last executing test programs: 42.448486056s ago: executing program 2 (id=770): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 41.635957721s ago: executing program 2 (id=800): socket$netlink(0x10, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 41.587132623s ago: executing program 2 (id=801): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 41.525772664s ago: executing program 2 (id=803): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2008002, &(0x7f0000000000)={[{@inode_readahead_blks}, {@minixdf}, {@quota}]}, 0x1, 0x571, &(0x7f0000000240)="$eJzs3c+PG1cdAPDvzP7sJu0m0ANUQAIUAorizTptVPXScgGhqlJFxQmhdNl1Vku8cYi9pbtEYnviDwAJJE5w58IBiQNSTxy4cUTiAIhyQCoQgRIkDoNmPOs4u3bj1l5bWX8+0mR+vHnzfc/OzHt+TvwCmFrnI2I/IuYj4o2IWC6PJ+USL7eX/Lx7d++s3797Zz2JLHv9n0mRnh+Lrjy5U+U1FyPia1+J+FZyNG5zd+/GWr1eu13ur7S2b600d/cubW2vbdY2azer1aurVy+/cOX56sjqem77l+99eeuVr//m15989/f7X/xeXqzTZVp3PUapXfW5TpzcbES8chzBJmCmXM9PuBx8OGlEfCQiPlPc/8sxU/ztBABOsixbjmy5ex8AOOnSYgwsSSsRkaZlJ6DSHsN7OpbSeqPZuni9sXNzoz1Wdibm0utb9drlswt//E5x8lyS768WaUV6sV89tH8lIs5GxI8Wnij2K+uN+sZkujwAMPVOdbf/EfGfhTStVAbK2uNbPQDgsbE46QIAAGOn/QeA6aP9B4DpM0D7X37Zv3/sZQEAxsPnfwCYPtp/AJg+2n8AmCqvvfpqvmT3y9+/3nhzd+dG481LG7Xmjcr2znplvXH7VmWz0dgsfrNn+1HXqzcat1afi523Vlq1Zmulubt3bbuxc7N1rfhd72u1ubHUCgB4P2fPvfOHJCL2X3yiWKJrLgdtNZxs6QjPAh4vM8Nk1kGAx5rZvmB6DdSEF52E3x17WYDJ6Plj3os9Nx/2k0dkHOAwMBkXPj74+L85nuFkMbIP0+vDjf+/NPJyAOP38Pj/NwfP+OfRlwUYryxLDs/5P99J6kiy7LUxT0wMABybIf4JX/b9UXVCgIl61GTeH+z7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgOpyPi25GklWIu8DT/M61UIp6MiDMxl1zfqtcuR8RTcS4i5hby/dVJFxoAGFL696Sc/+vC8rOnD6fOJ/9dKNYR8d2fvv7jt9Zardur+fF/dY4vHEwfVn2Qb4h5BQGAwf11kJOK9rtarrs+yN+7e2f9YDnGMh7x3pc6k4+u3797p1jaKbORZVkWsVj0JZb+ncRsmWcxIp6JiJkRxN9/OyI+1qv+STE2cqac+bQ7fpSxnxxr/PSh+GmR1l7nL99HR1AWmDbv5M+fl3vdf2mcL9a97//F4gk1vOL5txhx8Oy73xV/tow00yN+fs+fHzTGc7/96pGD2XI77e2IZ2Z7xU868ZM+8Z8dMP6fPvGpH77UJy37WcSF6B2/O9ZKa/vWSnN379LW9tpmbbN2s1q9unr18gtXnq+uFGPUKwcj1Uf948WLT/UrW17/pT7x2+/8qUP1n+/k/dyA9f/5/974xqcf7C4cjv+Fz/Z+/58u1r1f/7xN/PyA8deWftV3+u48/kaf+j/q/b84YPx3/7a3MeCpAMAYNHf3bqzV67XbQ23kn0JHcZ0jG3kR+5+Thz04ctBdHC7oX6LYePCyJJHEqOuVd8YGOXnuuF7VY9+Y7fQVR3HBmfbGUnnJkZf5Fz94v3PSEdViuI04U27cG1fQyTyPgPF5cNNPuiQAAAAAAAAAAAAAAEA/4/g/TJOuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfX/wMAAP//G528vA==") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)=ANY=[@ANYBLOB]) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) 41.3360544s ago: executing program 2 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 40.896537904s ago: executing program 2 (id=822): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) lseek(r0, 0x851, 0x0) 40.896271734s ago: executing program 32 (id=822): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) lseek(r0, 0x851, 0x0) 38.006321483s ago: executing program 5 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x24020400) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 37.931302905s ago: executing program 5 (id=834): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x74a6, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x10000000, 0x10000000, {0x0, 0xd08, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0x7, 0x1000002, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.300632868s ago: executing program 5 (id=887): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0xa701}, {r1, 0x1008}], 0x2, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xd) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xfbfffff8, 0x1008, 0xfbfbfffd, 0x2, 0x0, "1fb73a6900f4ff0900000000000000d3861000", 0x1, 0x5}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xd) 32.109430993s ago: executing program 33 (id=887): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0xa701}, {r1, 0x1008}], 0x2, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xd) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xfbfffff8, 0x1008, 0xfbfbfffd, 0x2, 0x0, "1fb73a6900f4ff0900000000000000d3861000", 0x1, 0x5}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xd) 1.456663785s ago: executing program 3 (id=1562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) socket$inet(0x2b, 0x801, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1.455666915s ago: executing program 3 (id=1565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000000c0)={@mcast2, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.454030655s ago: executing program 1 (id=1568): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000740)={r1, 0x0, 0x0, 0x1, 0x3, 0x800, 0xfffffffe, 0x5, 0x4, 0x401, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000580)=[r2], &(0x7f0000000040)}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.452426915s ago: executing program 3 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008015}, 0x0) 1.403973267s ago: executing program 1 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000180)="af83857089ac6640dec50234d3608b959b45fdfffffffffffffff8edde39714cbe15fad166e558a294074db2c2b1ec6ffd73b1918517f482", &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.403590976s ago: executing program 3 (id=1572): r0 = io_uring_setup(0x194f, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x351}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.348867538s ago: executing program 3 (id=1574): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 1.118802075s ago: executing program 6 (id=1582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0x2}, 0x8) 953.716541ms ago: executing program 1 (id=1584): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0xce20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5}}}}}, 0x36) 811.150505ms ago: executing program 1 (id=1586): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 696.435188ms ago: executing program 1 (id=1588): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$EBT_SO_GET_INFO(r0, 0x11e, 0x80, 0x0, &(0x7f0000000000)) 695.947538ms ago: executing program 1 (id=1589): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmmsg$unix(r1, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 695.585588ms ago: executing program 4 (id=1590): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 659.60483ms ago: executing program 4 (id=1591): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[], 0x0) 615.565501ms ago: executing program 4 (id=1592): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 552.489193ms ago: executing program 4 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) 552.202913ms ago: executing program 4 (id=1594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, '\x00', "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) 544.696933ms ago: executing program 4 (id=1595): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback={0x0, 0x7f000001}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) 481.453535ms ago: executing program 3 (id=1596): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x81, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x6, 0x8, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x8, 0x9, {0x7, 0x25, 0x1, 0x8, 0xfc, 0x2}}}}}}}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101061, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 396.102627ms ago: executing program 0 (id=1597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x803, @rand_addr=' \x01\x00', 0x5}, 0x1c) listen(r0, 0x70000008) 332.340199ms ago: executing program 0 (id=1598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4073, &(0x7f0000004480)="$eJzszz1KM1EYBeCTL1/0KoEgaCWIwcJOYmc1u0gvWYOVhYqzE0txAe7DPVjqEkaiTn5QwSYQ5HmKyz3vYeadCevttb2U2aiT5HHysJPkcJh6NPoo/7f91vzp0Wl62+Vf+kkuvr58fL/SbwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANZCZ37dXBg3iyHXSeqny+M2l+mxMT0m+6mvqpz1k7I3SG676VUHnewmw5Nv1nWT58+tL0nGg1X8EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw95wvx5ulVH4q3t0dpa56s7ZpmubXa8sbu3IwAAAAQ1HoSc5fZQofoM7V7RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cyAAAAAAI87fOo/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFMFAAD//x2zGBE=") fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r1, &(0x7f0000000440)='maps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 234.980123ms ago: executing program 6 (id=1599): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000140)) 181.134714ms ago: executing program 6 (id=1600): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@deltfilter={0x78, 0x2d, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xffe0, 0x1f}, {0x1a, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x100, 0x4, 0x8, {0xd3, 0x2, 0x3, 0xf, 0x0, 0x8}, {0x0, 0x1, 0x4d3c, 0x6, 0x5, 0x9}, 0x2, 0x5, 0x4}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 163.393705ms ago: executing program 0 (id=1601): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/13, 0xd}, 0xfffffffa}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 100.496087ms ago: executing program 6 (id=1602): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) 85.162617ms ago: executing program 0 (id=1603): r0 = socket$inet(0x2, 0x1, 0x0) setuid(0xee01) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 62.902247ms ago: executing program 6 (id=1604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, &(0x7f0000000000)) 8.597759ms ago: executing program 0 (id=1605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bind$inet(r1, 0x0, 0x0) 8.161299ms ago: executing program 6 (id=1606): r0 = socket$inet6(0xa, 0x2, 0x0) setfsgid(0xee00) recvfrom(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00') 0s ago: executing program 0 (id=1607): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.777102][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.786835][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.788447][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.803057][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.806499][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.808229][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.809803][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.812133][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.816273][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.818117][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.820342][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.822063][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.823770][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.828915][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.830791][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.837505][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.839237][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.840704][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.842354][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.844637][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.850017][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.851683][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.854058][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.859925][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.863000][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.864471][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.866877][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.868288][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.872645][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.874133][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.878759][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.880251][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.885628][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.887236][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.892354][ T4332] device veth0_vlan entered promiscuous mode [ 33.898324][ T1608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.899692][ T1608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.909909][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.933440][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.935854][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.943698][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.945312][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.952888][ T1772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.954268][ T1772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.955906][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.957442][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.960228][ T4332] device veth1_vlan entered promiscuous mode [ 33.962601][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.964245][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.967311][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.992303][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.996506][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.998439][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.000304][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.006558][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.008388][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.013048][ T4334] device veth0_vlan entered promiscuous mode [ 34.018750][ T4332] device veth0_macvtap entered promiscuous mode [ 34.022547][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.023936][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.026915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.028694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.031219][ T4332] device veth1_macvtap entered promiscuous mode [ 34.039671][ T4334] device veth1_vlan entered promiscuous mode [ 34.047927][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.049870][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.051511][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.053251][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.056086][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.057838][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.060329][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.067876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.069677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.071255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.072858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.074562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.079976][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.081692][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.083246][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.085940][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.087650][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.089364][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.092129][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.099409][ T4332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.100995][ T4332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.102559][ T4332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.104112][ T4332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.150979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.152764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.154504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.157528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.165113][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.166653][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.168039][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.173068][ T4334] device veth0_macvtap entered promiscuous mode [ 34.179897][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.183455][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.200322][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.202144][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.211409][ T4334] device veth1_macvtap entered promiscuous mode [ 34.228487][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.229909][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.231345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.232985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.238068][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.239905][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.241600][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.244227][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.249889][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.251565][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.253194][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.255365][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.258026][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.260894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.262671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.288266][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.290035][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.291650][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.293400][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.308062][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.309785][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.311551][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.313143][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.319232][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.320759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.322572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.338513][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.340049][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.341415][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.342934][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.425576][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.427078][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.428555][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.457318][ T4425] loop1: detected capacity change from 0 to 256 [ 34.465876][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.467358][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.469072][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.477896][ T4425] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119abd0) [ 34.479883][ T4425] exFAT-fs (loop1): invalid boot region [ 34.480854][ T4425] exFAT-fs (loop1): failed to recognize exfat type [ 34.491736][ T4425] loop1: detected capacity change from 0 to 16 [ 34.509358][ T4425] ======================================================= [ 34.509358][ T4425] WARNING: The mand mount option has been deprecated and [ 34.509358][ T4425] and is ignored by this kernel. Remove the mand [ 34.509358][ T4425] option from the mount to silence this warning. [ 34.509358][ T4425] ======================================================= [ 34.543326][ T4425] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.674481][ T4417] loop3: detected capacity change from 0 to 40427 [ 34.682878][ T4417] F2FS-fs (loop3): invalid crc value [ 34.696249][ T4417] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.721347][ T4417] F2FS-fs (loop3): Start checkpoint disabled! [ 34.738765][ T4417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 34.787200][ T4435] loop1: detected capacity change from 0 to 8192 [ 34.799833][ T4435] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 34.819609][ T4435] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 34.821257][ T4435] REISERFS (device loop1): using ordered data mode [ 34.822295][ T4435] reiserfs: using flush barriers [ 34.840059][ T4435] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 34.864084][ T4435] REISERFS (device loop1): checking transaction log (loop1) [ 34.925607][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 34.926751][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 34.927819][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.928858][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 34.929853][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 34.946716][ T4454] capability: warning: `syz.3.17' uses 32-bit capabilities (legacy support in use) [ 34.948596][ T1772] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.026128][ T4435] REISERFS (device loop1): Using tea hash to sort names [ 35.027990][ T4435] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 35.058599][ T4435] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.080095][ T4435] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.096076][ T4435] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.098416][ T4435] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.120002][ T4461] process 'syz.4.20' launched './file1' with NULL argv: empty string added [ 35.144999][ T4435] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.149615][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.151851][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.160734][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.163947][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.183813][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.193443][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.200607][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.219622][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.222230][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.239683][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.265164][ T4464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 35.298448][ T4476] netlink: 'syz.4.23': attribute type 4 has an invalid length. [ 35.320874][ T4476] netlink: 'syz.4.23': attribute type 4 has an invalid length. [ 35.340818][ T4476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.482444][ T4488] loop1: detected capacity change from 0 to 256 [ 35.539174][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.559372][ T4488] FAT-fs (loop1): Directory bread(block 64) failed [ 35.560789][ T4488] FAT-fs (loop1): Directory bread(block 65) failed [ 35.561760][ T4488] FAT-fs (loop1): Directory bread(block 66) failed [ 35.564086][ T4488] FAT-fs (loop1): Directory bread(block 67) failed [ 35.567696][ T4488] FAT-fs (loop1): Directory bread(block 68) failed [ 35.569987][ T4488] FAT-fs (loop1): Directory bread(block 69) failed [ 35.573179][ T4488] FAT-fs (loop1): Directory bread(block 70) failed [ 35.576072][ T4488] FAT-fs (loop1): Directory bread(block 71) failed [ 35.580211][ T4488] FAT-fs (loop1): Directory bread(block 72) failed [ 35.582455][ T4488] FAT-fs (loop1): Directory bread(block 73) failed [ 35.606096][ T1608] device bridge_slave_1 left promiscuous mode [ 35.607795][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.004506][ T4507] loop1: detected capacity change from 0 to 32768 [ 36.035950][ T4507] (syz.1.36,4507,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 36.041166][ T4507] (syz.1.36,4507,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 36.073794][ T4507] JBD2: Ignoring recovery information on journal [ 36.118857][ T4509] loop3: detected capacity change from 0 to 32768 [ 36.165246][ T4507] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 36.221450][ T4509] JBD2: Ignoring recovery information on journal [ 36.242799][ T4507] ocfs2: Unmounting device (7,1) on (node local) [ 36.256872][ T4509] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 36.414053][ T4327] ocfs2: Unmounting device (7,3) on (node local) [ 36.528819][ T4534] overlayfs: failed to clone upperpath [ 36.591439][ T4536] loop3: detected capacity change from 0 to 4096 [ 36.616337][ T4540] overlayfs: failed to clone upperpath [ 37.015190][ T4344] Bluetooth: hci2: command 0x040f tx timeout [ 37.016436][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 37.017432][ T4344] Bluetooth: hci1: command 0x040f tx timeout [ 37.018478][ T4344] Bluetooth: hci0: command 0x040f tx timeout [ 37.019510][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 37.186901][ T4530] loop2: detected capacity change from 0 to 131072 [ 37.195688][ T4530] F2FS-fs (loop2): inline encryption not supported [ 37.296364][ T4530] F2FS-fs (loop2): Test dummy encryption mode enabled [ 37.298699][ T4530] F2FS-fs (loop2): invalid crc value [ 37.319999][ T4530] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.335378][ T4530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.353278][ T4530] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 37.562700][ T4595] syz.3.71 sent an empty control message without MSG_MORE. [ 37.849760][ T4597] loop0: detected capacity change from 0 to 32768 [ 37.863945][ T4597] (syz.0.72,4597,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 37.871726][ T4597] (syz.0.72,4597,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 37.906803][ T4597] JBD2: Ignoring recovery information on journal [ 37.946519][ T4597] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 38.019264][ T4597] ocfs2: Unmounting device (7,0) on (node local) [ 38.040653][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 38.228500][ T4652] hfsplus: unable to load nls mapping "maromanIan" [ 38.230007][ T4652] hfsplus: unable to parse mount options [ 38.370735][ T4669] capability: warning: `syz.4.101' uses deprecated v2 capabilities in a way that may be insecure [ 38.553300][ T4671] (syz.3.102,4671,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 38.556842][ T4671] (syz.3.102,4671,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 38.571497][ T4671] JBD2: Ignoring recovery information on journal [ 38.652283][ T4671] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 38.792950][ T4671] ocfs2: Unmounting device (7,3) on (node local) [ 38.859791][ T4691] overlayfs: failed to clone upperpath [ 38.867056][ T4691] overlayfs: failed to clone lowerpath [ 38.912807][ T4684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.107 (4684) [ 38.929523][ T4684] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.931256][ T4684] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 38.952265][ T4684] BTRFS info (device loop2): force clearing of disk cache [ 38.953559][ T4684] BTRFS info (device loop2): enabling auto defrag [ 38.962409][ T4684] BTRFS info (device loop2): max_inline at 0 [ 38.963515][ T4684] BTRFS info (device loop2): enabling disk space caching [ 38.964624][ T4684] BTRFS info (device loop2): disk space caching is enabled [ 39.085543][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 39.086618][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 39.087588][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 39.118695][ T4684] BTRFS info (device loop2): enabling ssd optimizations [ 39.121487][ T4684] BTRFS info (device loop2): rebuilding free space tree [ 39.131248][ T4684] BTRFS info (device loop2): disabling free space tree [ 39.132462][ T4684] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 39.134044][ T4684] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 39.179834][ T9] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 39.252291][ T4338] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 39.315748][ T4319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop2 scanned by udevd (4319) [ 39.483994][ T4754] "syz.2.126" (4754) uses obsolete ecb(arc4) skcipher [ 39.572110][ T27] audit: type=1326 audit(39.520:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 39.577890][ T27] audit: type=1326 audit(39.530:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 39.611986][ T27] audit: type=1326 audit(39.