last executing test programs: 6m36.07980224s ago: executing program 32 (id=72): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 6m29.710130173s ago: executing program 33 (id=85): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r1], 0x14e) io_setup(0x9, &(0x7f0000000b80)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x9, "11a6c077fdf8cd60365b1d6e7b2d77c0d06c972fa82f745c3278897768ff48de", 0x64, 0x7, 0x5, 0x1b0, 0x80000000, 0xffffff25, 0x200, 0x8, [0x0, 0xffff, 0x4, 0xfffffffa]}) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) 6m7.075950917s ago: executing program 34 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r2, &(0x7f0000001400)=[{0x0}], 0x1, 0xc1, 0x0) 6m3.018045251s ago: executing program 35 (id=147): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x16, 0xfb, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb0, 0x8, {0x6, 0x6c, 0x7, 0xf7, 0x0, 0xff, 0x0, @in=@local, @in=@local}}]}, 0x50}}, 0x4) 4m58.99617022s ago: executing program 36 (id=288): unshare(0x22020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 4m43.355637799s ago: executing program 6 (id=330): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x50000004) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) 4m42.98468717s ago: executing program 6 (id=331): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m42.645732251s ago: executing program 6 (id=333): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd0003110004"], 0x7a) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) 4m41.733692491s ago: executing program 6 (id=336): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r5, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m38.70435461s ago: executing program 6 (id=340): mlockall(0x6) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 4m36.048861199s ago: executing program 6 (id=345): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0x14, 0xfffffffd, 0x0, 0x2, 0xffffe0ac, 0x9e, 0x8001, 0x0, 0x5, 0x0, 0x4, 0xfffffff8, 0x5, 0x0, 0x4, 0x4, 0x732, 0x3, 0x757, 0x0, 0x8, 0x4, 0x9}}) 4m35.495235874s ago: executing program 37 (id=345): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0x14, 0xfffffffd, 0x0, 0x2, 0xffffe0ac, 0x9e, 0x8001, 0x0, 0x5, 0x0, 0x4, 0xfffffff8, 0x5, 0x0, 0x4, 0x4, 0x732, 0x3, 0x757, 0x0, 0x8, 0x4, 0x9}}) 3m37.537007846s ago: executing program 38 (id=513): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xdc) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0xd) 3m28.412453016s ago: executing program 39 (id=553): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x4866, 0x58ba, 0xb, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m29.345612208s ago: executing program 40 (id=753): capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000340)={0x9, 0xfd9, 0x65, 0x4, 0x9, 0x4}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x708, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 1m36.711510634s ago: executing program 0 (id=977): msgget$private(0x0, 0x414) getuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x80) socket(0x1e, 0x805, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$kcm(0x2, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 1m35.623995797s ago: executing program 0 (id=981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca8", 0x26}], 0x1}, 0x0) epoll_create(0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x3450, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) 1m34.565071355s ago: executing program 0 (id=984): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x3, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 1m34.258997063s ago: executing program 0 (id=986): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000040000000000000000008500000023000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r5, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m32.802653994s ago: executing program 0 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c1812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m31.642247467s ago: executing program 0 (id=993): openat$binderfs(0xffffffffffffff9c, &(0x7f0000003a40)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m30.482839225s ago: executing program 41 (id=993): openat$binderfs(0xffffffffffffff9c, &(0x7f0000003a40)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m21.461495161s ago: executing program 7 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$setperm(0x5, r4, 0x604310a) keyctl$get_security(0x11, r4, 0x0, 0x0) socket(0x10, 0x3, 0x0) 1m15.910213913s ago: executing program 7 (id=1041): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1m15.619551709s ago: executing program 7 (id=1043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1m14.931013318s ago: executing program 7 (id=1045): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r5, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.792592534s ago: executing program 7 (id=1048): socket$igmp6(0xa, 0x3, 0x2) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}}, 0x24}}, 0x0) 1m10.937011166s ago: executing program 7 (id=1054): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1m10.407149734s ago: executing program 42 (id=1054): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 50.955605293s ago: executing program 3 (id=1122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x2040400) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[0x0]) signalfd4(r5, &(0x7f0000000140), 0x8, 0x0) 49.383547307s ago: executing program 3 (id=1125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7}, 0x1c) sendmmsg$inet(r1, &(0x7f0000005400)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0341", 0x2}], 0x1}}], 0x1, 0x800) 49.074693083s ago: executing program 3 (id=1127): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 47.891669029s ago: executing program 3 (id=1131): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 44.429091098s ago: executing program 3 (id=1139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xfce1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000001780)=[{0x0}], 0x1, 0x3, 0x2) 44.219384636s ago: executing program 2 (id=1141): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x0) 43.831449709s ago: executing program 3 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 43.830851467s ago: executing program 2 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) io_cancel(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time\x00') chdir(&(0x7f00000003c0)='./bus\x00') lstat(&(0x7f0000000440)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) 41.952093996s ago: executing program 43 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 41.945675322s ago: executing program 2 (id=1148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x2040400) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[0x0]) signalfd4(r5, &(0x7f0000000140), 0x8, 0x0) 40.612181661s ago: executing program 2 (id=1149): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x800010, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, 'F!-'}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x110) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x404, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 38.956994554s ago: executing program 2 (id=1153): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x2, 0x0, &(0x7f00000001c0)) 38.291595508s ago: executing program 2 (id=1155): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xfce1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000001780)=[{0x0}], 0x1, 0x3, 0x2) 36.656839827s ago: executing program 44 (id=1155): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xfce1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000001780)=[{0x0}], 0x1, 0x3, 0x2) 9.817934315s ago: executing program 1 (id=1216): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 9.458092159s ago: executing program 1 (id=1219): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f00000002c0), 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x0) 9.203600983s ago: executing program 1 (id=1221): r0 = socket(0xa, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x178, 0x394, 0x0, 0x178, 0x228, 0x258, 0x258, 0x228, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0xffffffff], [], 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x10, 0x3}}}, {{@ipv6={@private1, @mcast1, [0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {}, {}, 0x3b}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 9.203355598s ago: executing program 9 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 8.99462324s ago: executing program 5 (id=1223): socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 8.797859466s ago: executing program 5 (id=1224): syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x2, 0x4}, {0x67, 0x7}}}}, 0x11) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.599134157s ago: executing program 9 (id=1226): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\t<'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.477481274s ago: executing program 1 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x80) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x80, 0x20, 0x14, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xfffffffe}]}, 0x24}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_delroute={0x28, 0x19, 0x800, 0x70bd28, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x6, 0xff, 0x4, 0x0, 0x7, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0xe81f, 0x4, 0x81}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8810) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000000) syz_emit_ethernet(0x13d, &(0x7f00000008c0)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x1c, 0x4, 0x3, 0x3f, 0x12f, 0x65, 0x0, 0xde, 0x6, 0x0, @remote, @multicast1, {[@generic={0x86, 0x4, "7603"}, @timestamp={0x44, 0x24, 0x19, 0x0, 0x2, [0x1ff, 0x3, 0x6, 0x7, 0x6, 0x4, 0x7, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x22, 0x3, 0x3, [{@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0xdfef}, {@local, 0x4}, {@loopback, 0xa}, {@private=0xa010101, 0x101}]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8778f3dbed39d4ff, 0x3, 0x0, 0x1, {[@md5sig={0x13, 0x12, "25cd5e87bf66956204d4ce3b45cd21e9"}]}}, {"eb2ede530163998bbfd192dd439219b1d0b37a49815ec1905ff068014395bf0dcf7d91206804bb87c99d5a5b84a4eca86bceded6815b21478c18377cb632dab53969078603509a0a5222b33a9e441e04707d1d674b6f7c11490e84d8f2273dc0d3f7b9ac749a27b00aba706a383efa37073e955a2a8eab50c78f7f83ed3fe1c1215750e0eef965dbe55fc81cbb5ada8be4185451fe7714"}}}}}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2808c0) 6.874898168s ago: executing program 8 (id=1229): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 6.543637121s ago: executing program 8 (id=1230): unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x18}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 5.37523078s ago: executing program 8 (id=1231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080)="ff3e", 0x0}, 0x20) 5.365552635s ago: executing program 1 (id=1232): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x7f}}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) truncate(&(0x7f0000000080)='./file0\x00', 0xfe) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f0000000440)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@data_err_ignore}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") 5.204229914s ago: executing program 9 (id=1234): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ff"], 0x6f4}}, 0x0) 4.995658675s ago: executing program 5 (id=1235): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0xffdd) 4.855517797s ago: executing program 9 (id=1236): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 4.855331565s ago: executing program 8 (id=1237): r0 = socket(0xa, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x178, 0x394, 0x0, 0x178, 0x228, 0x258, 0x258, 0x228, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0xffffffff], [], 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x10, 0x3}}}, {{@ipv6={@private1, @mcast1, [0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {}, {}, 0x3b}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 4.356227442s ago: executing program 5 (id=1239): sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000080)) epoll_create1(0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x555) semtimedop(r3, &(0x7f0000000340), 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) 4.144281422s ago: executing program 4 (id=1240): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) 3.320353399s ago: executing program 8 (id=1241): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1cc, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x4, 0x1, 0x9, 0x2}, {0x2, 0xf, 0x9, 0xff}, {0x7, 0x7, 0x5a}, {0x80, 0x5, 0x7d, 0x1}, {0x4, 0x80, 0x7, 0x40}, {0x1ff, 0xa3, 0xfa, 0x1}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x128, 0x1, [@m_xt={0x124, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x46, 0x6, {0x0, 'filter\x00', 0xc, 0x3, "f1e585a1fd66c14a6751e9712b8ff6252153b00cfc9735b3659020dc"}}]}, {0x6d, 0x6, "b02aff89fcb734ba3a7e4bbe7dbf80c9a578cea6f50e70b62c55c42e0420d8c5c688a7cd0b82ff660cc3f662c705e961800970f1285c53934973ac141cc9f45366c1b500c5ef5cf4034b294d4651a863b0842a90625ee18c1d91b04ca14f29de60a80dd02807b5f522"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.245232109s ago: executing program 4 (id=1242): unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x18}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 3.195297456s ago: executing program 5 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7}, 0x1c) sendmmsg$inet(r1, &(0x7f0000005400)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0341", 0x2}], 0x1}}], 0x1, 0x800) 2.12915876s ago: executing program 4 (id=1244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x2040400) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) signalfd4(r5, 0x0, 0x0, 0x0) 1.966822034s ago: executing program 5 (id=1245): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000200)='V', 0x1) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 1.811426174s ago: executing program 8 (id=1246): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000002c0), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000800)='X', 0x1}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000080)) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r4, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x20004000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x3ff) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000140)=0x90000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, 0x0, 0x25, 0x18, @void}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) listen(r3, 0x3) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440309000e000a0014000000ba8000001201", 0x2e}], 0x1}, 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x1, 0x9eb9, &(0x7f000000b4c0)="$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") dup3(r8, r7, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.811261777s ago: executing program 1 (id=1247): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 977.044765ms ago: executing program 9 (id=1248): socket(0x25, 0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x8001, 0x6, 0x4d, 0x39cc191a, 0x5e, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x7, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x101, 0x8001, 0x4c74, 0x80000000, 0x252, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x3, 