last executing test programs: 1m13.423380575s ago: executing program 2 (id=19): r0 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) 1m13.103865981s ago: executing program 2 (id=20): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x2000080, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) 1m12.11502722s ago: executing program 2 (id=29): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) 1m11.89208265s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m11.742003348s ago: executing program 2 (id=32): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00110000", @ANYRES32=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x69, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0xfff8, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 1m10.66978529s ago: executing program 2 (id=38): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x4c033, 0xffffffffffffffff, 0x8000000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1m10.49043741s ago: executing program 32 (id=38): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x4c033, 0xffffffffffffffff, 0x8000000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 6.378422395s ago: executing program 4 (id=725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x55}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.88509349s ago: executing program 4 (id=729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000fc0)={@remote, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0xd6f, 0x62, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xfa, 0x1, 0x0, 0x3, 0x7, 0x5}, 0x1, {0x800}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0xc, 0x1, 0x1, 0x1, 0x6, 0x10}, 0x2, {0x5d1, 0x40, 0x1, 0x15, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}}}, 0x0) 5.761612626s ago: executing program 4 (id=732): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="8d283272e64fc9c6aec802ac0eee09c8f85a2b5ce4a1576a9c514556fed48c38c19797078855a3e6bcf03026960e72c6b9e43a75d157b3f2b82986c1cdc128ea94985a8e036a5b61b5eede6581a9ab8b1d1fc825d8b6467f7f0c8aa5e6eb7d332cdea3ced93d1365e1b47d89a75477b69ea8aa34a8503ac55a676cd4c3412af764aacbc5", 0x84}], 0x1, 0x0, 0x48}}], 0x1, 0x4000001) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 5.507501289s ago: executing program 4 (id=735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) 5.235053922s ago: executing program 4 (id=737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) sendto$inet(r0, &(0x7f0000000180)="8995", 0x2, 0x4c041, 0x0, 0x0) 5.130223407s ago: executing program 4 (id=738): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3.45831884s ago: executing program 0 (id=748): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) sendto$inet(r0, &(0x7f0000000180)="8995", 0x2, 0x4c041, 0x0, 0x0) 3.351671915s ago: executing program 0 (id=750): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffff99) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x25}, 0x40040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.869990178s ago: executing program 0 (id=752): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x6, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737a7", 0x68, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.778797063s ago: executing program 0 (id=753): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x208b21, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x8, r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodatasum}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x20) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x4417e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x1000200201005) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 2.657382059s ago: executing program 1 (id=764): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x69, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0xfff8, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 1.878171407s ago: executing program 5 (id=757): r0 = socket$inet(0x2, 0x2, 0x0) write(r0, 0x0, 0x0) 1.804074951s ago: executing program 5 (id=758): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) clock_gettime(0x1, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000500)="cc", 0xfdef}, {0x0}], 0x2) 1.737795614s ago: executing program 1 (id=759): socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.598034191s ago: executing program 5 (id=760): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x844) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.368269002s ago: executing program 5 (id=762): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 898.059795ms ago: executing program 0 (id=765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x6}], 0xf}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/89, 0x7ffff061}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 897.780416ms ago: executing program 3 (id=766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000001400)="e3", 0x1, 0x20008005, &(0x7f0000001200)={0x2, 0x4e20, @empty}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) close(0x3) 818.684239ms ago: executing program 1 (id=767): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)={@random="3f0cb265933b", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x24, 0x62, 0x0, 0x5, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x4e1b, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100, @val=0x80}}}}}}}, 0x0) 803.85722ms ago: executing program 3 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0x8010) 678.423326ms ago: executing program 1 (id=769): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x0, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xfff1, 0xb}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 614.05554ms ago: executing program 3 (id=770): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x69, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0xfff8, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 488.007765ms ago: executing program 5 (id=771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x3c, r3, 0x89688db4c777b4a9, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, '\x00\b\x00'}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) 453.756827ms ago: executing program 3 (id=772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x55}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 210.051659ms ago: executing program 1 (id=773): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 141.614342ms ago: executing program 0 (id=774): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d0000000"], 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 122.085923ms ago: executing program 5 (id=775): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x208b21, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x8, r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodatasum}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x20) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x4417e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x1000200201005) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 54.040437ms ago: executing program 1 (id=776): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) prlimit64(r0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, &(0x7f0000000500), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123c000000000061134c0000000000bf1000000000000015000200071b60013d020100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000070600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586f9305ab24fede751b184bcf3a2da2873ad8cfdbaf16b96c57de9f771c0a3e92a1a595965c5106b49611bf32e3af18e578870c7cd59be5d4881f1280fc1103e421e93c5929cfcf841ae7a045b81ab18504a0409446fffea9a428c477fb4ab5c8c3b309f6585e7070db5048c0231d9519be44d8dcad428c60de7163450a6c2a131170267d2abc76189ccefea343fdeb77dc0af2b14748e05bdcfcf535b90d0ea8ce64d148bb2ab0650c346cb9492242d13ea3eac49e6c7c43beaa0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) 41.582848ms ago: executing program 3 (id=777): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x6, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737a7", 0x68, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=778): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000340)="1e", 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000019001b0028bd7000fcdbdf250a001400000000040004000006001500030000004f9589da036c55b8f01c50362f2c1d4ba966b61c60315187f26ef4dbd8"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x2, 0x0, 0x7}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @rand_addr=0x64010100}}}], 0x20}, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 49.251005][ T4172] cgroup: Unknown subsys name 'net' [ 49.387366][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.627612][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.998116][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 52.028724][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.052345][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.073930][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.134952][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.223190][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.230275][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.238855][ T4194] device bridge_slave_0 entered promiscuous mode [ 52.253542][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.260582][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.268426][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.287478][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.294811][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.302785][ T4194] device bridge_slave_1 entered promiscuous mode [ 52.310259][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.317408][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.325482][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.332938][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.339991][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.347926][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.377529][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.384755][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.392716][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.399910][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.407104][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.415216][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.448345][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.457941][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.465354][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.473809][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.480805][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.488078][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.496056][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.509125][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.516309][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.524404][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.532977][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.543959][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.560855][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.571461][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.615496][ T4184] team0: Port device team_slave_0 added [ 52.622863][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.640684][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.657549][ T4184] team0: Port device team_slave_1 added [ 52.678149][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.688804][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.700755][ T4194] team0: Port device team_slave_0 added [ 52.720600][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.728581][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.755750][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.769257][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.791969][ T4194] team0: Port device team_slave_1 added [ 52.800697][ T4188] team0: Port device team_slave_0 added [ 52.808519][ T4188] team0: Port device team_slave_1 added [ 52.814997][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.821941][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.848233][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.872856][ T4191] team0: Port device team_slave_0 added [ 52.903159][ T4193] team0: Port device team_slave_0 added [ 52.910624][ T4191] team0: