last executing test programs: 9.792086813s ago: executing program 1 (id=942): r0 = socket$inet(0x2, 0x801, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r4, 0x0, 0x7fffeffc, 0x0) 9.749694344s ago: executing program 3 (id=943): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) unshare(0x40200) r0 = semget(0x1, 0x5, 0x6b4) semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) semop(r0, &(0x7f00000002c0), 0x7) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x8001, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 8.816108594s ago: executing program 1 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 8.011639961s ago: executing program 3 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0xffffff4f}, {&(0x7f0000000200)="407713c877d489d624e1ed5855b0cc55cce257678ac31bfbf7427fd7ca495d70f717107b631720c6171fbf1bf5be3f29ac0f29c8e9888e2c4ff7f3c97e3ac22848737b5707c9f8b05c6e4b980c078cba46d0e98d3ce97e8d326b", 0x5c}], 0x3}], 0x1, 0x4000050) 7.459990782s ago: executing program 0 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) 7.442269833s ago: executing program 1 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x34ffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.775882568s ago: executing program 2 (id=941): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_io_uring_setup(0x27c8, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) accept4(r1, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 5.774570358s ago: executing program 0 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r4, r3}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000080)={'xxhash64\x00'}, &(0x7f0000000000)}) 5.771597898s ago: executing program 3 (id=948): r0 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000500)={'veth1_to_bridge\x00', 0x4}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x7}, 0x1c) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x64, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.353420297s ago: executing program 0 (id=949): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC], 0xfd, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x34) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000100)={0xfe, 0xffffffffffffffff, 0x1}) 5.353277637s ago: executing program 2 (id=951): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) unshare(0x40200) r0 = semget(0x1, 0x5, 0x6b4) semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) semop(r0, &(0x7f00000002c0), 0x7) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x8001, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 5.315767808s ago: executing program 1 (id=952): read$hidraw(0xffffffffffffffff, &(0x7f00000007c0)=""/138, 0x8a) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") r0 = fanotify_init(0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@bridge_getneigh={0x24, 0x12, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x4, 0x36}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x74}}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 5.284787949s ago: executing program 4 (id=953): syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4a, 0x6, 0x5f, 0xb, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x5, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x80007, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20007, 0x8, 0x9, 0x9, 0x47, 0x8001, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x4, 0x1, 0x1003, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x3, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x600000, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x4, 0x6, 0x0, 0x100, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x5, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.19854417s ago: executing program 3 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 4.385954058s ago: executing program 4 (id=955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 4.371797518s ago: executing program 2 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x6c}}, 0x0) 4.366776878s ago: executing program 1 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4004890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='>', 0x1}], 0x1}, 0x0) 4.325268979s ago: executing program 4 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0xffffff4f}, {&(0x7f0000000200)="407713c877d489d624e1ed5855b0cc55cce257678ac31bfbf7427fd7ca495d70f717107b631720c6171fbf1bf5be3f29ac0f29c8e9888e2c4ff7f3c97e3ac22848737b5707c9f8b05c6e4b980c078cba46d0e98d3ce97e8d326b", 0x5c}], 0x3}], 0x1, 0x4000050) 4.316243869s ago: executing program 3 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) 3.549080065s ago: executing program 1 (id=960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r4, r3}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000080)={'xxhash64\x00'}, &(0x7f0000000000)}) 3.548923295s ago: executing program 2 (id=961): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x28, 0x2, 0x3, 0x5ae9}, {0x20, 0x1, 0x4, 0x10001}, {0x6, 0x0, 0x7, 0xfffffffe}]}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3.545317125s ago: executing program 0 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x11, 0x0, &(0x7f0000000040)="f9ad5dff258f902792b9ba83bbcc782df2", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.103821895s ago: executing program 4 (id=962): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000009}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 2.333673361s ago: executing program 2 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x34ffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.333493411s ago: executing program 3 (id=964): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x808, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfea7) copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e45c, 0x700000000000000) 2.240243623s ago: executing program 4 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@delchain={0x30, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.378301941s ago: executing program 0 (id=966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002140) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 387.066642ms ago: executing program 2 (id=967): syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4a, 0x6, 0x5f, 0xb, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x5, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x80007, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20007, 0x8, 0x9, 0x9, 0x47, 0x8001, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x4, 0x1, 0x1003, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x3, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x600000, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x4, 0x6, 0x0, 0x100, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x5, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 368.535553ms ago: executing program 4 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 0s ago: executing program 0 (id=969): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ccf000/0x2000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) kernel console output (not intermixed with test programs): ength: 249 > 9 [ 29.725247][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.726230][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.727266][ T4344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.728211][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.729257][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.730260][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.731993][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.734153][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.738269][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.739780][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.751492][ T4344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.753239][ T4344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.754693][ T4344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.755915][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.757353][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.757427][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.758922][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.759964][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.760996][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.762221][ T4344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.763586][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.882233][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 29.903245][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 29.925617][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 29.927650][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.946306][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.947512][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.948988][ T4327] device bridge_slave_0 entered promiscuous mode [ 29.961446][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.962610][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.963980][ T4327] device bridge_slave_1 entered promiscuous mode [ 29.984670][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.987509][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.988649][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.990145][ T4331] device bridge_slave_0 entered promiscuous mode [ 29.992352][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.993453][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.994867][ T4328] device bridge_slave_0 entered promiscuous mode [ 29.999927][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.001983][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.003191][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.004656][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.007089][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.008636][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.009744][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.011757][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.013130][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.014283][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.015746][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.020251][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.021627][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.023051][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.041758][ T4327] team0: Port device team_slave_0 added [ 30.047323][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.049959][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.054018][ T4327] team0: Port device team_slave_1 added [ 30.055826][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.058069][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.061815][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.065987][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.075734][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.076804][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.080540][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.089319][ T4329] team0: Port device team_slave_0 added [ 30.094587][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.095684][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.099664][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.102640][ T4331] team0: Port device team_slave_0 added [ 30.106234][ T4329] team0: Port device team_slave_1 added [ 30.107823][ T4331] team0: Port device team_slave_1 added [ 30.109668][ T4328] team0: Port device team_slave_0 added [ 30.113096][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.114264][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.116360][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.124273][ T4328] team0: Port device team_slave_1 added [ 30.129350][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.130403][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.136824][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.138883][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.140024][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.141649][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.147584][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.148627][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.154956][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.158827][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.159913][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.164025][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.168264][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.169438][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.175753][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.180957][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.182182][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.186302][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.191804][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.192952][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.196988][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.200361][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.262399][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.301704][ T4327] device hsr_slave_1 entered promiscuous mode [ 30.343823][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.350172][ T4330] team0: Port device team_slave_0 added [ 30.357562][ T4330] team0: Port device team_slave_1 added [ 30.412276][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.461490][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.521378][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.522625][ T4328] Cannot create hsr debugfs directory [ 30.582312][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.621458][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.661234][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.662360][ T4329] Cannot create hsr debugfs directory [ 