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 39.627964][ T27] audit: type=1326 audit(39.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 39.631800][ T27] audit: type=1326 audit(39.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 39.651780][ T27] audit: type=1326 audit(39.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4766 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb6b5a96c code=0x7ffc0000 [ 39.656088][ T27] audit: type=1326 audit(39.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 39.773362][ T27] audit: type=1326 audit(39.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4766 comm="syz.3.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 39.783712][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 39.824599][ T4781] bond1: (slave geneve2): Error -99 calling set_mac_address [ 40.054419][ T4791] overlayfs: failed to clone upperpath [ 40.075787][ T4791] overlayfs: failed to clone upperpath [ 40.788275][ T4831] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 40.972855][ T4843] Illegal XDP return value 4294967274 on prog (id 25) dev syz_tun, expect packet loss! [ 41.041205][ T4845] overlayfs: failed to clone upperpath [ 41.051338][ T4833] set_capacity_and_notify: 3 callbacks suppressed [ 41.051350][ T4833] loop2: detected capacity change from 0 to 40427 [ 41.060281][ T4833] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 41.174546][ T4853] overlayfs: failed to clone upperpath [ 41.183612][ T4855] overlayfs: failed to clone upperpath [ 41.385491][ T4870] fuse: Bad value for 'fd' [ 41.730212][ T4908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 41.736937][ T4908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 41.840915][ T4918] syz.3.196 uses obsolete (PF_INET,SOCK_PACKET) [ 41.874190][ T4924] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 41.879093][ T4924] netlink: 'syz.1.199': attribute type 22 has an invalid length. [ 41.885435][ T4922] fuse: Bad value for 'fd' [ 41.895824][ T4344] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 41.897591][ T4344] Bluetooth: hci1: Injecting HCI hardware error event [ 41.899848][ T4344] Bluetooth: hci1: hardware error 0x00 [ 42.039593][ T4941] netlink: 76 bytes leftover after parsing attributes in process `syz.1.203'. [ 42.122189][ T4945] fuse: Bad value for 'fd' [ 42.297529][ T4333] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 42.298955][ T4333] Bluetooth: hci0: Injecting HCI hardware error event [ 42.302248][ T4339] Bluetooth: hci0: hardware error 0x00 [ 42.637218][ T4980] netlink: 204 bytes leftover after parsing attributes in process `syz.3.221'. [ 42.641012][ T4980] netlink: 84 bytes leftover after parsing attributes in process `syz.3.221'. [ 42.725072][ T4984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 42.827589][ T4988] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 42.829165][ T4988] Zero length message leads to an empty skb [ 42.830324][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 42.840553][ T4990] device bridge_slave_1 left promiscuous mode [ 42.842482][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.888850][ T4990] device bridge_slave_0 left promiscuous mode [ 42.890475][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.049957][ T4993] Injecting memory failure for pfn 0x13f600 at process virtual address 0x20000000 [ 43.054512][ T4993] Memory failure: 0x13f600: recovery action for dirty LRU page: Recovered [ 43.129423][ T4997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.229'. [ 43.452521][ T5038] netlink: 'syz.1.244': attribute type 3 has an invalid length. [ 43.500029][ C0] vcan0: j1939_tp_rxtimer: 0x0000000051a09c8b: rx timeout, send abort [ 43.503222][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000051a09c8b: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.541718][ T5032] Injecting memory failure for pfn 0x141000 at process virtual address 0x20000000 [ 43.544620][ T5032] Memory failure: 0x141000: recovery action for dirty LRU page: Recovered [ 43.863379][ T5091] fuse: Bad value for 'fd' [ 43.952770][ T5107] fuse: Bad value for 'fd' [ 44.046924][ T4344] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 44.150715][ T5127] netlink: 'syz.2.273': attribute type 12 has an invalid length. [ 44.152373][ T5127] netlink: 'syz.2.273': attribute type 29 has an invalid length. [ 44.153921][ T5127] netlink: 148 bytes leftover after parsing attributes in process `syz.2.273'. [ 44.160743][ T5127] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 44.163411][ T5127] netlink: 'syz.2.273': attribute type 2 has an invalid length. [ 44.165560][ T5127] netlink: 11 bytes leftover after parsing attributes in process `syz.2.273'. [ 44.171649][ T5127] netlink: 'syz.2.273': attribute type 12 has an invalid length. [ 44.173556][ T5127] netlink: 'syz.2.273': attribute type 29 has an invalid length. [ 44.175919][ T5127] netlink: 148 bytes leftover after parsing attributes in process `syz.2.273'. [ 44.177666][ T5127] netlink: 11 bytes leftover after parsing attributes in process `syz.2.273'. [ 44.320211][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 44.321478][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 44.452209][ T5150] ceph: No mds server is up or the cluster is laggy [ 44.524937][ T4339] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 44.566960][ T5185] fuse: Bad value for 'fd' [ 44.607497][ T5190] input: syz0 as /devices/virtual/input/input2 [ 44.609093][ T5190] input: failed to attach handler leds to device input2, error: -6 [ 44.771023][ T5205] loop2: detected capacity change from 0 to 512 [ 44.795923][ T5205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.939011][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 45.065027][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 45.066768][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 45.096408][ T5227] loop2: detected capacity change from 0 to 128 [ 45.128226][ T5227] syz.2.309: attempt to access beyond end of device [ 45.128226][ T5227] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 45.133019][ T5227] syz.2.309: attempt to access beyond end of device [ 45.133019][ T5227] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 45.135816][ T5227] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 45.137925][ T5227] syz.2.309: attempt to access beyond end of device [ 45.137925][ T5227] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 45.140591][ T5227] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 45.142539][ T5227] syz.2.309: attempt to access beyond end of device [ 45.142539][ T5227] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 45.145368][ T5227] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 45.147578][ T5227] syz.2.309: attempt to access beyond end of device [ 45.147578][ T5227] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 45.150177][ T5227] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 45.152050][ T5227] syz.2.309: attempt to access beyond end of device [ 45.152050][ T5227] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 45.154667][ T5227] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 45.157069][ T5227] syz.2.309: attempt to access beyond end of device [ 45.157069][ T5227] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 45.159724][ T5227] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 45.173269][ T5227] syz.2.309: attempt to access beyond end of device [ 45.173269][ T5227] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 45.175588][ T5227] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 45.176945][ T5227] syz.2.309: attempt to access beyond end of device [ 45.176945][ T5227] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 45.179061][ T5227] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 45.180590][ T5227] syz.2.309: attempt to access beyond end of device [ 45.180590][ T5227] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 45.182862][ T5227] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 45.268128][ T5235] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004ÿÿÿÿŠ+«²srR‹Š2TÜJNª8}‚åºý5•9p [ 45.308303][ T5237] sock: sock_timestamping_bind_phc: sock not bind to device [ 45.656511][ T5282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.324'. [ 45.880265][ T4339] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 45.971266][ T5310] loop2: detected capacity change from 0 to 128 [ 45.980999][ T5310] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿ0xffffffffffffffff01777777777777777777777" or missing value [ 46.030249][ T5312] loop2: detected capacity change from 0 to 128 [ 46.641508][ T5341] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 46.666512][ T5343] netlink: 52 bytes leftover after parsing attributes in process `syz.4.355'. [ 46.670669][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.672068][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.721117][ T5343] netlink: 52 bytes leftover after parsing attributes in process `syz.4.355'. [ 47.073237][ T5372] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 47.930034][ T5424] loop2: detected capacity change from 0 to 1024 [ 47.931743][ T5424] EXT4-fs: Ignoring removed bh option [ 47.966306][ T5424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.023710][ T5424] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 48.067961][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 48.988158][ T5463] overlayfs: failed to clone upperpath [ 49.273800][ T5496] loop2: detected capacity change from 0 to 128 [ 49.293353][ T5496] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. [ 49.370651][ T5503] validate_nla: 2 callbacks suppressed [ 49.370662][ T5503] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 49.381684][ T5503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.404463][ T5503] bond1: (slave geneve2): making interface the new active one [ 49.407738][ T5503] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 49.409401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 49.468409][ T5512] fuse: Bad value for 'fd' [ 49.760708][ T5541] syz.2.437 (5541): attempted to duplicate a private mapping with mremap. This is not supported. [ 49.800065][ T5547] fuse: Bad value for 'fd' [ 49.884666][ T5560] fuse: Bad value for 'fd' [ 50.557594][ T5603] __nla_validate_parse: 1 callbacks suppressed [ 50.557604][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 50.571861][ T5603] device batadv0 entered promiscuous mode [ 50.574353][ T5603] device macsec1 entered promiscuous mode [ 50.580362][ T5603] device batadv0 left promiscuous mode [ 50.620309][ T5609] sock: sock_set_timeout: `syz.1.468' (pid 5609) tries to set negative timeout [ 50.755847][ T5614] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 50.806909][ T5616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.470'. [ 50.813913][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 50.818320][ T5618] device bridge_slave_1 left promiscuous mode [ 50.821396][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.856357][ T5618] device bridge_slave_0 left promiscuous mode [ 50.857628][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.952350][ T5634] fuse: Bad value for 'fd' [ 51.599293][ T27] audit: type=1326 audit(51.550:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5664 comm="syz.2.491" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90177aa8 code=0x0 [ 51.993831][ T5673] overlayfs: failed to resolve './file0': -2 [ 52.072831][ T27] audit: type=1326 audit(52.