last executing test programs: 10m16.763521147s ago: executing program 32 (id=1997): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1000000000, &(0x7f0000000380)) set_robust_list(&(0x7f00000000c0)={0x0, 0xfe5}, 0x18) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000000740)={0x14, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r4, r5, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, 0x0, 0x0) 10m4.395314357s ago: executing program 33 (id=2029): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) 10m3.263788256s ago: executing program 34 (id=2036): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x40000b5}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) 10m1.357628047s ago: executing program 35 (id=2041): close(0x3) r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x30000009}) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2085}}) io_uring_enter(r4, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) 9m48.764850715s ago: executing program 36 (id=2047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000000)=0x5402, 0x4) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x80000}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000030000000300000000000ff90300000004000000030000000000000000000005000000000000005f"], &(0x7f0000000b80)=""/4090, 0x5e, 0x1050, 0x1}, 0x28) 9m17.96985944s ago: executing program 5 (id=2120): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4b453000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f0000000080)) 9m16.712431531s ago: executing program 5 (id=2124): socket(0x25, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffc}, 0x53, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0x10, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x8, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x3, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0xb12, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x10, 0x400, 0x400, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0x485, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x8, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x82, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xfffe, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x6, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m16.495168779s ago: executing program 5 (id=2126): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x6, 0x3, 0x4}) 9m15.908480266s ago: executing program 5 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 9m15.789664095s ago: executing program 5 (id=2130): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) write$uinput_user_dev(r1, &(0x7f0000000340)={'syz0\x00', {0x7fff, 0xa, 0x0, 0x2}, 0x54, [0x3, 0x8, 0x0, 0x4, 0x1, 0x5, 0x8, 0x18b95d75, 0xd, 0x200, 0x3, 0x7ff, 0x7, 0x68aa, 0x81, 0x6, 0x8001, 0x1, 0x80, 0x4, 0x6, 0x2b7c, 0xc, 0x0, 0x30dd, 0x6, 0xd67d, 0x400, 0xfffffffd, 0x8, 0xf1b, 0x8697, 0xd, 0x0, 0x3, 0xe, 0x10000, 0x7aa4, 0xb71d, 0x5, 0x80000001, 0x7, 0x4, 0x3, 0xfffffff0, 0x6, 0x9, 0x1, 0x9, 0x7, 0x7a, 0x1, 0xf, 0x2, 0xe9b9, 0x0, 0x80, 0x10000000, 0x9, 0x3, 0x3176, 0xf, 0x2199e7fd, 0xff], [0x3ff, 0x7, 0x4c, 0x9, 0x4afd, 0x10, 0x7, 0x7, 0x0, 0x5, 0x8, 0x10103517, 0x3, 0x3ff, 0x4, 0x5, 0x4, 0x5df, 0x4, 0x8, 0xf, 0xe, 0x1, 0x9, 0x3, 0x8c24, 0x0, 0x8d9, 0x6, 0x2, 0x2, 0x7, 0x8001, 0x6, 0x2, 0x2, 0x6, 0x3508, 0xf185, 0x9, 0x8aa, 0xffffffff, 0x9, 0x6634, 0x8, 0x2, 0x3ff, 0x11, 0x1, 0xfd4c, 0x40, 0x8001, 0x10, 0xfffffffa, 0x5, 0x1, 0x100, 0x6, 0x7fff, 0x9, 0x2ae, 0x9, 0x6, 0x80000001], [0x9, 0x0, 0x8001, 0x7, 0x8, 0x9, 0x5, 0x3, 0xfff, 0x2, 0x1, 0x7, 0x5, 0x1c, 0x8, 0x6, 0x9, 0x4, 0x8, 0x0, 0x1, 0x7fff, 0x8000, 0x1, 0x3, 0x1ff, 0x6, 0x8, 0x3, 0x101, 0xe287, 0x4, 0x2, 0x6, 0x1, 0x101, 0x4, 0xfffffffa, 0x5, 0x5, 0xf, 0x317, 0x3, 0x7, 0x9, 0x2, 0x7, 0x89ce, 0x4, 0x8, 0x4, 0x8cfe, 0x40a11adb, 0x1bf, 0xc, 0x7, 0x0, 0x4, 0x9, 0xffff, 0xa, 0x100, 0x9a2b, 0x2], [0x3, 0x24000, 0x6, 0x2, 0xff, 0x4, 0x7, 0x16, 0xffff, 0x3, 0x10001, 0x8, 0x1, 0xfffff9be, 0x0, 0xe, 0xecf0, 0x4a0, 0x0, 0x3, 0x0, 0x2, 0x9, 0x1b, 0x289a427e, 0x2, 0x5, 0xfffffffa, 0x10, 0x77bf8610, 0x2, 0xd4, 0x4, 0x8, 0x10, 0x8, 0x1, 0xff, 0x6, 0x5, 0x200, 0x74, 0x200, 0x57, 0x293, 0x5, 0x0, 0x7ff, 0x3, 0x0, 0x9, 0x2, 0x9, 0x0, 0xb173, 0x9, 0x8, 0x4, 0x7f, 0xf, 0x5, 0x10000, 0x7]}, 0x45c) sendfile(r0, r1, 0x0, 0x1000000201008) 9m15.35653739s ago: executing program 5 (id=2131): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f0000000100)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c636f6465706167653d63703835302c63726561746f723d40ff7f5c2c706172743d3078303030303030303030303030303030332c706172743d3078303030303030303030303030303030342c00e48ab395178be648515dde7dbbd8402d28"], 0x11, 0x2c6, &(0x7f0000005bc0)="$eJzs3btuE08Ux/HfjJ3E/3+isCFBSJSBSNAgCA2iMUKueAIqBMRGirCCgCAuVUBUCEFPR8Er8BA0IF4AKioeIFSLZmbt9WXXNpbjjcP3I8XatWd2z3gvc46laAXgn3Wt9v3jpZ/uz0gllaTXVyQrqSKVJZ3Qycrjnd3t3WajPmhDJd/D/RmFnqavzdZOI6ur6+d7JCK3VtZS53vB4niDRK44jq/+KDoIFM5f/RmstKD5dL0yxZhG8WLMfnsTjmPWmH3t66mWi44DAFCsZP63IZPXUpK/WyttJNO+zw8O2/w/rv2iAzhw8cBPO+Z/X2XFxh3fY/6jtN7zJZz73LaqxFH2PNez7tNH25NgmmFVpY/F/nd3u9k4v3W/Wbd6qWqio9maf62HU7dlSLTrGbXpACOM3WRnlL5etXNuDJsh/ieSuuJfHXOPYzOfzVdz00R6r3o7/yvHxh0mf6SiniMV4r+Qv0U/ysi1UnLbqFartqvJit/JKXWWEsNGWcmuSNQ6o1bU/QNBNCxO3+t4T68wuotDeq1m9tpsreX0Wuvq5UbTPpvz93fQzFtzw6zrlz6p1pH/WxffhgZemelVYzbCVOC/8TCe+ezdlf02o76Zo/9yaX+LC3mh/+69p13/EA++zSHPG93RZS0/evb8XqnZbDx0C7czFh4std+ZeyVltil4QXvpOwuKvb7GrUlpmoGdm+gG3f1jaGN3lR2Kg3KkF2pfpnsiFbFQ8P0JU5Ee9KIjQUFc3mVC/ZfWK+WQ7LmXKDNPH/GHgGSLscux2xVc2jcOGbmk//+qglvMr+D6a66+mtHXXKfPSmdG32OUxHlEmJq+6Ra//wMAAAAAAAAAAAAAAAAAAMyaafw7QdFjBAAAAAAAAAAAAAAAAAAAAABg1rWf/6vW83812vN/e5+7Msnn/77bUfbzfwFM0p8AAAD//0gLf7E=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getdents(r0, &(0x7f00000000c0)=""/43, 0x60) getdents(r0, 0xfffffffffffffffd, 0x58) 9m15.293869775s ago: executing program 8 (id=2132): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r2, &(0x7f0000002180)=ANY=[@ANYBLOB="7f454c46040c02050f0000000000000002003e00f7267d0e65"], 0x58) getpriority(0x2, r3) 9m14.088676232s ago: executing program 37 (id=2131): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f0000000100)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c636f6465706167653d63703835302c63726561746f723d40ff7f5c2c706172743d3078303030303030303030303030303030332c706172743d3078303030303030303030303030303030342c00e48ab395178be648515dde7dbbd8402d28"], 0x11, 0x2c6, &(0x7f0000005bc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getdents(r0, &(0x7f00000000c0)=""/43, 0x60) getdents(r0, 0xfffffffffffffffd, 0x58) 9m14.019946318s ago: executing program 8 (id=2135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x4e, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) close_range(r1, r2, 0x0) 9m13.438225264s ago: executing program 8 (id=2136): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) 9m12.604515301s ago: executing program 8 (id=2138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 9m11.49340616s ago: executing program 7 (id=2139): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x2100000}) 9m11.397348328s ago: executing program 8 (id=2140): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x7b5d53fec2c25178}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) 9m10.62407257s ago: executing program 8 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30000000003800038034000080280001802300010011"], 0xf0}}, 0x0) 9m9.951937984s ago: executing program 38 