30.712237][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.761351][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.801251][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.802408][ T4331] Cannot create hsr debugfs directory [ 30.803703][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.804837][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.808980][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.813539][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.814708][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.818675][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.892612][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.931489][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.971367][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.972540][ T4330] Cannot create hsr debugfs directory [ 31.050152][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.082339][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.131682][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.173400][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.217808][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.273278][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.333854][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.372538][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.412313][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.465179][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.502710][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.546826][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.584960][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.623846][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.663565][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.703103][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.745207][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.771646][ T4343] Bluetooth: hci4: command 0x0409 tx timeout [ 31.771854][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 31.772543][ T4343] Bluetooth: hci1: command 0x0409 tx timeout [ 31.773481][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 31.783316][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.822295][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.851618][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 31.854025][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.928828][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.947012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.949228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.954648][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.965725][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.967408][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.968917][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.970060][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.972354][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.978810][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.984538][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.995262][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.997882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.999336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.004811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.006478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.008262][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.009363][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.017415][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.024926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.026665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.028289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.032128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.037709][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.038917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.040911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.043111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.044758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.046200][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.047274][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.048654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.050049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.056905][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.058560][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.060005][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.061918][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.064330][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.068287][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.069787][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.072249][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.073240][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.075053][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.076662][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.077995][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.079092][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.080931][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.088423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.090053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.092446][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.093512][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.095150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.096850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.098420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.099830][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.100979][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.109157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.110677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.112815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.114649][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.115814][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.117150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.118822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.120509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.125235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.127180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.128837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.132131][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.134085][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.138913][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.146763][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.148381][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.149725][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.151958][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.159268][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.160925][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.167164][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.168712][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.170372][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.175258][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.177198][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.178763][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.180161][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.183247][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.185171][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.186501][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.188219][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.189710][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.192109][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.198463][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.206107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.207676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.209131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.211587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.213310][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.214435][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.215872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.217423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.223316][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.224461][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.225875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.227517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.232168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.234838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.236581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.239364][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.245986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.247928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.253465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.254912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.256488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.262145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.263768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.267427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.268660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.274815][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.276557][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.280140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.281739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.283466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.284855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.286374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.287904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.292001][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.302785][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.304568][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.305830][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.312626][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.314153][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.315702][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.317220][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.336874][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.338490][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.340884][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.346386][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.347617][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.350517][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.361802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.363406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.372875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.374542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.376344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.377742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.397748][ T4327] device veth0_vlan entered promiscuous mode [ 32.403905][ T4327] device veth1_vlan entered promiscuous mode [ 32.424525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.426074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.427356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.428708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.442922][ T4327] device veth0_macvtap entered promiscuous mode [ 32.446714][ T4327] device veth1_macvtap entered promiscuous mode [ 32.454154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.455742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.457105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.458496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.476220][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.480938][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.486279][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.487873][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.497573][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.500721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.502741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.506666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.508306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.512944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.514192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.517513][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.524439][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.525751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.527720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.541946][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.543651][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.546857][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.548205][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.549563][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.551041][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.559689][ T4331] device veth0_vlan entered promiscuous mode [ 32.561051][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.563193][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.564865][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.566246][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.574082][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.575865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.577361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.578915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.581974][ T4329] device veth0_vlan entered promiscuous mode [ 32.586287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.587718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.590644][ T4331] device veth1_vlan entered promiscuous mode [ 