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.501" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x0 [ 52.233289][ T5696] netlink: 'syz.0.504': attribute type 34 has an invalid length. [ 52.418121][ T4344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.420641][ T4344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.422355][ T4344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.425273][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.426985][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.428331][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.484016][ T5703] loop2: detected capacity change from 0 to 2048 [ 52.530736][ T5703] Alternate GPT is invalid, using primary GPT. [ 52.532055][ T5703] loop2: p1 p2 p3 [ 52.532697][ T5703] loop2: partition table partially beyond EOD, truncated [ 52.582109][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 52.588246][ T1608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.652472][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 52.653059][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 52.656987][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 52.659915][ T1608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.666130][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 52.839025][ T5698] chnl_net:caif_netlink_parms(): no params data found [ 52.886882][ T5715] fuse: Bad value for 'fd' [ 52.899828][ T1608] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.907549][ T5713] tipc: Enabling of bearer rejected, failed to enable media [ 52.911498][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.955281][ T5713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.015880][ T1608] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.021166][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.022468][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.033738][ T5698] device bridge_slave_0 entered promiscuous mode [ 53.041122][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.049901][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.059241][ T5698] device bridge_slave_1 entered promiscuous mode [ 53.075934][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 53.105849][ T5738] fuse: Bad value for 'fd' [ 53.131545][ T5741] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 53.148727][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.150420][ T5744] netlink: 92 bytes leftover after parsing attributes in process `syz.2.517'. [ 53.152635][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.163943][ T5698] team0: Port device team_slave_0 added [ 53.171329][ T5698] team0: Port device team_slave_1 added [ 53.177517][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.178704][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.183274][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.202142][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.207454][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.218336][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.316738][ T5698] device hsr_slave_0 entered promiscuous mode [ 53.355424][ T5698] device hsr_slave_1 entered promiscuous mode [ 53.375577][ T5698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.377307][ T5698] Cannot create hsr debugfs directory [ 53.671597][ T5796] fuse: Bad value for 'fd' [ 54.168001][ T5823] fuse: Bad value for 'fd' [ 54.322327][ T5698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.428020][ T5698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.445105][ T4339] Bluetooth: hci1: command 0x0409 tx timeout [ 54.451843][ T5698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.538886][ T5698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.669284][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.672994][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.674777][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.685398][ T5854] overlayfs: failed to clone upperpath [ 54.703744][ T5856] overlayfs: failed to clone upperpath [ 54.814040][ T5698] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.815628][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 54.819312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.820942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.822486][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.823809][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.834680][ T5861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 54.842100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.850440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.852407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.858673][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.859997][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.863444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.872189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.968258][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.971206][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.978670][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.987652][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.990766][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.992759][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.005156][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.007002][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.008582][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.015776][ T5866] loop2: detected capacity change from 0 to 512 [ 55.017058][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.037643][ T5866] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.094070][ T5866] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.549: corrupted inode contents [ 55.110750][ T5866] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #16: comm syz.2.549: mark_inode_dirty error [ 55.115150][ T5866] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.549: corrupted inode contents [ 55.120308][ T5866] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.549: mark_inode_dirty error [ 55.128385][ T5866] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.549: corrupted inode contents [ 55.139258][ T5866] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 55.140918][ T5866] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.549: corrupted inode contents [ 55.149167][ T5866] EXT4-fs error (device loop2): ext4_truncate:4325: inode #16: comm syz.2.549: mark_inode_dirty error [ 55.153076][ T5866] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 55.173917][ T5866] EXT4-fs (loop2): 1 truncate cleaned up [ 55.182210][ T5866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.189623][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 55.191248][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 55.275638][ T5883] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.549: iget: bad i_size value: 1407374883557376 [ 55.296636][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 55.445699][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.447799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.449104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.750908][ T5902] overlayfs: failed to clone upperpath [ 55.771665][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.773459][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.803562][ T5698] device veth0_vlan entered promiscuous mode [ 55.858147][ T1608] device hsr_slave_0 left promiscuous mode [ 55.898415][ T1608] device hsr_slave_1 left promiscuous mode [ 55.965071][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.966737][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.970362][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.971818][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.973408][ T1608] device bridge_slave_1 left promiscuous mode [ 55.974874][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.015746][ T1608] device bridge_slave_0 left promiscuous mode [ 56.017254][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.145199][ T1608] device veth1_macvtap left promiscuous mode [ 56.146564][ T1608] device veth0_macvtap left promiscuous mode [ 56.147711][ T1608] device veth1_vlan left promiscuous mode [ 56.148800][ T1608] device veth0_vlan left promiscuous mode [ 56.273434][ T1608] bond1 (unregistering): Released all slaves [ 56.524970][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 56.807074][ T5927] loop2: detected capacity change from 0 to 32768 [ 56.856882][ T5927] loop2: p1 p3 < > [ 56.928130][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.931837][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 57.014505][ T5930] loop2: detected capacity change from 0 to 32768 [ 57.091695][ T5930] XFS (loop2): Mounting V5 Filesystem [ 57.131230][ T5930] XFS (loop2): Ending clean mount [ 57.254374][ T5946] overlayfs: failed to clone upperpath [ 57.258520][ T4338] XFS (loop2): Unmounting Filesystem [ 57.732831][ T55] Bluetooth: hci5: Frame reassembly failed (-84) [ 58.298064][ T1608] team0 (unregistering): Port device team_slave_1 removed [ 58.465974][ T1608] team0 (unregistering): Port device team_slave_0 removed [ 58.616080][ T4344] Bluetooth: hci1: command 0x040f tx timeout [ 58.626084][ T1608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.825514][ T1608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.814811][ T4344] Bluetooth: hci5: command 0x1003 tx timeout [ 59.814864][ T4339] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 60.295970][ T1608] bond0 (unregistering): Released all slaves [ 60.586653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.588592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.597664][ T5698] device veth1_vlan entered promiscuous mode [ 60.601968][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 60.603486][ T5988] netlink: 'syz.0.595': attribute type 39 has an invalid length. [ 60.685732][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 60.771422][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 60.828332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.830005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.847211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.849583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.857336][ T5698] device veth0_macvtap entered promiscuous mode [ 60.867694][ T5698] device veth1_macvtap entered promiscuous mode [ 60.881342][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.887613][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.889368][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.891079][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.893197][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.895734][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.897287][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.899406][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.903130][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.905349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.907099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.908628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.913421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.925421][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.927345][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.928855][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.935020][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.936673][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.938402][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.940041][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.941690][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.949502][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.951189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.952904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.962283][ T5698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.963717][ T5698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.974062][ T5698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.976033][ T5698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031628][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.033119][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.044047][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.052924][ T1772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.054376][ T1772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.056823][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.137198][ T6018] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 61.149638][ T6021] loop2: detected capacity change from 0 to 4096 [ 61.183839][ T6021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.224008][ T6021] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 61.245046][ T6021] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #15: comm syz.2.606: mark_inode_dirty error [ 61.248355][ T6021] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 112: comm syz.2.606: lblock 0 mapped to illegal pblock 112 (length 1) [ 61.253277][ T6021] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 61.255980][ T6021] EXT4-fs error (device loop2): ext4_punch_hole:4160: inode #15: comm syz.2.606: mark_inode_dirty error [ 61.258982][ T6027] overlayfs: failed to clone upperpath [ 61.264327][ T6027] overlayfs: failed to clone upperpath [ 61.290503][ T6029] loop1: detected capacity change from 0 to 256 [ 61.310068][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 61.331195][ T6029] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.333045][ T6029] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 61.342154][ T6029] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 61.478867][ T6029] loop1: detected capacity change from 256 to 1 [ 61.490245][ T6029] bio_check_eod: 1876 callbacks suppressed [ 61.490257][ T6029] syz.1.610: attempt to access beyond end of device [ 61.490257][ T6029] loop1: rw=2049, sector=168, nr_sectors = 1 limit=1 [ 61.509485][ T6029] Buffer I/O error on dev loop1, logical block 168, lost sync page write [ 61.510990][ T6029] syz.1.610: attempt to access beyond end of device [ 61.510990][ T6029] loop1: rw=2049, sector=128, nr_sectors = 1 limit=1 [ 61.513141][ T6029] Buffer I/O error on dev loop1, logical block 128, lost sync page write [ 61.514703][ T6029] syz.1.610: attempt to access beyond end of device [ 61.514703][ T6029] loop1: rw=0, sector=128, nr_sectors = 1 limit=1 [ 61.520136][ T6029] syz.1.610: attempt to access beyond end of device [ 61.520136][ T6029] loop1: rw=0, sector=128, nr_sectors = 1 limit=1 [ 61.522463][ T6029] exFAT-fs (loop1): error, failed to bmap (inode : 00000000622729fd iblock : 8, err : -5) [ 61.528678][ T6029] exFAT-fs (loop1): Filesystem has been set read-only [ 61.532410][ T6029] syz.1.610: attempt to access beyond end of device [ 61.532410][ T6029] loop1: rw=0, sector=128, nr_sectors = 1 limit=1 [ 61.536919][ T6029] exFAT-fs (loop1): error, failed to access to FAT (entry 0x00000008, err:-5) [ 61.539133][ T6029] syz.1.610: attempt to access beyond end of device [ 61.539133][ T6029] loop1: rw=2049, sector=184, nr_sectors = 8 limit=1 [ 61.611565][ T6046] overlayfs: failed to clone upperpath [ 61.824833][ T27] audit: type=1326 