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30000000003800038034000080280001802300010011"], 0xf0}}, 0x0) 9m9.940128655s ago: executing program 7 (id=2144): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffc}, 0x53, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0x10, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x8, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x3, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0xb12, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x10, 0x400, 0x400, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0x485, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x8, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x82, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xfffe, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x6, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m9.812005235s ago: executing program 7 (id=2145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m9.208621944s ago: executing program 7 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 9m8.936099736s ago: executing program 7 (id=2149): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_clone3(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f00000001c0)={0x980900, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) 9m6.348408454s ago: executing program 7 (id=2151): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffc}, 0x53, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0x10, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x8, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x3, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0xb12, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x10, 0x400, 0x400, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0x485, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x8, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x82, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xfffe, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x6, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m5.902433169s ago: executing program 39 (id=2151): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffc}, 0x53, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0x10, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x8, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x3, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0xb12, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x10, 0x400, 0x400, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0x485, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x8, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x82, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xfffe, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x6, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8m40.3757489s ago: executing program 0 (id=2183): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x40009, 0x0, 0x400, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x45, [0xfff, 0x2]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) 8m39.339001563s ago: executing program 0 (id=2186): r0 = syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0x82fd, 0x10, 0x4, 0x2c7}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8m38.201293305s ago: executing program 0 (id=2191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e746572"], 0xe4}}, 0x0) 8m37.044254678s ago: executing program 6 (id=2192): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$unix(0x1, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 8m35.476461153s ago: executing program 0 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 8m34.670214378s ago: executing program 0 (id=2196): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x4e, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) close_range(r1, r2, 0x0) 8m34.316643396s ago: executing program 0 (id=2198): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$eJzs3U9sG1kZAPBvJrYTd6Wsd9nuFoTUaCsq2EKbxCwtEhIFIZTDCipx2Wto021UJ1slWZRWiHqBBW5wQj3sYREKhz0hDkiLOCCWGxISEvfeK3HgVnHAaMYzie0kTtzGTSm/nzSeN57355vPb8b2pJUD+L+18GZU25HEwrk3NrPt+1vN1v2t5kpZjojJiEgjKt1VJKsRyccRl6O7xCezJ4vukv3Gef3BR++fvfdhs7tVKZa8fjqs3Y7OkBHaxRIzETFRrEdU2a+/q3v0d3ekrpPtuLOEnSkTB8ets0t7lOaHOG+Bp93diInqHs83Ik5ExFTxOSCKq0P6hMM7ciNd5QAAAODY7fWtPb8HPtTzD+NhbMb0WEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ1TS/c3ApFjSsjwTSfH7/98uquVqteMN9wCfP2D/e9efUCAAAAAAAAAAcPSqO8XTD+NhbMZ0ud1J8r/5v5pvvJQ/PhfvxHosxVqcj81YjI3YiLWYi6hO9/RZ21zc2Fib293yl5G17HQ6d4uW8xHR2NVyfszHDAAAAAAAAADPth/GQkwfdxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAriZjorvLlpbLciLQSEVMRUcvqtSP+WJafBo1HbPenI44DAAAAnkL1Yj2d/Kdb6CT5d/6X8+/9U/FOrMZGLMdGtGIpruX3Arrf+tO/t5ut+1vNlWzZ3fHX/jlSHHmPETER7+4z8mxe4+R2i4X4ZnwnzsVMXIm1WI7vxWJsxFLMRD07iFiMJBr17t2LRhlnf7wTRVeX+0K5Mhjb6YHtU3kk9bgey3ls5+NqrewtzWskcapntN/XIgYy9G6WneSrhUPm6FrP6/WL4r5MofP8IfsYj0Z+5NXtjMxmuS+y8cLeuS+NOE8GR5qLdPse1Es7o2SbgyOVOf/uKDk/UayzXP+kP+dHbcRbaYOZmI+0mH0RL/fn/NZn7r3Y3/hz//jzlRvp6s0b19fPjfGQxqpaFgYz0ezJxCvDZ1+RiVaWifZgJqoHD12aesxjOSK1IhvdC9vhrpbfyEuL8WrPFHw7rsVSXIzZmItLMRtfjvlo9s2wk315rTRX+nOSn2vp7utbfUjwZz7bU+mnB1Qeh/3Hy/LyQk9ee690jXxf8czln8dsT5ZeHD77HuVdoPKpopCN8aPtd5ynQV8mimtzGV35BrVPJn7VyR7XW6s3124s3jrkeGeLdXbavtd/bf71Yx/MY8nmS3bFreRbeU7q5XzJ9n1iO9r+fNWKv7h026W79p3c3teI6ViOb+17ptaKz3C7e+rue2XPfc1836mefX2fcuLtaOWfQgbMPJmsAnBoJ147Uas/qP+t/kH9x/Ub9Temvj55afLTtaj+pfKHid+mv0m/krwWH8QPYvq4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfB+u07NxdbraW1MRZqjzhWpAfW2XrucB1GI2L4WElRqI07G7fvZPkYodXPit8rPLow/jU1NBv1GNOx/274UdQee4hk/PM5eyWOpMPyh9PyZzoTB7b664WI7jOV4fOnEutT1X3yPLnzukfj5mLr352+OvXoOWWAZ9yFjZVbF9Zv3/nC8sriW0tvLa3OX7p46WLzS3NfvHB9ubU023087iiBcVi/fWfiuGMAAAAAAAAAAAAARlP86/+NtTQrJKP/L53KAXVqa+t7j3z6SR8qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D9q4c2otiOJudnzs9n2/a1mK1vK8k7NSkSkEZF8PyL5OOJydJdo9HSX7DfO6w8+ev/svQ+bO31VyvrpsHaH0y6WmImIiWJ9sMk9utnd39We/tqPFF6yfYRZws6UiYPj9t8AAAD//ycX7eY=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 8m33.89280131s ago: executing program 40 (id=2198): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 8m33.869112873s ago: executing program 6 (id=2200): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000003040)='./file1\x00', 0x1200001, &(0x7f0000000140)={[{@part={'part', 0x3d, 0x7}}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@type={'type', 0x3d, "30f2a3ac"}}]}, 0x2, 0x345, &(0x7f00000005c0)="$eJzs3U1r1EAcBvBnks02a0uNbaXgSaoFT6WtB8WLRYoXv4AHKdbuFkpjBa2gBbF6FBFvguDRm2fRr6AexC+gpx7Ek16KByPzkt1JmmS3223Tpc8PXLPJvPxnJ5PMtGwDIjqyrsx/f3t+S/4THgAXwCXAAeADFQAnMe7fX1tvW5Db3BLQOcWONEtrjaysPkwOI5DvKhiy99H+iKIo+tE21e8DiYXKI+wRbHGAATM61XH/wCPbH5u6XUeL1cNiG9t4gOEywyEiovKZ+79j7hJDZv7uOMCkmYf3+/0/Mb/ZLi+OQ6F5/3f0+0jIz+e4OiTXeyvrYaOul3Cy9514lZhVVuY5EbU+7ir0meUOWlMuqxazI1WAisWpLa+EjalNVcBTXDasZGPqtY64IUpetFWdaiJjbVqgqO3FBlUbPNmG2Zz4R4tqzFwAf/yJV9nVLXzuICbxSXwVCyLAa9Sb879KJGQ3qZ4KUkNFxz+dX6JqZaBTJVrZCv+EquSUqQEf3rVaWcv7XH24MpYsshSRnr8HcZwvq/m5MILkjxV062byW6dyjQIVoVYNdq7ZZqK/mbnG0nXVlr2wMbV0J6zn19dDmSs68UJcFxP4hfeYt+b/jkw9iayRqSVGuVApzZlR2J6KSpnTjwlqaN7e1cgk5WpyvHaU5zlu4SKG7z3cWF0Mw8bd8jfiodJl9tM9jkefiOZ0lHvk/1Ya+HLDA9CzSv9FUZR5qIKD6AJPNfXCm1aTN1YXhbnm7a0KeeVMHZrLTwxgDoDZE18RCqp49iXntHnczDXQKrBNzIGq64/sbbUnUbIXb8RRqUPxqbs/vRNXlTjkYqCjkVLrotJrj1YXw66uRNRnWp2O8RtlB0NlkPMFodd/1nplWl115EtQsP7xkm9rOxJYJc7krIBG1OuxzlZwzWJz54mD8UabNdeZc8DZVI0O4hqfpIsNTJw4jL+V3P2vMsQ8vuEmf/5PRERERERERERERERERERERERERNRvdvtthG6+TpCscesI/uENIiIiIiIiIiIiIiIiIiIiIiIiIiIiIqK9sZ7/C7jqiTHVrOf/7nweTIqrnxDj9+L5v24Hz/8Vm/38LDKiQ+F/AAAA//8YS1gQ") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 