32.602793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.604345][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.605947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.619558][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.621704][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.623789][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.625159][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.627633][ T4329] device veth1_vlan entered promiscuous mode [ 32.634634][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.636220][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.637710][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.639214][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.643032][ T4331] device veth0_macvtap entered promiscuous mode [ 32.651111][ T4330] device veth0_vlan entered promiscuous mode [ 32.661358][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.662506][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.665746][ T4329] device veth0_macvtap entered promiscuous mode [ 32.668276][ T4331] device veth1_macvtap entered promiscuous mode [ 32.670069][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.671680][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.673153][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.674595][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.675966][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.677507][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.679071][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.683696][ T4330] device veth1_vlan entered promiscuous mode [ 32.688057][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.689574][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.691047][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.695535][ T4329] device veth1_macvtap entered promiscuous mode [ 32.697770][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.699253][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.700610][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.708860][ T4328] device veth0_vlan entered promiscuous mode [ 32.719675][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.719826][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.721687][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.722811][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.724953][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.729238][ T4328] device veth1_vlan entered promiscuous mode [ 32.730585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.732900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.734467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.735930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.737560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.742525][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.744255][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.745802][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.747402][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.749540][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.752062][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.753669][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.757934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.759490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.761130][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.764094][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.766384][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.768322][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.769775][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.771136][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.774255][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.776369][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.777602][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.779125][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.781913][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.783533][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.787331][ T4330] device veth0_macvtap entered promiscuous mode [ 32.789458][ T4330] device veth1_macvtap entered promiscuous mode [ 32.794031][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.795395][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.796684][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.797928][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.807308][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.808692][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.810063][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.812881][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.823942][ T4328] device veth0_macvtap entered promiscuous mode [ 32.827016][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.828612][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.830027][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.832353][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.833960][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.835621][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.837902][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.839348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.840858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.846152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.847679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.849478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.851014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.853585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.855115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.857292][ T4328] device veth1_macvtap entered promiscuous mode [ 32.889124][ T4409] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 32.890459][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.892946][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.894461][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.896073][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.897744][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.899663][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.902607][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.917480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.919016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.920682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.937233][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.938699][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.940105][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.944505][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.965431][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.967074][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.968528][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.970078][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.973399][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.975054][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.976505][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.978008][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.980207][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.987370][ T1602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.988621][ T1602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.990039][ T1602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.993505][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.995112][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.996496][ T1602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.997909][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.002313][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.016182][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.017774][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.019303][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.020763][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.037246][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.039319][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.040912][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.043091][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.045239][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.064900][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.064907][ T1602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.066681][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.067442][ T1602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.072955][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.074226][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.083633][ T4413] device macvtap1 entered promiscuous mode [ 33.084863][ T4413] device vlan0 entered promiscuous mode [ 33.088393][ T4413] team0: Device macvtap1 failed to register rx_handler [ 33.090008][ T4413] device vlan0 left promiscuous mode [ 33.156062][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.157647][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.160554][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.162157][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.163546][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.165766][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.183847][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.185145][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.186427][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.228093][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.229540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.255519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.670854][ T4427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 33.674076][ T4429] 8021q: VLANs not supported on ip_vti0 [ 33.689857][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.694402][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.709200][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.720978][ T1602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.725887][ T1602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.727750][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.851385][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 33.851432][ T4341] Bluetooth: hci1: command 0x041b tx timeout [ 33.852347][ T4338] Bluetooth: hci3: command 0x041b tx timeout [ 33.853816][ T4343] Bluetooth: hci4: command 0x041b tx timeout [ 33.873994][ T4435] netlink: 'syz.4.11': attribute type 1 has an invalid length. [ 33.904055][ T4433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 33.934747][ T4342] Bluetooth: hci2: command 0x041b tx timeout [ 33.976581][ T4435] device macvlan2 entered promiscuous mode [ 33.996376][ T4439] device syzkaller0 entered promiscuous mode [ 35.931906][ T4342] Bluetooth: hci4: command 0x040f tx timeout [ 35.933020][ T4343] Bluetooth: hci3: command 0x040f tx timeout [ 35.934241][ T4341] Bluetooth: hci1: command 0x040f tx timeout [ 35.935125][ T4341] Bluetooth: hci0: command 0x040f tx timeout [ 36.011469][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 36.440248][ T4483] loop4: detected capacity change from 0 to 1024 [ 36.457067][ T4483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.547087][ T4481] loop2: detected capacity change from 0 to 32768 [ 36.555330][ T4481] ======================================================= [ 36.555330][ T4481] WARNING: The mand mount option has been deprecated and [ 36.555330][ T4481] and is ignored by this kernel. Remove the mand [ 36.555330][ T4481] option from the mount to silence this warning. [ 36.555330][ T4481] ======================================================= [ 36.570310][ T4481] XFS (loop2): Mounting V5 Filesystem [ 36.634159][ T4481] XFS (loop2): Ending clean mount [ 36.637183][ T4481] XFS (loop2): Quotacheck needed: Please wait. [ 36.653159][ T4481] XFS (loop2): Quotacheck: Done. [ 36.691527][ T4481] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 36.738520][ T4331] XFS (loop2): Unmounting Filesystem [ 37.235333][ T4510] loop1: detected capacity change from 0 to 16 [ 37.239101][ T4510] erofs: (device loop1): mounted with root inode @ nid 36. [ 37.277770][ T4512] device bridge0 entered promiscuous mode [ 37.279239][ T4512] device vlan2 entered promiscuous mode [ 37.299391][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 37.336651][ T4514] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 37.409345][ T4520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 37.754917][ T4529] capability: warning: `syz.1.38' uses deprecated v2 capabilities in a way that may be insecure [ 38.051381][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 38.051409][ T4342] Bluetooth: hci1: command 0x0419 tx timeout [ 38.051428][ T4341] Bluetooth: hci4: command 0x0419 tx timeout [ 38.051446][ T4343] Bluetooth: hci3: command 0x0419 tx timeout [ 38.128985][ T4344] Bluetooth: hci2: command 0x0419 tx timeout [ 38.167402][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 38.346900][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 38.373786][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 38.375398][ T4544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.44'. [ 38.891615][ T4560] 9pnet_fd: p9_fd_create_unix (4560): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 39.616071][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 39.645345][ T4577] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.646791][ T4577] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.648104][ T4577] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.649364][ T4577] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.663585][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 40.008728][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 40.017136][ T4577] Zero length message leads to an empty skb [ 40.073708][ T4586] loop2: detected capacity change from 0 to 8 [ 40.077394][ T4586] squashfs: Unknown parameter 'htcp' [ 40.267657][ T4591] loop2: detected capacity change from 0 to 32768 [ 40.271343][ T4599] loop3: detected capacity change from 0 to 128 [ 40.280152][ T4599] EXT4-fs: Ignoring removed oldalloc option [ 40.308105][ T4591] JBD2: Ignoring recovery information on journal [ 40.323773][ T4599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.341069][ T4591] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 40.846833][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 41.016104][ T4331] ocfs2: Unmounting device (7,2) on (node local) [ 41.889330][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 44.056867][ T4668] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 45.196740][ T4680] loop4: detected capacity change from 0 to 16 [ 45.221168][ C0] sched: RT throttling activated [ 45.267224][ T4680] erofs: (device loop4): mounted with root inode @ nid 36. [ 46.207757][ T4693] loop3: detected capacity change from 0 to 1024 [ 46.232573][ T4693] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 46.234847][ T4693] System zones: 0-1, 3-36 [ 46.240289][ T4693] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.89: bad orphan inode 134217728 [ 46.277037][ T4693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.303741][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 46.397441][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 46.541563][ T4714] device syzkaller0 entered promiscuous mode [ 46.544229][ T4719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 46.560125][ T4716] loop3: detected capacity change from 0 to 512 [ 46.594705][ T4721] loop4: detected capacity change from 0 to 1024 [ 46.608436][ T4716] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.609660][ T4716] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.98: casefold flag without casefold feature [ 46.620263][ T4721] hfsplus: invalid length 32517 has been corrected to 255 [ 46.625205][ T4716] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.98: Bad quota inode: 4, type: 1 [ 46.633221][ T4716] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.644941][ T4716] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 46.654866][ T4716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.709170][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 46.724511][ T4533] hfsplus: invalid length 32517 has been corrected to 255 [ 46.726544][ T4533] hfsplus: b-tree write err: -5, ino 20 [ 46.729225][ T4533] hfsplus: b-tree write err: -5, ino 25 [ 46.730542][ T4533] hfsplus: b-tree write err: -5, ino 4 [ 46.731880][ T4533] hfsplus: b-tree write err: -5, ino 2 [ 46.767155][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 46.794127][ T4728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 47.309233][ T4737] binder: 4736:4737 tried to acquire reference to desc 0, got 1 instead [ 47.352084][ T4737] binder: 4736:4737 unknown command 0 [ 47.353889][ T4737] binder: 4736:4737 ioctl c0306201 200001c0 returned -22 [ 48.481861][ T22] binder: release 4736:4737 transaction 5 out, still active [ 48.483141][ T22] binder: undelivered TRANSACTION_COMPLETE [ 48.484930][ T4737] binder: 4737:4736 cannot find target node [ 48.485805][ T4737] binder: 4736:4737 transaction call to 0:0 failed 12/29189/-22, size 0-0 line 3045 [ 48.502726][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 48.503887][ T22] binder: send failed reply for transaction 5, target dead [ 48.542081][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 48.620844][ T4752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.109'. [ 48.703860][ T4752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.109'. [ 48.987032][ T111] cfg80211: failed to load regulatory.db [ 49.026413][ T4751] loop2: detected capacity change from 0 to 1024 [ 49.050203][ T4760] loop3: detected capacity change from 0 to 512 [ 49.054656][ T4751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 49.056029][ T4751] System zones: 0-1, 3-36 [ 49.064222][ T4751] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.108: bad orphan inode 134217728 [ 49.074611][ T4751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.159552][ T4760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.161550][ T4770] device syzkaller0 entered promiscuous mode [ 49.495466][ T4760] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.111: Invalid block bitmap block 0 in block_group 0 [ 49.530353][ T4760] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 49.595806][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 49.644220][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 49.646921][ T4778] loop0: detected capacity change from 0 to 32768 [ 49.670979][ T4780] device syzkaller0 entered promiscuous mode [ 49.715258][ T4780] tipc: Started in network mode [ 49.720979][ T4780] tipc: Node identity 8201f6492763, cluster identity 4711 [ 49.725250][ T4780] tipc: Enabled bearer , priority 0 [ 49.746692][ T4779] tipc: Resetting bearer [ 49.749859][ T4778] XFS (loop0): Mounting V5 Filesystem [ 50.088187][ T4778] XFS (loop0): Ending clean mount [ 50.100575][ T4778] XFS (loop0): Quotacheck needed: Please wait. [ 50.146879][ T4778] XFS (loop0): Quotacheck: Done. [ 50.162631][ T4779] tipc: Disabling bearer [ 50.191559][ T4799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 50.218800][ T4802] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 50.221041][ T4802] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 50.883925][ T4811] loop4: detected capacity change from 0 to 256 [ 50.935852][ T4811] FAT-fs (loop4): Directory bread(block 64) failed [ 50.940126][ T4820] loop2: detected capacity change from 0 to 1024 [ 50.941704][ T4811] FAT-fs (loop4): Directory bread(block 65) failed [ 50.952216][ T4811] FAT-fs (loop4): Directory bread(block 66) failed [ 50.957308][ T4811] FAT-fs (loop4): Directory bread(block 67) failed [ 50.961989][ T4811] FAT-fs (loop4): Directory bread(block 68) failed [ 50.966366][ T4811] FAT-fs (loop4): Directory bread(block 69) failed [ 50.971533][ T4811] FAT-fs (loop4): Directory bread(block 70) failed [ 50.976502][ T4811] FAT-fs (loop4): Directory bread(block 71) failed [ 50.982582][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.985865][ T4811] FAT-fs (loop4): Directory bread(block 72) failed [ 50.990439][ T4811] FAT-fs (loop4): Directory bread(block 73) failed [ 52.519282][ T4837] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.520943][ T4837] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 53.077731][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 53.376511][ T4845] loop1: detected capacity change from 0 to 1024 [ 53.802836][ T4845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 53.804259][ T4845] System zones: 0-1, 3-36 [ 53.811965][ T4845] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.127: bad orphan inode 134217728 [ 53.821995][ T4845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.208191][ T4778] Set syz1 is full, maxelem 65536 reached [ 54.364997][ T4328] XFS (loop0): Unmounting Filesystem [ 54.867122][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 55.541628][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 55.646482][ T4884] device syzkaller0 entered promiscuous mode [ 55.658381][ T4884] tipc: Started in network mode [ 55.659895][ T4884] tipc: Node identity 563d9ffcfd3e, cluster identity 4711 [ 55.663593][ T4884] tipc: Enabled bearer , priority 0 [ 55.669396][ T4883] tipc: Resetting bearer [ 55.753778][ T4883] tipc: Disabling bearer [ 56.127675][ T4893] netlink: 56 bytes leftover after parsing attributes in process `syz.2.143'. [ 57.106432][ T4907] loop0: detected capacity change from 0 to 1024 [ 57.152973][ T4907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 57.154483][ T4907] System zones: 0-1, 3-36 [ 57.155988][ T4907] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.146: bad orphan inode 134217728 [ 57.158229][ T4907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.185617][ T4905] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4331] was attempted by " [ 57.739801][ T4338] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 59.435418][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 59.577960][ T4944] mmap: syz.0.159 (4944) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.575387][ T4960] netlink: 'syz.0.165': attribute type 4 has an invalid length. [ 60.576789][ T4960] netlink: 17 bytes leftover after parsing attributes in process `syz.0.165'. [ 60.720000][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 61.002572][ T4973] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 61.003870][ T4973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.169'. [ 61.005257][ T4973] device dummy0 entered promiscuous mode [ 61.085639][ T4984] loop2: detected capacity change from 0 to 512 [ 61.110371][ T4984] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.113023][ T4984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.173: ea_inode with extended attributes [ 61.119742][ T4984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.173: error while reading EA inode 11 err=-117 [ 61.128337][ T4984] EXT4-fs (loop2): 1 orphan inode deleted [ 61.129554][ T4984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.163878][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 61.989252][ T5018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.991012][ T5018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 62.420885][ T5020] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.846309][ T5040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.189'. [ 63.516974][ T5058] loop2: detected capacity change from 0 to 7 [ 63.519802][ T4320] Dev loop2: unable to read RDB block 7 [ 63.520995][ T4320] loop2: unable to read partition table [ 63.530819][ T4320] loop2: partition table beyond EOD, truncated [ 63.565234][ T5058] Dev loop2: unable to read RDB block 7 [ 63.566380][ T5058] loop2: unable to read partition table [ 63.568667][ T5058] loop2: partition table beyond EOD, truncated [ 63.569828][ T5058] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 63.580477][ T3938] Dev loop2: unable to read RDB block 7 [ 63.586145][ T3938] loop2: unable to read partition table [ 63.587204][ T3938] loop2: partition table beyond EOD, truncated [ 64.024410][ T5072] tipc: Started in network mode [ 64.025258][ T5072] tipc: Node identity 4, cluster identity 4711 [ 64.027010][ T5072] tipc: Node number set to 4 [ 64.455353][ T5084] device syzkaller0 entered promiscuous mode [ 64.477254][ T5089] loop3: detected capacity change from 0 to 512 [ 64.486999][ T5089] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 64.492739][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493841][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.541159][ T5089] EXT4-fs (loop3): failed to open journal device unknown-block(238,156) -6 [ 64.593801][ T5089] netlink: 104 bytes leftover after parsing attributes in process `syz.3.200'. [ 64.599999][ T5089] loop3: detected capacity change from 0 to 642 [ 64.614146][ T5089] EXT4-fs (loop3): failed to parse options in superblock: [ 64.615291][ T5089] EXT4-fs (loop3): Invalid default hash set in the superblock [ 64.756507][ T5108] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.758041][ T5108] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 67.550890][ T5165] device syzkaller0 entered promiscuous mode [ 67.556014][ T5165] tipc: Started in network mode [ 67.556809][ T5165] tipc: Node identity e2e626096997, cluster identity 4711 [ 67.573919][ T5165] tipc: Enabled bearer , priority 0 [ 67.577254][ T5162] tipc: Resetting bearer [ 68.052330][ T5162] tipc: Disabling bearer [ 68.055479][ T5175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.056926][ T5175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 69.449427][ T5192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'. [ 69.485454][ T5196] loop3: detected capacity change from 0 to 1024 [ 69.534577][ T5196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.830636][ T5208] loop4: detected capacity change from 0 to 512 [ 69.843078][ T5208] EXT4-fs: Ignoring removed i_version option [ 69.866342][ T5208] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.896012][ T5208] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 69.900412][ T5208] Quota error (device loop4): write_blk: dquota write failed [ 69.903000][ T5208] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 69.904464][ T5208] Quota error (device loop4): write_blk: dquota write failed [ 69.907197][ T5208] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 69.909864][ T5208] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.226: Failed to acquire dquot type 1 [ 69.914616][ T5208] EXT4-fs (loop4): 1 truncate cleaned up [ 69.915641][ T5208] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.065550][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 70.671560][ T5231] input: syz0 as /devices/virtual/input/input2 [ 70.695089][ T5229] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 71.045792][ T5229] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 71.101108][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 71.148071][ T5238] netlink: 240 bytes leftover after parsing attributes in process `syz.4.235'. [ 72.215800][ T5270] MPTCP: kernel_bind error, err=-99 [ 73.201888][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 73.240175][ T5289] device team1 entered promiscuous mode [ 73.241894][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 73.243611][ T5289] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 73.478008][ T4344] Bluetooth: hci2: command 0x0406 tx timeout [ 73.480621][ T5289] device team2 entered promiscuous mode [ 74.197899][ T5296] device syzkaller0 entered promiscuous mode [ 74.244338][ T5305] loop2: detected capacity change from 0 to 2048 [ 74.593021][ T5311] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.606419][ T5313] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.780602][ T5311] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 74.783182][ T5311] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 74.786077][ T5311] Remounting filesystem read-only [ 74.788589][ T4331] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 