audit(61.770:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 61.836229][ T27] audit: type=1326 audit(61.790:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 61.841817][ T27] audit: type=1326 audit(61.790:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 61.849556][ T27] audit: type=1326 audit(61.790:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 61.863686][ T27] audit: type=1326 audit(61.810:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 61.886339][ T27] audit: type=1326 audit(61.840:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 61.895103][ T27] audit: type=1326 audit(61.840:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 61.899521][ T27] audit: type=1326 audit(61.850:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa0b5a96c code=0x7ffc0000 [ 61.912563][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 61.936394][ T6078] device bond0 entered promiscuous mode [ 61.937468][ T6078] device bond_slave_0 entered promiscuous mode [ 61.938794][ T6078] device bond_slave_1 entered promiscuous mode [ 61.976963][ T6078] device team0 entered promiscuous mode [ 61.978054][ T6078] device team_slave_0 entered promiscuous mode [ 61.979225][ T6078] device team_slave_1 entered promiscuous mode [ 62.005369][ T6078] device hsr1 entered promiscuous mode [ 62.007871][ T6078] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 62.012065][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 62.020387][ T6085] bond0: (slave bond_slave_1): Releasing backup interface [ 62.045598][ T6085] device bond_slave_1 left promiscuous mode [ 62.052159][ T27] audit: type=1326 audit(62.000:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.624" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffa0b77aa8 code=0x7ffc0000 [ 62.064614][ T6094] netdevsim netdevsim2: Direct firmware load for ÿÿ failed with error -2 [ 62.071630][ T6094] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿÿ [ 62.187024][ T6103] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 62.188132][ T6108] loop1: detected capacity change from 0 to 2048 [ 62.215751][ T6108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.225488][ T6108] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 62.230923][ T6108] EXT4-fs error (device loop1) in ext4_setattr:5695: error 28 [ 62.262297][ T6108] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.265778][ T6108] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.265778][ T6108] [ 62.267523][ T6108] EXT4-fs (loop1): Total free blocks count 0 [ 62.268769][ T6108] EXT4-fs (loop1): Free/Dirty block details [ 62.269915][ T6108] EXT4-fs (loop1): free_blocks=4096 [ 62.270774][ T6108] EXT4-fs (loop1): dirty_blocks=16 [ 62.271899][ T6108] EXT4-fs (loop1): Block reservation details [ 62.272785][ T6108] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 62.289367][ T1772] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 62.549703][ T6128] overlayfs: failed to clone upperpath [ 62.685897][ T4735] libceph: connect (1)[c::]:6789 error -101 [ 62.687348][ T4735] libceph: mon0 (1)[c::]:6789 connect error [ 62.789376][ T6135] ceph: No mds server is up or the cluster is laggy [ 62.902687][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 63.066003][ T6162] sock: sock_set_timeout: `syz.0.662' (pid 6162) tries to set negative timeout [ 63.207537][ T6182] overlayfs: failed to clone upperpath [ 63.259258][ T6186] loop2: detected capacity change from 0 to 512 [ 63.316234][ T6186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 63.495136][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 63.557604][ T6195] tipc: Started in network mode [ 63.558452][ T6195] tipc: Node identity 06da05f97df6, cluster identity 4711 [ 63.559883][ T6195] tipc: Enabled bearer , priority 0 [ 63.576847][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.615094][ T6195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.628696][ T6195] tipc: Disabling bearer [ 63.884681][ T6200] loop1: detected capacity change from 0 to 32768 [ 63.942387][ T6200] XFS (loop1): Mounting V5 Filesystem [ 63.975678][ T6200] XFS (loop1): Ending clean mount [ 64.102722][ T6232] block device autoloading is deprecated and will be removed. [ 64.133102][ T6237] tipc: Enabling of bearer rejected, failed to enable media [ 64.144298][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.194957][ T6237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.526850][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.528263][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.605541][ T5698] XFS (loop1): Unmounting Filesystem [ 65.459655][ T6295] overlayfs: failed to clone upperpath [ 65.462566][ T6295] overlayfs: failed to clone upperpath [ 65.601346][ T6293] loop1: detected capacity change from 0 to 32768 [ 65.641636][ T6293] XFS (loop1): Mounting V5 Filesystem [ 65.674418][ T6293] XFS (loop1): Ending clean mount [ 65.715647][ T6316] overlayfs: failed to clone upperpath [ 65.752588][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 65.762917][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 65.773097][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 65.774036][ T5698] XFS (loop1): Unmounting Filesystem [ 65.816198][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 66.084470][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.737'. [ 66.147989][ T6331] loop2: detected capacity change from 0 to 40427 [ 66.158200][ T6331] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 66.159925][ T6331] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.161213][ T6331] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 66.162531][ T6331] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 66.166249][ T6331] F2FS-fs (loop2): invalid crc value [ 66.176667][ T6331] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.194983][ T6331] F2FS-fs (loop2): Start checkpoint disabled! [ 66.220084][ T6331] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 66.221396][ T6331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 66.264352][ T9] kworker/u4:0: attempt to access beyond end of device [ 66.264352][ T9] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.037476][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 67.044046][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 67.187796][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 67.293661][ T6417] fuse: Bad value for 'fd' [ 67.363818][ T6424] netlink: 'syz.2.770': attribute type 12 has an invalid length. [ 67.467783][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 67.479758][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 67.776195][ T6458] overlayfs: failed to clone upperpath [ 68.297917][ T6498] loop2: detected capacity change from 0 to 512 [ 68.322497][ T6498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.340321][ T6498] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.803: corrupted inode contents [ 68.370835][ T6498] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.803: mark_inode_dirty error [ 68.379021][ T6498] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.803: corrupted inode contents [ 68.388438][ T6498] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.803: mark_inode_dirty error [ 68.462250][ T4338] EXT4-fs error (device loop2): ext4_lookup:1855: inode #18: comm syz-executor: 'file2' linked to parent dir [ 68.470918][ T4338] EXT4-fs error (device loop2): ext4_lookup:1855: inode #18: comm syz-executor: 'file2' linked to parent dir [ 68.480567][ T6511] overlayfs: failed to clone upperpath [ 68.503811][ T6513] tipc: Enabling of bearer rejected, failed to enable media [ 68.539725][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.542504][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.545021][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.547034][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.548601][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.550938][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.658798][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 68.736621][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.737964][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.739474][ T6516] device bridge_slave_0 entered promiscuous mode [ 68.742669][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.744020][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.747230][ T6516] device bridge_slave_1 entered promiscuous mode [ 68.756508][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.759392][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.773737][ T6516] team0: Port device team_slave_0 added [ 68.775751][ T6516] team0: Port device team_slave_1 added [ 68.793442][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.794566][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.807541][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.810105][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.811358][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.816168][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.866044][ T6516] device hsr_slave_0 entered promiscuous mode [ 68.879763][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 68.910384][ T6516] device hsr_slave_1 entered promiscuous mode [ 69.001586][ T4344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.004240][ T4344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.006470][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.008305][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.009673][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.011000][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.267097][ T6516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.279380][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 69.377030][ T6516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.380316][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.381626][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.383412][ T6551] device bridge_slave_0 entered promiscuous mode [ 69.388052][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.389614][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.391386][ T6551] device bridge_slave_1 entered promiscuous mode [ 69.400500][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.403816][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.416033][ T6551] team0: Port device team_slave_0 added [ 69.418520][ T6551] team0: Port device team_slave_1 added [ 69.427327][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.428909][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.435800][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.439708][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.441080][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.446875][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.495963][ T6516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.546266][ T6551] device hsr_slave_0 entered promiscuous mode [ 69.565978][ T6551] device hsr_slave_1 entered promiscuous mode [ 69.605432][ T6551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.606752][ T6551] Cannot create hsr debugfs directory [ 69.647254][ T6516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.661276][ T113] cfg80211: failed to load regulatory.db [ 70.112449][ T4466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.120395][ T6551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.151867][ T6551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.188089][ T6551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.268827][ T4466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.280228][ T6551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.369491][ T4466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.375099][ T6516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.427553][ T6516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.515876][ T4466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.519649][ T6516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.556462][ T6516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.604938][ T4344] Bluetooth: hci3: command 0x0409 tx timeout [ 70.617859][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.623481][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.625201][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.629559][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.632635][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.634259][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.637637][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.638866][ T1772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.640330][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.644198][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.646921][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.648614][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.649816][ T1772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.652772][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.662656][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.664321][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.668560][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.670247][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.682709][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.684538][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.689761][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.691512][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.692800][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.695285][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.712498][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.726564][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.733736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.735411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.743540][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.751989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.753654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.759276][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.760525][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.762005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.767704][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.769348][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.771041][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.772274][ T1608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.781923][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.785339][ T4466] tipc: Left network mode [ 70.785707][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.798949][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.802015][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.804504][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.811107][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.813053][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.819761][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.821449][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.997620][ T6516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.999684][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.003058][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.004638][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.024591][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.068689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.069985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.086109][ T4344] Bluetooth: hci4: command 0x0409 tx timeout [ 71.134627][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.144646][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.146889][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.197287][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.198999][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.202734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.204389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.207009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.208571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.212715][ T6551] device veth0_vlan entered promiscuous mode [ 71.289520][ T6551] device veth1_vlan entered promiscuous mode [ 71.299440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.301036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.302599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.304068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.367838][ T6551] device veth0_macvtap entered promiscuous mode [ 71.370478][ T6551] device veth1_macvtap entered promiscuous mode [ 71.385162][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.386815][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.388379][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.391975][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.393808][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.399184][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.401112][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.402933][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.404705][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.407475][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.409424][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.411101][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.412791][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.419132][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.421582][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.423299][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.425285][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.427174][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.428935][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.430670][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.432450][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.434115][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.438341][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.440117][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.442790][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.479121][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.480889][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.482472][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.484056][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.490905][ T6551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.492524][ T6551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.493910][ T6551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.501830][ T6551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.508023][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.509848][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.561961][ T6516] device veth0_vlan entered promiscuous mode [ 71.571085][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.572797][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.576626][ T6516] device veth1_vlan entered promiscuous mode [ 71.673052][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.674956][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.676501][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.678042][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.686399][ T1608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.687642][ T1608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.717542][ T6516] device veth0_macvtap entered promiscuous mode [ 71.720162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.721779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.728352][ T6516] device veth1_macvtap entered promiscuous mode [ 71.736837][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.738226][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.739966][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.741804][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.749853][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.751787][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.753269][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.756103][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.757855][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.759506][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.760911][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.762390][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.763576][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.765937][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.767493][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.769215][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.773455][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.777628][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.779579][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.781718][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.783609][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.789110][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.790899][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.792443][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.793946][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.796163][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.797843][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.799376][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.800587][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.801936][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.803541][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.807313][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.808602][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.810363][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.083461][ T6751] loop1: detected capacity change from 0 to 32768 [ 72.093284][ T6516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.102523][ T6516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106058][ T6751] (syz.1.838,6751,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 72.109242][ T6516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.112027][ T6516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.113676][ T6751] (syz.1.838,6751,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 72.122735][ T6751] JBD2: Ignoring recovery information on journal [ 72.179075][ T6751] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 72.243443][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 72.426462][ T6750] ocfs2: Unmounting device (7,1) on (node local) [ 72.548524][ T6789] __nla_validate_parse: 2 callbacks suppressed [ 72.548540][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 72.662966][ T4466] device hsr_slave_0 left promiscuous mode [ 72.685002][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 72.695799][ T4466] device hsr_slave_1 left promiscuous mode [ 72.786896][ T6827] fuse: Bad value for 'fd' [ 72.795105][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.796486][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.798763][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.800177][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.884978][ T4466] device veth1_macvtap left promiscuous mode [ 72.886140][ T4466] device veth0_macvtap left promiscuous mode [ 72.887275][ T4466] device veth1_vlan left promiscuous mode [ 72.888274][ T4466] device veth0_vlan left promiscuous mode [ 73.165073][ T55] wlan1: Trigger new scan to find an IBSS to join [ 73.506903][ T6829] fuse: Bad value for 'fd' [ 73.660355][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 74.013539][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 74.765281][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 75.218441][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 75.395713][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 75.555263][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.755348][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.126208][ T9] wlan1: Trigger new scan to find an IBSS to join [ 76.854845][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 77.076591][ T4466] bond0 (unregistering): Released all slaves [ 77.104904][ T1608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.133199][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.134584][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.137024][ T6816] netlink: 'syz.3.861': attribute type 12 has an invalid length. [ 77.145973][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.189677][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.191454][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 77.195116][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.201256][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.382135][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 77.456373][ T6891] overlayfs: failed to clone upperpath [ 77.606527][ T6885] loop4: detected capacity change from 0 to 32768 [ 77.625272][ T6885] (syz.4.881,6885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 77.627932][ T6885] (syz.4.881,6885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 77.637719][ T6885] JBD2: Ignoring recovery information on journal [ 77.686437][ T6885] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 77.774528][ T6885] ocfs2: Unmounting device (7,4) on (node local) [ 77.849767][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.853028][ T4339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.858072][ T4339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.859829][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.862428][ T4339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.863843][ T4339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.086117][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.894'. [ 78.567951][ T4466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.575111][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 78.597718][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.600156][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.603361][ T6916] device bridge_slave_0 entered promiscuous mode [ 78.666006][ T4466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.672189][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.673409][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.675065][ T6916] device bridge_slave_1 entered promiscuous mode [ 78.687053][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.690277][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.703005][ T6916] team0: Port device team_slave_0 added [ 78.706696][ T6916] team0: Port device team_slave_1 added [ 78.713388][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.715250][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.719924][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.724584][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.726631][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.731276][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.777763][ T6916] device hsr_slave_0 entered promiscuous mode [ 78.815154][ T6916] device hsr_slave_1 entered promiscuous mode [ 78.854815][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.857086][ T6916] Cannot create hsr debugfs directory [ 78.917222][ T4466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.038940][ T4466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.076037][ T6916] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.120453][ T6916] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.148470][ T6916] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.186289][ T6916] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.330672][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.370233][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.371888][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.380573][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.383427][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.385427][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.386919][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.388101][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.389675][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.392339][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.393960][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.408430][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.409675][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.469654][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.915'. [ 79.567565][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.569544][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.571243][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.573551][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.586047][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.588715][ T7032] netlink: 'syz.1.919': attribute type 4 has an invalid length. [ 79.679743][ T7042] netlink: 'syz.1.919': attribute type 4 has an invalid length. [ 79.780167][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.782214][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.851184][ T7070] sctp: [Deprecated]: syz.4.932 (pid 7070) Use of int in max_burst socket option deprecated. [ 79.851184][ T7070] Use struct sctp_assoc_value instead [ 79.881985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.883833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.885671][ T4344] Bluetooth: hci4: command 0x0409 tx timeout [ 79.890324][ T6916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.892484][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.900733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.902306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.111498][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.113061][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.117104][ T7103] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 80.118484][ T7103] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 80.119741][ T7103] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.941'. [ 80.132425][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.247737][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'. [ 80.433023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.435721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.513704][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.515609][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.517323][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.518767][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.521384][ T6916] device veth0_vlan entered promiscuous mode [ 80.537355][ T6916] device veth1_vlan entered promiscuous mode [ 80.833896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.835759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.837281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.838992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.851514][ T6916] device veth0_macvtap entered promiscuous mode [ 80.871056][ T6916] device veth1_macvtap entered promiscuous mode [ 80.928758][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.930502][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.932140][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.933788][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.947907][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.949753][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951602][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.953314][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.963491][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.965634][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.967197][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.968891][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.978113][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.980643][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.982474][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.984273][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.996561][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.331440][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.333677][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.336045][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.337725][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.339493][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.351842][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.353551][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.355963][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.360520][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.362335][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.364012][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.378849][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.381430][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.387210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.389012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.438212][ T4466] device hsr_slave_0 left promiscuous mode [ 81.474955][ T4466] device hsr_slave_1 left promiscuous mode [ 81.522855][ T7240] overlayfs: failed to clone upperpath [ 81.548058][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.549344][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.551076][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.552798][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.554418][ T4466] device bridge_slave_1 left promiscuous mode [ 81.556698][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.596282][ T4466] device bridge_slave_0 left promiscuous mode [ 81.597688][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.734915][ T4466] device veth1_macvtap left promiscuous mode [ 81.736158][ T4466] device veth0_macvtap left promiscuous mode [ 81.737292][ T4466] device veth1_vlan left promiscuous mode [ 81.738253][ T4466] device veth0_vlan left promiscuous mode [ 81.965101][ T4344] Bluetooth: hci4: command 0x041b tx timeout [ 82.135319][ T11] wlan1: Trigger new scan to find an IBSS to join [ 83.798174][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 83.996112][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 84.044781][ T4339] Bluetooth: hci4: command 0x040f tx timeout [ 84.165296][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.385270][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.175144][ T7301] wlan1: Trigger new scan to find an IBSS to join [ 85.936654][ T4466] bond0 (unregistering): Released all slaves [ 86.124805][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 86.230102][ T6916] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.231680][ T6916] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.233157][ T6916] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.234611][ T6916] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.237613][ T7232] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 86.243836][ T7238] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 86.249366][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 86.372500][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.373626][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.376857][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.410708][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.412199][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.413525][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.548126][ T7324] loop6: detected capacity change from 0 to 1024 [ 86.622947][ T7324] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 86.877590][ T7324] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.889: Invalid inode table block 5 in block_group 0 [ 86.900035][ T7324] EXT4-fs (loop6): Remounting filesystem read-only [ 86.901180][ T7324] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 86.910030][ T7324] EXT4-fs (loop6): Remounting filesystem read-only [ 86.949477][ T6916] EXT4-fs (loop6): unmounting filesystem. [ 87.180514][ T7387] overlayfs: failed to clone upperpath [ 87.626057][ T7424] xt_hashlimit: size too large, truncated to 1048576 [ 88.140564][ T1608] wlan1: Trigger new scan to find an IBSS to join [ 88.171425][ T7464] device batadv_slave_1 entered promiscuous mode [ 88.173063][ T7461] device batadv_slave_1 left promiscuous mode [ 88.224122][ T7463] loop6: detected capacity change from 0 to 8192 [ 88.252031][ T7463] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.254649][ T7463] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 88.268540][ T7463] REISERFS (device loop6): using ordered data mode [ 88.274500][ T7463] reiserfs: using flush barriers [ 88.280833][ T7463] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.294369][ T7463] REISERFS (device loop6): checking transaction log (loop6) [ 88.462520][ T7463] REISERFS (device loop6): Using tea hash to sort names [ 88.474106][ T7463] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 88.840262][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.841809][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.075457][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.437604][ T7517] overlayfs: failed to clone upperpath [ 89.463576][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.509557][ T7485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.974296][ T7485] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.976569][ T7485] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.978458][ T7485] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.979794][ T7485] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.240382][ T7554] loop6: detected capacity change from 0 to 40427 [ 90.253369][ T7554] F2FS-fs (loop6): invalid crc value [ 90.263205][ T7554] F2FS-fs (loop6): Found nat_bits in checkpoint [ 90.283675][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1027'. [ 90.320334][ T7554] F2FS-fs (loop6): Start checkpoint disabled! [ 90.337801][ T7554] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 90.368782][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 90.389844][ T7554] syz.6.1034: attempt to access beyond end of device [ 90.389844][ T7554] loop6: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 90.409590][ T7554] syz.6.1034: attempt to access beyond end of device [ 90.409590][ T7554] loop6: rw=2049, sector=77824, nr_sectors = 40 limit=40427 [ 90.412916][ T7554] syz.6.1034: attempt to access beyond end of device [ 90.412916][ T7554] loop6: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 90.463799][ T1772] kworker/u4:5: attempt to access beyond end of device [ 90.463799][ T1772] loop6: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 90.711052][ T7586] tipc: Failed to remove unknown binding: 66,1,1/0:3890448040/3890448042 [ 90.959304][ T7618] overlayfs: failed to clone upperpath [ 91.012393][ T7628] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 2, id = 0 [ 91.429709][ T7651] loop6: detected capacity change from 0 to 32768 [ 91.441024][ T7651] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1073 (7651) [ 91.452391][ T7651] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.460053][ T7651] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 91.467677][ T7651] BTRFS info (device loop6): enabling ssd optimizations [ 91.472390][ T7651] BTRFS info (device loop6): force clearing of disk cache [ 91.479977][ T7651] BTRFS info (device loop6): disabling tree log [ 91.482158][ T7651] BTRFS info (device loop6): using free space tree [ 91.589807][ T7651] BTRFS info (device loop6): rebuilding free space tree [ 91.757419][ T7724] overlayfs: failed to clone upperpath [ 91.816749][ T6916] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.902998][ T27] audit: type=1326 audit(91.850:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.910397][ T27] audit: type=1326 audit(91.850:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.914270][ T27] audit: type=1326 audit(91.850:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.951639][ T27] audit: type=1326 audit(91.850:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.968811][ T27] audit: type=1326 audit(91.850:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.973317][ T27] audit: type=1326 audit(91.850:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.986630][ T27] audit: type=1326 audit(91.850:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.990719][ T27] audit: type=1326 audit(91.850:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.995473][ T27] audit: type=1326 audit(91.850:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 91.998956][ T27] audit: type=1326 audit(91.850:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.1092" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77aa8 code=0x7ffc0000 [ 92.461062][ T7810] netlink: 'syz.3.1104': attribute type 4 has an invalid length. [ 92.527464][ T7816] overlayfs: failed to clone upperpath [ 93.307921][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 93.950231][ T7892] loop6: detected capacity change from 0 to 131072 [ 93.963255][ T7892] F2FS-fs (loop6): Test dummy encryption mode enabled [ 93.972653][ T7892] F2FS-fs (loop6): invalid crc value [ 93.991095][ T7892] F2FS-fs (loop6): Found nat_bits in checkpoint [ 94.012107][ T7892] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 94.026319][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 94.038839][ T7892] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 94.074233][ T7956] device team1 entered promiscuous mode [ 94.085918][ T7956] 8021q: adding VLAN 0 to HW filter on device team1 [ 94.758002][ T8014] overlayfs: failed to clone upperpath [ 95.237394][ T8044] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1176'. [ 95.264637][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 95.348255][ T8059] HTB: quantum of class 800F0008 is small. Consider r2q change. [ 95.390364][ T8064] overlayfs: failed to clone upperpath [ 96.062989][ T8080] loop6: detected capacity change from 0 to 131072 [ 96.073810][ T8080] F2FS-fs (loop6): Found nat_bits in checkpoint [ 96.083113][ T8080] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 96.516249][ T8147] overlayfs: failed to clone upperpath [ 96.749808][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 96.965819][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 96.971330][ T8185] device team1 entered promiscuous mode [ 96.972594][ T8185] 8021q: adding VLAN 0 to HW filter on device team1 [ 97.899974][ T8262] xt_hashlimit: max too large, truncated to 1048576 [ 98.440084][ T8284] loop6: detected capacity change from 0 to 64 [ 98.919005][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1298'. [ 98.968651][ T8328] HTB: quantum of class 80100008 is small. Consider r2q change. [ 99.059394][ T8343] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1301'. [ 99.396675][ T8373] loop6: detected capacity change from 0 to 8192 [ 99.432204][ T8373] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.434328][ T8373] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 99.450119][ T8373] REISERFS (device loop6): using ordered data mode [ 99.451231][ T8373] reiserfs: using flush barriers [ 99.456075][ T8373] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.458857][ T8373] REISERFS (device loop6): checking transaction log (loop6) [ 99.478715][ T8373] REISERFS (device loop6): Using r5 hash to sort names [ 99.480191][ T8373] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 100.275968][ T8472] overlayfs: failed to clone upperpath [ 100.346019][ T8480] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 2, id = 0 [ 100.934928][ T4339] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 100.936766][ T4339] Bluetooth: hci4: Injecting HCI hardware error event [ 100.940144][ T4344] Bluetooth: hci4: hardware error 0x00 [ 100.978256][ T8526] loop6: detected capacity change from 0 to 32768 [ 100.991451][ T8526] JBD2: Ignoring recovery information on journal [ 101.046151][ T8526] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 101.202752][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 101.202764][ T27] audit: type=1326 audit(101.150:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.214209][ T27] audit: type=1326 audit(101.150:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.225110][ T27] audit: type=1326 audit(101.150:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.228896][ T27] audit: type=1326 audit(101.150:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.232543][ T27] audit: type=1326 audit(101.150:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.255159][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 101.257209][ T27] audit: type=1326 audit(101.150:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.261208][ T27] audit: type=1326 audit(101.150:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.282207][ T27] audit: type=1326 audit(101.150:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.286235][ T27] audit: type=1326 audit(101.150:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.289981][ T27] audit: type=1326 audit(101.150:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.1.1352" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=46 compat=0 ip=0xffffa7177aa8 code=0x7ffc0000 [ 101.689026][ T6916] ocfs2: Unmounting device (7,6) on (node local) [ 101.832708][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.834033][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.241284][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.257561][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.543043][ T8611] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.545120][ T8611] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.546684][ T8611] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.548614][ T8611] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.781983][ T8618] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 102.978446][ T8656] loop6: detected capacity change from 0 to 512 [ 103.013246][ T8656] EXT2-fs (loop6): (no)acl options not supported [ 103.024062][ T8656] EXT2-fs (loop6): warning: mounting ext3 filesystem as ext2 [ 103.096869][ T8656] EXT2-fs (loop6): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1701604449, count = 1 [ 103.102743][ T8656] EXT2-fs (loop6): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 [ 103.107967][ T8656] EXT2-fs (loop6): error: ext2_free_blocks: Freeing blocks not in datazone - block = 65536, count = 1 [ 103.134984][ T8656] EXT2-fs (loop6): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 103.140407][ T8656] EXT2-fs (loop6): error: ext2_new_blocks: Allocating block in system zone - blocks from 1, length 11 [ 103.146822][ T8656] EXT2-fs (loop6): error: ext2_new_blocks: Allocating block in system zone - blocks from 12, length 11 [ 103.152328][ T8656] syz.6.1381: attempt to access beyond end of device [ 103.152328][ T8656] loop6: rw=34817, sector=3606377190, nr_sectors = 2 limit=512 [ 103.165484][ T4344] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 103.713045][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1401'. [ 103.771144][ T8718] overlayfs: failed to clone upperpath [ 103.955246][ T8735] device veth0 entered promiscuous mode [ 103.965832][ T8734] device veth0 left promiscuous mode [ 104.310086][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 104.550747][ T8777] loop6: detected capacity change from 0 to 256 [ 104.555551][ T8777] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.559743][ T8777] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 104.571976][ T8777] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xbe28721f, utbl_chksum : 0xe619d30d) [ 105.221392][ T8817] loop6: detected capacity change from 0 to 2048 [ 105.510954][ T8837] loop6: detected capacity change from 0 to 512 [ 105.512554][ T8837] EXT4-fs: Ignoring removed bh option [ 105.513474][ T8837] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.514523][ T8837] EXT4-fs: Ignoring removed bh option [ 105.536238][ T8837] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.590961][ T8837] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 105.631886][ T8837] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.1456: Unrecognised inode hash code 20 [ 105.652435][ T8288] udevd[8288]: incorrect ext4 checksum on /dev/loop6 [ 105.655222][ T8837] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1456: Corrupt directory, running e2fsck is recommended [ 105.664560][ T8837] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.1456: Unrecognised inode hash code 20 [ 105.679557][ T8837] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1456: Corrupt directory, running e2fsck is recommended [ 105.692396][ T8837] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:106: comm syz.6.1456: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 105.779320][ T6916] EXT4-fs (loop6): unmounting filesystem. [ 105.841179][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1463'. [ 106.190484][ T8883] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.192492][ T8883] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.194032][ T8883] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.195578][ T8883] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.220481][ T8883] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.222179][ T8883] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.223425][ T8883] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.224616][ T8883] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.229780][ T8885] sctp: [Deprecated]: syz.4.1476 (pid 8885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.229780][ T8885] Use struct sctp_sack_info instead [ 106.568546][ T8901] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1483'. [ 107.281519][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 107.282670][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 107.284837][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 107.285884][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 107.324099][ T8981] ceph: No mds server is up or the cluster is laggy [ 107.624545][ T9015] fuse: Bad value for 'fd' [ 107.849067][ T9030] netlink: 'syz.4.1538': attribute type 10 has an invalid length. [ 107.857510][ T9030] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.870701][ T9029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.932981][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 107.934532][ T9041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1543'. [ 107.935664][ T9043] overlayfs: failed to clone upperpath [ 107.949521][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 108.181434][ T9076] overlayfs: failed to clone upperpath [ 108.285458][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 108.335006][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.399511][ T9096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1569'. [ 108.428343][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1570'. [ 108.445167][ T9101] netlink: 'syz.1.1571': attribute type 39 has an invalid length. [ 109.159511][ T9150] overlayfs: failed to clone upperpath [ 109.164434][ T9150] overlayfs: failed to clone upperpath [ 109.262076][ T9158] overlayfs: failed to clone upperpath [ 109.854375][ T11] ------------[ cut here ]------------ [ 109.855640][ T11] WARNING: CPU: 1 PID: 11 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x4e4/0x590 [ 109.857422][ T11] Modules linked in: [ 109.858125][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 109.859513][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 109.861241][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 109.862466][ T11] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 109.863963][ T11] pc : ieee80211_ibss_csa_beacon+0x4e4/0x590 [ 109.865139][ T11] lr : ieee80211_ibss_csa_beacon+0x4e4/0x590 [ 109.866282][ T11] sp : ffff80001ca17260 [ 109.867071][ T11] x29: ffff80001ca17270 x28: 1fffe0001ec29ab5 x27: dfff800000000000 [ 109.868546][ T11] x26: 0000000000000000 x25: ffff0000f614dac8 x24: ffff0000f60e8740 [ 109.870075][ T11] x23: ffff0000f614d5a8 x22: ffff0000f614dad8 x21: 0000000000000002 [ 109.871532][ T11] x20: ffff0000f614cc80 x19: ffff80001ca17500 x18: 0000000000000000 [ 109.873053][ T11] x17: ffff800018381000 x16: ffff8000082d9e48 x15: 0000000000000002 [ 109.874575][ T11] x14: 0000000000000001 x13: 1fffe0001ec1d02a x12: 0000000000100000 [ 109.876027][ T11] x11: 00000000000010e9 x10: ffff800032ccd000 x9 : ffff8000112a339c [ 109.877384][ T11] x8 : 00000000000010ea x7 : 0000000000000000 x6 : 0000000000000000 [ 109.878756][ T11] x5 : 0000000000000020 x4 : 0000000000000000 x3 : 0000000000000000 [ 109.880257][ T11] x2 : 0000000000000006 x1 : ffff800011bada80 x0 : 0000000000000000 [ 109.881741][ T11] Call trace: [ 109.882421][ T11] ieee80211_ibss_csa_beacon+0x4e4/0x590 [ 109.883543][ T11] ieee80211_set_csa_beacon+0x638/0xa50 [ 109.884626][ T11] ieee80211_channel_switch+0x6ac/0xb14 [ 109.885636][ T11] ieee80211_ibss_process_chanswitch+0x6f8/0xa70 [ 109.886814][ T11] ieee80211_ibss_rx_queued_mgmt+0xd50/0x25c4 [ 109.887994][ T11] ieee80211_iface_work+0x598/0xa34 [ 109.888895][ T11] cfg80211_wiphy_work+0x1d8/0x218 [ 109.889903][ T11] process_one_work+0x7f8/0x13a4 [ 109.890832][ T11] worker_thread+0x8c4/0xfec [ 109.891656][ T11] kthread+0x250/0x2d8 [ 109.892530][ T11] ret_from_fork+0x10/0x20 [ 109.893370][ T11] irq event stamp: 4716962 [ 109.894254][ T11] hardirqs last enabled at (4716961): [] __local_bh_enable_ip+0x1f8/0x37c [ 109.896182][ T11] hardirqs last disabled at (4716962): [] el1_dbg+0x24/0x80 [ 109.897821][ T11] softirqs last enabled at (4716960): [] cfg80211_get_bss+0x48c/0x84c [ 109.899707][ T11] softirqs last disabled at (4716958): [] cfg80211_get_bss+0x13c/0x84c [ 109.901442][ T11] ---[ end trace 0000000000000000 ]--- [ 109.912316][ C0] Unknown status report in ack skb [ 109.997225][ T11] wlan1: Trigger new scan to find an IBSS to join [ 110.974934][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50