line 3269
[  111.569000][ T6061] binder: send failed reply for transaction 58 to 6059:6061
[  111.577098][ T6062] binder: 6060:6062 tried to acquire reference to desc 0, got 1 instead
[  111.577199][ T4370] binder: undelivered TRANSACTION_ERROR: 29190
[  111.578909][ T6062] binder: 6060:6062 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  111.579412][ T4370] binder: undelivered TRANSACTION_COMPLETE
[  111.581099][ T6062] binder: 6062 RLIMIT_NICE not set
[  111.582249][ T4370] binder: undelivered TRANSACTION_ERROR: 29201
[  111.582857][ T6062] binder: 6062 RLIMIT_NICE not set
[  111.584569][ T6062] binder: send failed reply for transaction 62 to 6060:6062
[  111.585651][ T6062] binder: 6060:6062 ioctl c0306201 20000240 returned -14
[  111.591250][ T6067] binder: 6067:6057 cannot find target node
[  111.592479][ T6067] binder: 6057:6067 transaction call to 0:0 failed 63/29201/-22, size 72-24 line 3045
[  111.598457][ T6067] binder: 6067:6057 cannot find target node
[  111.599387][ T6067] binder: 6057:6067 transaction call to 0:0 failed 64/29201/-22, size 0-0 line 3045
[  112.395126][ T6085] netlink: 'syz.5.388': attribute type 1 has an invalid length.
[  112.520981][ T6088] loop3: detected capacity change from 0 to 256
[  112.626652][ T6088] FAT-fs (loop3): Directory bread(block 64) failed
[  112.627878][ T6088] FAT-fs (loop3): Directory bread(block 65) failed
[  112.629107][ T6088] FAT-fs (loop3): Directory bread(block 66) failed
[  112.630230][ T6088] FAT-fs (loop3): Directory bread(block 67) failed
[  112.631450][ T6088] FAT-fs (loop3): Directory bread(block 68) failed
[  112.632633][ T6088] FAT-fs (loop3): Directory bread(block 69) failed
[  112.633910][ T6088] FAT-fs (loop3): Directory bread(block 70) failed
[  112.635079][ T6088] FAT-fs (loop3): Directory bread(block 71) failed
[  112.636330][ T6088] FAT-fs (loop3): Directory bread(block 72) failed
[  112.637434][ T6088] FAT-fs (loop3): Directory bread(block 73) failed
[  115.340394][ T6125] netlink: 'syz.5.400': attribute type 1 has an invalid length.
[  115.408139][ T6128] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  115.409430][ T6128] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  115.410929][ T6128] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  115.436344][ T6128] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  115.468650][ T6128] bond1: (slave geneve2): making interface the new active one
[  115.472937][ T6128] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  115.497640][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.400'.
[  115.507621][ T6125] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.848762][ T6154] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.860412][ T6156] device veth0 entered promiscuous mode
[  116.872090][ T6156] bond2: (slave macvlan0): making interface the new active one
[  116.876632][ T6156] bond2: (slave macvlan0): Enslaving as an active interface with an up link
[  116.884125][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  118.655615][ T6179] loop4: detected capacity change from 0 to 8192
[  119.361882][ T6202] loop4: detected capacity change from 0 to 40427
[  119.367960][ T6202] F2FS-fs (loop4): Encrypt feature is off
[  119.823868][ T6201] tipc: Started in network mode
[  119.824882][ T6201] tipc: Node identity 4, cluster identity 4711
[  119.825939][ T6201] tipc: Node number set to 4
[  121.268760][ T6249] netlink: 'syz.3.438': attribute type 10 has an invalid length.
[  121.319412][ T6249] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  121.323174][ T6251] netlink: 'syz.4.439': attribute type 1 has an invalid length.
[  121.334971][ T6251] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.678416][ T6257] bond4: (slave geneve2): making interface the new active one
[  121.699062][ T6257] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  121.708602][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  121.730154][ T6261] netlink: 'syz.1.442': attribute type 10 has an invalid length.
[  121.756604][ T6247] loop5: detected capacity change from 0 to 32768
[  121.758746][ T6247] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.435 (6247)
[  121.762475][ T6266] loop4: detected capacity change from 0 to 512
[  121.768034][ T6263] loop0: detected capacity change from 0 to 4096
[  121.770283][ T6247] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  121.775258][ T6263] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  121.776870][ T6263] NILFS (loop0): mounting unchecked fs
[  121.782878][ T6247] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  121.784259][ T6247] BTRFS error (device loop5): superblock checksum mismatch
[  121.789499][ T6247] BTRFS error (device loop5): open_ctree failed: -22
[  121.799750][ T6263] NILFS (loop0): recovery complete
[  121.816446][ T6272] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.860288][ T6266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  121.876480][ T6261] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  121.877859][ T6267] netlink: 'syz.3.444': attribute type 1 has an invalid length.