8m33.53246509s ago: executing program 6 (id=2203): prlimit64(0x0, 0x3, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044", @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8m32.363770003s ago: executing program 6 (id=2205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 8m32.209448146s ago: executing program 6 (id=2207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x6, 0x1, 0x0, 0x0, @binary="98d4"}]}]}, 0x2c}], 0x1}, 0x0) 8m31.628210142s ago: executing program 6 (id=2209): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000008, 0xf, &(0x7f0000006680)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, 0x0, 0x4008800) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r3, r4, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r8, 0x0, 0x46) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4002, @rand_addr=' \x01\x00', 0x3, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r9], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m31.235128834s ago: executing program 41 (id=2209): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000008, 0xf, &(0x7f0000006680)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, 0x0, 0x4008800) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r3, r4, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r8, 0x0, 0x46) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4002, @rand_addr=' \x01\x00', 0x3, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r9], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m45.201472432s ago: executing program 9 (id=2319): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0x82fd, 0x10, 0x4, 0x2c7}, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7m43.35611293s ago: executing program 9 (id=2325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r6, 0x513, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x40004) 7m42.193863243s ago: executing program 9 (id=2335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x6, 0x1, 0x0, 0x0, @binary="98d4"}]}]}, 0x2c}], 0x1}, 0x0) 7m41.133147668s ago: executing program 9 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 7m41.029725017s ago: executing program 9 (id=2329): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x4e, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) close_range(r1, r2, 0x0) 7m40.779000807s ago: executing program 9 (id=2331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x3fd, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 7m39.715494572s ago: executing program 42 (id=2331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x3fd, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 12.142377354s ago: executing program 3 (id=3845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0xa7, 0x0, 0x1, 0x7fffffff, 0xdd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa, 0x100}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.848258498s ago: executing program 2 (id=3848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 11.548171962s ago: executing program 3 (id=3849): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10.380312006s ago: executing program 3 (id=3852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c250000"], 0x0, 0x8}, 0x94) 9.892698475s ago: executing program 3 (id=3854): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000008, 0xf, &(0x7f0000006680)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, 0x0, 0x4008800) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r3, r4, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r8, 0x0, 0x46) fsopen(&(0x7f0000000180)='proc\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4002, @rand_addr=' \x01\x00', 0x3, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.823115631s ago: executing program 3 (id=3855): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x604, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x5d4, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x100, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1e"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x4a8, 0x9, 0x0, 0x1, [@m_gact={0xcc, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0x79, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xac, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x148, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe1a3, 0x6, 0x3, 0x6}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x236}]}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xcc, 0x3, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x118, 0xe, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xe6, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351fdbe40e46f577bf7a5be51d0996a396ab824c47f201ff8a90dc"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.59230813s ago: executing program 3 (id=3858): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)={0x4000000000000229, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) 7.160150255s ago: executing program 1 (id=3861): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.800146413s ago: executing program 1 (id=3863): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000008, 0xf, &(0x7f0000006680)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, 0x0, 0x4008800) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r3, r4, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r8, 0x0, 0x46) fsopen(&(0x7f0000000180)='proc\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4002, @rand_addr=' \x01\x00', 0x3, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.71733746s ago: executing program 4 (id=3864): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\nS\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r1 = memfd_create(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000101010101010000130049"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f027}) r8 = syz_open_dev$video(0x0, 0x8, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x22800, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r9, 0x40046104, &(0x7f00000001c0)) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000008593bc000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000070000000000000018000000000000000000000000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000000600000005000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226}, 0x23) 6.71337297s ago: executing program 2 (id=3865): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 5.955118631s ago: executing program 1 (id=3866): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x500) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.708531451s ago: executing program 4 (id=3867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x604, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x5d4, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x100, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1e"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x4a8, 0x9, 0x0, 0x1, [@m_gact={0xcc, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0x79, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xac, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x148, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe1a3, 0x6, 0x3, 0x6}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x236}]}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xcc, 