75.142151][ T5329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 75.206914][ T5340] loop1: detected capacity change from 0 to 16 [ 75.216701][ T5340] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.236954][ T5340] syz.1.264: attempt to access beyond end of device [ 76.236954][ T5340] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 76.239387][ T5340] syz.1.264: attempt to access beyond end of device [ 76.239387][ T5340] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 76.303511][ T5355] tipc: Started in network mode [ 76.307774][ T5355] tipc: Node identity 4, cluster identity 4711 [ 76.308796][ T5355] tipc: Node number set to 4 [ 76.750992][ T5374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.911132][ T5380] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 77.929300][ T5380] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 78.318904][ T5403] Illegal XDP return value 4294967285 on prog (id 38) dev syz_tun, expect packet loss! [ 78.540622][ T5421] dns_resolver: Unsupported server list version (6) [ 78.824930][ T5425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.287'. [ 78.842347][ T5425] device ip6gre1 entered promiscuous mode [ 78.847470][ T5429] tipc: Cannot configure node identity twice [ 79.021464][ T5432] netlink: 'syz.4.287': attribute type 6 has an invalid length. [ 79.022788][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.287'. [ 79.135541][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 79.138191][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 79.279414][ T5445] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 80.500799][ T5466] tipc: Cannot configure node identity twice [ 80.546005][ T5469] device syzkaller0 entered promiscuous mode [ 80.823927][ T5478] set match dimension is over the limit! [ 81.161609][ T5480] device syzkaller0 entered promiscuous mode [ 81.164912][ T5480] tipc: Enabled bearer , priority 0 [ 81.166449][ T5479] tipc: Resetting bearer [ 81.205539][ T5484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.210606][ T5484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.255030][ T5479] tipc: Disabling bearer [ 83.180984][ T5511] loop4: detected capacity change from 0 to 2048 [ 83.232100][ T5513] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.127629][ T5527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.317'. [ 84.989812][ T5513] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 84.996201][ T5513] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 84.998075][ T5513] Remounting filesystem read-only [ 85.380602][ T5542] device syzkaller0 entered promiscuous mode [ 85.670983][ T5542] tipc: Enabled bearer , priority 0 [ 85.676556][ T5541] tipc: Resetting bearer [ 86.653141][ T5558] loop3: detected capacity change from 0 to 2048 [ 86.674702][ T5559] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.712739][ T5541] tipc: Disabling bearer [ 86.905260][ T5570] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 86.959801][ T5575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 86.967893][ T5570] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 86.993530][ T5570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'. [ 87.261796][ T5570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.268125][ T4450] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 87.270634][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 87.330048][ T5559] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 87.332561][ T5559] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 87.384057][ T1576] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 87.388098][ T5559] Remounting filesystem read-only [ 87.389641][ T4329] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 87.877966][ T5593] loop0: detected capacity change from 0 to 2048 [ 88.504766][ T5593] loop0: p1 < > p4 [ 88.508603][ T5593] loop0: p4 size 8388608 extends beyond EOD, truncated [ 88.639827][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 88.655948][ T5610] device syzkaller0 entered promiscuous mode [ 89.515764][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 89.866380][ T5617] tipc: Enabled bearer , priority 10 [ 89.888695][ T5620] loop0: detected capacity change from 0 to 2048 [ 89.896832][ T5617] netlink: 104 bytes leftover after parsing attributes in process `syz.3.350'. [ 89.912210][ T5617] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 89.914222][ T5617] tipc: Enabled bearer , priority 10 [ 89.917195][ T5621] process 'syz.4.351' launched './file0' with NULL argv: empty string added [ 89.918011][ T5624] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.113110][ T5624] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 90.116009][ T5624] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 90.120708][ T5624] Remounting filesystem read-only [ 90.165400][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 90.168359][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 90.172194][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 90.175054][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 90.177914][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 90.181473][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 90.185475][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 90.188194][ T5640] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 91.073746][ T4375] tipc: Node number set to 2869141500 [ 91.315771][ T5658] set match dimension is over the limit! [ 93.427326][ T5675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'. [ 93.430960][ T5675] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.432197][ T5675] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.339413][ T5707] net_ratelimit: 21203 callbacks suppressed [ 94.339425][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.348428][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.350278][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.352869][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.354758][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.356338][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.357994][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.359619][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.362069][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 94.363819][ T5707] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 95.379779][ T5720] tipc: Enabled bearer , priority 10 [ 95.394549][ T5720] netlink: 104 bytes leftover after parsing attributes in process `syz.0.381'. [ 95.430981][ T5720] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 95.434826][ T5720] tipc: Enabled bearer , priority 10 [ 95.437177][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 96.268332][ T5731] serio: Serial port ptm0 [ 96.352404][ T5724] device bond1 entered promiscuous mode [ 96.433405][ T4376] tipc: Node number set to 2339448329 [ 96.444405][ T5746] binder: 5745:5746 tried to acquire reference to desc 0, got 1 instead [ 96.446332][ T5746] binder: 5745:5746 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 96.448534][ T5746] binder: send failed reply for transaction 17 to 5745:5746 [ 96.450076][ T5746] binder: 5745:5746 ioctl c0306201 20000240 returned -14 [ 96.451984][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 96.453592][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.081252][ T5754] loop4: detected capacity change from 0 to 764 [ 97.123123][ T4320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.430261][ T5766] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 98.389123][ T5772] device syzkaller0 entered promiscuous mode [ 98.508320][ T5766] bond1: (slave veth3): Enslaving as an active interface with a down link [ 99.145245][ T5787] binder: 5786:5787 tried to acquire reference to desc 0, got 1 instead [ 99.146964][ T5787] binder: 5786:5787 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 99.149050][ T5787] binder: 5787 RLIMIT_NICE not set [ 99.149920][ T5787] binder: 5787 RLIMIT_NICE not set [ 99.150891][ T5787] binder: 5786:5787 got reply transaction with bad transaction stack, transaction 22 has target 5786:5787 [ 99.155367][ T5787] binder: 5786:5787 transaction reply to 0:0 failed 23/29201/-71, size 0-0 line 2961 [ 99.157074][ T5787] binder: 5787 RLIMIT_NICE not set [ 99.157938][ T5787] binder_alloc: 5786: binder_alloc_buf, no vma [ 99.158999][ T5787] binder: cannot allocate buffer: vma cleared, target dead or dying [ 99.159036][ T5787] binder: 5786:5787 transaction reply to 5786:5787 failed 24/29189/-3, size 0-0 line 3230 [ 99.162125][ T5787] binder: send failed reply for transaction 22 to 5786:5787 [ 99.163578][ T4508] binder: undelivered TRANSACTION_COMPLETE [ 99.164580][ T4508] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.165573][ T4508] binder: undelivered TRANSACTION_ERROR: 29189 [ 99.233613][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 99.262434][ T5776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.265237][ T5782] device bond2 entered promiscuous mode [ 99.270608][ T5783] device macvlan2 entered promiscuous mode [ 99.280993][ T5783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.647232][ T5799] loop4: detected capacity change from 0 to 2048 [ 99.686015][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.688186][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.693329][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.695231][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.236078][ T5807] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 100.356367][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.360923][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.543353][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.712731][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.719912][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.722355][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.128078][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 101.148105][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.149449][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.151115][ T5813] device bridge_slave_0 entered promiscuous mode [ 101.153609][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.154865][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.156535][ T5813] device bridge_slave_1 entered promiscuous mode [ 101.169231][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.173288][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.183679][ T5813] team0: Port device team_slave_0 added [ 101.186361][ T5813] team0: Port device team_slave_1 added [ 101.194410][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.195609][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.199496][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.202179][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.203280][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.207386][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.252563][ T5813] device hsr_slave_0 entered promiscuous mode [ 101.294666][ T5813] device hsr_slave_1 entered promiscuous mode [ 101.331275][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.333471][ T5813] Cannot create hsr debugfs directory [ 101.453770][ T5813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.589807][ T5813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.633474][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 101.645820][ T5835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.753962][ T5813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.762553][ T5835] device macvlan3 entered promiscuous mode [ 101.765517][ T5837] bond1: (slave vti0): refused to change device type [ 101.854895][ T5813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.925264][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 102.235175][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.416'. [ 102.325286][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.372693][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.413282][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.454274][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.515974][ T5860] binder: 5858:5860 tried to acquire reference to desc 0, got 1 instead [ 102.518369][ T5860] binder: 5858:5860 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.520646][ T5860] binder: 5860 RLIMIT_NICE not set [ 102.523049][ T5860] binder: 5860 RLIMIT_NICE not set [ 102.524041][ T5860] binder: 5860 RLIMIT_NICE not set [ 102.524839][ T5860] binder: 5858:5860 got transaction with invalid data ptr [ 102.526091][ T5860] binder_debug: 1 callbacks suppressed [ 102.526097][ T5860] binder: 5858:5860 transaction reply to 5858:5860 failed 30/29201/-14, size 0-24 line 3333 [ 102.528380][ T5860] binder: send failed reply for transaction 29 to 5858:5860 [ 102.539235][ T4508] binder: undelivered TRANSACTION_COMPLETE [ 102.540193][ T4508] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.541747][ T4508] binder: undelivered TRANSACTION_ERROR: 29190 [ 102.558748][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.564239][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.565936][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.569170][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.760579][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 102.905998][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.910549][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.916801][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.917941][ T4609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.928031][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.938045][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.947294][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.948539][ T4609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.951909][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.956598][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.965090][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.966896][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.968831][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.970665][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.974720][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.978318][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.979861][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.986538][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.988874][ T5813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.992698][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.997191][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.998922][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.918855][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 105.112182][ T5880] device syzkaller0 entered promiscuous mode [ 105.578100][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.579967][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.584266][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.592257][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.593924][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.599987][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.601617][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.603054][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.604448][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.606890][ T5813] device veth0_vlan entered promiscuous mode [ 105.610553][ T5813] device veth1_vlan entered promiscuous mode [ 105.619764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.621956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.626763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.629714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.635700][ T5897] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 105.638373][ T5813] device veth0_macvtap entered promiscuous mode [ 105.640696][ T5813] device veth1_macvtap entered promiscuous mode [ 105.643176][ T5899] loop4: detected capacity change from 0 to 512 [ 105.647575][ T5899] EXT4-fs: Ignoring removed bh option [ 105.657082][ T5899] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 105.726273][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.728100][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.729652][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.732034][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.733541][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.735172][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.736747][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.738309][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.739799][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.741543][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.743980][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.745229][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.747033][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.748486][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.750096][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.754425][ T5897] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 105.765854][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.767732][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.769317][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.770947][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.773136][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.774996][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.107991][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.109633][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.119035][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.123842][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.126389][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.129055][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.134859][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.141133][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.143101][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.144555][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.146035][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.186907][ T4630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.188194][ T4630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.189770][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.242315][ T4630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.266452][ T4630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.268727][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.881947][ T5929] loop4: detected capacity change from 0 to 512 [ 106.888999][ T5929] EXT4-fs: Ignoring removed nobh option [ 106.956114][ T5929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.972220][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 107.944955][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 108.909747][ T5954] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 108.918470][ T5954] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 109.040093][ T5962] loop4: detected capacity change from 0 to 512 [ 109.081503][ T4344] Bluetooth: hci0: command 0x0419 tx timeout [ 109.114779][ T5962] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 109.116657][ T5962] EXT4-fs (loop4): failed to open journal device unknown-block(8,1) -6 [ 109.273620][ T4320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.418849][ T5968] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 109.436495][ T5968] bond3: (slave gretap1): making interface the new active one [ 109.438254][ T5968] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 109.459873][ T5968] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 112.693490][ T6017] loop0: detected capacity change from 0 to 512 [ 112.731333][ T6017] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 112.732756][ T6017] EXT4-fs (loop0): failed to open journal device unknown-block(8,1) -6 [ 112.831918][ T6024] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 112.840942][ T6024] device bond4 entered promiscuous mode [ 112.844069][ T6024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.249071][ T6025] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.346628][ T6025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.393454][ T6025] net_ratelimit: 41460 callbacks suppressed [ 113.393459][ T6025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.689357][ T6030] bond4: (slave bridge1): making interface the new active one [ 113.692013][ T6030] device bridge1 entered promiscuous mode [ 113.694783][ T6030] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 113.709386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 114.824234][ T6060] PKCS7: Unknown OID: [4] 0.0 [ 114.825027][ T6060] PKCS7: Only support pkcs7_signedData type [ 115.288773][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 116.045831][ T6085] device syzkaller0 entered promiscuous mode [ 118.255440][ T6106] loop4: detected capacity change from 0 to 8192 [ 118.268909][ T6106] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 118.665453][ T6121] device syzkaller0 entered promiscuous mode [ 119.352422][ T6132] loop3: detected capacity change from 0 to 764 [ 120.008854][ T6148] loop3: detected capacity change from 0 to 512 [ 120.163606][ T6148] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 120.164941][ T6148] EXT4-fs (loop3): failed to open journal device unknown-block(8,1) -6 [ 121.792200][ T6171] loop2: detected capacity change from 0 to 2048 [ 121.806300][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 121.811678][ T6171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.405639][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.514'. [ 123.759006][ T6220] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 123.833159][ T6221] loop0: detected capacity change from 0 to 256 [ 124.043434][ T6222] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 124.113012][ T6220] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 124.144504][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 124.166013][ T6226] device bond2 entered promiscuous mode [ 124.301822][ T6235] loop3: detected capacity change from 0 to 512 [ 124.303244][ T6235] EXT4-fs: Ignoring removed nobh option [ 124.310523][ T6235] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 124.315479][ T6235] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.531: attempt to clear invalid blocks 1 len 1 [ 124.318940][ T6235] EXT4-fs (loop3): Remounting filesystem read-only [ 124.320149][ T6235] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 124.553084][ T6235] EXT4-fs (loop3): Remounting filesystem read-only [ 124.555570][ T6235] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.531: invalid indirect mapped block 1819239214 (level 0) [ 124.561630][ T6235] EXT4-fs (loop3): Remounting filesystem read-only [ 124.563771][ T6235] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.531: invalid indirect mapped block 1819239214 (level 1) [ 124.566748][ T6235] EXT4-fs (loop3): Remounting filesystem read-only [ 124.568638][ T6235] EXT4-fs (loop3): 1 truncate cleaned up [ 124.570345][ T6235] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.574624][ T6235] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 124.596903][ T27] audit: type=1326 audit(380.578:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.529" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb77fe8 code=0x0 [ 124.617550][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 124.754599][ T6245] loop3: detected capacity change from 0 to 40427 [ 124.759481][ T6245] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 124.761153][ T6245] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.774952][ T6245] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.796052][ T6245] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.797537][ T6245] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.245992][ T6259] loop4: detected capacity change from 0 to 256 [ 125.249610][ T6259] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.257612][ T6259] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 125.271478][ T6259] FAT-fs (loop4): Filesystem has been set read-only [ 125.307394][ T6259] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 125.384218][ T6269] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 125.404022][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.406449][ T6269] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.535453][ T6274] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 125.540033][ T6276] veth1_to_bridge: mtu less than device minimum [ 125.769289][ T6285] loop0: detected capacity change from 0 to 1024 [ 125.777852][ T6285] hfsplus: unable to parse mount options [ 126.046016][ T6285] bridge0: port 3(syz_tun) entered blocking state [ 126.047686][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.047865][ T6285] bridge0: port 3(syz_tun) entered disabled state [ 126.050694][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.072442][ T6285] device syz_tun entered promiscuous mode [ 126.080269][ T6285] bridge0: port 3(syz_tun) entered blocking state [ 126.081621][ T6285] bridge0: port 3(syz_tun) entered forwarding state [ 126.155350][ T6289] device geneve2 entered promiscuous mode [ 126.716279][ T4338] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 126.718365][ T4338] CPU: 1 PID: 4338 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 126.719447][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 126.720967][ T4338] Workqueue: hci3 hci_rx_work [ 126.721713][ T4338] Call trace: [ 126.722184][ T4338] dump_backtrace+0x1c4/0x1f0 [ 126.722931][ T4338] show_stack+0x2c/0x3c [ 126.723522][ T4338] __dump_stack+0x30/0x40 [ 126.724210][ T4338] dump_stack_lvl+0xf4/0x15c [ 126.724913][ T4338] dump_stack+0x1c/0x5c [ 126.725544][ T4338] sysfs_create_dir_ns+0x244/0x264 [ 126.726319][ T4338] kobject_add_internal+0x5a8/0xb18 [ 126.727084][ T4338] kobject_add+0x144/0x20c [ 126.727809][ T4338] device_add+0x3dc/0xe4c [ 126.728483][ T4338] hci_conn_add_sysfs+0xb8/0x1bc [ 126.729266][ T4338] le_conn_complete_evt+0xcd4/0x127c [ 126.730047][ T4338] hci_le_conn_complete_evt+0x114/0x3b8 [ 126.730851][ T4338] hci_le_meta_evt+0x2c0/0x4a8 [ 126.731530][ T4338] hci_event_packet+0x64c/0xe60 [ 126.732248][ T4338] hci_rx_work+0x320/0xa94 [ 126.732911][ T4338] process_one_work+0x7e4/0x13bc [ 126.733708][ T4338] worker_thread+0x8cc/0xfe8 [ 126.734411][ T4338] kthread+0x254/0x2e0 [ 126.735031][ T4338] ret_from_fork+0x10/0x20 [ 126.737019][ T4338] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 126.739122][ T4338] Bluetooth: hci3: failed to register connection device [ 128.051896][ T27] audit: type=1326 audit(384.008:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.559" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd77fe8 code=0x0 [ 128.062179][ T6332] netlink: 'syz.0.562': attribute type 2 has an invalid length. [ 128.160685][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.165827][ T6338] device batadv_slave_1 entered promiscuous mode [ 128.647816][ T6345] overlayfs: unrecognized mount option "\']*=[\1\" or missing value [ 130.272007][ T6381] Soft offlining pfn 0x145136 at process virtual address 0x20000000 [ 130.276221][ T6381] Soft offlining pfn 0x145137 at process virtual address 0x20001000 [ 130.277598][ T6381] Soft offlining pfn 0x145138 at process virtual address 0x20002000 [ 130.278954][ T6381] Soft offlining pfn 0x145139 at process virtual address 0x20003000 [ 130.280210][ T6381] Soft offlining pfn 0x14513a at process virtual address 0x20004000 [ 130.281630][ T6381] Soft offlining pfn 0x140f47 at process virtual address 0x20005000 [ 130.283007][ T6381] Soft offlining pfn 0x140f48 at process virtual address 0x20006000 [ 130.284439][ T6381] Soft offlining pfn 0x140f49 at process virtual address 0x20007000 [ 130.285789][ T6381] Soft offlining pfn 0x140f4a at process virtual address 0x20008000 [ 130.287075][ T6381] Soft