Port device team_slave_1 added [ 52.935078][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.942126][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.968468][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.981227][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.988408][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.014407][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.026515][ T4193] team0: Port device team_slave_1 added [ 53.040150][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.047189][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.073486][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.085218][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.092773][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.119056][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.157415][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.164427][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.190434][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.201903][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.212091][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.237996][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.258499][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.265777][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.291789][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.306661][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.314013][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.340113][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.363868][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.370554][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.423573][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.430259][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.437068][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.445063][ T4188] Cannot create hsr debugfs directory [ 53.454031][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.461859][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.468669][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.476459][ T4191] Cannot create hsr debugfs directory [ 53.499263][ T4194] device hsr_slave_0 entered promiscuous mode [ 53.506178][ T4194] device hsr_slave_1 entered promiscuous mode [ 53.512969][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.520528][ T4194] Cannot create hsr debugfs directory [ 53.550056][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.556893][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.563779][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.571332][ T4193] Cannot create hsr debugfs directory [ 53.712723][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.712770][ T3575] Bluetooth: hci4: command 0x0409 tx timeout [ 53.719384][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 53.732164][ T3575] Bluetooth: hci2: command 0x0409 tx timeout [ 53.738299][ T3575] Bluetooth: hci3: command 0x0409 tx timeout [ 53.888304][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.902532][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.911237][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.921427][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.961049][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.981014][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.990507][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.006241][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.017628][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.039590][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.056635][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.065879][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.091949][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.105939][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.137966][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.166061][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.233319][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.243333][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.265797][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.290579][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.307631][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.321112][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.359985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.370246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.378512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.389648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.401014][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.412496][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.424883][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.439391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.448111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.457696][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.465083][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.474018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.514596][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.529284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.538152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.549091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.558120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.566829][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.573949][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.582921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.591427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.599944][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.607094][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.615233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.625639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.634452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.643158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.651445][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.658504][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.667159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.676249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.685413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.699256][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.714560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.725515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.734621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.743441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.751937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.774300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.784086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.793205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.804348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.813347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.821794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.830672][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.837768][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.845401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.854721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.863862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.872589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.881016][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.888090][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.895875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.907084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.919739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.928320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.941099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.950098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.959717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.968187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.983450][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.997449][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.005850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.015907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.023863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.035120][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.045434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.055482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.064233][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.071275][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.106418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.120520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.130421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.141376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.150607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.160228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.168859][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.175990][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.184554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.194226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.206449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.225408][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.239758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.263800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.292466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.304298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.323464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.334799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.343549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.351943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.360118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.372265][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.384355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.395480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.409482][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.421147][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.441110][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.452755][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.469657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.478957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.488589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.497382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.507399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.516449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.528143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.537236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.546249][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.553478][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.561264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.569797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.607260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.623248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.630752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.641212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.662601][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.669703][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.677699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.686558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.694407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.701922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.718772][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.738444][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.775979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.787433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.795917][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 55.796567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.807612][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 55.813319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.821659][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 55.824585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.829666][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 55.837993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.848319][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 