0x7, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0xfffffffc, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x5, 0xd, 0x6, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x8, 0x0, 0xe, 0x312, 0x78, 0x9, 0xfa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x9, 0x0, 0x7, 0xff, 0x20005, 0x2, 0x5f31, 0x4, 0x1000, 0x2, 0x2, 0xa, 0x4, 0xc, 0xb, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfdfffffc, 0xffff, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x2, 0x8, 0x42, 0x2], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x3, 0x4c2b, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8593, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xffff, 0x1, 0x1, 0xffff, 0x3, 0x9, 0x7fffffff, 0x120000, 0x3, 0x6, 0xaaed, 0x2, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x10000ce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x19, 0x6, 0x7ffe, 0x8, 0xa620, 0x2, 0x5, 0x1, 0xfffffffe, 0x1, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x200, 0x7, 0x4, 0x80000004, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x2, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 746.659022ms ago: executing program 4 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 431.582311ms ago: executing program 4 (id=1250): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0xffdd) 43.406985ms ago: executing program 4 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 9 (id=1252): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0x16, 0x3, "adac26"}, 0x0, 0x0}) kernel console output (not intermixed with test programs): k [ 306.505912][ T8188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.677850][ T8188] team0: Port device team_slave_0 added [ 306.710370][ T8188] team0: Port device team_slave_1 added [ 306.889478][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 306.895760][ T26] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 306.922065][ T26] usb 1-1: USB disconnect, device number 7 [ 307.040087][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.053515][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.089962][ T8188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.103090][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.111009][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.140838][ T8188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.237302][ T63] bridge_slave_1: left allmulticast mode [ 307.251546][ T63] bridge_slave_1: left promiscuous mode [ 307.270970][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.321127][ T63] bridge_slave_0: left allmulticast mode [ 307.326856][ T63] bridge_slave_0: left promiscuous mode [ 307.358528][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.694918][ T8353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.597'. [ 308.303698][ T9] usb 8-1: USB disconnect, device number 7 [ 308.622147][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.637054][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.650549][ T63] bond0 (unregistering): Released all slaves [ 308.832218][ T8188] hsr_slave_0: entered promiscuous mode [ 308.875359][ T8188] hsr_slave_1: entered promiscuous mode [ 308.904996][ T8188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.941112][ T8188] Cannot create hsr debugfs directory [ 309.042630][ T753] tipc: Subscription rejected, illegal request [ 309.456173][ T8374] xt_addrtype: ipv6 does not support BROADCAST matching [ 309.649678][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.159454][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 310.219688][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 310.247766][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.285546][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 310.322616][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 310.366794][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.400252][ T9] usb 1-1: config 0 descriptor?? [ 310.845249][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 310.865855][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 310.878444][ T9] usb 1-1: USB disconnect, device number 8 [ 310.952909][ T8404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'. [ 312.245649][ T63] hsr_slave_0: left promiscuous mode [ 312.309365][ T63] hsr_slave_1: left promiscuous mode [ 312.315439][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.374659][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.532673][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.579337][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.685541][ T63] veth1_macvtap: left promiscuous mode [ 312.731988][ T63] veth0_macvtap: left promiscuous mode [ 312.753512][ T63] veth1_vlan: left promiscuous mode [ 312.777645][ T63] veth0_vlan: left promiscuous mode [ 316.662688][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.941209][ T63] team0 (unregistering): Port device team_slave_1 removed [ 317.340808][ T63] team0 (unregistering): Port device team_slave_0 removed [ 319.618027][ T8045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.451948][ T8517] netlink: 'syz.9.640': attribute type 1 has an invalid length. [ 320.461078][ T8517] netlink: 224 bytes leftover after parsing attributes in process `syz.9.640'. [ 320.589247][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.7.641'. [ 320.731387][ T8045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.809772][ T8529] syz.0.644: attempt to access beyond end of device [ 320.809772][ T8529] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 320.828355][ T8045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.657781][ T5844] Bluetooth: Wrong link type (-57) [ 322.664590][ T8045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.416296][ T8564] xt_addrtype: ipv6 does not support BROADCAST matching [ 326.010623][ T26] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 326.164873][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.210071][ T26] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 326.251620][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.299191][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.321340][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.358711][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 326.412246][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.420285][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.428262][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.442780][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.488734][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 326.522284][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.538405][ T8188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.564045][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.630746][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 326.638684][ T8188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.647158][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.660450][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.692758][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.699942][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.727802][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 326.755436][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.803966][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.856120][ T8188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.856681][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 326.912820][ T8188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.936000][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.979272][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.028919][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 327.067827][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.133374][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.184343][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 327.248355][ T26] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.288440][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.327716][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 327.391348][ T26] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 327.428591][ T26] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 327.464830][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.468756][ T26] usb 8-1: Product: syz [ 327.503893][ T26] usb 8-1: Manufacturer: syz [ 327.524884][ T26] usb 8-1: SerialNumber: syz [ 327.555475][ T26] usb 8-1: config 0 descriptor?? [ 327.610690][ T8188] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.622630][ T26] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 327.652487][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.659697][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.789216][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.796393][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.981244][ T10] usb 8-1: USB disconnect, device number 8 [ 328.024278][ T10] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 328.142205][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.427881][ T5848] Bluetooth: Wrong link type (-57) [ 328.775853][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.9.669'. [ 328.979596][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 329.011640][ T8188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.155352][ T8645] siw: device registration error -23 [ 330.482032][ T8045] veth0_vlan: entered promiscuous mode [ 330.505737][ T8045] veth1_vlan: entered promiscuous mode [ 330.685031][ T8045] veth0_macvtap: entered promiscuous mode [ 330.761819][ T8045] veth1_macvtap: entered promiscuous mode [ 330.841509][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.919319][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.969578][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.011873][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.062514][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.088213][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.124065][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.169090][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.206010][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.233065][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.249582][ T5933] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 331.299366][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.346693][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.390018][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.408818][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.430620][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.433352][ T5933] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 331.446729][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.464769][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.494150][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.507816][ T5933] usb 8-1: config 0 descriptor?? [ 331.516119][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.574499][ T5933] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 331.611259][ T8045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.651419][ T8045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.679420][ T8045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.698406][ T8045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.876108][ T8188] veth0_vlan: entered promiscuous mode [ 331.972809][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.983844][ T8188] veth1_vlan: entered promiscuous mode [ 332.009887][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.116883][ T8188] veth0_macvtap: entered promiscuous mode [ 332.152887][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.153106][ T8188] veth1_macvtap: entered promiscuous mode [ 332.202890][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.276290][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.303273][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.334095][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.349142][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 332.355684][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.623113][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.633765][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.643675][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.654187][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.679285][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.690131][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.711804][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 332.721865][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.732888][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.740809][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.790591][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.834316][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.879626][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.913047][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.949187][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.959278][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.999470][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.010488][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.054918][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.078755][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.101780][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.108497][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.129912][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.138846][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.152026][ T5933] usb 8-1: USB disconnect, device number 9 [ 333.163032][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.203552][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.220356][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.227789][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.238092][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.253807][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.263862][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.283316][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.304763][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.312941][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.337420][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.371411][ T8188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.389000][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.401587][ T8188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.410596][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.417455][ T8188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.427968][ T8188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.438543][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.447568][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.460545][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.524995][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.550003][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.617556][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.662430][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 333.687062][ T8725] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 333.688659][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 333.694178][ T8725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 333.742417][ T6364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.767233][ T8725] vhci_hcd vhci_hcd.0: Device attached [ 333.768040][ T6364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.785734][ T10] usb 3-1: Product: syz [ 333.798581][ T10] usb 3-1: Manufacturer: syz [ 333.831992][ T8726] vhci_hcd: connection closed [ 333.839515][ T10] usb 3-1: SerialNumber: syz [ 333.859388][ T13] vhci_hcd: stop threads [ 333.865196][ T13] vhci_hcd: release socket [ 333.894256][ T10] usb 3-1: config 0 descriptor?? [ 333.901792][ T13] vhci_hcd: disconnect device [ 333.932627][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 333.952588][ T26] vhci_hcd: vhci_device speed not set [ 334.010995][ T6706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.275464][ T6706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.321135][ T5933] usb 3-1: USB disconnect, device number 5 [ 335.342872][ T5933] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 335.498066][ T8742] binder: 8741:8742 ioctl 5204 0 returned -22 [ 335.585074][ T8746] loop5: detected capacity change from 0 to 128 [ 335.682685][ T8746] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.795387][ T8746] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.329162][ T8045] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.891155][ T8783] input: syz1 as /devices/virtual/input/input11 [ 339.695461][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 339.901712][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 339.924056][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.955506][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.990154][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.051858][ T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.102998][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.109122][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 340.144357][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.193213][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.201567][ T26] usb 1-1: config 0 descriptor?? [ 340.301098][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.369536][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.425309][ T9] usb 3-1: Product: syz [ 340.477425][ T9] usb 3-1: Manufacturer: syz [ 340.531218][ T9] usb 3-1: SerialNumber: syz [ 340.838908][ T9] usb 3-1: 0:2 : does not exist [ 340.862155][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 340.890890][ T26] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 340.954603][ T9] usb 3-1: USB disconnect, device number 6 [ 341.003894][ T26] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 341.434131][ C1] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (kworker/u8:13) [ 341.663845][ T26] usb 1-1: USB disconnect, device number 9 [ 341.759966][ T6175] udevd[6175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.039197][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 342.099287][ T6941] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 342.928275][ T8868] xt_addrtype: ipv6 does not support BROADCAST matching [ 342.979601][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 342.989374][ T6941] usb 3-1: Using ep0 maxpacket: 32 [ 343.009988][ T6941] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 343.029141][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.037390][ T6941] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 343.063003][ T9] usb 5-1: config 0 descriptor?? [ 343.072471][ T6941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 343.097515][ T6941] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 343.123431][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 343.152309][ T6941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.190793][ T6941] usb 3-1: Product: syz [ 343.457185][ T6941] usb 3-1: Manufacturer: syz [ 343.476449][ T6941] usb 3-1: SerialNumber: syz [ 343.516946][ T6941] usb 3-1: config 0 descriptor?? [ 343.791762][ T6941] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 343.828221][ T6941] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 343.909532][ T6941] usb 3-1: USB disconnect, device number 7 [ 345.456468][ T9] usb 5-1: USB disconnect, device number 5 [ 345.648465][ T8893] loop0: detected capacity change from 0 to 256 [ 345.657590][ T8893] vfat: Unknown parameter 'shortnage' [ 346.318711][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 346.703182][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 346.711873][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.720861][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 346.740723][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.769137][ T9] usb 3-1: Product: syz [ 346.777148][ T9] usb 3-1: Manufacturer: syz [ 346.789625][ T9] usb 3-1: SerialNumber: syz [ 346.810436][ T9] usb 3-1: config 0 descriptor?? [ 346.815808][ T5926] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 347.019459][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 347.051977][ T5926] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.071437][ T5926] usb 1-1: config 0 has no interface number 0 [ 347.082365][ T8919] loop4: detected capacity change from 0 to 256 [ 347.105164][ T5926] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.135221][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.189528][ T5926] usb 1-1: Product: syz [ 347.193783][ T5926] usb 1-1: Manufacturer: syz [ 347.198414][ T5926] usb 1-1: SerialNumber: syz [ 347.244245][ T9] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 347.480985][ T5926] usb 1-1: config 0 descriptor?? [ 347.499627][ T5926] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.509498][ T9] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 347.576981][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 347.599185][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 347.692485][ T5926] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 347.742035][ T9] usb 3-1: USB disconnect, device number 8 [ 347.809228][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 347.835367][ T5926] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 347.885306][ T5891] usb 6-1: config 177 has an invalid descriptor of length 207, skipping remainder of the config [ 347.920498][ T5891] usb 6-1: config 177 has 0 interfaces, different from the descriptor's value: 9 [ 347.946451][ T5891] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 348.399277][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.414347][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 348.430665][ T10] usb 1-1: USB disconnect, device number 10 [ 348.609903][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 348.668376][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.689322][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.706439][ T8923] mmap: syz.5.740 (8923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 349.285029][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 349.344163][ T10] quatech2 1-1:0.51: device disconnected [ 349.364668][ T8943] loop4: detected capacity change from 0 to 256 [ 349.599331][ T5926] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 350.919149][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 351.924853][ T30] audit: type=1804 audit(1741886412.461:9): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.744" name="/newroot/8/file1/file0" dev="loop4" ino=1048691 res=1 errno=0 [ 352.337738][ T5926] usb 3-1: unable to read config index 0 descriptor/all [ 352.385165][ T5926] usb 3-1: can't read configurations, error -71 [ 353.111328][ T5891] usb 6-1: string descriptor 0 read error: -71 [ 353.128742][ T5891] usb 6-1: USB disconnect, device number 4 [ 353.519261][ T5926] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 354.561678][ T5926] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 354.583231][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 354.611021][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.710758][ T5926] usb 3-1: config 0 descriptor?? [ 354.751305][ T6706] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.720485][ T5926] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 355.727398][ T5926] elan 0003:04F3:0755.0005: item fetching failed at offset 3/5 [ 355.796441][ T6706] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.799637][ T5926] elan 0003:04F3:0755.0005: Hid Parse failed [ 355.879288][ T5926] elan 0003:04F3:0755.0005: probe with driver elan failed with error -22 [ 355.959425][ T6941] usb 3-1: USB disconnect, device number 10 [ 356.442460][ T6706] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.748993][ T6706] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.901645][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.914974][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.928725][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.939706][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.950925][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.959261][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.129975][ T9018] wlan0 speed is unknown, defaulting to 1000 [ 358.573529][ T6706] bridge_slave_1: left allmulticast mode [ 358.609266][ T6706] bridge_slave_1: left promiscuous mode [ 358.619268][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.983185][ T5844] Bluetooth: hci4: command tx timeout [ 359.276126][ T6706] bridge_slave_0: left allmulticast mode [ 359.319101][ T6706] bridge_slave_0: left promiscuous mode [ 359.324899][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.559476][ T6941] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 359.769201][ T6941] usb 3-1: Using ep0 maxpacket: 8 [ 359.811473][ T6941] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 359.830010][ T6941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.859457][ T6941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 359.914643][ T6941] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 359.934785][ T6941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.978017][ T6941] usb 3-1: config 0 descriptor?? [ 360.039247][ T5891] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 360.240568][ T5891] usb 8-1: Using ep0 maxpacket: 16 [ 360.277074][ T5891] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.339104][ T5891] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.377650][ T5891] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.715875][ T6941] usbhid 3-1:0.0: can't add hid device: -71 [ 360.725634][ T6941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 361.179357][ T5844] Bluetooth: hci4: command tx timeout [ 361.253354][ T6941] usb 3-1: USB disconnect, device number 11 [ 361.364913][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.380900][ T5891] usb 8-1: Product: syz [ 361.385163][ T5891] usb 8-1: Manufacturer: syz [ 361.391384][ T5891] usb 8-1: SerialNumber: syz [ 361.536486][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 361.594705][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.783'. [ 361.647520][ T9087] netlink: 36 bytes leftover after parsing attributes in process `syz.9.784'. [ 361.723137][ T5891] usb 8-1: 0:2 : does not exist [ 361.736592][ T5891] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 361.775591][ T5891] usb 8-1: USB disconnect, device number 10 [ 362.143055][ T6175] udevd[6175]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.283101][ T9101] siw: device registration error -23 [ 362.908612][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.938696][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.988612][ T6706] bond0 (unregistering): Released all slaves [ 363.220288][ T5844] Bluetooth: hci4: command tx timeout [ 364.895070][ T9018] chnl_net:caif_netlink_parms(): no params data found [ 365.066796][ T9130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.304485][ T5844] Bluetooth: hci4: command tx timeout [ 366.105236][ T9161] netlink: 'syz.5.805': attribute type 1 has an invalid length. [ 366.113326][ T9161] netlink: 224 bytes leftover after parsing attributes in process `syz.5.805'. [ 367.381435][ T9173] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 367.396690][ T6706] hsr_slave_0: left promiscuous mode [ 367.426872][ T6706] hsr_slave_1: left promiscuous mode [ 367.448760][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.490553][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.624813][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 367.690059][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.812'. [ 367.762758][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.782853][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.623348][ T6706] veth1_macvtap: left promiscuous mode [ 368.672432][ T6706] veth0_macvtap: left promiscuous mode [ 368.739625][ T6706] veth1_vlan: left promiscuous mode [ 368.744997][ T6706] veth0_vlan: left promiscuous mode [ 370.723009][ T6706] team0 (unregistering): Port device team_slave_1 removed [ 370.820012][ T6706] team0 (unregistering): Port device team_slave_0 removed [ 371.995368][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.002844][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.013317][ T9018] bridge_slave_0: entered allmulticast mode [ 372.022029][ T9018] bridge_slave_0: entered promiscuous mode [ 372.047364][ T9206] tipc: Enabling of bearer rejected, already enabled [ 372.148515][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.191328][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.198668][ T9018] bridge_slave_1: entered allmulticast mode [ 372.281820][ T9018] bridge_slave_1: entered promiscuous mode [ 372.561965][ T9018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.625418][ T9018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.801346][ T9018] team0: Port device team_slave_0 added [ 372.935455][ T9018] team0: Port device team_slave_1 added [ 374.200366][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.222279][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.363573][ T9018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.406834][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.463557][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.606284][ T9018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.645589][ T9265] tipc: Enabling of bearer rejected, already enabled [ 374.847695][ T9018] hsr_slave_0: entered promiscuous mode [ 374.885176][ T9018] hsr_slave_1: entered promiscuous mode [ 374.920080][ T9018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.988360][ T9018] Cannot create hsr debugfs directory [ 375.539361][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 375.713731][ T10] usb 6-1: device descriptor read/64, error -71 [ 376.187764][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 376.365606][ T10] usb 6-1: device descriptor read/64, error -71 [ 376.489684][ T10] usb usb6-port1: attempt power cycle [ 376.639320][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 376.789693][ T9] usb 1-1: device descriptor read/64, error -71 [ 376.861677][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 376.940850][ T10] usb 6-1: device descriptor read/8, error -71 [ 377.079329][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 377.179234][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 377.209808][ T10] usb 6-1: device descriptor read/8, error -71 [ 377.219181][ T9] usb 1-1: device descriptor read/64, error -71 [ 377.305447][ T9324] tipc: Started in network mode [ 377.325382][ T9324] tipc: Node identity 7f000001, cluster identity 4711 [ 377.349369][ T9] usb usb1-port1: attempt power cycle [ 377.355350][ T10] usb usb6-port1: unable to enumerate USB device [ 377.363955][ T9324] tipc: Enabled bearer , priority 10 [ 377.528375][ T9018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.560374][ T9018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.600693][ T9018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.628551][ T9018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.726502][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 377.760932][ T9] usb 1-1: device descriptor read/8, error -71 [ 377.897256][ T9018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.988545][ T9018] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.010756][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 378.059198][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.066522][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.087488][ T9] usb 1-1: device descriptor read/8, error -71 [ 378.102401][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.164372][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.171578][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.240244][ T9] usb usb1-port1: unable to enumerate USB device [ 378.369444][ T94] tipc: Node number set to 2130706433 [ 380.040057][ T9018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.099482][ T5891] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 380.228980][ T9018] veth0_vlan: entered promiscuous mode [ 380.256580][ T9018] veth1_vlan: entered promiscuous mode [ 380.285700][ T9390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.866'. [ 380.300576][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 380.341431][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.423249][ T9018] veth0_macvtap: entered promiscuous mode [ 380.431723][ T5891] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 380.470040][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.488638][ T9018] veth1_macvtap: entered promiscuous mode [ 380.513882][ T5891] usb 3-1: config 0 descriptor?? [ 380.558125][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.609340][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.629665][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.661966][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.683360][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.710929][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.729357][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.759136][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 380.765342][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 380.769250][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.784101][ T971] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 380.812653][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.824417][ T5891] usb 3-1: USB disconnect, device number 12 [ 380.839214][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.886251][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.931386][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.942681][ T971] usb 8-1: device descriptor read/64, error -71 [ 380.983147][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.013840][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.050158][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.100139][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.131188][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.179317][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.185017][ T971] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 381.225047][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.257673][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.279777][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.302386][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.571219][ T9018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.536183][ T971] usb 8-1: device descriptor read/64, error -71 [ 382.543804][ T9018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.553271][ T9018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.562126][ T9018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.229462][ T971] usb usb8-port1: attempt power cycle [ 383.386399][ T8263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.429245][ T8263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.582103][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.613519][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.622178][ T971] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 383.789955][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 383.807893][ T9445] netlink: 36 bytes leftover after parsing attributes in process `syz.7.880'. [ 383.863037][ T971] usb 8-1: device not accepting address 13, error -71 [ 383.984221][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.056303][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 384.123143][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 384.263163][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 384.641049][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.788474][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.804496][ T9] usb 3-1: Manufacturer: syz [ 384.815220][ T9] usb 3-1: config 0 descriptor?? [ 385.239518][ T9] rc_core: IR keymap rc-hauppauge not found [ 385.409674][ T9] Registered IR keymap rc-empty [ 386.062276][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 386.610639][ T6364] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 386.623728][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 386.749871][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 386.830725][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 386.950817][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.011579][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.075642][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.139306][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.322497][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.673335][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.869397][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 387.889592][ T9502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.895'. [ 387.903240][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 388.004964][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 388.039814][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 388.100571][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 388.149304][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 388.207801][ T9] usb 3-1: USB disconnect, device number 13 [ 390.835182][ T753] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 390.903339][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.5.911'. [ 391.173957][ T9558] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 392.639809][ T9586] binder: 9582:9586 ioctl 5204 0 returned -22 [ 394.060894][ T9609] netlink: 36 bytes leftover after parsing attributes in process `syz.9.926'. [ 394.407477][ T9617] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.929'. [ 394.599248][ T5472] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 394.811697][ T5472] usb 4-1: device descriptor read/64, error -71 [ 395.154793][ T5472] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 395.371564][ T5472] usb 4-1: device descriptor read/64, error -71 [ 395.495818][ T5472] usb usb4-port1: attempt power cycle [ 396.269153][ T5472] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 396.359134][ T5472] usb 4-1: device descriptor read/8, error -71 [ 396.792928][ T5472] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 396.842524][ T5472] usb 4-1: device descriptor read/8, error -71 [ 397.071993][ T5472] usb usb4-port1: unable to enumerate USB device [ 398.212049][ T9658] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 401.266921][ T971] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 401.417390][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.956'. [ 401.453645][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 401.712736][ T971] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 401.722129][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.730219][ T971] usb 1-1: Product: syz [ 401.734430][ T971] usb 1-1: Manufacturer: syz [ 401.739145][ T971] usb 1-1: SerialNumber: syz [ 401.745666][ T971] usb 1-1: config 0 descriptor?? [ 402.440351][ T971] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.647928][ T971] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 402.751967][ T971] usb 1-1: USB disconnect, device number 15 [ 405.423497][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.486583][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.518057][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.519133][ T52] tipc: Subscription rejected, illegal request [ 405.536824][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.609508][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.805863][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.817036][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.831103][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.846266][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.857942][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.890040][ T9758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.918047][ T9758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.459463][ T5933] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 407.676621][ T5933] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 407.720445][ T5933] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.808636][ T5933] usb 10-1: config 0 descriptor?? [ 408.410761][ T5933] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 408.447554][ T5891] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 408.484365][ T5933] elan 0003:04F3:0755.0006: item fetching failed at offset 3/5 [ 408.521857][ T5933] elan 0003:04F3:0755.0006: Hid Parse failed [ 408.533990][ T5933] elan 0003:04F3:0755.0006: probe with driver elan failed with error -22 [ 408.585977][ T971] usb 10-1: USB disconnect, device number 9 [ 408.659622][ T5891] usb 8-1: device descriptor read/64, error -71 [ 408.919656][ T5891] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 409.079446][ T5891] usb 8-1: device descriptor read/64, error -71 [ 409.195660][ T5891] usb usb8-port1: attempt power cycle [ 409.609127][ T5891] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 409.681734][ T5891] usb 8-1: device descriptor read/8, error -71 [ 409.815747][ T9821] loop0: detected capacity change from 0 to 256 [ 409.929550][ T5891] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 409.970126][ T5891] usb 8-1: device descriptor read/8, error -71 [ 410.269900][ T5933] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 410.289399][ T5891] usb usb8-port1: unable to enumerate USB device [ 410.587621][ T30] audit: type=1804 audit(1741886472.811:10): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.986" name="/newroot/101/file1/file0" dev="loop0" ino=1048716 res=1 errno=0 [ 410.657760][ T5933] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 410.851537][ T5933] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 411.081855][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 411.109427][ T5933] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 411.124872][ T5933] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 411.134272][ T5933] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.142393][ T5933] usb 10-1: Product: syz [ 411.149469][ T5933] usb 10-1: Manufacturer: syz [ 411.154209][ T5933] usb 10-1: SerialNumber: syz [ 411.169910][ T5933] usb 10-1: config 0 descriptor?? [ 411.806086][ T5933] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 412.021110][ T5891] usb 10-1: USB disconnect, device number 10 [ 412.714474][ T9838] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 413.020609][ T6878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.372934][ T6878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.920561][ T6878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.913685][ T6878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.067012][ T9904] tipc: Enabling of bearer rejected, already enabled [ 416.192818][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.207150][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.217031][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.226190][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.234475][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 416.352723][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.439172][ T26] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 416.839369][ T26] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.866451][ T9908] wlan0 speed is unknown, defaulting to 1000 [ 416.869873][ T6878] bridge_slave_1: left allmulticast mode [ 416.878151][ T6878] bridge_slave_1: left promiscuous mode [ 416.884082][ T26] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.354353][ T26] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 417.364920][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.379473][ T26] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.387629][ T26] usb 10-1: Product: syz [ 417.401275][ T6878] bridge_slave_0: left allmulticast mode [ 417.406993][ T6878] bridge_slave_0: left promiscuous mode [ 417.419475][ T26] usb 10-1: Manufacturer: syz [ 417.424511][ T26] usb 10-1: SerialNumber: syz [ 417.436112][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.445949][ T26] usb 10-1: config 0 descriptor?? [ 417.671383][ T9932] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 417.691500][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1008'. [ 417.709243][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1008'. [ 418.219303][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 418.370878][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 418.383655][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.398445][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 418.420311][ T5844] Bluetooth: hci2: command tx timeout [ 418.442451][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 418.452894][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.473485][ T10] usb 3-1: Product: syz [ 418.478882][ T10] usb 3-1: Manufacturer: syz [ 418.494088][ T10] usb 3-1: SerialNumber: syz [ 418.506751][ T10] usb 3-1: config 0 descriptor?? [ 418.847777][ T10] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 419.142742][ T10] usb 3-1: USB disconnect, device number 14 [ 420.499439][ T5844] Bluetooth: hci2: command tx timeout [ 420.942822][ T6878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.962310][ T6878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.988287][ T6878] bond0 (unregistering): Released all slaves [ 421.029942][ T9909] ip6gretap0: entered promiscuous mode [ 422.020934][ T9909] ip6gretap0: left promiscuous mode [ 422.669268][ T5844] Bluetooth: hci2: command tx timeout [ 422.679593][ T26] usb 10-1: USB disconnect, device number 11 [ 423.966361][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 424.252515][T10020] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 424.357676][T10026] loop5: detected capacity change from 0 to 128 [ 424.739296][ T5848] Bluetooth: hci2: command tx timeout [ 424.768454][T10026] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.081203][T10026] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.377775][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 