offlining pfn 0x140f4b at process virtual address 0x20009000 [ 130.288398][ T6381] Soft offlining pfn 0x140f4c at process virtual address 0x2000a000 [ 130.289746][ T6381] Soft offlining pfn 0x140f4d at process virtual address 0x2000b000 [ 130.291235][ T6381] Soft offlining pfn 0x140f4e at process virtual address 0x2000c000 [ 130.292593][ T6381] Soft offlining pfn 0x140f4f at process virtual address 0x2000d000 [ 130.293958][ T6381] Soft offlining pfn 0x145130 at process virtual address 0x2000e000 [ 130.295350][ T6381] Soft offlining pfn 0x145131 at process virtual address 0x2000f000 [ 130.296706][ T6381] Soft offlining pfn 0x145132 at process virtual address 0x20010000 [ 130.298040][ T6381] Soft offlining pfn 0x145133 at process virtual address 0x20011000 [ 130.538441][ T6386] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 130.555880][ T6387] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 130.555880][ T6387] The task syz.4.575 (6387) triggered the difference, watch for misbehavior. [ 131.258549][ T6386] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 131.374236][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'. [ 132.181643][ T6414] device syzkaller0 entered promiscuous mode [ 134.628179][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 134.744932][ T6447] netlink: 'syz.4.595': attribute type 1 has an invalid length. [ 134.759638][ T6447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.803947][ T6447] bond3: (slave gretap1): making interface the new active one [ 134.811155][ T6447] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 134.820082][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 134.877223][ T6455] bond3: (slave veth7): Enslaving as an active interface with a down link [ 134.935367][ T6447] device veth0_virt_wifi entered promiscuous mode [ 134.940160][ T27] audit: type=1326 audit(390.918:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.597" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83577fe8 code=0x7fc00000 [ 134.954025][ T27] audit: type=1326 audit(390.928:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.597" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff83577fe8 code=0x7fc00000 [ 134.968897][ T6447] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 135.742095][ T6482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.747789][ T6468] netlink: 256 bytes leftover after parsing attributes in process `syz.4.602'. [ 135.749595][ T6482] device bond_slave_0 entered promiscuous mode [ 135.751221][ T6482] device bond_slave_1 entered promiscuous mode [ 135.754330][ T6482] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 135.757059][ T6482] bond3: (slave macvlan3): Enslaving as a backup interface with an up link [ 135.763247][ T6482] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 135.892557][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 136.581999][ T6492] bridge0: port 3(syz_tun) entered blocking state [ 136.583122][ T6492] bridge0: port 3(syz_tun) entered disabled state [ 136.584472][ T6492] device syz_tun entered promiscuous mode [ 136.586841][ T6492] bridge0: port 3(syz_tun) entered blocking state [ 136.587945][ T6492] bridge0: port 3(syz_tun) entered forwarding state [ 136.618298][ T6492] netlink: 'syz.1.610': attribute type 12 has an invalid length. [ 136.619604][ T6492] netlink: 'syz.1.610': attribute type 29 has an invalid length. [ 136.647377][ T6492] netlink: 148 bytes leftover after parsing attributes in process `syz.1.610'. [ 136.648811][ T6492] netlink: 59 bytes leftover after parsing attributes in process `syz.1.610'. [ 136.656522][ T6497] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 136.676755][ T6497] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 136.681132][ T6497] device bridge1 entered promiscuous mode [ 136.683613][ T6497] bond4: (slave bridge1): making interface the new active one [ 136.685028][ T6497] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 137.096932][ T6508] binder: 6506:6508 tried to acquire reference to desc 0, got 1 instead [ 137.107547][ T4377] binder: release 6506:6508 transaction 35 out, still active [ 137.361461][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 137.362579][ T4377] binder: send failed reply for transaction 42 to 6506:6508 [ 137.373389][ T6512] device syzkaller0 entered promiscuous mode [ 137.391253][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 137.392192][ T4377] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.393266][ T4377] binder: send failed reply for transaction 35, target dead [ 138.049846][ T6521] fuse: Bad value for 'fd' [ 138.119178][ T6524] device bridge2 entered promiscuous mode [ 138.128010][ T6524] x_tables: duplicate underflow at hook 1 [ 138.733286][ T4344] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 138.735078][ T4344] Bluetooth: hci1: Injecting HCI hardware error event [ 138.739015][ T4338] Bluetooth: hci1: hardware error 0x00 [ 138.869436][ T6543] sctp: [Deprecated]: syz.3.626 (pid 6543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.869436][ T6543] Use struct sctp_sack_info instead [ 139.776074][ T6566] fuse: Bad value for 'fd' [ 139.865828][ T6570] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 140.651778][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 140.761232][ T6605] delete_channel: no stack [ 140.981478][ T4338] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 141.039137][ T6608] device syzkaller0 entered promiscuous mode [ 141.553354][ T6668] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.647'. [ 141.555005][ T6668] netlink: zone id is out of range [ 141.555909][ T6668] netlink: zone id is out of range [ 141.557900][ T6668] netlink: zone id is out of range [ 141.869475][ T6668] netlink: set zone limit has 8 unknown bytes [ 142.036928][ T6680] loop3: detected capacity change from 0 to 128 [ 142.099447][ T6680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.125434][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 142.142804][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.650'. [ 142.276606][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 143.232582][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.436700][ T6713] Invalid ELF header magic: != ELF [ 143.614333][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 143.619832][ T24] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 143.621305][ T24] usb 1-1: config 0 has no interface number 0 [ 143.622287][ T24] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 143.626929][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 143.628370][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.629840][ T24] usb 1-1: Product: syz [ 143.630466][ T24] usb 1-1: Manufacturer: syz [ 143.631804][ T24] usb 1-1: SerialNumber: syz [ 143.638122][ T24] usb 1-1: config 0 descriptor?? [ 143.641481][ T6704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.846220][ T6704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.857353][ T6721] bridge0: port 4(macvlan2) entered blocking state [ 143.858663][ T6721] bridge0: port 4(macvlan2) entered disabled state [ 143.860196][ T6721] device macvlan2 entered promiscuous mode [ 143.862634][ T6721] bridge0: port 4(macvlan2) entered blocking state [ 143.863696][ T6721] bridge0: port 4(macvlan2) entered forwarding state [ 144.304602][ T6734] 9pnet: p9_errstr2errno: server reported unknown error VmIL◅N [ 146.291694][ T6762] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4329] was attempted by "ss(pE{بD8HEV[\x0cE0p2\x09'؛69\x076\x0c)\x0a!'Vv>y1lV35ФiAVDoU9)KbVDc\x07ojc9xNRH9p\x22L+Xp>iN0zR>:MLoHIG\x07B9r(dKf^7_N䀟\x5c-D}i;Zzd8:\x072hnk*d-l1N5Ky\x22b%l5.dsUkc$ rejected, failed to enable media [ 148.242618][ T24] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 148.244326][ T24] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 148.250577][ T24] asix: probe of 1-1:0.188 failed with error -71 [ 148.304022][ T24] usb 1-1: USB disconnect, device number 2 [ 149.265488][ T6826] device syzkaller0 entered promiscuous mode [ 149.290053][ T6828] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 149.300206][ T6828] device bond5 entered promiscuous mode [ 149.304958][ T6828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.374666][ T6828] bond5: (slave bridge3): making interface the new active one [ 149.375968][ T6828] device bridge3 entered promiscuous mode [ 149.377852][ T6828] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 149.379350][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 149.463480][ T6833] loop3: detected capacity change from 0 to 512 [ 149.464975][ T6833] journal_path: Lookup failure for './file0' [ 149.466046][ T6833] EXT4-fs: error: could not find journal device path [ 149.485430][ T6833] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 150.196587][ T6851] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 150.210134][ T27] audit: type=1326 audit(406.188:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.694" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac977fe8 code=0x0 [ 150.479943][ T6860] device bond_slave_0 left promiscuous mode [ 150.481633][ T6860] device bond_slave_1 left promiscuous mode [ 150.482731][ T6860] device bond0 entered promiscuous mode [ 150.483862][ T6860] device bond_slave_0 entered promiscuous mode [ 150.484933][ T6860] device bond_slave_1 entered promiscuous mode [ 154.076479][ T4338] Bluetooth: hci2: command 0x0406 tx timeout [ 154.096007][ T4341] Bluetooth: hci3: command 0x0406 tx timeout [ 154.096018][ T4338] Bluetooth: hci4: command 0x0406 tx timeout [ 157.660240][ T6957] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.086297][ T6971] device syzkaller0 entered promiscuous mode [ 158.096425][ T6971] tipc: Enabled bearer , priority 0 [ 158.106865][ T6968] tipc: Resetting bearer [ 158.802658][ T6968] tipc: Disabling bearer [ 161.499895][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.502426][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.504924][ T7036] device bridge_slave_0 left promiscuous mode [ 161.507478][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.747243][ T7034] netlink: 84 bytes leftover after parsing attributes in process `syz.1.748'. [ 161.754741][ T7036] device bridge_slave_1 left promiscuous mode [ 161.755921][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.863561][ T7036] bond0: (slave bond_slave_0): Releasing backup interface [ 162.588493][ T7036] bond0: (slave bond_slave_1): Releasing backup interface [ 164.972565][ T7066] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 165.327072][ T7074] overlayfs: failed to clone upperpath [ 165.344962][ T7036] team0: Port device team_slave_0 removed [ 165.367748][ T7036] team0: Port device team_slave_1 removed [ 165.369088][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.386817][ T7036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.421451][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.497152][ T7036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.709737][ T7036] bond3: (slave veth0_virt_wifi): Releasing active interface [ 165.711074][ T7036] device gretap1 entered promiscuous mode [ 165.745009][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.752317][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.753826][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.759636][ T7036] bond0: (slave netdevsim0): Releasing backup interface [ 165.796272][ T7036] bond2: (slave ip6gretap1): Removing an active aggregator [ 165.797951][ T7036] bond2: (slave ip6gretap1): Releasing backup interface [ 166.755827][ T7036] bond3: (slave gretap1): Releasing active interface [ 166.757005][ T7036] bond3: (slave gretap1): the permanent HWaddr of slave - 0a:e5:e4:90:90:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 166.760261][ T7036] device gretap1 left promiscuous mode [ 166.876120][ T7036] bond3: (slave veth7): Releasing active interface [ 167.235574][ T7036] bond4: (slave bridge1): Releasing backup interface [ 167.306949][ T7036] bond5: (slave bridge3): Releasing backup interface [ 167.308028][ T7036] device bridge3 left promiscuous mode [ 167.352656][ T7100] netlink: 'syz.2.771': attribute type 10 has an invalid length. [ 167.367249][ T7100] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 167.450093][ T7109] tipc: Enabled bearer , priority 0 [ 169.010553][ T7143] loop3: detected capacity change from 0 to 1024 [ 169.014136][ T7143] EXT4-fs: Ignoring removed bh option [ 169.015165][ T7143] EXT4-fs: Ignoring removed oldalloc option [ 169.016222][ T7143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.642878][ T7143] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.969070][ T7143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 170.970606][ T7143] System zones: 0-1, 3-36 [ 171.054786][ T7143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 171.485684][ T7134] device wlan0 entered promiscuous mode [ 171.595737][ T7149] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 171.598793][ T7149] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 171.967408][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 172.108710][ T7165] netlink: 68 bytes leftover after parsing attributes in process `syz.3.789'. [ 172.543153][ T7179] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 172.915259][ T7185] device syzkaller0 entered promiscuous mode [ 174.161721][ T7194] loop0: detected capacity change from 0 to 128 [ 174.267195][ T7194] syz.0.801: attempt to access beyond end of device [ 174.267195][ T7194] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 174.468527][ T7202] loop0: detected capacity change from 0 to 512 [ 174.488918][ T7202] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 176.632859][ T7202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.664726][ T7202] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 177.269698][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.315350][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.556354][ T7217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.587505][ T7222] netlink: 68 bytes leftover after parsing attributes in process `syz.0.809'. [ 178.994994][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 184.013504][ T7299] PKCS7: Unknown OID: [4] 0.0 [ 184.015280][ T7299] PKCS7: Only support pkcs7_signedData type [ 184.157974][ T7309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.365154][ T7323] netlink: 84 bytes leftover after parsing attributes in process `syz.2.847'. [ 187.391678][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.393669][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.431003][ T7345] netlink: 'syz.4.844': attribute type 1 has an invalid length. [ 187.436099][ T7345] device bond6 entered promiscuous mode [ 187.437122][ T7345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.766546][ T7345] bond6: (slave bridge4): making interface the new active one [ 187.770117][ T7345] device bridge4 entered promiscuous mode [ 187.779784][ T7345] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 187.785863][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 187.948294][ T7351] binder: 7350:7351 tried to acquire reference to desc 0, got 1 instead [ 187.952127][ T7351] binder: 7350:7351 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 187.954140][ T7351] binder: 7351 RLIMIT_NICE not set [ 187.954931][ T7351] binder: 7351 RLIMIT_NICE not set [ 187.956017][ T7351] binder: 7351 RLIMIT_NICE not set [ 187.956887][ T7351] binder: 7350:7351 got transaction with invalid data ptr [ 187.958052][ T7351] binder: 7350:7351 transaction reply to 7350:7351 failed 54/29201/-14, size 0-24 line 3333 [ 187.959548][ T7351] binder: send failed reply for transaction 53 to 7350:7351 [ 188.342200][ T7024] binder: undelivered TRANSACTION_ERROR: 29190 [ 188.344379][ T7024] binder: undelivered TRANSACTION_COMPLETE [ 188.345262][ T7024] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.318485][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 195.663298][ T7455] netlink: 'syz.0.875': attribute type 4 has an invalid length. [ 195.993081][ T7455] netlink: 'syz.0.875': attribute type 4 has an invalid length. [ 196.088186][ T7466] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 196.092505][ T7455] netlink: 'syz.0.875': attribute type 4 has an invalid length. [ 197.353900][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 197.412135][ T7495] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 197.522179][ T7497] netlink: 156 bytes leftover after parsing attributes in process `syz.4.896'. [ 197.527122][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 199.247391][ T7531] netlink: 'syz.2.893': attribute type 4 has an invalid length. [ 199.276035][ T7528] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 199.282525][ T7528] device bond5 entered promiscuous mode [ 199.283613][ T7528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.287268][ T7531] netlink: 'syz.2.893': attribute type 4 has an invalid length. [ 199.292107][ T7533] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 199.674601][ T7528] bond5: (slave veth3): making interface the new active one [ 199.675891][ T7528] device veth3 entered promiscuous mode [ 199.677144][ T7528] bond5: (slave veth3): Enslaving as an active interface with an up link [ 199.685719][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 199.689821][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.699243][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.700969][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.703299][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.705182][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.706982][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.708646][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.710353][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.715932][ T7538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.717699][ T7538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.719909][ T7538] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.722173][ T7538] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 199.726775][ T7531] netlink: 'syz.2.893': attribute type 4 has an invalid length. [ 202.682860][ T7563] netlink: 84 bytes leftover after parsing attributes in process `syz.1.899'. [ 206.164803][ T7639] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 206.172975][ T7639] device bond1 entered promiscuous mode [ 206.174166][ T7639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.195766][ T7639] bond1: (slave veth3): making interface the new active one [ 206.197952][ T7639] device veth3 entered promiscuous mode [ 206.483966][ T7639] bond1: (slave veth3): Enslaving as an active interface with an up link [ 206.500742][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 206.517278][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.526873][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.528690][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.530607][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.532547][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.534253][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.536125][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.537944][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.539643][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.541959][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.543876][ T7644] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.545868][ T7644] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 206.550239][ T7648] netlink: 'syz.4.925': attribute type 4 has an invalid length. [ 206.629273][ T7648] netlink: 'syz.4.925': attribute type 4 has an invalid length. [ 211.812784][ T4341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 211.814585][ T4341] CPU: 0 PID: 4341 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 211.815664][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 211.817144][ T4341] Workqueue: hci4 hci_rx_work [ 211.817988][ T4341] Call trace: [ 211.818562][ T4341] dump_backtrace+0x1c4/0x1f0 [ 211.819362][ T4341] show_stack+0x2c/0x3c [ 211.820075][ T4341] __dump_stack+0x30/0x40 [ 211.820819][ T4341] dump_stack_lvl+0xf4/0x15c [ 211.821581][ T4341] dump_stack+0x1c/0x5c [ 211.822300][ T4341] sysfs_create_dir_ns+0x244/0x264 [ 211.823124][ T4341] kobject_add_internal+0x5a8/0xb18 [ 211.823983][ T4341] kobject_add+0x144/0x20c [ 211.824652][ T4341] device_add+0x3dc/0xe4c [ 211.825361][ T4341] hci_conn_add_sysfs+0xb8/0x1bc [ 211.826122][ T4341] le_conn_complete_evt+0xcd4/0x127c [ 211.826980][ T4341] hci_le_conn_complete_evt+0x114/0x3b8 [ 211.827818][ T4341] hci_le_meta_evt+0x2c0/0x4a8 [ 211.828582][ T4341] hci_event_packet+0x64c/0xe60 [ 211.829369][ T4341] hci_rx_work+0x320/0xa94 [ 211.830060][ T4341] process_one_work+0x7e4/0x13bc [ 211.830811][ T4341] worker_thread+0x8cc/0xfe8 [ 211.831585][ T4341] kthread+0x254/0x2e0 [ 211.832275][ T4341] ret_from_fork+0x10/0x20 [ 211.834178][ T4341] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 211.836262][ T4341] Bluetooth: hci4: failed to register connection device [ 211.972729][ T7734] veth1_to_bridge: mtu less than device minimum [ 212.440509][ T7738] loop0: detected capacity change from 0 to 40427 [ 212.450321][ T7738] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 212.454778][ T7738] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 212.467060][ T7738] F2FS-fs (loop0): Found nat_bits in checkpoint [ 213.308413][ T7738] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 213.310147][ T7738] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.286290][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.965'. [ 217.258302][ T7795] loop3: detected capacity change from 0 to 32768 [ 217.378121][ T7795] JBD2: Ignoring recovery information on journal [ 217.676752][ T7795] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 218.041078][ T7795] [ 218.041560][ T7795] ====================================================== [ 218.042658][ T7795] WARNING: possible circular locking dependency detected [ 218.043713][ T7795] syzkaller #0 Not tainted [ 218.044376][ T7795] ------------------------------------------------------ [ 218.045453][ T7795] syz.3.964/7795 is trying to acquire lock: [ 218.046348][ T7795] ffff0000d976d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x158/0x68c [ 218.048044][ T7795] [ 218.048044][ T7795] but task is already holding lock: [ 218.049144][ T7795] ffff0000e1b23f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x190/0x318 [ 218.050791][ T7795] [ 218.050791][ T7795] which lock already depends on the new lock. [ 218.050791][ T7795] [ 218.052428][ T7795] [ 218.052428][ T7795] the existing dependency chain (in reverse order) is: [ 218.053992][ T7795] [ 218.053992][ T7795] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 218.055306][ T7795] down_read+0x64/0x300 [ 218.055965][ T7795] ocfs2_read_virt_blocks+0x23c/0x8c8 [ 218.056868][ T7795] ocfs2_find_entry+0x314/0x1d90 [ 218.057780][ T7795] ocfs2_find_files_on_disk+0x128/0x40c [ 218.058729][ T7795] ocfs2_lookup_ino_from_name+0x60/0x114 [ 218.059636][ T7795] ocfs2_get_system_file_inode+0x2c0/0x68c [ 218.060562][ T7795] ocfs2_init_global_system_inodes+0x2b4/0x5c0 [ 218.061515][ T7795] ocfs2_fill_super+0x22ec/0x4198 [ 218.062438][ T7795] mount_bdev+0x264/0x35c [ 218.063248][ T7795] ocfs2_mount+0x44/0x58 [ 218.064017][ T7795] legacy_get_tree+0xd8/0x174 [ 218.064788][ T7795] vfs_get_tree+0x90/0x278 [ 218.065560][ T7795] do_new_mount+0x228/0x804 [ 218.066360][ T7795] path_mount+0x5ac/0xe6c [ 218.067085][ T7795] __arm64_sys_mount+0x4a0/0x5a0 [ 218.067858][ T7795] invoke_syscall+0x98/0x290 [ 218.068716][ T7795] el0_svc_common+0x13c/0x258 [ 218.069558][ T7795] do_el0_svc+0x5c/0x134 [ 218.070275][ T7795] el0_svc+0x58/0x128 [ 218.070945][ T7795] el0t_64_sync_handler+0x84/0xf0 [ 218.071833][ T7795] el0t_64_sync+0x18c/0x190 [ 218.072639][ T7795] [ 218.072639][ T7795] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 218.074035][ T7795] __lock_acquire+0x2808/0x6634 [ 218.074920][ T7795] lock_acquire+0x20c/0x638 [ 218.075728][ T7795] __mutex_lock_common+0x1a0/0x1f3c [ 218.076667][ T7795] mutex_lock_nested+0x38/0x44 [ 218.077480][ T7795] ocfs2_get_system_file_inode+0x158/0x68c [ 218.078497][ T7795] ocfs2_reserve_local_alloc_bits+0xcc/0x2830 [ 218.079861][ T7795] ocfs2_reserve_clusters_with_limit+0x188/0xa3c [ 218.080870][ T7795] ocfs2_lock_allocators+0x270/0x530 [ 218.081756][ T7795] ocfs2_write_begin_nolock+0x1d8c/0x3a80 [ 218.082630][ T7795] ocfs2_write_begin+0x1b4/0x318 [ 218.083457][ T7795] generic_perform_write+0x240/0x508 [ 218.084344][ T7795] __generic_file_write_iter+0x130/0x250 [ 218.085291][ T7795] ocfs2_file_write_iter+0x13ac/0x1cd0 [ 218.086219][ T7795] vfs_write+0x3c8/0x7c8 [ 218.086967][ T7795] ksys_write+0x12c/0x228 [ 218.087746][ T7795] __arm64_sys_write+0x7c/0x90 [ 218.088501][ T7795] invoke_syscall+0x98/0x290 [ 218.089312][ T7795] el0_svc_common+0x13c/0x258 [ 218.090184][ T7795] do_el0_svc+0x5c/0x134 [ 218.090913][ T7795] el0_svc+0x58/0x128 [ 218.091644][ T7795] el0t_64_sync_handler+0x84/0xf0 [ 218.092583][ T7795] el0t_64_sync+0x18c/0x190 [ 218.093322][ T7795] [ 218.093322][ T7795] other info that might help us debug this: [ 218.093322][ T7795] [ 218.094966][ T7795] Possible unsafe locking scenario: [ 218.094966][ T7795] [ 218.096089][ T7795] CPU0 CPU1 [ 218.096875][ T7795] ---- ---- [ 218.097698][ T7795] lock(&ocfs2_file_ip_alloc_sem_key); [ 218.098577][ T7795] lock(&osb->system_file_mutex); [ 218.099711][ T7795] lock(&ocfs2_file_ip_alloc_sem_key); [ 218.100953][ T7795] lock(&osb->system_file_mutex); [ 218.101745][ T7795] [ 218.101745][ T7795] *** DEADLOCK *** [ 218.101745][ T7795] [ 218.102987][ T7795] 4 locks held by syz.3.964/7795: [ 218.103737][ T7795] #0: ffff0000d5a14868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 218.105310][ T7795] #1: ffff0000eb7ae460 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 218.106705][ T7795] #2: ffff0000e1b242c8 (&sb->s_type->i_mutex_key#32){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x3ac/0x1cd0 [ 218.108497][ T7795] #3: ffff0000e1b23f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x190/0x318 [ 218.110140][ T7795] [ 218.110140][ T7795] stack backtrace: [ 218.110942][ T7795] CPU: 0 PID: 7795 Comm: syz.3.964 Not tainted syzkaller #0 [ 218.111991][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 218.113479][ T7795] Call trace: [ 218.113983][ T7795] dump_backtrace+0x1c4/0x1f0 [ 218.114668][ T7795] show_stack+0x2c/0x3c [ 218.115284][ T7795] __dump_stack+0x30/0x40 [ 218.115928][ T7795] dump_stack_lvl+0xf4/0x15c [ 218.116589][ T7795] dump_stack+0x1c/0x5c [ 218.117230][ T7795] print_circular_bug+0x148/0x1b0 [ 218.118063][ T7795] check_noncircular+0x264/0x2f8 [ 218.118853][ T7795] __lock_acquire+0x2808/0x6634 [ 218.119549][ T7795] lock_acquire+0x20c/0x638 [ 218.120236][ T7795] __mutex_lock_common+0x1a0/0x1f3c [ 218.121020][ T7795] mutex_lock_nested+0x38/0x44 [ 218.121826][ T7795] ocfs2_get_system_file_inode+0x158/0x68c [ 218.122705][ T7795] ocfs2_reserve_local_alloc_bits+0xcc/0x2830 [ 218.123718][ T7795] ocfs2_reserve_clusters_with_limit+0x188/0xa3c [ 218.124671][ T7795] ocfs2_lock_allocators+0x270/0x530 [ 218.125464][ T7795] ocfs2_write_begin_nolock+0x1d8c/0x3a80 [ 218.126373][ T7795] ocfs2_write_begin+0x1b4/0x318 [ 218.127125][ T7795] generic_perform_write+0x240/0x508 [ 218.127919][ T7795] __generic_file_write_iter+0x130/0x250 [ 218.128791][ T7795] ocfs2_file_write_iter+0x13ac/0x1cd0 [ 218.129620][ T7795] vfs_write+0x3c8/0x7c8 [ 218.130278][ T7795] ksys_write+0x12c/0x228 [ 218.130975][ T7795] __arm64_sys_write+0x7c/0x90 [ 218.131720][ T7795] invoke_syscall+0x98/0x290 [ 218.132443][ T7795] el0_svc_common+0x13c/0x258 [ 218.133127][ T7795] do_el0_svc+0x5c/0x134 [ 218.133777][ T7795] el0_svc+0x58/0x128 [ 218.134418][ T7795] el0t_64_sync_handler+0x84/0xf0 [ 218.135126][ T7795] el0t_64_sync+0x18c/0x190 [ 218.227938][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 225.301606][ T4338] Bluetooth: hci0: command 0x0406 tx timeout