55.850647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.865742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.875364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.886493][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.896774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.905867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.917643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.926399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.960585][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.969091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.976946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.985957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.994890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.009230][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.062346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.071178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.093961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.110324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.146207][ T4188] device veth0_vlan entered promiscuous mode [ 56.159533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.168744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.177919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.187179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.201255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.209363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.223666][ T4184] device veth0_vlan entered promiscuous mode [ 56.231211][ T4193] device veth0_vlan entered promiscuous mode [ 56.245122][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.255954][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.296862][ T4193] device veth1_vlan entered promiscuous mode [ 56.309614][ T4188] device veth1_vlan entered promiscuous mode [ 56.328641][ T4184] device veth1_vlan entered promiscuous mode [ 56.337271][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.345544][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.354702][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.406251][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.417943][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.426856][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.436432][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.445093][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.461742][ T4193] device veth0_macvtap entered promiscuous mode [ 56.484984][ T4188] device veth0_macvtap entered promiscuous mode [ 56.492708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.501734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.511598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.520364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.531941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.540193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.549045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.557719][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.566317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.574972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.583962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.591776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.606008][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.616399][ T4184] device veth0_macvtap entered promiscuous mode [ 56.626347][ T4193] device veth1_macvtap entered promiscuous mode [ 56.637129][ T4194] device veth0_vlan entered promiscuous mode [ 56.651163][ T4184] device veth1_macvtap entered promiscuous mode [ 56.660385][ T4188] device veth1_macvtap entered promiscuous mode [ 56.676124][ T4194] device veth1_vlan entered promiscuous mode [ 56.700430][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.711709][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.731829][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.744424][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.755819][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.763736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.771709][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.781720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.790093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.798300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.806711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.815109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.824333][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.833422][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.841925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.850661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.859566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.868659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.877911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.889338][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.899371][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.909019][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.917972][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.939027][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.949682][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.962131][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.978536][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.990604][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.002146][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.013404][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.025078][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.038770][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.049765][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.060268][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.071550][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.087972][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.095727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.104632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.114011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.122678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.131228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.139675][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.149811][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.158999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.167898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.176689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.186101][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.195061][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.204449][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.213311][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.246611][ T4191] device veth0_vlan entered promiscuous mode [ 57.261945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.271116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.293658][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.311096][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.320215][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.329234][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.343424][ T4194] device veth0_macvtap entered promiscuous mode [ 57.353723][ T4194] device veth1_macvtap entered promiscuous mode [ 57.380256][ T4191] device veth1_vlan entered promiscuous mode [ 57.410972][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.421558][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.434935][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.446095][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.456022][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.467316][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.479266][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.511161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.519949][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.529426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.545270][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.559574][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.569754][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.580791][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.590899][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.601618][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.613433][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.624120][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.633515][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.642467][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.651150][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.676087][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.684835][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.717505][ T4191] device veth0_macvtap entered promiscuous mode [ 57.728707][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.744784][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.750797][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.760484][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.774724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.787831][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.798201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.806902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.815128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.826945][ T4191] device veth1_macvtap entered promiscuous mode [ 57.872677][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 57.878967][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 57.909227][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 57.914641][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.916028][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 57.923484][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.934910][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 57.939061][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.957076][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.991822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.001056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.010823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.020858][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.028897][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.028933][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.028942][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.028953][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.028961][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.028971][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.028979][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.028989][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.030307][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.058145][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.091951][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.115444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.150598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.156046][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.160160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.190837][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.213787][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.233009][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.244545][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.254649][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.266070][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.275913][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.286681][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.296761][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.308602][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.320197][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.328235][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.337669][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.351368][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.360195][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.389739][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.406936][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.432148][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.446527][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.476272][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.492776][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.547889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.667372][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.702883][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.740273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.760363][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.788025][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.833626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.845696][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.354535][ T4307] loop1: detected capacity change from 0 to 128 [ 59.403565][ T4312] loop2: detected capacity change from 0 to 128 [ 59.461966][ T4307] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 59.470873][ T4307] FAT-fs (loop1): Filesystem has been set read-only [ 59.943611][ T2856] Bluetooth: hci1: command 0x0419 tx timeout [ 59.952644][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 59.960854][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 59.990310][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 60.033335][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 62.507113][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.544081][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 62.597294][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 62.643287][ T4369] Zero length message leads to an empty skb [ 62.650546][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.807088][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.998545][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.290630][ T4385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.654073][ T4380] chnl_net:caif_netlink_parms(): no params data found [ 63.840044][ T4402] overlayfs: missing 'lowerdir' [ 63.919604][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.926802][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.935681][ T4380] device bridge_slave_0 entered promiscuous mode [ 63.946876][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.017435][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.064957][ T4380] device bridge_slave_1 entered promiscuous mode [ 64.137800][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 64.228112][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 64.365635][ T4380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.414566][ T4380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.530948][ T4380] team0: Port device team_slave_0 added [ 64.721064][ T4380] team0: Port device team_slave_1 added [ 64.828690][ T4380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.870284][ T4380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.937833][ T4380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.960621][ T4380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.988278][ T4380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.049355][ T4380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.067531][ T4226] Bluetooth: hci2: command 0x0409 tx timeout [ 65.224379][ T4380] device hsr_slave_0 entered promiscuous mode [ 65.288565][ T4380] device hsr_slave_1 entered promiscuous mode [ 65.315447][ T4380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.346053][ T4380] Cannot create hsr debugfs directory [ 65.444028][ T155] device hsr_slave_0 left promiscuous mode [ 65.506073][ T155] device hsr_slave_1 left promiscuous mode [ 65.516554][ T26] audit: type=1326 audit(1774392135.927:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 65.565907][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.584875][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.598758][ T26] audit: type=1326 audit(1774392135.927:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 65.632806][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.646999][ T4476] overlayfs: missing 'lowerdir' [ 65.668621][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.711696][ T155] device bridge_slave_1 left promiscuous mode [ 65.726588][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.762086][ T26] audit: type=1326 audit(1774392135.927:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 65.807737][ T155] device bridge_slave_0 left promiscuous mode [ 65.839191][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.917033][ T26] audit: type=1326 audit(1774392135.927:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 65.946009][ T155] device veth1_macvtap left promiscuous mode [ 65.974768][ T26] audit: type=1326 audit(1774392135.927:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 65.991780][ T155] device veth0_macvtap left promiscuous mode [ 65.997654][ T26] audit: type=1326 audit(1774392135.927:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 66.041252][ T155] device veth1_vlan left promiscuous mode [ 66.043747][ T26] audit: type=1326 audit(1774392135.927:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 66.053028][ T155] device veth0_vlan left promiscuous mode [ 66.069906][ T26] audit: type=1326 audit(1774392135.927:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 66.101401][ T26] audit: type=1326 audit(1774392135.927:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 66.383473][ T26] audit: type=1326 audit(1774392135.927:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4470 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b17694799 code=0x7ffc0000 [ 67.152251][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 67.184297][ T155] team0 (unregistering): Port device team_slave_1 removed [ 67.243397][ T155] team0 (unregistering): Port device team_slave_0 removed [ 67.290124][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.345296][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.511178][ T155] bond0 (unregistering): Released all slaves [ 67.812013][ C0] sched: RT throttling activated [ 68.185153][ T4510] overlayfs: missing 'lowerdir' [ 68.403273][ T4380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.457901][ T4380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.477590][ T4380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.542543][ T4380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.538318][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 69.664241][ T4380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.673799][ T4538] tmpfs: Bad value for 'size' [ 69.810156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.872899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.971289][ T4380] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.048776][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.086209][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.150561][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.157725][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.313742][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.340988][ T4551] overlayfs: missing 'lowerdir' [ 70.384780][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.453620][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.551804][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.559016][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.706190][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.781061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.811866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.863448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.885530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.905329][ T4560] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 70.922921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.935564][ T4560] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 70.950873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.004325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.041918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.085001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.116501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.158020][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.308773][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315321][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.433472][ T4583] overlayfs: missing 'lowerdir' [ 71.638669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.679611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.739164][ T4380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.767206][ T4224] Bluetooth: hci2: command 0x0419 tx timeout [ 73.128810][ T4617] process 'syz.0.110' launched './file0' with NULL argv: empty string added [ 73.802779][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.813676][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.869155][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.912883][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.938906][ T4642] capability: warning: `syz.0.118' uses deprecated v2 capabilities in a way that may be insecure [ 73.952845][ T4380] device veth0_vlan entered promiscuous mode [ 73.959956][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.992704][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.027642][ T4380] device veth1_vlan entered promiscuous mode [ 74.072956][ T4646] loop1: detected capacity change from 0 to 128 [ 74.178772][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.192987][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 74.193001][ T26] audit: type=1800 audit(1774392144.597:32): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="bus" dev="loop1" ino=1048591 res=0 errno=0 [ 74.238717][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.277594][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.312794][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.348927][ T4650] attempt to access beyond end of device [ 74.348927][ T4650] loop1: rw=2049, want=1041, limit=128 [ 74.363039][ T4380] device veth0_macvtap entered promiscuous mode [ 74.392948][ T4380] device veth1_macvtap entered promiscuous mode [ 74.428263][ T4634] loop3: detected capacity change from 0 to 32768 [ 74.462809][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.492108][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.532056][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.567854][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.588084][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.621270][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.641507][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.660588][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.688272][ T4380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.711651][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.739694][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.767927][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.802037][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.827866][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.860187][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.888695][ T4380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.909460][ T4380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.953110][ T4634] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.115 (4634) [ 74.967525][ T4380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.984891][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.006162][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.024120][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.087649][ T4634] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 75.102646][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.128303][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.137138][ T4634] BTRFS info (device loop3): setting nodatasum [ 75.151971][ T4634] BTRFS info (device loop3): using free space tree [ 75.165470][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.182064][ T4634] BTRFS info (device loop3): has skinny extents [ 75.204913][ T4380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.242279][ T4380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.322713][ T4380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.377124][ T4380] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.544471][ T4702] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.679262][ T4634] BTRFS info (device loop3): enabling ssd optimizations [ 75.797160][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.846317][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.894065][ T4717] fuse: Unknown parameter 'fsuuid' [ 75.901509][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.937256][ T4604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.987598][ T4604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.029064][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.434895][ T21] cfg80211: failed to load regulatory.db [ 76.750931][ T26] audit: type=1326 audit(1774392147.157:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436711a799 code=0x7ffc0000 [ 76.907041][ T26] audit: type=1326 audit(1774392147.297:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436711a799 code=0x7ffc0000 [ 77.127809][ T26] audit: type=1326 audit(1774392147.297:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436711a799 code=0x7ffc0000 [ 77.252180][ T26] audit: type=1326 audit(1774392147.297:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436711a799 code=0x7ffc0000 [ 77.334885][ T26] audit: type=1326 audit(1774392147.297:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f436711a799 code=0x7ffc0000 [ 77.451901][ T26] audit: type=1326 audit(1774392147.357:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436711a799 code=0x7ffc0000 [ 77.525725][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 77.534443][ T26] audit: type=1326 audit(1774392147.357:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f436711a502 code=0x7ffc0000 [ 77.633776][ T26] audit: type=1326 audit(1774392147.357:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f436711a597 code=0x7ffc0000 [ 77.735225][ T26] audit: type=1326 audit(1774392147.357:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.5.