425.549222][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 425.572189][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 425.599671][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.628105][ T5889] usb 4-1: Product: syz [ 425.660445][ T5889] usb 4-1: Manufacturer: syz [ 425.665123][ T5889] usb 4-1: SerialNumber: syz [ 425.747764][ T5889] usb 4-1: config 0 descriptor?? [ 426.483725][ T5889] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 426.623560][ T10] wlan0 speed is unknown, defaulting to 1000 [ 426.643771][ T8045] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.665697][ T10] infiniband syz2: ib_query_port failed (-19) [ 426.811807][ T5889] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 426.840133][ T5889] usb 4-1: USB disconnect, device number 19 [ 427.181976][ T6878] hsr_slave_0: left promiscuous mode [ 427.333241][ T6878] hsr_slave_1: left promiscuous mode [ 427.544220][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.810571][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.850037][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.893787][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.050689][ T6878] veth1_macvtap: left promiscuous mode [ 428.056297][ T6878] veth0_macvtap: left promiscuous mode [ 428.085517][ T6878] veth1_vlan: left promiscuous mode [ 428.096087][ T6878] veth0_vlan: left promiscuous mode [ 429.604286][T10084] loop7: detected capacity change from 0 to 256 [ 429.615103][T10083] loop3: detected capacity change from 0 to 128 [ 429.956611][T10083] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.048669][T10083] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.639170][ T30] audit: type=1804 audit(1741886492.861:11): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1045" name="/newroot/156/file1/file0" dev="loop7" ino=1048725 res=1 errno=0 [ 432.122839][ T6878] team0 (unregistering): Port device team_slave_1 removed [ 432.162887][ T6878] team0 (unregistering): Port device team_slave_0 removed [ 432.829984][ T9018] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.852317][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.876520][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.916365][ T9908] bridge_slave_0: entered allmulticast mode [ 432.940695][ T9908] bridge_slave_0: entered promiscuous mode [ 432.961242][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.968380][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.996643][ T9908] bridge_slave_1: entered allmulticast mode [ 433.032133][ T9908] bridge_slave_1: entered promiscuous mode [ 433.107992][T10111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.192130][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.242762][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.438350][ T9908] team0: Port device team_slave_0 added [ 433.461804][ T9908] team0: Port device team_slave_1 added [ 433.549338][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 434.830713][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 434.842785][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 434.892766][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.255298][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.264344][ T5889] usb 4-1: Product: syz [ 435.269459][ T5889] usb 4-1: Manufacturer: syz [ 435.274085][ T5889] usb 4-1: SerialNumber: syz [ 435.282215][ T5889] usb 4-1: config 0 descriptor?? [ 435.314156][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.449317][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.493573][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.530998][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.579178][ T5889] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.654911][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.829143][ T26] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 436.019370][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 436.029665][ T5889] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 436.052328][ T26] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.059456][ T5889] usb 4-1: USB disconnect, device number 20 [ 436.086678][ T26] usb 6-1: config 0 has no interface number 0 [ 436.789108][ T26] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 436.809047][ T26] usb 6-1: config 0 interface 1 has no altsetting 0 [ 436.816922][ T26] usb 6-1: string descriptor 0 read error: -71 [ 436.832590][ T26] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 436.841726][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.948682][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.959305][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.969481][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.977660][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.987901][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 436.996408][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.035292][ T26] usb 6-1: config 0 descriptor?? [ 437.060364][ T26] usb 6-1: can't set config #0, error -71 [ 438.167162][ T26] usb 6-1: USB disconnect, device number 9 [ 438.236073][ T9908] hsr_slave_0: entered promiscuous mode [ 438.267722][ T9908] hsr_slave_1: entered promiscuous mode [ 438.789526][T10151] team0 (unregistering): Port device team_slave_0 removed [ 438.818563][T10151] team0 (unregistering): Port device team_slave_1 removed [ 439.059701][ T5844] Bluetooth: hci3: command tx timeout [ 439.193801][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.276208][ T2954] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.442508][ T2954] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.551703][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.630774][ T2954] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.721859][ T753] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 440.914727][ T2954] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.144803][ T5844] Bluetooth: hci3: command tx timeout [ 441.709502][ T26] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 441.909351][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.929233][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.969027][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.024590][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.059827][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.113134][ T26] usb 4-1: config 0 descriptor?? [ 442.378657][T10143] chnl_net:caif_netlink_parms(): no params data found [ 442.480200][ T2954] bridge_slave_1: left allmulticast mode [ 442.506332][ T2954] bridge_slave_1: left promiscuous mode [ 442.527131][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.559751][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 442.570237][ T2954] bridge_slave_0: left allmulticast mode [ 442.575933][ T2954] bridge_slave_0: left promiscuous mode [ 442.576122][ T26] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 442.616966][ T26] usb 4-1: USB disconnect, device number 21 [ 442.638400][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.076506][T10247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.219889][ T5844] Bluetooth: hci3: command tx timeout [ 444.514195][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.528206][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.539455][ T2954] bond0 (unregistering): Released all slaves [ 444.959221][ T2954] tipc: Disabling bearer [ 444.970521][ T753] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 444.989200][ T2954] tipc: Left network mode [ 445.304418][ T5844] Bluetooth: hci3: command tx timeout [ 446.343415][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.372342][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.402782][T10143] bridge_slave_0: entered allmulticast mode [ 446.441553][T10143] bridge_slave_0: entered promiscuous mode [ 447.388539][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.419230][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.426538][T10143] bridge_slave_1: entered allmulticast mode [ 447.440712][T10143] bridge_slave_1: entered promiscuous mode [ 447.917406][ T2954] hsr_slave_0: left promiscuous mode [ 447.949619][ T2954] hsr_slave_1: left promiscuous mode [ 447.955494][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.989211][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.143053][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.164983][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.253043][ T2954] veth1_macvtap: left promiscuous mode [ 448.277017][ T2954] veth0_macvtap: left promiscuous mode [ 448.290305][ T2954] veth1_vlan: left promiscuous mode [ 448.305086][ T2954] veth0_vlan: left promiscuous mode [ 451.260277][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 451.300819][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 451.685976][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.707135][ T9908] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 451.739871][T10349] warning: `syz.5.1111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 452.269108][ T5926] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 452.414195][T10353] team0 (unregistering): Port device team_slave_0 removed [ 452.427285][T10353] team0 (unregistering): Port device team_slave_1 removed [ 452.447581][ T5926] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 452.459674][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.479604][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.498937][ T5926] usb 6-1: config 0 descriptor?? [ 452.510847][ T9908] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 452.563179][ T9908] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 452.873794][ T9908] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.999205][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 453.029996][T10143] team0: Port device team_slave_0 added [ 453.080644][T10143] team0: Port device team_slave_1 added [ 453.200976][ T10] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 453.210966][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.229439][ T5926] usbhid 6-1:0.0: can't add hid device: -71 [ 453.236493][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.249608][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 453.287017][ T5926] usb 6-1: USB disconnect, device number 10 [ 453.487451][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 453.496883][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.507399][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.516613][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 453.532671][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.538774][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.550422][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 453.614075][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 453.798714][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.085412][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 454.139291][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 454.207628][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.232738][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.234274][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.286062][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 454.296058][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 454.304850][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.316505][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 454.326242][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 454.351264][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.380654][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 454.409231][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 454.457786][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.482437][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.524796][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.551378][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 454.576915][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 454.596183][ T10] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 454.615992][ T10] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 454.641260][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.662457][ T10] usb 10-1: Product: syz [ 454.672591][ T10] usb 10-1: Manufacturer: syz [ 454.677352][ T10] usb 10-1: SerialNumber: syz [ 454.725775][ T10] usb 10-1: config 0 descriptor?? [ 454.757852][ T10] yurex 10-1:0.0: Could not find endpoints [ 454.954699][T10143] hsr_slave_0: entered promiscuous mode [ 454.984804][ T5891] usb 10-1: USB disconnect, device number 12 [ 454.994478][T10143] hsr_slave_1: entered promiscuous mode [ 455.019720][T10143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.048559][T10143] Cannot create hsr debugfs directory [ 457.081913][T10432] loop3: detected capacity change from 0 to 256 [ 457.153903][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.631857][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.396529][T10449] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1136'. [ 458.985300][ T30] audit: type=1804 audit(1741886521.261:12): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1131" name="/newroot/44/file1/file0" dev="loop3" ino=1048734 res=1 errno=0 [ 459.017368][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1136'. [ 459.381373][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.388540][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.457447][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.464739][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.580700][T10456] netlink: 'syz.5.1137': attribute type 1 has an invalid length. [ 459.588545][T10456] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1137'. [ 460.102567][ T5844] Bluetooth: Wrong link type (-57) [ 461.989549][ T6364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.359900][ T5891] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 463.159636][ T6364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.299493][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 463.324559][ T5891] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 463.333345][ T5891] usb 6-1: config 0 has no interface number 0 [ 463.353550][ T5891] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 463.368339][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.382509][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.389243][ T5891] usb 6-1: Product: syz [ 463.393959][ T5891] usb 6-1: Manufacturer: syz [ 463.394748][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.398571][ T5891] usb 6-1: SerialNumber: syz [ 463.413850][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.443775][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.451610][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 463.456677][ T5891] usb 6-1: config 0 descriptor?? [ 463.464839][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 463.473699][ T6364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.491600][T10513] loop2: detected capacity change from 0 to 256 [ 463.518395][ T5891] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 463.550473][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.767205][ T6364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.966290][T10518] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 464.149429][ T5891] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 464.167114][ T5891] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 464.519763][ T30] audit: type=1804 audit(1741886526.681:13): pid=10526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1149" name="/newroot/140/file1/file0" dev="loop2" ino=1048743 res=1 errno=0 [ 464.912825][T10532] netlink: 'syz.9.1152': attribute type 12 has an invalid length. [ 464.956131][T10532] netlink: 'syz.9.1152': attribute type 29 has an invalid length. [ 464.960339][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 464.972825][ T5926] usb 6-1: USB disconnect, device number 11 [ 464.979587][T10532] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1152'. [ 465.000030][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 465.019215][T10143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 465.049740][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 465.103407][ T5926] quatech2 6-1:0.51: device disconnected [ 465.106721][T10143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 465.134918][T10143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 465.284371][T10143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 465.506078][T10547] netlink: 'syz.9.1154': attribute type 1 has an invalid length. [ 465.514331][T10547] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1154'. [ 465.559872][ T5848] Bluetooth: hci4: command tx timeout [ 466.140797][ T6364] bridge_slave_1: left allmulticast mode [ 466.146498][ T6364] bridge_slave_1: left promiscuous mode [ 466.153207][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.163622][ T6364] bridge_slave_0: left allmulticast mode [ 466.169744][ T6364] bridge_slave_0: left promiscuous mode [ 466.175579][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.320530][ T5848] Bluetooth: Wrong link type (-57) [ 467.600449][T10567] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 467.659227][ T5848] Bluetooth: hci4: command tx timeout [ 468.264069][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.284165][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.294268][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.306493][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.318303][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 468.327842][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.363315][ T6364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.388944][ T6364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.403314][ T6364] bond0 (unregistering): Released all slaves [ 468.455444][T10510] chnl_net:caif_netlink_parms(): no params data found [ 468.546873][ T9908] veth0_vlan: entered promiscuous mode [ 468.667155][T10592] netlink: 'syz.9.1163': attribute type 12 has an invalid length. [ 468.680451][T10592] netlink: 'syz.9.1163': attribute type 29 has an invalid length. [ 468.688432][T10592] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1163'. [ 468.725570][ T9908] veth1_vlan: entered promiscuous mode [ 469.585617][T10143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.596827][T10600] wlan0 speed is unknown, defaulting to 1000 [ 469.606350][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.636437][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.645333][T10510] bridge_slave_0: entered allmulticast mode [ 469.653144][T10510] bridge_slave_0: entered promiscuous mode [ 469.682291][T10600] wlan0 speed is unknown, defaulting to 1000 [ 469.693725][ T6364] hsr_slave_0: left promiscuous mode [ 469.700486][ T6364] hsr_slave_1: left promiscuous mode [ 469.702795][ T5844] Bluetooth: hci4: command tx timeout [ 469.706437][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.725823][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.734442][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.742331][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.759145][ T6364] veth1_macvtap: left promiscuous mode [ 469.764974][ T6364] veth0_macvtap: left promiscuous mode [ 469.770934][ T6364] veth1_vlan: left promiscuous mode [ 469.776561][ T6364] veth0_vlan: left promiscuous mode [ 470.428503][ T5844] Bluetooth: hci0: command tx timeout [ 470.680493][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.687676][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.697561][T10510] bridge_slave_1: entered allmulticast mode [ 470.711333][T10510] bridge_slave_1: entered promiscuous mode [ 470.785471][T10600] wlan0 speed is unknown, defaulting to 1000 [ 470.824254][T10600] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 470.911523][T10510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.924976][T10600] wlan0 speed is unknown, defaulting to 1000 [ 470.934624][T10510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.974730][T10143] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.983316][T10600] wlan0 speed is unknown, defaulting to 1000 [ 471.020086][T10600] wlan0 speed is unknown, defaulting to 1000 [ 471.072346][T10510] team0: Port device team_slave_0 added [ 471.086342][T10600] wlan0 speed is unknown, defaulting to 1000 [ 471.102751][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.109877][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.124050][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.131188][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.176934][T10510] team0: Port device team_slave_1 added [ 471.195102][T10600] wlan0 speed is unknown, defaulting to 1000 [ 471.222256][ T9908] veth0_macvtap: entered promiscuous mode [ 471.257477][T10600] wlan0 speed is unknown, defaulting to 1000 [ 471.288216][ T9908] veth1_macvtap: entered promiscuous mode [ 471.316399][T10600] wlan0 speed is unknown, defaulting to 1000 [ 471.318899][T10510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.336095][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.368236][T10510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.407177][T10600] wlan0 speed is unknown, defaulting to 1000 [ 471.415557][T10510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.453617][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.481129][T10510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.507583][T10582] chnl_net:caif_netlink_parms(): no params data found [ 471.571882][T10510] hsr_slave_0: entered promiscuous mode [ 471.579665][T10510] hsr_slave_1: entered promiscuous mode [ 471.586010][T10510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.594697][T10510] Cannot create hsr debugfs directory [ 471.643079][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.654132][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.664269][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.674831][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.684770][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.695365][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.710380][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.776062][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.787214][ T5844] Bluetooth: hci4: command tx timeout [ 471.805191][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.818539][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.832777][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.843002][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.853571][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.864841][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.905545][ T9908] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.914685][ T9908] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.926572][ T9908] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.936731][ T9908] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.995927][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.003311][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.028183][T10582] bridge_slave_0: entered allmulticast mode [ 472.044697][T10582] bridge_slave_0: entered promiscuous mode [ 472.056746][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.064295][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.072624][T10582] bridge_slave_1: entered allmulticast mode [ 472.080701][T10582] bridge_slave_1: entered promiscuous mode [ 472.135230][ T6364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.211851][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.225831][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.285591][ T6364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.319119][ T5891] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 472.337582][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.356709][T10582] team0: Port device team_slave_0 added [ 472.365252][T10582] team0: Port device team_slave_1 added [ 472.457163][ T6364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.489415][ T5891] usb 10-1: Using ep0 maxpacket: 32 [ 472.499626][ T5844] Bluetooth: hci0: command tx timeout [ 472.501940][ T5891] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 472.532982][ T5891] usb 10-1: config 0 has no interface number 0 [ 472.546163][ T5891] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 472.556479][ T5891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.580955][ T5891] usb 10-1: Product: syz [ 472.594100][ T6364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.605377][ T5891] usb 10-1: Manufacturer: syz [ 472.610406][ T5891] usb 10-1: SerialNumber: syz [ 472.623393][ T5891] usb 10-1: config 0 descriptor?? [ 472.641298][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.654899][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.683078][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.684973][ T5891] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 472.851310][ T5891] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 472.887644][ T5891] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 472.999897][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.006879][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.044255][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.271950][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 473.282245][ T5933] usb 10-1: USB disconnect, device number 13 [ 473.301538][ T5933] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 473.344817][ T5933] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 473.367237][ T5933] quatech2 10-1:0.51: device disconnected [ 473.374081][ T5844] Bluetooth: Wrong link type (-57) [ 473.392804][T10582] hsr_slave_0: entered promiscuous mode [ 473.399548][T10582] hsr_slave_1: entered promiscuous mode [ 473.406530][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.416353][T10582] Cannot create hsr debugfs directory [ 473.512871][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.556826][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.716987][ T6364] bridge_slave_1: left allmulticast mode [ 473.725690][ T6364] bridge_slave_1: left promiscuous mode [ 473.732143][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.762990][ T6364] bridge_slave_0: left allmulticast mode [ 473.768714][ T6364] bridge_slave_0: left promiscuous mode [ 473.780389][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.199357][T10628] loop9: detected capacity change from 0 to 32768 [ 474.376418][T10628] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 474.396630][T10628] bcachefs (loop9): recovering from clean shutdown, journal seq 10 [ 474.405589][T10628] bcachefs (loop9): Version upgrade required: [ 474.405589][T10628] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 474.405589][T10628] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 474.405589][T10628] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 474.476726][T10628] bcachefs (loop9): dropping and reconstructing all alloc info [ 474.520285][T10628] bcachefs (loop9): accounting_read... done [ 474.544785][T10628] bcachefs (loop9): alloc_read... done [ 474.550467][T10628] bcachefs (loop9): stripes_read... done [ 474.559396][T10628] bcachefs (loop9): snapshots_read... done [ 474.569786][T10628] bcachefs (loop9): done starting filesystem [ 474.582289][ T5844] Bluetooth: hci0: command tx timeout [ 474.666481][ T30] audit: type=1800 audit(1741886537.071:14): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1171" name="file1" dev="loop9" ino=536870912 res=0 errno=0 [ 474.712927][T10628] syz.9.1171 (10628) used greatest stack depth: 17664 bytes left [ 474.787456][ T6442] bcachefs (loop9): shutting down [ 474.818510][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 474.860069][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 474.870445][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 474.880335][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 474.888388][ T5848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 474.890753][ T6442] bcachefs (loop9): shutdown complete [ 474.898349][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 475.127545][ T6364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.138803][ T6364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.152418][ T6364] bond0 (unregistering): Released all slaves [ 475.202706][T10638] netlink: 'syz.5.1172': attribute type 12 has an invalid length. [ 475.211438][T10638] netlink: 'syz.5.1172': attribute type 29 has an invalid length. [ 475.236027][T10638] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1172'. [ 475.288861][T10143] veth0_vlan: entered promiscuous mode [ 475.335814][T10143] veth1_vlan: entered promiscuous mode [ 475.389975][ T6364] tipc: Disabling bearer [ 475.415858][ T6364] tipc: Left network mode [ 475.561020][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1174'. [ 475.588914][T10639] wlan0 speed is unknown, defaulting to 1000 [ 475.607871][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1174'. [ 475.673122][T10642] ip6gretap0: entered promiscuous mode [ 475.690573][T10642] ip6gretap0: left promiscuous mode [ 475.822490][T10510] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 475.835363][T10143] veth0_macvtap: entered promiscuous mode [ 475.860634][T10510] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 475.885601][T10510] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 475.904611][T10510] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 475.954605][T10143] veth1_macvtap: entered promiscuous mode [ 476.253785][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.271445][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.282179][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.293267][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.304647][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.329105][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.340665][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.351850][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.370610][T10143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.434986][T10639] chnl_net:caif_netlink_parms(): no params data found [ 476.485090][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.504647][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.516588][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.528068][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.540753][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.551654][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.562102][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.572956][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.585394][T10143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.616683][ T6364] hsr_slave_0: left promiscuous mode [ 476.640685][ T6364] hsr_slave_1: left promiscuous mode [ 476.651227][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.662237][ T5848] Bluetooth: hci0: command tx timeout [ 476.665086][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.685827][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.693745][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.736796][ T6364] veth1_macvtap: left promiscuous mode [ 476.755342][ T6364] veth0_macvtap: left promiscuous mode [ 476.766667][ T6364] veth1_vlan: left promiscuous mode [ 476.778404][ T6364] veth0_vlan: left promiscuous mode [ 476.998484][ T5848] Bluetooth: hci6: command tx timeout [ 477.741960][ T6364] team0 (unregistering): Port device team_slave_1 removed [ 477.802706][ T6364] team0 (unregistering): Port device team_slave_0 removed [ 478.536929][T10143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.558877][T10143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.570268][T10143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.595102][T10143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.745876][T10510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.894044][T10639] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.901343][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.908540][T10639] bridge_slave_0: entered allmulticast mode [ 478.916457][T10639] bridge_slave_0: entered promiscuous mode [ 478.960082][T10510] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.970467][T10639] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.001071][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.008403][T10639] bridge_slave_1: entered allmulticast mode [ 479.016047][T10639] bridge_slave_1: entered promiscuous mode [ 479.050543][ T26] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 479.059354][ T5848] Bluetooth: hci6: command tx timeout [ 479.070165][T10582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.144799][T10582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.169548][T10582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.195699][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.202842][ T8195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.212374][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.219505][ T8195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.229441][ T26] usb 10-1: Using ep0 maxpacket: 32 [ 479.240166][ T26] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.260214][ T26] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.261570][T10639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.270215][ T26] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 479.292506][T10639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.308629][ T26] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 479.320364][ T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.320421][T10582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.343706][ T26] usb 10-1: config 0 descriptor?? [ 479.363328][ T8195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.380659][ T8195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.446792][T10639] team0: Port device team_slave_0 added [ 479.466750][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.475058][T10639] team0: Port device team_slave_1 added [ 479.481244][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.540187][T10639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.547759][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.574563][T10639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.608289][T10639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.618162][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.644833][T10639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.774092][ T26] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0007/input/input13 [ 479.813199][ T6364] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.863937][ T26] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0007/input/input14 [ 479.886985][T10639] hsr_slave_0: entered promiscuous mode [ 479.901098][T10639] hsr_slave_1: entered promiscuous mode [ 479.916415][T10639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.928139][ T26] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0 [ 479.932811][T10639] Cannot create hsr debugfs directory [ 480.007363][ T26] usb 10-1: USB disconnect, device number 14 [ 480.091966][ T6364] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.241657][T10665] team0 (unregistering): Port device team_slave_0 removed [ 480.256004][T10665] team0 (unregistering): Port device team_slave_1 removed [ 480.307292][T10668] vlan2: entered promiscuous mode [ 480.351900][ T6364] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.468701][ T5848] Bluetooth: Wrong link type (-57) [ 480.553837][ T6364] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.732565][T10675] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1181'. [ 481.166237][ T5848] Bluetooth: hci6: command tx timeout [ 481.540862][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.596460][T10682] tipc: Started in network mode [ 481.604116][T10682] tipc: Node identity 6, cluster identity 4711 [ 481.611464][T10682] tipc: Node number set to 6 [ 481.722380][T10510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.833665][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.872611][ T6364] bridge_slave_1: left allmulticast mode [ 481.899860][ T6364] bridge_slave_1: left promiscuous mode [ 481.913888][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.936778][ T6364] bridge_slave_0: left allmulticast mode [ 481.951016][ T6364] bridge_slave_0: left promiscuous mode [ 481.956770][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.659437][ T30] audit: type=1326 audit(1741886545.051:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10692 comm="syz.1.1186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a9078d169 code=0x0 [ 483.286367][ T5848] Bluetooth: hci6: command tx timeout [ 483.418606][ T6364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.440721][ T6364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.462541][ T6364] bond0 (unregistering): Released all slaves [ 483.542496][T10678] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 483.585973][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.593157][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.626426][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.633649][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.018737][T10510] veth0_vlan: entered promiscuous mode [ 484.060301][ T6364] hsr_slave_0: left promiscuous mode [ 484.070500][ T6364] hsr_slave_1: left promiscuous mode [ 484.078489][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.097070][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.122715][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.139200][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.139336][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 484.221218][ T6364] veth1_macvtap: left promiscuous mode [ 484.226961][ T6364] veth0_macvtap: left promiscuous mode [ 484.242040][ T6364] veth1_vlan: left promiscuous mode [ 484.247589][ T6364] veth0_vlan: left promiscuous mode [ 484.492092][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 484.544545][ T26] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 484.558408][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.577702][T10711] xt_addrtype: ipv6 does not support BROADCAST matching [ 484.594741][ T26] usb 2-1: Product: syz [ 484.599569][ T26] usb 2-1: Manufacturer: syz [ 484.605212][ T26] usb 2-1: SerialNumber: syz [ 485.175747][ T26] usb 2-1: config 0 descriptor?? [ 485.499987][T10714] loop9: detected capacity change from 0 to 32768 [ 485.507414][T10714] bcachefs: bch2_parse_one_mount_opt() Invalid mount option invalid compression typecompression: parse error [ 485.534669][ T26] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 485.941333][T10716] loop5: detected capacity change from 0 to 32768 [ 486.031397][ T26] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 486.051797][T10716] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1192 (10716) [ 486.080986][ T26] usb 2-1: USB disconnect, device number 13 [ 486.217029][T10718] loop9: detected capacity change from 0 to 40427 [ 486.229894][T10718] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1fffff [ 486.247093][T10718] F2FS-fs (loop9): invalid crc value [ 486.249310][T10716] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 486.263050][T10716] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 486.273312][T10716] BTRFS info (device loop5): using free-space-tree [ 486.293458][T10718] F2FS-fs (loop9): Found nat_bits in checkpoint [ 486.365420][T10718] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 486.419508][T10716] BTRFS info (device loop5): rebuilding free space tree [ 486.448160][T10716] BTRFS info (device loop5): checking UUID tree [ 486.457508][ T52] BTRFS warning (device loop5): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x9039c3f5345ef9e67cf1f8646e03c0fda20ebff6138c6e95d684ac1447fa442a level 0 [ 486.483335][T10716] BTRFS: error (device loop5) in btrfs_fill_super:981: errno=-5 IO failure [ 486.493455][T10716] BTRFS error (device loop5 state E): commit super ret -30 [ 486.537612][T10718] syz.9.1193: attempt to access beyond end of device [ 486.537612][T10718] loop9: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 486.564352][T10718] F2FS-fs (loop9): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x12ed/0x1bd0 [ 486.576929][T10718] syz.9.1193: attempt to access beyond end of device [ 486.576929][T10718] loop9: rw=2049, sector=45192, nr_sectors = 40 limit=40427 [ 486.593291][T10718] F2FS-fs (loop9): Stopped filesystem due to reason: 1 [ 486.600293][T10718] syz.9.1193: attempt to access beyond end of device [ 486.600293][T10718] loop9: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 486.902881][ T5848] Bluetooth: Wrong link type (-57) [ 487.552789][ T30] audit: type=1326 audit(1741886549.881:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.5.1196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f806ed8d169 code=0x0 [ 488.399839][ T6364] team0 (unregistering): Port device team_slave_1 removed [ 488.699889][ T6364] team0 (unregistering): Port device team_slave_0 removed [ 489.432607][T10761] loop1: detected capacity change from 0 to 32768 [ 489.440295][T10761] btrfs: Deprecated parameter 'usebackuproot' [ 489.446409][T10761] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 489.459946][T10761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1202 (10761) [ 489.480652][T10761] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 489.490979][T10761] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 489.499985][T10761] BTRFS info (device loop1): using free-space-tree [ 489.657843][T10761] BTRFS info (device loop1): rebuilding free space tree [ 490.199510][T10143] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 490.547668][T10510] veth1_vlan: entered promiscuous mode [ 490.716432][T10753] wlan0 speed is unknown, defaulting to 1000 [ 490.800956][T10639] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 490.834991][T10639] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 490.941585][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.017675][T10510] veth0_macvtap: entered promiscuous mode [ 491.069240][T10639] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 491.091835][ T5848] Bluetooth: Wrong link type (-57) [ 491.132035][T10639] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 491.302374][T10510] veth1_macvtap: entered promiscuous mode [ 491.413741][T10510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.469177][T10510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.503069][T10510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.533863][T10510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.589078][T10510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.638995][T10510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.673239][T10510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.925859][T10510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.969749][T10510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.009244][T10510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.038449][T10510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.056135][T10510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.087683][T10510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.102300][T10510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.193537][T10510] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.209107][T10510] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.218333][T10510] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.228091][T10510] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.237518][T10639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.372374][T10582] veth0_vlan: entered promiscuous mode [ 493.579779][T10815] loop9: detected capacity change from 0 to 2048 [ 493.628262][T10815] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 493.718313][T10816] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.090803][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.109999][T10582] veth1_vlan: entered promiscuous mode [ 494.123891][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.230063][T10582] veth0_macvtap: entered promiscuous mode [ 494.269479][T10639] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.311715][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.324832][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.372861][T10582] veth1_macvtap: entered promiscuous mode [ 494.410052][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.417240][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.446329][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.453586][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.546146][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.567557][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.603650][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.657459][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.699355][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.721313][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.750532][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.768892][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.798536][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.856777][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.877400][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.945763][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.975845][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.021630][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.052496][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.072207][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.088254][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.116815][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.134145][T10832] xt_addrtype: ipv6 does not support BROADCAST matching [ 495.209855][T10582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.218585][T10582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.239058][ T5848] Bluetooth: Wrong link type (-57) [ 495.293567][T10582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.315901][T10582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.649768][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.675786][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.700425][ T5891] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 495.958254][ T5891] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.354700][T10849] siw: device registration error -23 [ 496.511125][ T5891] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 496.574669][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.857736][ T5891] usb 10-1: config 0 descriptor?? [ 496.880173][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 496.907646][ T8195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.960995][ T8195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.165422][T10639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.337637][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 497.366891][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 497.389957][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 497.409106][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 497.440056][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 497.452488][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 497.481823][ T5891] pwc: recv_control_msg error -32 req 02 val 2000 [ 497.679495][ T5891] pwc: recv_control_msg error -32 req 02 val 2100 [ 497.925521][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 497.957448][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 498.456046][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 498.484715][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 498.529124][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 498.578045][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 498.622196][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 498.689401][ T5891] pwc: Registered as video103. [ 498.695482][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input15 [ 498.819298][ T5891] usb 10-1: USB disconnect, device number 15 [ 499.163531][T10639] veth0_vlan: entered promiscuous mode [ 499.277966][T10639] veth1_vlan: entered promiscuous mode [ 499.438565][T10905] loop1: detected capacity change from 0 to 128 [ 499.459770][T10639] veth0_macvtap: entered promiscuous mode [ 499.483379][T10905] udf: Unknown parameter 'ÿ184467440737095516150177777777777777777777701777777777777777777777ÿ01777777777777777777777' [ 499.498013][T10639] veth1_macvtap: entered promiscuous mode [ 499.579621][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.609833][T10895] xt_addrtype: ipv6 does not support BROADCAST matching [ 499.673916][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.729581][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.778712][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.820686][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.863301][T10890] loop1: detected capacity change from 0 to 1024 [ 499.887843][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.983768][T10890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 500.259101][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.293451][T10890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 500.553633][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.579186][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.639996][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.711140][T10639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.754379][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.839210][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.867130][T10890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.889041][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.933596][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.982067][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.982932][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.999985][T10890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.027380][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.514259][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.571120][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.645738][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.699891][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.737080][T10639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.829850][T10639] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.838638][T10639] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.888802][T10898] loop9: detected capacity change from 0 to 40427 [ 501.909116][T10639] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.011943][T10898] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1fffff [ 502.062587][T10639] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.107786][T10898] F2FS-fs (loop9): invalid crc value [ 502.162125][T10898] F2FS-fs (loop9): Failed to start F2FS issue_checkpoint_thread (-4) [ 502.969344][ T5891] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 503.229463][ T5891] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 503.277650][ T6364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.277710][ T5891] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.288231][T10958] netlink: 'syz.8.1246': attribute type 10 has an invalid length. [ 503.318718][ T6364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.349156][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.366485][T10960] loop8: detected capacity change from 0 to 128 [ 503.373130][ T5889] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 503.389137][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 503.406224][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.433665][ T5891] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.479153][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.493258][T10960] VFS: Found a Xenix FS (block size = 1024) on device loop8 [ 503.511708][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 503.558388][T10958] ipvlan1: entered promiscuous mode [ 503.559156][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.591795][ T5891] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.601570][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.606802][T10960] Bad inode number on dev loop8: 2 is out of range [ 503.613271][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 503.641320][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.648303][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.649403][ T5891] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.679086][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.689147][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.691154][T10958] batman_adv: batadv0: Adding interface: ipvlan1 [ 503.715631][ T5889] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 503.724802][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 503.724843][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.725004][T10960] SysV FS: get root inode failed [ 503.725019][T10960] oldfs: cannot read superblock [ 503.780192][ T5891] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.789495][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.804629][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.816312][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 503.826297][T10958] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.865091][ T5889] usb 2-1: config 0 descriptor?? [ 503.869333][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.907054][ T5891] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 503.917440][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 503.929018][T10960] ------------[ cut here ]------------ [ 503.934969][T10960] VFS: brelse: Trying to free free buffer [ 503.941016][T10960] WARNING: CPU: 1 PID: 10960 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0 [ 503.950022][T10960] Modules linked in: [ 503.953958][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.8.1246 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 503.964768][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 503.974871][T10960] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 503.980655][T10960] Code: 44 7a db ff f0 ff 0b eb 25 e8 da 31 74 ff 41 80 3c 2e 00 75 2a eb 30 e8 cc 31 74 ff 90 48 c7 c7 e0 70 39 8c e8 6f ee 33 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 504.000342][T10960] RSP: 0018:ffffc9000471fa28 EFLAGS: 00010046 [ 504.006474][T10960] RAX: 79d6ff107b9df300 RBX: ffff88807a6d1d10 RCX: 0000000000080000 [ 504.014579][T10960] RDX: ffffc9001e310000 RSI: 000000000007ffff RDI: 0000000000080000 [ 504.022601][T10960] RBP: 0000000000000000 R08: ffffffff81819e52 R09: 1ffff110170e519a [ 504.030618][T10960] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b87398d8 [ 504.038638][T10960] R13: 0000000000000010 R14: 1ffff110170e731d R15: ffff8880b87398e8 [ 504.046669][T10960] FS: 00007f49ace3a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 504.055650][T10960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.062286][T10960] CR2: 00007fb84150a991 CR3: 0000000020bb0000 CR4: 0000000000350ef0 [ 504.070308][T10960] Call Trace: [ 504.073621][T10960] [ 504.076587][T10960] ? __warn+0x165/0x4d0 [ 504.080812][T10960] ? invalidate_bh_lru+0x102/0x1b0 [ 504.085978][T10960] ? report_bug+0x2b3/0x500 [ 504.090554][T10960] ? invalidate_bh_lru+0x102/0x1b0 [ 504.095729][T10960] ? handle_bug+0x60/0x90 [ 504.100080][T10960] ? exc_invalid_op+0x1a/0x50 [ 504.104782][T10960] ? asm_exc_invalid_op+0x1a/0x20 [ 504.109853][T10960] ? __warn_printk+0x292/0x360 [ 504.114647][T10960] ? invalidate_bh_lru+0x102/0x1b0 [ 504.119798][T10960] ? invalidate_bh_lru+0x101/0x1b0 [ 504.125029][T10960] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 504.130562][T10960] smp_call_function_many_cond+0x1703/0x2d30 [ 504.136579][T10960] ? __pfx_has_bh_in_lru+0x10/0x10 [ 504.141728][T10960] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 504.147244][T10960] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 504.153647][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.159312][T10960] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 504.164809][T10960] ? __pfx_has_bh_in_lru+0x10/0x10 [ 504.169952][T10960] on_each_cpu_cond_mask+0x3f/0x80 [ 504.175087][T10960] blkdev_flush_mapping+0xfe/0x270 [ 504.180231][T10960] ? bdev_release+0x456/0x700 [ 504.184953][T10960] bdev_release+0x460/0x700 [ 504.189504][T10960] blkdev_release+0x15/0x20 [ 504.194028][T10960] ? __pfx_blkdev_release+0x10/0x10 [ 504.199249][T10960] __fput+0x3eb/0x9f0 [ 504.203273][T10960] task_work_run+0x251/0x310 [ 504.207892][T10960] ? __pfx_task_work_run+0x10/0x10 [ 504.213032][T10960] ? syscall_exit_to_user_mode+0xa3/0x340 [ 504.218819][T10960] syscall_exit_to_user_mode+0x13f/0x340 [ 504.224515][T10960] do_syscall_64+0x100/0x230 [ 504.229139][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.235070][T10960] RIP: 0033:0x7f49abf8e90a [ 504.239513][T10960] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.259154][T10960] RSP: 002b:00007f49ace39e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 504.267598][T10960] RAX: ffffffffffffffea RBX: 00007f49ace39ef0 RCX: 00007f49abf8e90a [ 504.275598][T10960] RDX: 0000400000000000 RSI: 0000400000000100 RDI: 00007f49ace39eb0 [ 504.283592][T10960] RBP: 0000400000000000 R08: 00007f49ace39ef0 R09: 0000000002000412 [ 504.291594][T10960] R10: 0000000002000412 R11: 0000000000000246 R12: 0000400000000100 [ 504.299594][T10960] R13: 00007f49ace39eb0 R14: 0000000000009eb9 R15: 0000400000000400 [ 504.307605][T10960] [ 504.310759][T10960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 504.318053][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.8.1246 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 504.329480][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.339564][T10960] Call Trace: [ 504.342856][T10960] [ 504.345796][T10960] dump_stack_lvl+0x241/0x360 [ 504.350554][T10960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.355773][T10960] ? __pfx__printk+0x10/0x10 [ 504.360373][T10960] ? _printk+0xd5/0x120 [ 504.364557][T10960] ? __init_begin+0x41000/0x41000 [ 504.369613][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.375278][T10960] ? vscnprintf+0x5d/0x90 [ 504.379634][T10960] panic+0x349/0x880 [ 504.383542][T10960] ? __warn+0x174/0x4d0 [ 504.387762][T10960] ? __pfx_panic+0x10/0x10 [ 504.392215][T10960] __warn+0x344/0x4d0 [ 504.396241][T10960] ? invalidate_bh_lru+0x102/0x1b0 [ 504.401392][T10960] report_bug+0x2b3/0x500 [ 504.405757][T10960] ? invalidate_bh_lru+0x102/0x1b0 [ 504.410911][T10960] handle_bug+0x60/0x90 [ 504.415081][T10960] exc_invalid_op+0x1a/0x50 [ 504.419605][T10960] asm_exc_invalid_op+0x1a/0x20 [ 504.424490][T10960] RIP: 0010:invalidate_bh_lru+0x102/0x1b0 [ 504.430252][T10960] Code: 44 7a db ff f0 ff 0b eb 25 e8 da 31 74 ff 41 80 3c 2e 00 75 2a eb 30 e8 cc 31 74 ff 90 48 c7 c7 e0 70 39 8c e8 6f ee 33 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c [ 504.449890][T10960] RSP: 0018:ffffc9000471fa28 EFLAGS: 00010046 [ 504.456001][T10960] RAX: 79d6ff107b9df300 RBX: ffff88807a6d1d10 RCX: 0000000000080000 [ 504.464002][T10960] RDX: ffffc9001e310000 RSI: 000000000007ffff RDI: 0000000000080000 [ 504.472002][T10960] RBP: 0000000000000000 R08: ffffffff81819e52 R09: 1ffff110170e519a [ 504.480004][T10960] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880b87398d8 [ 504.488050][T10960] R13: 0000000000000010 R14: 1ffff110170e731d R15: ffff8880b87398e8 [ 504.496065][T10960] ? __warn_printk+0x292/0x360 [ 504.501038][T10960] ? invalidate_bh_lru+0x101/0x1b0 [ 504.506183][T10960] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 504.511725][T10960] smp_call_function_many_cond+0x1703/0x2d30 [ 504.517766][T10960] ? __pfx_has_bh_in_lru+0x10/0x10 [ 504.523053][T10960] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 504.528572][T10960] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 504.534934][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.540597][T10960] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 504.546087][T10960] ? __pfx_has_bh_in_lru+0x10/0x10 [ 504.551241][T10960] on_each_cpu_cond_mask+0x3f/0x80 [ 504.556377][T10960] blkdev_flush_mapping+0xfe/0x270 [ 504.561501][T10960] ? bdev_release+0x456/0x700 [ 504.566201][T10960] bdev_release+0x460/0x700 [ 504.570742][T10960] blkdev_release+0x15/0x20 [ 504.575261][T10960] ? __pfx_blkdev_release+0x10/0x10 [ 504.580478][T10960] __fput+0x3eb/0x9f0 [ 504.584494][T10960] task_work_run+0x251/0x310 [ 504.589104][T10960] ? __pfx_task_work_run+0x10/0x10 [ 504.594239][T10960] ? syscall_exit_to_user_mode+0xa3/0x340 [ 504.599993][T10960] syscall_exit_to_user_mode+0x13f/0x340 [ 504.605663][T10960] do_syscall_64+0x100/0x230 [ 504.610273][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.616201][T10960] RIP: 0033:0x7f49abf8e90a [ 504.620637][T10960] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.640262][T10960] RSP: 002b:00007f49ace39e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 504.648706][T10960] RAX: ffffffffffffffea RBX: 00007f49ace39ef0 RCX: 00007f49abf8e90a [ 504.656692][T10960] RDX: 0000400000000000 RSI: 0000400000000100 RDI: 00007f49ace39eb0 [ 504.664686][T10960] RBP: 0000400000000000 R08: 00007f49ace39ef0 R09: 0000000002000412 [ 504.672669][T10960] R10: 0000000002000412 R11: 0000000000000246 R12: 0000400000000100 [ 504.680653][T10960] R13: 00007f49ace39eb0 R14: 0000000000009eb9 R15: 0000400000000400 [ 504.688657][T10960] [ 504.691919][T10960] Kernel Offset: disabled [ 504.696304][T10960] Rebooting in 86400 seconds..