[  121.897106][ T6267] device bond2 entered promiscuous mode
[  121.898068][ T6267] 8021q: adding VLAN 0 to HW filter on device bond2
[  121.900258][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  121.902658][ T6268] bond2: option mode: unable to set because the bond device has slaves
[  121.904090][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  121.905721][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'.
[  122.042298][ T4328] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  122.044364][ T4328] Bluetooth: hci4: Injecting HCI hardware error event
[  122.048328][   T47] Bluetooth: hci4: hardware error 0x00
[  122.180227][ T6273] bond2: (slave bond0): Error -95 calling set_mac_address
[  122.182291][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.444'.
[  122.208558][ T6267] bond2: (slave bridge1): making interface the new active one
[  122.221328][ T6267] device bridge1 entered promiscuous mode
[  122.222711][ T6267] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  122.225556][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  122.251716][ T4368] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82
[  122.417030][ T5481] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by udevd (5481)
[  122.926310][ T4332] EXT4-fs (loop4): unmounting filesystem.
[  122.959439][ T6298] loop4: detected capacity change from 0 to 1024
[  122.977734][ T6298] hfsplus: failed to load extents file
[  123.112027][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[  123.249448][ T6311] loop0: detected capacity change from 0 to 128
[  123.299112][ T6308] netem: change failed
[  123.322693][ T6308] ==================================================================
[  123.323915][ T6308] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x20c/0x210
[  123.325334][ T6308] Read of size 2 at addr ffff0000f362e5fb by task syz.3.453/6308
[  123.326559][ T6308] 
[  123.326930][ T6308] CPU: 0 PID: 6308 Comm: syz.3.453 Not tainted syzkaller #0
[  123.328106][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
[  123.329678][ T6308] Call trace:
[  123.330224][ T6308]  dump_backtrace+0x1c0/0x1ec
[  123.331000][ T6308]  show_stack+0x2c/0x3c
[  123.331711][ T6308]  __dump_stack+0x30/0x40
[  123.332419][ T6308]  dump_stack_lvl+0xf4/0x15c
[  123.333174][ T6308]  print_address_description+0x88/0x218
[  123.334084][ T6308]  print_report+0x50/0x68
[  123.334785][ T6308]  kasan_report+0xa8/0xfc
[  123.335500][ T6308]  __asan_report_load2_noabort+0x2c/0x38
[  123.336418][ T6308]  ieee80211_monitor_select_queue+0x20c/0x210
[  123.337392][ T6308]  netdev_core_pick_tx+0x130/0x320
[  123.338213][ T6308]  __dev_queue_xmit+0x738/0x3118
[  123.338993][ T6308]  dev_queue_xmit+0x24/0x34
[  123.339715][ T6308]  packet_sendmsg+0x2f9c/0x3fd0
[  123.340529][ T6308]  ____sys_sendmsg+0x5c8/0x938
[  123.341339][ T6308]  __sys_sendmsg+0x288/0x374
[  123.342078][ T6308]  __arm64_sys_sendmsg+0x80/0x94
[  123.342849][ T6308]  invoke_syscall+0x98/0x2b4
[  123.343536][ T6308]  el0_svc_common+0x138/0x258
[  123.344284][ T6308]  do_el0_svc+0x58/0x130
[  123.344955][ T6308]  el0_svc+0x58/0x128
[  123.345608][ T6308]  el0t_64_sync_handler+0x84/0xf0
[  123.346440][ T6308]  el0t_64_sync+0x18c/0x190
[  123.347174][ T6308] 
[  123.347568][ T6308] Allocated by task 6193:
[  123.348319][ T6308]  kasan_set_track+0x4c/0x80
[  123.349081][ T6308]  kasan_save_alloc_info+0x24/0x30
[  123.349941][ T6308]  __kasan_kmalloc+0xa0/0xb8
[  123.350714][ T6308]  __kmalloc_node_track_caller+0xe0/0x16c
[  123.351689][ T6308]  __alloc_skb+0x264/0x714
[  123.352441][ T6308]  alloc_skb_with_frags+0xa0/0x54c
[  123.353259][ T6308]  sock_alloc_send_pskb+0x73c/0x850
[  123.354122][ T6308]  unix_dgram_sendmsg+0x41c/0x1268
[  123.354920][ T6308]  unix_seqpacket_sendmsg+0x108/0x1cc
[  123.355760][ T6308]  ____sys_sendmsg+0x5c8/0x938
[  123.356511][ T6308]  __sys_sendmmsg+0x344/0x834