0x3, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x118, 0xe, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xe6, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351fdbe40e46f577bf7a5be51d0996a396ab824c47f201ff8a90dc"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.635502427s ago: executing program 4 (id=3868): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.72278371s ago: executing program 2 (id=3869): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 4.72224653s ago: executing program 1 (id=3870): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgget$private(0x0, 0x101) mkdir(0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$NET_DM_CMD_STOP(r6, 0x0, 0x4040004) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, 0x0, 0x0) 4.432121383s ago: executing program 2 (id=3871): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000680)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x8d0820b6458e4b2d) write$binfmt_script(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x1000, 0x4, 0xa, 0x0, 0x3, 0xfc, 0x3, 0xfc, 0x80, 0x1, 0x0, 0xff, 0x0, 0x1045}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_link_policy={{0x98}, {0x7b, 0xc8, 0x7}}}}, 0xb) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x5}}, 0x24, 0x2) socket(0x1d, 0x1, 0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000a00)={0x0, r6, r7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) 2.182395754s ago: executing program 1 (id=3872): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 1.547770996s ago: executing program 4 (id=3873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.36392005s ago: executing program 2 (id=3874): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.36299402s ago: executing program 1 (id=3875): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000008, 0xf, &(0x7f0000006680)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, 0x0, 0x4008800) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r3, r4, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r8, 0x0, 0x46) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4002, @rand_addr=' \x01\x00', 0x3, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r9], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.297052135s ago: executing program 4 (id=3876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c250000"], 0x0, 0x8}, 0x94) 392.124778ms ago: executing program 4 (id=3877): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x39b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) futex_waitv(&(0x7f0000001180)=[{0x26d, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x8000, 0x0, 0x82}, {0x1, &(0x7f0000000d40)=0x8, 0x2}, {0x907c, &(0x7f0000000d80)=0x200, 0x82}, {0x80000000, &(0x7f0000000e00)=0x9, 0x82}, {0x4000000000000, &(0x7f0000000e40)=0x9, 0x2}, {0xfffffffffffffff7, 0x0}, {0x100000001, 0x0, 0x82}, {0x47, 0x0, 0x82}, {0x5, &(0x7f0000001080)=0x8, 0x2}, {0xf, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x9, &(0x7f0000001140), 0x82}], 0xe, 0x0, &(0x7f0000000180)={0x77359400}, 0x1) 0s ago: executing program 2 (id=3878): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) kernel console output (not intermixed with test programs): handler #200!!! [ 712.664486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 712.961308][ T5794] Bluetooth: hci0: command tx timeout [ 714.780436][ T12] bond0 (unregistering): Released all slaves [ 714.900117][T11644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.907435][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.934734][T11644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.049128][ T5794] Bluetooth: hci0: command tx timeout [ 715.300348][T11644] hsr_slave_0: entered promiscuous mode [ 715.315913][T11644] hsr_slave_1: entered promiscuous mode [ 715.349639][T11644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.357293][T11644] Cannot create hsr debugfs directory [ 715.974392][T11644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 715.995803][T11644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 716.016225][T11644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 716.112142][T11644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.242826][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.392422][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.610891][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.706367][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 716.728135][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 716.745175][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.754920][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.771533][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 716.779395][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 716.842890][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.300408][T11644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.400692][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 717.424794][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 717.428873][ T12] tipc: Left network mode [ 717.468693][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 717.481836][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 717.493130][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 717.501796][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 717.570575][T11644] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.672774][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.680018][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.768906][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.776197][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.867798][T11778] chnl_net:caif_netlink_parms(): no params data found [ 718.302060][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.309941][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.317222][T11778] bridge_slave_0: entered allmulticast mode [ 718.324865][T11778] bridge_slave_0: entered promiscuous mode [ 718.389607][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.396964][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.414255][T11778] bridge_slave_1: entered allmulticast mode [ 718.422537][T11778] bridge_slave_1: entered promiscuous mode [ 718.683443][T11778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.712621][T11778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.886745][ T5793] Bluetooth: hci1: command tx timeout [ 718.925387][T11778] team0: Port device team_slave_0 added [ 719.006517][T11778] team0: Port device team_slave_1 added [ 719.207137][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.220330][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.231895][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.240229][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.241585][T11778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.248194][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 719.262167][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.265355][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.303018][T11778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.349230][T11778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.356245][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.387010][T11778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.415478][T11644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.575110][T11783] chnl_net:caif_netlink_parms(): no params data