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f43670d7491 code=0x7ffc0000 [ 77.861550][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 77.920152][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 77.981516][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 78.012280][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 78.375794][ T4811] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 78.435669][ T4811] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.793784][ T4840] netlink: 'syz.3.160': attribute type 24 has an invalid length. [ 78.801546][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 78.896529][ T4840] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 79.431302][ T4884] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 79.814966][ T4911] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 80.157019][ T4944] device syzkaller0 entered promiscuous mode [ 80.297732][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 80.307070][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 80.324422][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 80.333381][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 80.443038][ T4957] syz.4.194 uses obsolete (PF_INET,SOCK_PACKET) [ 82.589265][ T4904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.783853][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 83.199165][ T5008] __nla_validate_parse: 3 callbacks suppressed [ 83.199180][ T5008] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.213'. [ 83.280801][ T5012] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.755949][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'. [ 83.882728][ T5049] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.227'. [ 84.021666][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 84.463859][ T5083] Illegal XDP return value 32768, expect packet loss! [ 84.579542][ T5094] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 84.645870][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.654532][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.683834][ T5099] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.243'. [ 84.739089][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.746274][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.755422][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.762574][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.787278][ T5094] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.331240][ T5131] loop1: detected capacity change from 0 to 128 [ 85.404902][ T5131] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 85.412867][ T5131] FAT-fs (loop1): Filesystem has been set read-only [ 85.644022][ T5147] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 86.098577][ T5162] device team_slave_0 entered promiscuous mode [ 86.105135][ T5162] device team_slave_1 entered promiscuous mode [ 86.128100][ T5162] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.695699][ T5151] loop5: detected capacity change from 0 to 32768 [ 86.742737][ T5151] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.258 (5151) [ 86.931905][ T5151] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 86.979138][ T5151] BTRFS info (device loop5): setting nodatasum [ 86.999158][ T5151] BTRFS info (device loop5): using free space tree [ 87.021573][ T5151] BTRFS info (device loop5): has skinny extents [ 87.209143][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.216621][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.246876][ T5151] BTRFS info (device loop5): enabling ssd optimizations [ 87.539173][ T5244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.276'. [ 88.335619][ T5179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.372556][ T5179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.617379][ T5179] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.628205][ T5179] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.641239][ T5179] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.656904][ T5179] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.730132][ T5263] netlink: 'syz.5.279': attribute type 39 has an invalid length. [ 88.742602][ T5240] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 88.790520][ T5240] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 88.816592][ T5240] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 89.286518][ T5291] netlink: 76 bytes leftover after parsing attributes in process `syz.3.289'. [ 89.360329][ T5293] device syzkaller0 entered promiscuous mode [ 89.404023][ T5299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.416557][ T5299] netlink: 7 bytes leftover after parsing attributes in process `syz.0.292'. [ 89.456652][ T5299] netlink: 7 bytes leftover after parsing attributes in process `syz.0.292'. [ 89.725364][ T5319] netlink: 'syz.0.295': attribute type 6 has an invalid length. [ 89.760785][ T5320] netlink: 'syz.5.297': attribute type 3 has an invalid length. [ 89.837033][ T5320] netlink: 'syz.5.297': attribute type 1 has an invalid length. [ 89.886307][ T5320] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.297'. [ 89.888532][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 90.032790][ T5323] device syz_tun entered promiscuous mode [ 90.038636][ T5323] device macvtap1 entered promiscuous mode [ 90.150538][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 90.172436][ T5335] device syz_tun left promiscuous mode [ 90.216286][ T5335] device macvtap1 left promiscuous mode [ 90.268528][ T5338] netlink: 'syz.5.304': attribute type 7 has an invalid length. [ 90.344037][ T5344] lo speed is unknown, defaulting to 1000 [ 90.420807][ T5344] lo speed is unknown, defaulting to 1000 [ 90.461159][ T5344] lo speed is unknown, defaulting to 1000 [ 90.954885][ T21] lo speed is unknown, defaulting to 1000 [ 90.967867][ T5344] infiniband syz0: set active [ 90.999989][ T5344] infiniband syz0: added lo [ 91.064971][ T5344] infiniband syz0: Couldn't open port 1 [ 91.205873][ T5344] RDS/IB: syz0: added [ 91.223458][ T5417] device syzkaller0 entered promiscuous mode [ 91.234274][ T5344] smc: adding ib device syz0 with port count 1 [ 91.259760][ T5344] smc: ib device syz0 port 1 has pnetid [ 91.280509][ T4765] lo speed is unknown, defaulting to 1000 [ 91.360812][ T5344] lo speed is unknown, defaulting to 1000 [ 91.494524][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 91.723176][ T5344] lo speed is unknown, defaulting to 1000 [ 91.995941][ T5432] lo speed is unknown, defaulting to 1000 [ 92.263267][ T5344] lo speed is unknown, defaulting to 1000 [ 92.611692][ T5344] lo speed is unknown, defaulting to 1000 [ 92.933668][ T5344] lo speed is unknown, defaulting to 1000 [ 93.501329][ T5490] device syzkaller0 entered promiscuous mode [ 93.603095][ T5497] netlink: 'syz.4.343': attribute type 2 has an invalid length. [ 93.755803][ T5500] device syzkaller0 entered promiscuous mode [ 93.790142][ T5502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'. [ 93.832493][ T5502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'. [ 94.121234][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 94.315699][ T5509] syz.0.347 (5509) used greatest stack depth: 19792 bytes left [ 94.437299][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.353'. [ 94.555984][ T5527] device syzkaller0 entered promiscuous mode [ 94.712213][ T5514] syz.4.350 (5514) used greatest stack depth: 18000 bytes left [ 94.769691][ T5544] device syzkaller0 entered promiscuous mode [ 94.814361][ T5550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.359'. [ 94.960325][ T5550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.359'. [ 94.975933][ T5559] netlink: 'syz.0.363': attribute type 8 has an invalid length. [ 95.028872][ T5560] lo speed is unknown, defaulting to 1000 [ 95.054642][ T5563] IPVS: sh: FWM 3 0x00000003 - no destination available [ 95.149616][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 95.169207][ T5565] netlink: 'syz.5.364': attribute type 39 has an invalid length. [ 95.607356][ T5589] lo speed is unknown, defaulting to 1000 [ 95.671949][ T5600] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 95.745257][ T5600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 95.895627][ T5610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.374'. [ 95.906092][ T5610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.374'. [ 96.010811][ T5618] netlink: 'syz.1.376': attribute type 29 has an invalid length. [ 96.021604][ T5616] device syzkaller0 entered promiscuous mode [ 96.564552][ T5638] tipc: Started in network mode [ 96.624906][ T5638] tipc: Node identity 3af99ca519cd, cluster identity 4711 [ 96.717388][ T5638] tipc: Enabled bearer , priority 0 [ 96.789426][ T5644] device syzkaller0 entered promiscuous mode [ 96.818271][ T5649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.384'. [ 96.948256][ T5651] tipc: Resetting bearer [ 96.980027][ T5651] tipc: Disabling bearer [ 97.478320][ T5673] device syzkaller0 entered promiscuous mode [ 98.009131][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.398'. [ 98.077933][ T5698] device geneve2 entered promiscuous mode [ 98.167710][ T5708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'. [ 98.434352][ T5721] device syzkaller0 entered promiscuous mode [ 99.290782][ T5759] device syzkaller0 entered promiscuous mode [ 99.569963][ T5771] netlink: 136 bytes leftover after parsing attributes in process `syz.5.416'. [ 99.619925][ T5771] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 100.165464][ T5799] overlayfs: missing 'lowerdir' [ 100.298151][ T5805] device syzkaller0 entered promiscuous mode [ 100.441317][ T5812] device bridge_slave_0 left promiscuous mode [ 100.466393][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.574596][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 100.650137][ T5812] device bridge_slave_1 left promiscuous mode [ 100.662270][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.673505][ T5812] bond0: (slave bond_slave_0): Releasing backup interface [ 100.687023][ T5812] bond0: (slave bond_slave_1): Releasing backup interface [ 100.700288][ T5812] team0: Port device team_slave_0 removed [ 100.709155][ T5812] team0: Port device team_slave_1 removed [ 100.715436][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.723728][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.843817][ T5832] loop5: detected capacity change from 0 to 128 [ 101.016160][ T5839] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.379551][ T5853] overlayfs: missing 'workdir' [ 101.474060][ T5858] device syzkaller0 entered promiscuous mode [ 101.771597][ T5837] loop1: detected capacity change from 0 to 