[  123.357261][ T6308]  __arm64_sys_sendmmsg+0xa0/0xbc
[  123.358045][ T6308]  invoke_syscall+0x98/0x2b4
[  123.358786][ T6308]  el0_svc_common+0x138/0x258
[  123.359515][ T6308]  do_el0_svc+0x58/0x130
[  123.360175][ T6308]  el0_svc+0x58/0x128
[  123.360805][ T6308]  el0t_64_sync_handler+0x84/0xf0
[  123.361607][ T6308]  el0t_64_sync+0x18c/0x190
[  123.362360][ T6308] 
[  123.362724][ T6308] Freed by task 6193:
[  123.363346][ T6308]  kasan_set_track+0x4c/0x80
[  123.364018][ T6308]  kasan_save_free_info+0x38/0x5c
[  123.364756][ T6308]  ____kasan_slab_free+0x148/0x1b0
[  123.365510][ T6308]  __kasan_slab_free+0x18/0x28
[  123.366212][ T6308]  slab_free_freelist_hook+0x16c/0x1e8
[  123.367003][ T6308]  __kmem_cache_free+0xbc/0x218
[  123.367714][ T6308]  kfree+0xd0/0x1a8
[  123.368275][ T6308]  skb_release_data+0x434/0x63c
[  123.368964][ T6308]  kfree_skb_reason+0x198/0x418
[  123.369635][ T6308]  unix_dgram_sendmsg+0x57c/0x1268
[  123.369897][ T6316] tipc: Started in network mode
[  123.370339][ T6308]  unix_seqpacket_sendmsg+0x108/0x1cc
[  123.371119][ T6316] tipc: Node identity de5a7da1797, cluster identity 4711
[  123.371824][ T6308]  ____sys_sendmsg+0x5c8/0x938
[  123.371845][ T6308]  __sys_sendmmsg+0x344/0x834
[  123.371855][ T6308]  __arm64_sys_sendmmsg+0xa0/0xbc
[  123.371864][ T6308]  invoke_syscall+0x98/0x2b4
[  123.371872][ T6308]  el0_svc_common+0x138/0x258
[  123.371881][ T6308]  do_el0_svc+0x58/0x130
[  123.371889][ T6308]  el0_svc+0x58/0x128
[  123.371898][ T6308]  el0t_64_sync_handler+0x84/0xf0
[  123.371907][ T6308]  el0t_64_sync+0x18c/0x190
[  123.371911][ T6308] 
[  123.371913][ T6308] The buggy address belongs to the object at ffff0000f362e400
[  123.371913][ T6308]  which belongs to the cache kmalloc-cg-512 of size 512
[  123.371918][ T6308] The buggy address is located 507 bytes inside of
[  123.371918][ T6308]  512-byte region [ffff0000f362e400, ffff0000f362e600)
[  123.371924][ T6308] 
[  123.371926][ T6308] The buggy address belongs to the physical page:
[  123.371929][ T6308] page:00000000db567281 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13362c
[  123.371936][ T6308] head:00000000db567281 order:2 compound_mapcount:0 compound_pincount:0
[  123.371940][ T6308] memcg:ffff0000f3cb8901
[  123.371943][ T6308] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  123.371953][ T6308] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0003080
[  123.371959][ T6308] raw: 0000000000000000 0000000000100010 00000001ffffffff ffff0000f3cb8901
[  123.371962][ T6308] page dumped because: kasan: bad access detected
[  123.371965][ T6308] 
[  123.371966][ T6308] Memory state around the buggy address:
[  123.371969][ T6308]  ffff0000f362e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  123.371973][ T6308]  ffff0000f362e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  123.371977][ T6308] >ffff0000f362e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  123.371980][ T6308]                                                                 ^
[  123.371984][ T6308]  ffff0000f362e600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  123.371987][ T6308]  ffff0000f362e680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  123.371990][ T6308] ==================================================================
[  123.372037][ T6308] Disabling lock debugging due to kernel taint
[  123.403823][ T6316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.405926][ T6316] device syzkaller0 entered promiscuous mode
[  123.410557][ T6316] tipc: Resetting bearer <eth:syzkaller0>
[  123.412196][ T6315] tipc: Resetting bearer <eth:syzkaller0>
[  123.444683][ T6315] tipc: Disabling bearer <eth:syzkaller0>
[  124.341313][   T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  125.931604][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  125.932709][ T2061] ieee802154 phy1 wpan1: encryption failed: -22