found [ 719.600376][ T5794] Bluetooth: hci3: command tx timeout [ 719.636148][T11778] hsr_slave_0: entered promiscuous mode [ 719.646812][T11778] hsr_slave_1: entered promiscuous mode [ 719.653904][T11778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.687430][T11778] Cannot create hsr debugfs directory [ 719.773454][ T12] hsr_slave_0: left promiscuous mode [ 719.787910][ T12] hsr_slave_1: left promiscuous mode [ 720.966345][ T5794] Bluetooth: hci1: command tx timeout [ 721.252827][ T12] bond0 (unregistering): Released all slaves [ 721.286620][ T5794] Bluetooth: hci2: command tx timeout [ 721.590386][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.597663][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.606473][T11783] bridge_slave_0: entered allmulticast mode [ 721.614868][T11783] bridge_slave_0: entered promiscuous mode [ 721.624786][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.632510][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.640133][T11783] bridge_slave_1: entered allmulticast mode [ 721.647376][T11783] bridge_slave_1: entered promiscuous mode [ 721.681633][ T5794] Bluetooth: hci3: command tx timeout [ 721.822876][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.836224][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.004675][T11783] team0: Port device team_slave_0 added [ 722.018952][T11783] team0: Port device team_slave_1 added [ 722.091755][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.100432][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.128901][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.144434][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.152990][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.179616][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.199688][T11644] veth0_vlan: entered promiscuous mode [ 722.410360][T11783] hsr_slave_0: entered promiscuous mode [ 722.417505][T11783] hsr_slave_1: entered promiscuous mode [ 722.557708][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.594975][T11644] veth1_vlan: entered promiscuous mode [ 722.604448][T11778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 722.701543][T11778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 722.724519][T11778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 722.757110][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.779459][T11815] chnl_net:caif_netlink_parms(): no params data found [ 722.828930][T11778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 722.881608][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.981471][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.038956][ T5794] Bluetooth: hci1: command tx timeout [ 723.075192][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.094475][T11815] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.103900][T11815] bridge_slave_0: entered allmulticast mode [ 723.111879][T11815] bridge_slave_0: entered promiscuous mode [ 723.143856][T11815] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.151371][T11815] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.159192][T11815] bridge_slave_1: entered allmulticast mode [ 723.166670][T11815] bridge_slave_1: entered promiscuous mode [ 723.206980][T11644] veth0_macvtap: entered promiscuous mode [ 723.265205][T11815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.278127][T11644] veth1_macvtap: entered promiscuous mode [ 723.345399][T11815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.363417][ T5794] Bluetooth: hci2: command tx timeout [ 723.517210][T11815] team0: Port device team_slave_0 added [ 723.592370][T11783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 723.617392][T11783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 723.642021][T11815] team0: Port device team_slave_1 added [ 723.663177][T11644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.723430][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.759068][ T5794] Bluetooth: hci3: command tx timeout [ 723.777727][T11783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 723.790462][T11783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 723.917928][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.955942][T11815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.963388][T11815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.990261][T11815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.006766][T11644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.048420][T11815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.056248][T11815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.088594][T11815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.117674][T11644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.127025][T11644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.138897][T11644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.147667][T11644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.182348][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.256812][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.360995][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.374754][T11815] hsr_slave_0: entered promiscuous mode [ 724.382281][T11815] hsr_slave_1: entered promiscuous mode [ 724.395346][T11815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.403162][T11815] Cannot create hsr debugfs directory [ 724.502386][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.517709][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.644239][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.742117][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.749648][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.774975][ T12] tipc: Left network mode [ 724.856628][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.863887][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.868779][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.881363][ T12] tipc: Left network mode [ 724.901375][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.997498][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.126132][ T5794] Bluetooth: hci1: command tx timeout [ 725.227982][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.319693][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.326920][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.438962][ T5794] Bluetooth: hci2: command tx timeout [ 725.501049][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.508565][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.841112][ T5794] Bluetooth: hci3: command tx timeout [ 726.056005][T11783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 726.078574][T11783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.156153][T11815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 726.167562][T11815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 726.194753][T11815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 726.329075][T11815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 726.629695][T11778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.898306][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.308355][T11815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.438145][T11815] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.514877][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.519658][ T5794] Bluetooth: hci2: command tx timeout [ 727.522110][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.564655][ T12] hsr_slave_0: left promiscuous mode [ 727.600086][ T12] hsr_slave_1: left promiscuous mode [ 727.647325][ T12] hsr_slave_0: left promiscuous mode [ 727.659017][ T12] hsr_slave_1: left promiscuous mode [ 729.078814][ T12] bond0 (unregistering): Released all slaves [ 730.523589][ T12] bond0 (unregistering): Released all slaves [ 730.797284][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.804625][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.024626][T11778] veth0_vlan: entered promiscuous mode [ 731.131593][T11783] veth0_vlan: entered promiscuous mode [ 731.149659][T11778] veth1_vlan: entered promiscuous mode [ 731.225705][T11783] veth1_vlan: entered promiscuous mode [ 731.282374][T11778] veth0_macvtap: entered promiscuous mode [ 731.344897][T11778] veth1_macvtap: entered promiscuous mode [ 731.411823][T11783] veth0_macvtap: entered promiscuous mode [ 731.465372][T11783] veth1_macvtap: entered promiscuous mode [ 731.483430][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.509410][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.531121][T11778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.596239][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.629692][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.691837][T11778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.728203][T11778] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.740820][T11778] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.761198][T11778] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.779711][T11778] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.805915][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.840955][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.851087][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.862061][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.885509][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.977911][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.008645][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.028686][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.048964][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.070622][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.194986][T11783] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.204711][T11783] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.218706][T11783] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.227476][T11783] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.271950][T11815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.337190][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.348359][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.356990][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.371753][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.381244][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 732.392727][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.431023][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.448373][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.650103][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.658079][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.792101][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.813024][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.973272][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.984568][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.315201][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.538912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 733.548351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 734.123046][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.229479][T11969] chnl_net:caif_netlink_parms(): no params data found [ 734.449991][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.558845][ T5794] Bluetooth: hci0: command tx timeout [ 734.850997][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.337757][T11815] veth0_vlan: entered promiscuous mode [ 736.043721][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.052553][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.213846][T11969] bridge_slave_0: entered allmulticast mode [ 736.222286][T11969] bridge_slave_0: entered promiscuous mode [ 736.267115][T11815] veth1_vlan: entered promiscuous mode [ 736.728786][ T5794] Bluetooth: hci0: command tx timeout [ 737.050232][T11969] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.057439][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.071303][T11969] bridge_slave_1: entered allmulticast mode [ 737.109171][T11969] bridge_slave_1: entered promiscuous mode [ 738.152279][T11969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.166473][T11969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.818742][ T5794] Bluetooth: hci0: command tx timeout [ 739.260920][T11969] team0: Port device team_slave_0 added [ 739.298376][T11969] team0: Port device team_slave_1 added [ 740.122705][T11815] veth0_macvtap: entered promiscuous mode [ 740.245157][T11815] veth1_macvtap: entered promiscuous mode [ 740.416842][T11969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.426879][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.462847][T12050] Error: Driver 'c6xdigio' is already registered, aborting... [ 740.648695][T11969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.819616][T11969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.826646][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.852549][ C1] vkms_vblank_simulate: vblank timer overrun [ 740.879449][ T5794] Bluetooth: hci0: command tx timeout [ 740.890043][T11969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.014512][T11815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.031818][T11815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.043844][T11815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.063719][T11815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.085001][T11815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.098595][T11815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.116219][T11815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.155178][T11969] hsr_slave_0: entered promiscuous mode [ 741.163922][T11969] hsr_slave_1: entered promiscuous mode [ 741.171585][T11969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.186003][T11969] Cannot create hsr debugfs directory [ 741.209385][T11815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.222504][T11815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.234236][T11815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.246048][T11815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.277019][T11815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.314379][T11815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.336870][T11815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.419452][T11815] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.435540][T11815] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.460275][T11815] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.475968][T11815] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.658955][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.666903][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.864228][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.876574][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.891859][T11969] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 