32768 [ 101.815716][ T5871] loop3: detected capacity change from 0 to 128 [ 101.855486][ T5837] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.434 (5837) [ 101.906185][ T5871] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 101.914215][ T5871] FAT-fs (loop3): Filesystem has been set read-only [ 101.965005][ T5837] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 102.012115][ T5837] BTRFS info (device loop1): setting nodatasum [ 102.037870][ T5837] BTRFS info (device loop1): using free space tree [ 102.099548][ T5837] BTRFS info (device loop1): has skinny extents [ 102.127290][ T5889] overlayfs: missing 'workdir' [ 102.424060][ T5837] BTRFS info (device loop1): enabling ssd optimizations [ 102.746611][ T5934] loop4: detected capacity change from 0 to 128 [ 102.865148][ T5934] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 102.873086][ T5934] FAT-fs (loop4): Filesystem has been set read-only [ 102.874328][ T5940] overlayfs: missing 'workdir' [ 102.880046][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.463'. [ 102.968523][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.463'. [ 103.196593][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 103.300542][ T5953] netlink: 104 bytes leftover after parsing attributes in process `syz.4.470'. [ 103.355601][ T5947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.408983][ T5954] lo speed is unknown, defaulting to 1000 [ 103.417713][ T5955] device bond2 entered promiscuous mode [ 103.513263][ T5955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.619274][ T5955] team0: Port device bond2 added [ 103.743282][ T5965] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 103.953984][ T5989] loop3: detected capacity change from 0 to 128 [ 104.026608][ T5989] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 104.034524][ T5989] FAT-fs (loop3): Filesystem has been set read-only [ 104.287469][ T6007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.478'. [ 104.352454][ T6007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.478'. [ 104.533320][ T6011] lo speed is unknown, defaulting to 1000 [ 104.986189][ T6006] loop5: detected capacity change from 0 to 32768 [ 105.055014][ T6006] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.482 (6006) [ 105.096252][ T6006] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 105.145352][ T6006] BTRFS info (device loop5): setting nodatasum [ 105.171364][ T6006] BTRFS info (device loop5): using free space tree [ 105.206612][ T6006] BTRFS info (device loop5): has skinny extents [ 105.288192][ T6044] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 105.681899][ T6006] BTRFS info (device loop5): enabling ssd optimizations [ 105.930924][ T6063] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.496'. [ 106.010753][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.073580][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.144251][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.231307][ T6063] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.283324][ T6069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.498'. [ 106.319009][ T6063] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.355950][ T6069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.498'. [ 106.518796][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.604361][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.653078][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.662580][ T6072] loop4: detected capacity change from 0 to 128 [ 106.720547][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.769994][ T6072] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 106.778037][ T6072] FAT-fs (loop4): Filesystem has been set read-only [ 106.871252][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.897539][ T6063] bond0 speed is unknown, defaulting to 1000 [ 106.922949][ T6063] bond0 speed is unknown, defaulting to 1000 [ 107.237302][ T6079] Bluetooth: hci2: command 0x0411 tx timeout [ 107.468089][ T6096] tipc: Cannot configure node identity twice [ 107.621734][ T6103] netlink: 48 bytes leftover after parsing attributes in process `syz.5.510'. [ 107.643787][ T6103] netlink: 48 bytes leftover after parsing attributes in process `syz.5.510'. [ 107.716133][ T6105] loop3: detected capacity change from 0 to 128 [ 107.835644][ T6105] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 107.843681][ T6105] FAT-fs (loop3): Filesystem has been set read-only [ 108.228631][ T6100] loop4: detected capacity change from 0 to 32768 [ 108.333462][ T6100] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.509 (6100) [ 108.858227][ T6132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.523'. [ 108.908791][ T6132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.523'. [ 109.131887][ T6140] loop1: detected capacity change from 0 to 128 [ 109.156359][ T6141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.526'. [ 109.173961][ T6140] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 109.181861][ T6140] FAT-fs (loop1): Filesystem has been set read-only [ 109.728428][ T6100] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 109.763236][ T6100] BTRFS info (device loop4): setting nodatasum [ 109.769529][ T6100] BTRFS info (device loop4): using free space tree [ 109.776255][ T6100] BTRFS info (device loop4): has skinny extents [ 109.870318][ T6163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.533'. [ 109.932135][ T6169] netlink: 64 bytes leftover after parsing attributes in process `syz.5.532'. [ 110.032799][ T6162] device syzkaller1 entered promiscuous mode [ 110.081290][ T6100] BTRFS info (device loop4): enabling ssd optimizations [ 110.229221][ T6190] loop0: detected capacity change from 0 to 128 [ 110.326565][ T6190] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 110.334548][ T6190] FAT-fs (loop0): Filesystem has been set read-only [ 110.980794][ T6211] __nla_validate_parse: 2 callbacks suppressed [ 110.980810][ T6211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.548'. [ 111.123135][ T6211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.548'. [ 111.294975][ T6213] device syzkaller0 entered promiscuous mode [ 111.508283][ T6226] loop0: detected capacity change from 0 to 128 [ 111.587771][ T6226] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 111.595669][ T6226] FAT-fs (loop0): Filesystem has been set read-only [ 111.686822][ T6224] lo speed is unknown, defaulting to 1000 [ 112.000623][ T6224] bond0 speed is unknown, defaulting to 1000 [ 112.936148][ T6237] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.556'. [ 112.961940][ T6241] tipc: Started in network mode [ 112.968381][ T6241] tipc: Node identity 6a86358bd1b2, cluster identity 4711 [ 112.976246][ T6241] tipc: Enabled bearer , priority 0 [ 113.004191][ T6241] device syzkaller0 entered promiscuous mode [ 113.076494][ T6241] tipc: Resetting bearer [ 113.115670][ T6240] tipc: Resetting bearer [ 113.144218][ T6240] tipc: Disabling bearer [ 113.239876][ T6257] netlink: 48 bytes leftover after parsing attributes in process `syz.3.560'. [ 113.265568][ T6257] netlink: 48 bytes leftover after parsing attributes in process `syz.3.560'. [ 113.397496][ T6265] loop3: detected capacity change from 0 to 128 [ 113.497786][ T6265] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 113.506172][ T6265] FAT-fs (loop3): Filesystem has been set read-only [ 113.512365][ T6267] tipc: Started in network mode [ 113.536102][ T6267] tipc: Node identity ba7a45747fca, cluster identity 4711 [ 113.602909][ T6267] tipc: Enabled bearer , priority 0 [ 113.646900][ T6270] device syzkaller0 entered promiscuous mode [ 113.650266][ T6272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.566'. [ 113.752400][ T6267] tipc: Resetting bearer [ 113.772448][ T6266] tipc: Resetting bearer [ 113.800383][ T6266] tipc: Disabling bearer [ 113.868660][ T6278] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.568'. [ 113.868816][ T6247] loop5: detected capacity change from 0 to 32768 [ 113.899018][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 113.911793][ T6282] device dummy0 entered promiscuous mode [ 113.917852][ T6282] device vlan2 entered promiscuous mode [ 113.937734][ T6247] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.558 (6247) [ 114.017002][ T6247] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 114.042152][ T6247] BTRFS info (device loop5): setting nodatasum [ 114.068320][ T6247] BTRFS info (device loop5): using free space tree [ 114.109667][ T6247] BTRFS info (device loop5): has skinny extents [ 114.148415][ T6247] BTRFS info (device loop5): enabling ssd optimizations [ 114.161789][ T6291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.573'. [ 114.224237][ T6291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.573'. [ 115.800284][ T6374] x_tables: duplicate underflow at hook 3 [ 115.899451][ T5975] hid (null): report_id 26313 is invalid [ 115.909533][ T5975] hid (null): unknown global tag 0xe [ 115.948560][ T5975] hid (null): invalid report_count 27281 [ 116.018203][ T5975] hid-generic 0005:04F5:5508.0001: report_id 26313 is invalid [ 116.068407][ T5975] hid-generic 0005:04F5:5508.0001: item 0 2 1 8 parsing failed [ 116.115445][ T5975] hid-generic: probe of 0005:04F5:5508.0001 failed with error -22 [ 116.261372][ T6360] loop1: detected capacity change from 0 to 32768 [ 116.283516][ T6390] __nla_validate_parse: 6 callbacks suppressed [ 116.283531][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.5.599'. [ 116.339855][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.5.599'. [ 116.365481][ T6360] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.588 (6360) [ 116.422860][ T6360] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 116.475116][ T6360] BTRFS info (device loop1): setting nodatasum [ 116.527994][ T6394] tipc: Started in network mode [ 116.542165][ T6360] BTRFS info (device loop1): using free space tree [ 116.548768][ T6360] BTRFS info (device loop1): has skinny extents [ 116.577968][ T6394] tipc: Node identity 12ec4d39076b, cluster identity 4711 [ 116.612401][ T6394] tipc: Enabled bearer , priority 0 [ 116.619520][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 116.734226][ T6400] device syzkaller0 entered promiscuous mode [ 116.767538][ T6393] tipc: Resetting bearer [ 116.852161][ T6360] BTRFS info (device loop1): enabling ssd optimizations [ 116.905030][ T6393] tipc: Disabling bearer [ 117.422929][ T6443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.612'. [ 117.484714][ T6443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.612'. [ 117.606576][ T6445] loop0: detected capacity change from 0 to 128 [ 117.711445][ T6445] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 117.719411][ T6445] FAT-fs (loop0): Filesystem has been set read-only [ 118.349925][ T6467] tipc: Enabled bearer , priority 0 [ 118.405280][ T6467] syzkaller0: MTU too low for tipc bearer [ 118.446802][ T6467] tipc: Disabling bearer [ 118.608119][ T6476] loop4: detected capacity change from 0 to 128 [ 118.733025][ T6476] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 118.740874][ T6476] FAT-fs (loop4): Filesystem has been set read-only [ 119.114133][ T6465] loop5: detected capacity change from 0 to 32768 [ 119.172560][ T6465] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.623 (6465) [ 119.248688][ T6498] device syzkaller0 entered promiscuous mode [ 119.268824][ T6465] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 119.305508][ T6465] BTRFS info (device loop5): setting nodatasum [ 119.352133][ T6465] BTRFS info (device loop5): using free space tree [ 119.373574][ T6465] BTRFS info (device loop5): has skinny extents [ 119.661234][ T6465] BTRFS info (device loop5): enabling ssd optimizations [ 119.750397][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 120.039465][ T6542] loop0: detected capacity change from 0 to 128 [ 120.132556][ T6542] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 120.140527][ T6542] FAT-fs (loop0): Filesystem has been set read-only [ 120.808868][ T6554] device syzkaller0 entered promiscuous mode [ 121.204857][ T6571] loop0: detected capacity change from 0 to 128 [ 121.251020][ T6571] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 121.259004][ T6571] FAT-fs (loop0): Filesystem has been set read-only [ 121.753690][ T6584] device syzkaller0 entered promiscuous mode [ 121.797078][ T6573] loop5: detected capacity change from 0 to 32768 [ 121.817925][ T6573] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.656 (6573) [ 121.848341][ T6573] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 121.862626][ T6573] BTRFS info (device loop5): setting nodatasum [ 121.869182][ T6573] BTRFS info (device loop5): using free space tree [ 121.894092][ T6573] BTRFS info (device loop5): has skinny extents [ 121.964577][ T6590] netlink: 'syz.3.663': attribute type 2 has an invalid length. [ 122.186054][ T6573] BTRFS info (device loop5): enabling ssd optimizations [ 122.350103][ T6620] loop3: detected capacity change from 0 to 128 [ 122.406024][ T6620] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 122.414339][ T6620] FAT-fs (loop3): Filesystem has been set read-only [ 122.805947][ T6631] device syzkaller0 entered promiscuous mode [ 123.304222][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 123.440663][ T6650] loop3: detected capacity change from 0 to 128 [ 123.552249][ T6650] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 123.560138][ T6650] FAT-fs (loop3): Filesystem has been set read-only [ 123.643016][ T6657] tipc: Enabled bearer , priority 0 [ 123.761840][ T6657] device syzkaller0 entered promiscuous mode [ 123.846872][ T6662] device syzkaller0 entered promiscuous mode [ 123.860141][ T6656] tipc: Resetting bearer [ 123.980996][ T6656] tipc: Disabling bearer [ 124.079438][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 124.255502][ T6655] loop1: detected capacity change from 0 to 32768 [ 124.298233][ T6655] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.683 (6655) [ 124.400142][ T6655] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 124.442213][ T6655] BTRFS info (device loop1): setting nodatasum [ 124.466218][ T6655] BTRFS info (device loop1): using free space tree [ 124.492449][ T6655] BTRFS info (device loop1): has skinny extents [ 124.580369][ T6686] loop3: detected capacity change from 0 to 128 [ 124.647773][ T6686] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 124.653704][ T6693] lo speed is unknown, defaulting to 1000 [ 124.655790][ T6686] FAT-fs (loop3): Filesystem has been set read-only [ 124.723536][ T6699] IPVS: sh: FWM 3 0x00000003 - no destination available [ 124.730965][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 124.895637][ T6711] device syzkaller0 entered promiscuous mode [ 124.971845][ T6655] BTRFS info (device loop1): enabling ssd optimizations [ 125.015528][ T6693] bond0 speed is unknown, defaulting to 1000 [ 125.784173][ T6743] loop3: detected capacity change from 0 to 128 [ 125.818003][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 125.873571][ T6743] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 125.881424][ T6743] FAT-fs (loop3): Filesystem has been set read-only [ 125.959311][ T6748] device syzkaller0 entered promiscuous mode [ 126.100158][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 126.270241][ T6757] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.717'. [ 126.505646][ T6768] device syzkaller0 entered promiscuous mode [ 126.577081][ T6770] loop4: detected capacity change from 0 to 128 [ 126.686856][ T6770] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 126.694785][ T6770] FAT-fs (loop4): Filesystem has been set read-only [ 126.992948][ T6780] device syzkaller0 entered promiscuous mode [ 127.277798][ T6792] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.728'. [ 127.361395][ T6772] loop3: detected capacity change from 0 to 32768 [ 127.426297][ T6798] device syzkaller0 entered promiscuous mode [ 127.531011][ T6772] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.722 (6772) [ 127.649656][ T6772] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 127.694361][ T6772] BTRFS info (device loop3): setting nodatasum [ 127.700564][ T6772] BTRFS info (device loop3): using free space tree [ 127.717667][ T6772] BTRFS info (device loop3): has skinny extents [ 127.924470][ T6826] loop0: detected capacity change from 0 to 128 [ 128.030076][ T6826] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 128.038365][ T6826] FAT-fs (loop0): Filesystem has been set read-only [ 128.050441][ T6772] BTRFS info (device loop3): enabling ssd optimizations [ 128.533630][ T6842] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.740'. [ 128.798143][ T6849] device syzkaller0 entered promiscuous mode [ 129.814780][ T6870] loop3: detected capacity change from 0 to 128 [ 129.890201][ T6870] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 129.898081][ T6870] FAT-fs (loop3): Filesystem has been set read-only [ 130.135227][ T4190] Bluetooth: hci2: link tx timeout [ 130.140590][ T4190] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.292087][ T6882] netlink: 'syz.0.752': attribute type 72 has an invalid length. [ 130.524389][ T6889] loop3: detected capacity change from 0 to 128 [ 130.606160][ T26] kauditd_printk_skb: 128 callbacks suppressed [ 130.606173][ T26] audit: type=1800 audit(1774392201.017:170): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.754" name="bus" dev="loop3" ino=1048616 res=0 errno=0 [ 130.736816][ T6889] attempt to access beyond end of device [ 130.736816][ T6889] loop3: rw=0, want=1041, limit=128 [ 131.185662][ T6885] loop0: detected capacity change from 0 to 32768 [ 131.244811][ T6895] device syzkaller0 entered promiscuous mode [ 131.253288][ T6885] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.753 (6885) [ 131.293496][ T6885] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 131.341755][ T6885] BTRFS info (device loop0): setting nodatasum [ 131.364215][ T6885] BTRFS info (device loop0): using free space tree [ 131.370758][ T6885] BTRFS info (device loop0): has skinny extents [ 131.530820][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 131.568639][ T6913] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.578002][ T6913] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.586777][ T6913] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.595585][ T6913] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.657535][ T6885] BTRFS info (device loop0): enabling ssd optimizations [ 131.662103][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 131.687140][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 131.799617][ T6930] loop3: detected capacity change from 0 to 128 [ 131.899372][ T6930] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 131.907344][ T6930] FAT-fs (loop3): Filesystem has been set read-only [ 132.128404][ T6935] netlink: 'syz.3.763': attribute type 72 has an invalid length. [ 132.182980][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 132.515224][ T6944] tipc: Enabled bearer , priority 0 [ 132.567784][ T6944] tipc: Resetting bearer [ 132.659335][ T6943] tipc: Disabling bearer [ 132.756111][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762503][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.811652][ T6948] device syzkaller0 entered promiscuous mode [ 133.093436][ T6963] loop1: detected capacity change from 0 to 128 [ 133.099654][ T6967] netlink: 'syz.3.777': attribute type 72 has an invalid length. [ 133.142325][ C0] ================================================================== [ 133.150790][ C0] BUG: KASAN: use-after-free in ax25_heartbeat_expiry+0x10c/0x130 [ 133.158634][ C0] Read of size 4 at addr ffff8880258cbf50 by task syz.4.738/6847 [ 133.166357][ C0] [ 133.168700][ C0] CPU: 0 PID: 6847 Comm: syz.4.738 Not tainted syzkaller #0 [ 133.176077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.186151][ C0] Call Trace: [ 133.189428][ C0] [ 133.192272][ C0] dump_stack_lvl+0x188/0x250 [ 133.196961][ C0] ? show_regs_print_info+0x20/0x20 [ 133.202163][ C0] ? _printk+0xda/0x130 [ 133.206312][ C0] ? ax25_heartbeat_expiry+0x10c/0x130 [ 133.211778][ C0] ? load_image+0x400/0x400 [ 133.216285][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 133.221761][ C0] print_address_description+0x60/0x2d0 [ 133.227327][ C0] ? ax25_heartbeat_expiry+0x10c/0x130 [ 133.232799][ C0] kasan_report+0xdf/0x130 [ 133.237233][ C0] ? ax25_heartbeat_expiry+0x10c/0x130 [ 133.242790][ C0] ? ax25_setup_timers+0xc0/0xc0 [ 133.247749][ C0] ax25_heartbeat_expiry+0x10c/0x130 [ 133.253046][ C0] call_timer_fn+0x17b/0x540 [ 133.257642][ C0] ? ax25_setup_timers+0xc0/0xc0 [ 133.262584][ C0] ? __run_timers+0x800/0x800 [ 133.267275][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 133.272482][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 133.277696][ C0] ? ax25_setup_timers+0xc0/0xc0 [ 133.282645][ C0] __run_timers+0x53e/0x800 [ 133.287171][ C0] ? detach_timer+0x2b0/0x2b0 [ 133.291852][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 133.297851][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 133.302716][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 133.308014][ C0] run_timer_softirq+0x63/0xf0 [ 133.312787][ C0] handle_softirqs+0x339/0x830 [ 133.317563][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 133.322423][ C0] ? do_softirq+0x210/0x210 [ 133.326946][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 133.332153][ C0] __irq_exit_rcu+0x13b/0x230 [ 133.336838][ C0] ? irq_exit_rcu+0x20/0x20 [ 133.341362][ C0] irq_exit_rcu+0x5/0x20 [ 133.345608][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 133.351254][ C0] [ 133.354188][ C0] [ 133.357118][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 133.363115][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 133.368415][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 133.388211][ C0] RSP: 0018:ffffc90003867480 EFLAGS: 00000206 [ 133.394319][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ff206ec8b7eeae00 [ 133.402302][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 133.410277][ C0] RBP: ffffc90003867588 R08: dffffc0000000000 R09: 1ffffffff203a82e [ 133.418260][ C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: ffff88802acb9da0 [ 133.426245][ C0] R13: 1ffff9200070ce9c R14: 0000000000000246 R15: dffffc0000000000 [ 133.434247][ C0] ? mark_lock+0x94/0x320 [ 133.438588][ C0] ? __might_sleep+0xf0/0xf0 [ 133.443190][ C0] ? read_lock_is_recursive+0x10/0x10 [ 133.446391][ T6961] loop5: detected capacity change from 0 to 32768 [ 133.448580][ C0] ? __unix_dgram_recvmsg+0x205/0xd90 [ 133.460324][ C0] __mutex_lock_common+0x1e3/0x2400 [ 133.465532][ C0] ? __unix_dgram_recvmsg+0x205/0xd90 [ 133.467175][ T6975] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 133.470920][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 133.470947][ C0] ? _raw_spin_unlock+0x40/0x40 [ 133.470969][ C0] ? mark_lock+0x94/0x320 [ 133.470988][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 133.499023][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 133.504069][ C0] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 133.509639][ C0] mutex_lock_nested+0x17/0x20 [ 133.514412][ C0] __unix_dgram_recvmsg+0x205/0xd90 [ 133.519632][ C0] ? exc_page_fault+0x88/0x100 [ 133.524408][ C0] ? unix_unhash+0x10/0x10 [ 133.528844][ C0] ? mark_lock+0x94/0x320 [ 133.533186][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 133.538222][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 133.543603][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 133.545350][ T6979] netlink: set zone limit has 8 unknown bytes [ 133.548382][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 133.559450][ C0] ? import_iovec+0x6f/0xa0 [ 133.563967][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 133.568653][ C0] ? __sys_recvmsg+0x280/0x280 [ 133.573517][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 133.578638][ C0] ? lock_acquire+0x6/0x400 [ 133.583150][ C0] ? __might_fault+0xb3/0x110 [ 133.587828][ C0] do_recvmmsg+0x382/0x850 [ 133.592250][ C0] ? __sys_recvmmsg+0x290/0x290 [ 133.597123][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 133.602154][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 133.607182][ C0] ? do_recvmmsg+0x850/0x850 [ 133.611766][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 133.616957][ C0] do_syscall_64+0x4c/0xa0 [ 133.621356][ C0] ? clear_bhb_loop+0x30/0x80 [ 133.626016][ C0] ? clear_bhb_loop+0x30/0x80 [ 133.630677][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.636554][ C0] RIP: 0033:0x7f42d0dce799 [ 133.640962][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.660553][ C0] RSP: 002b:00007f42cf007028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 133.668955][ C0] RAX: ffffffffffffffda RBX: 00007f42d1048090 RCX: 00007f42d0dce799 [ 133.676920][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 133.684877][ C0] RBP: 00007f42d0e64c99 R08: 0000000000000000 R09: 0000000000000000 [ 133.692831][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 133.700794][ C0] R13: 00007f42d1048128 R14: 00007f42d1048090 R15: 00007ffe2a693c68 [ 133.708764][ C0] [ 133.711773][ C0] [ 133.714078][ C0] Allocated by task 4778: [ 133.718387][ C0] __kasan_kmalloc+0xb5/0xf0 [ 133.722966][ C0] ax25_dev_device_up+0x50/0x580 [ 133.727888][ C0] ax25_device_event+0x483/0x4f0 [ 133.732806][ C0] raw_notifier_call_chain+0xcb/0x160 [ 133.738169][ C0] __dev_notify_flags+0x194/0x300 [ 133.743193][ C0] dev_change_flags+0xe3/0x1a0 [ 133.747938][ C0] dev_ifsioc+0x130/0xd50 [ 133.752258][ C0] dev_ioctl+0x545/0xe30 [ 133.756486][ C0] sock_do_ioctl+0x245/0x320 [ 133.761059][ C0] sock_ioctl+0x4d2/0x710 [ 133.765374][ C0] __se_sys_ioctl+0xfa/0x170 [ 133.770054][ C0] do_syscall_64+0x4c/0xa0 [ 133.774479][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.780392][ C0] [ 133.782709][ C0] Freed by task 6784: [ 133.786673][ C0] kasan_set_track+0x4b/0x70 [ 133.791269][ C0] kasan_set_free_info+0x1f/0x40 [ 133.796213][ C0] ____kasan_slab_free+0xd5/0x110 [ 133.801252][ C0] slab_free_freelist_hook+0xea/0x170 [ 133.806626][ C0] kfree+0xef/0x2a0 [ 133.810423][ C0] ax25_release+0x661/0x870 [ 133.814914][ C0] sock_close+0xd5/0x240 [ 133.819250][ C0] __fput+0x234/0x930 [ 133.823218][ C0] task_work_run+0x125/0x1a0 [ 133.827794][ C0] do_exit+0x626/0x20c0 [ 133.831941][ C0] do_group_exit+0x12e/0x300 [ 133.836513][ C0] get_signal+0x6ca/0x12c0 [ 133.840912][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 133.846540][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 133.851806][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 133.857337][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 133.862789][ C0] do_syscall_64+0x58/0xa0 [ 133.867188][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.873065][ C0] [ 133.875373][ C0] Last potentially related work creation: [ 133.881067][ C0] kasan_save_stack+0x35/0x60 [ 133.885732][ C0] kasan_record_aux_stack+0xb8/0x100 [ 133.891000][ C0] insert_work+0x54/0x3d0 [ 133.895400][ C0] __queue_work+0x9c5/0xd50 [ 133.899885][ C0] queue_work_on+0x124/0x1f0 [ 133.904454][ C0] inet6addr_event+0x9c/0xc0 [ 133.909051][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 133.914755][ C0] ipv6_add_addr+0xb57/0xe10 [ 133.919328][ C0] addrconf_add_linklocal+0x26a/0x6c0 [ 133.924679][ C0] addrconf_addr_gen+0x559/0x6b0 [ 133.929599][ C0] addrconf_init_auto_addrs+0x747/0xb00 [ 133.935127][ C0] addrconf_notify+0xa6b/0xf00 [ 133.939875][ C0] raw_notifier_call_chain+0xcb/0x160 [ 133.945232][ C0] __dev_notify_flags+0x194/0x300 [ 133.950242][ C0] dev_change_flags+0xe3/0x1a0 [ 133.954990][ C0] do_setlink+0xcdb/0x3d60 [ 133.959399][ C0] rtnl_newlink+0x1658/0x1a50 [ 133.964147][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 133.969071][ C0] netlink_rcv_skb+0x1f5/0x440 [ 133.973819][ C0] netlink_unicast+0x774/0x920 [ 133.978637][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 133.983380][ C0] __sys_sendto+0x46d/0x620 [ 133.987870][ C0] __x64_sys_sendto+0xda/0xf0 [ 133.992530][ C0] do_syscall_64+0x4c/0xa0 [ 133.996928][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.002806][ C0] [ 134.005117][ C0] Second to last potentially related work creation: [ 134.011765][ C0] kasan_save_stack+0x35/0x60 [ 134.016432][ C0] kasan_record_aux_stack+0xb8/0x100 [ 134.021707][ C0] insert_work+0x54/0x3d0 [ 134.026027][ C0] __queue_work+0x9c5/0xd50 [ 134.030510][ C0] queue_work_on+0x124/0x1f0 [ 134.035084][ C0] inet6addr_event+0x9c/0xc0 [ 134.039656][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 134.045358][ C0] ipv6_add_addr+0xb57/0xe10 [ 134.049935][ C0] addrconf_add_linklocal+0x26a/0x6c0 [ 134.055292][ C0] addrconf_addr_gen+0x559/0x6b0 [ 134.060211][ C0] addrconf_init_auto_addrs+0x747/0xb00 [ 134.065737][ C0] addrconf_notify+0xa6b/0xf00 [ 134.070484][ C0] raw_notifier_call_chain+0xcb/0x160 [ 134.075840][ C0] netdev_state_change+0xe0/0x160 [ 134.080848][ C0] linkwatch_do_dev+0x10d/0x160 [ 134.085682][ C0] __linkwatch_run_queue+0x4b1/0x7c0 [ 134.090948][ C0] linkwatch_event+0x48/0x50 [ 134.095518][ C0] process_one_work+0x85f/0x1010 [ 134.100439][ C0] worker_thread+0xaa6/0x1290 [ 134.105105][ C0] kthread+0x436/0x520 [ 134.109155][ C0] ret_from_fork+0x1f/0x30 [ 134.113553][ C0] [ 134.115858][ C0] The buggy address belongs to the object at ffff8880258cbf00 [ 134.115858][ C0] which belongs to the cache kmalloc-192 of size 192 [ 134.129889][ C0] The buggy address is located 80 bytes inside of [ 134.129889][ C0] 192-byte region [ffff8880258cbf00, ffff8880258cbfc0) [ 134.143065][ C0] The buggy address belongs to the page: [ 134.148685][ C0] page:ffffea00009632c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880258cba00 pfn:0x258cb [ 134.160118][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 134.167660][ C0] raw: 00fff00000000200 ffffea00008df1c8 ffffea000066eb88 ffff888016c41a00 [ 134.176227][ C0] raw: ffff8880258cba00 000000000010000e 00000001ffffffff 0000000000000000 [ 134.184784][ C0] page dumped because: kasan: bad access detected [ 134.191191][ C0] page_owner tracks the page as allocated [ 134.196891][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 8520820856, free_ts 0 [ 134.211715][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 134.217250][ C0] __alloc_pages+0x1ee/0x480 [ 134.221823][ C0] alloc_page_interleave+0x24/0x1e0 [ 134.227004][ C0] new_slab+0xc0/0x4b0 [ 134.231064][ C0] ___slab_alloc+0x80a/0xdd0 [ 134.235641][ C0] __kmalloc+0x1cd/0x330 [ 134.239871][ C0] usb_alloc_urb+0x3f/0x140 [ 134.244357][ C0] hub_probe+0x220f/0x3640 [ 134.248755][ C0] usb_probe_interface+0x5c5/0xb20 [ 134.253848][ C0] really_probe+0x284/0xc80 [ 134.258337][ C0] __driver_probe_device+0x18c/0x330 [ 134.263777][ C0] driver_probe_device+0x4f/0x420 [ 134.268793][ C0] __device_attach_driver+0x2b0/0x500 [ 134.274158][ C0] bus_for_each_drv+0x184/0x210 [ 134.278995][ C0] __device_attach+0x2a8/0x480 [ 134.283739][ C0] bus_probe_device+0xbc/0x1e0 [ 134.288485][ C0] page_owner free stack trace missing [ 134.293829][ C0] [ 134.296134][ C0] Memory state around the buggy address: [ 134.301742][ C0] ffff8880258cbe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.309805][ C0] ffff8880258cbe80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 134.317950][ C0] >ffff8880258cbf00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.326077][ C0] ^ [ 134.332730][ C0] ffff8880258cbf80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 134.340774][ C0] ffff8880258cc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.348815][ C0] ================================================================== [ 134.356852][ C0] Disabling lock debugging due to kernel taint [ 134.363140][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.370333][ C0] CPU: 0 PID: 6847 Comm: syz.4.738 Tainted: G B syzkaller #0 [ 134.379007][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.389048][ C0] Call Trace: [ 134.392312][ C0] [ 134.395141][ C0] dump_stack_lvl+0x188/0x250 [ 134.399810][ C0] ? show_regs_print_info+0x20/0x20 [ 134.405082][ C0] ? load_image+0x400/0x400 [ 134.409576][ C0] panic+0x2e5/0x810 [ 134.413480][ C0] ? asm_common_interrupt+0x22/0x40 [ 134.418660][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 134.423148][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 134.429025][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.434904][ C0] ? _raw_spin_unlock+0x40/0x40 [ 134.439739][ C0] ? ax25_heartbeat_expiry+0x10c/0x130 [ 134.445178][ C0] check_panic_on_warn+0x80/0xa0 [ 134.450101][ C0] ? ax25_heartbeat_expiry+0x10c/0x130 [ 134.455544][ C0] end_report+0x6d/0xf0 [ 134.459686][ C0] kasan_report+0x102/0x130 [ 134.464180][ C0] ? ax25_heartbeat_expiry+0x10c/0x130 [ 134.469621][ C0] ? ax25_setup_timers+0xc0/0xc0 [ 134.474549][ C0] ax25_heartbeat_expiry+0x10c/0x130 [ 134.479822][ C0] call_timer_fn+0x17b/0x540 [ 134.484414][ C0] ? ax25_setup_timers+0xc0/0xc0 [ 134.489332][ C0] ? __run_timers+0x800/0x800 [ 134.493992][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 134.499170][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 134.504353][ C0] ? ax25_setup_timers+0xc0/0xc0 [ 134.509272][ C0] __run_timers+0x53e/0x800 [ 134.513763][ C0] ? detach_timer+0x2b0/0x2b0 [ 134.518426][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 134.524391][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 134.529224][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 134.534493][ C0] run_timer_softirq+0x63/0xf0 [ 134.539243][ C0] handle_softirqs+0x339/0x830 [ 134.543997][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 134.548828][ C0] ? do_softirq+0x210/0x210 [ 134.553318][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 134.558507][ C0] __irq_exit_rcu+0x13b/0x230 [ 134.563162][ C0] ? irq_exit_rcu+0x20/0x20 [ 134.567649][ C0] irq_exit_rcu+0x5/0x20 [ 134.571870][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 134.577489][ C0] [ 134.580401][ C0] [ 134.583311][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.589273][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 134.594544][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 134.614137][ C0] RSP: 0018:ffffc90003867480 EFLAGS: 00000206 [ 134.620199][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ff206ec8b7eeae00 [ 134.628152][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 134.636205][ C0] RBP: ffffc90003867588 R08: dffffc0000000000 R09: 1ffffffff203a82e [ 134.644161][ C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: ffff88802acb9da0 [ 134.652114][ C0] R13: 1ffff9200070ce9c R14: 0000000000000246 R15: dffffc0000000000 [ 134.660079][ C0] ? mark_lock+0x94/0x320 [ 134.664395][ C0] ? __might_sleep+0xf0/0xf0 [ 134.668970][ C0] ? read_lock_is_recursive+0x10/0x10 [ 134.674331][ C0] ? __unix_dgram_recvmsg+0x205/0xd90 [ 134.679683][ C0] __mutex_lock_common+0x1e3/0x2400 [ 134.684866][ C0] ? __unix_dgram_recvmsg+0x205/0xd90 [ 134.690229][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.696102][ C0] ? _raw_spin_unlock+0x40/0x40 [ 134.700935][ C0] ? mark_lock+0x94/0x320 [ 134.705249][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 134.710430][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 134.715436][ C0] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 134.720968][ C0] mutex_lock_nested+0x17/0x20 [ 134.725719][ C0] __unix_dgram_recvmsg+0x205/0xd90 [ 134.730913][ C0] ? exc_page_fault+0x88/0x100 [ 134.735660][ C0] ? unix_unhash+0x10/0x10 [ 134.740062][ C0] ? mark_lock+0x94/0x320 [ 134.744373][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 134.749382][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 134.754735][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 134.759497][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 134.764515][ C0] ? import_iovec+0x6f/0xa0 [ 134.769004][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 134.773663][ C0] ? __sys_recvmsg+0x280/0x280 [ 134.778415][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 134.783425][ C0] ? lock_acquire+0x6/0x400 [ 134.787910][ C0] ? __might_fault+0xb3/0x110 [ 134.792570][ C0] do_recvmmsg+0x382/0x850 [ 134.796988][ C0] ? __sys_recvmmsg+0x290/0x290 [ 134.801853][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 134.806880][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 134.811900][ C0] ? do_recvmmsg+0x850/0x850 [ 134.816484][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 134.821673][ C0] do_syscall_64+0x4c/0xa0 [ 134.826082][ C0] ? clear_bhb_loop+0x30/0x80 [ 134.830750][ C0] ? clear_bhb_loop+0x30/0x80 [ 134.835408][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.841283][ C0] RIP: 0033:0x7f42d0dce799 [ 134.845693][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.865285][ C0] RSP: 002b:00007f42cf007028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 134.873679][ C0] RAX: ffffffffffffffda RBX: 00007f42d1048090 RCX: 00007f42d0dce799 [ 134.881632][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 134.889586][ C0] RBP: 00007f42d0e64c99 R08: 0000000000000000 R09: 0000000000000000 [ 134.897626][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 134.905749][ C0] R13: 00007f42d1048128 R14: 00007f42d1048090 R15: 00007ffe2a693c68 [ 134.913710][ C0] [ 134.917098][ C0] Kernel Offset: disabled [ 134.921409][ C0] Rebooting in 86400 seconds..