742.939681][ T12] hsr_slave_0: left promiscuous mode [ 742.955669][ T12] hsr_slave_1: left promiscuous mode [ 742.965910][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.974928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.985079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.993066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.001570][ T12] bridge_slave_1: left allmulticast mode [ 743.007267][ T12] bridge_slave_1: left promiscuous mode [ 743.015094][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.026808][ T12] bridge_slave_0: left allmulticast mode [ 743.035178][ T12] bridge_slave_0: left promiscuous mode [ 743.041864][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.075109][ T12] veth1_macvtap: left promiscuous mode [ 743.081780][ T12] veth0_macvtap: left promiscuous mode [ 743.087444][ T12] veth1_vlan: left promiscuous mode [ 743.093766][ T12] veth0_vlan: left promiscuous mode [ 744.885775][ T12] team0 (unregistering): Port device team_slave_1 removed [ 745.015310][ T12] team0 (unregistering): Port device team_slave_0 removed [ 745.141784][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.284645][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.093460][ T28] audit: type=1326 audit(747.038:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.6.2070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7cc98eb69 code=0x0 [ 747.117314][ T12] bond0 (unregistering): Released all slaves [ 747.221604][T11969] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 747.234070][T11969] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 747.310549][T11969] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 747.756644][T11969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.842645][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.849190][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.895884][T11969] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.995652][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.002844][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.045441][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.052736][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.774586][T11969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.342713][T11969] veth0_vlan: entered promiscuous mode [ 751.390969][T11969] veth1_vlan: entered promiscuous mode [ 751.521764][T11969] veth0_macvtap: entered promiscuous mode [ 751.555493][T11969] veth1_macvtap: entered promiscuous mode [ 751.627082][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.668536][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.678436][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.783438][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.823216][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.875943][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.989691][T11969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.300758][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.330666][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.347265][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.368229][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.398288][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.430618][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.458242][T11969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.474543][T11969] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.489641][T11969] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.498426][T11969] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.527621][T11969] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.774152][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.786195][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.844086][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.869086][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.981218][ T28] audit: type=1326 audit(752.928:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.5.2089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c72b8eb69 code=0x0 [ 753.233720][T12220] trusted_key: syz.7.2090 sent an empty control message without MSG_MORE. [ 756.756146][T12267] kvm: apic: phys broadcast and lowest prio [ 763.747082][T12376] sch_tbf: peakrate 5120 is lower than or equals to rate 5120 ! [ 764.973081][ T1093] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.281787][ T1093] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.735474][ T1093] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.982444][ T1093] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.956809][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.969495][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.981347][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 769.008673][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 769.017960][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 769.034548][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 770.585409][T12432] chnl_net:caif_netlink_parms(): no params data found [ 770.927974][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 770.941984][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 770.960995][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 770.992128][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 771.000209][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 771.007905][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 771.100927][ T1093] hsr_slave_0: left promiscuous mode [ 771.118990][ T1093] hsr_slave_1: left promiscuous mode [ 771.128800][ T5794] Bluetooth: hci1: command tx timeout [ 771.145173][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.170471][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.216554][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.234740][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.243118][ T1093] bridge_slave_1: left allmulticast mode [ 771.252365][ T1093] bridge_slave_1: left promiscuous mode [ 771.258276][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.313304][ T1093] bridge_slave_0: left allmulticast mode [ 771.319785][ T1093] bridge_slave_0: left promiscuous mode [ 771.326433][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.356908][ T1093] veth1_macvtap: left promiscuous mode [ 771.363158][ T1093] veth0_macvtap: left promiscuous mode [ 771.369426][ T1093] veth1_vlan: left promiscuous mode [ 771.374949][ T1093] veth0_vlan: left promiscuous mode [ 772.585546][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 772.645111][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 772.700915][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.757272][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.122123][ T5793] Bluetooth: hci0: command tx timeout [ 773.205195][ T5793] Bluetooth: hci1: command tx timeout [ 773.409090][ T1093] bond0 (unregistering): Released all slaves [ 773.491929][T12432] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.499492][T12432] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.506718][T12432] bridge_slave_0: entered allmulticast mode [ 773.514059][T12432] bridge_slave_0: entered promiscuous mode [ 773.598012][T12432] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.608675][T12432] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.628807][T12432] bridge_slave_1: entered allmulticast mode [ 773.636449][T12432] bridge_slave_1: entered promiscuous mode [ 773.784175][T12432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.864278][T12432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.093880][T12432] team0: Port device team_slave_0 added [ 774.201702][T12432] team0: Port device team_slave_1 added [ 774.370273][T12432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.377296][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.421984][T12432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.550218][T12432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.557331][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.618577][T12432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.790499][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.829385][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.839683][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.848230][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.856303][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 774.885250][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 774.886639][T12432] hsr_slave_0: entered promiscuous mode [ 774.907962][T12432] hsr_slave_1: entered promiscuous mode [ 774.926632][T12432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.939199][T12432] Cannot create hsr debugfs directory [ 775.135029][T12460] chnl_net:caif_netlink_parms(): no params data found [ 775.176076][ T1093] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.198735][ T5794] Bluetooth: hci0: command tx timeout [ 775.278662][ T5794] Bluetooth: hci1: command tx timeout [ 775.366504][ T1093] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.511316][ T1093] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.603970][T12460] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.613084][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.621042][T12460] bridge_slave_0: entered allmulticast mode [ 775.629473][T12460] bridge_slave_0: entered promiscuous mode [ 775.657855][ T1093] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.748735][T12460] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.762531][T12460] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.771294][T12460] bridge_slave_1: entered allmulticast mode [ 775.788328][T12460] bridge_slave_1: entered promiscuous mode [ 775.917030][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.292825][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.597264][T12478] chnl_net:caif_netlink_parms(): no params data found [ 776.753665][T12460] team0: Port device team_slave_0 added [ 776.769652][T12460] team0: Port device team_slave_1 added [ 776.797502][T12432] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 776.920182][T12432] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 776.958737][ T5794] Bluetooth: hci2: command tx timeout [ 776.987398][ T1093] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.067250][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.084808][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.118339][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.139712][T12432] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 777.214358][ T1093] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.234222][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.247464][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.280063][ T5794] Bluetooth: hci0: command tx timeout [ 777.287694][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.311068][T12432] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 777.358643][ T5794] Bluetooth: hci1: command tx timeout [ 777.406055][ T1093] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.483405][ T1093] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.564740][T12511] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 777.594688][T12511] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 778.108434][T12478] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.124036][T12478] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.146235][T12478] bridge_slave_0: entered allmulticast mode [ 778.155716][T12478] bridge_slave_0: entered promiscuous mode [ 778.179236][T12478] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.186927][T12478] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.203477][T12478] bridge_slave_1: entered allmulticast mode [ 778.216057][T12478] bridge_slave_1: entered promiscuous mode [ 778.294963][T12460] hsr_slave_0: entered promiscuous mode [ 778.310782][T12460] hsr_slave_1: entered promiscuous mode [ 778.317608][T12460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.335556][T12460] Cannot create hsr debugfs directory [ 778.481287][T12478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.543929][T12478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.641282][T12478] team0: Port device team_slave_0 added [ 778.776493][T12478] team0: Port device team_slave_1 added [ 778.863942][T12478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.871361][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.898155][T12478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.912239][T12478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.919766][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.952693][T12478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.039870][ T5794] Bluetooth: hci2: command tx timeout [ 779.214604][T12478] hsr_slave_0: entered promiscuous mode [ 779.222486][T12478] hsr_slave_1: entered promiscuous mode [ 779.229306][T12478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.236920][T12478] Cannot create hsr debugfs directory [ 779.359326][ T5794] Bluetooth: hci0: command tx timeout [ 779.761441][T12432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.855541][T12432] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.870168][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.877365][T12085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.894717][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.901968][T12039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.783446][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.973010][ T1093] hsr_slave_0: left promiscuous mode [ 780.990700][ T1093] hsr_slave_1: left promiscuous mode [ 781.001881][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.011054][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.020323][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.027816][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.039619][ T1093] bridge_slave_1: left allmulticast mode [ 781.045344][ T1093] bridge_slave_1: left promiscuous mode [ 781.051334][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.064449][ T1093] bridge_slave_0: left allmulticast mode [ 781.070716][ T1093] bridge_slave_0: left promiscuous mode [ 781.076644][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.095063][ T1093] hsr_slave_0: left promiscuous mode [ 781.102407][ T1093] hsr_slave_1: left promiscuous mode [ 781.108411][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.115956][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.120176][ T5794] Bluetooth: hci2: command tx timeout [ 781.129640][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.137068][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.149534][ T1093] bridge_slave_1: left allmulticast mode [ 781.155235][ T1093] bridge_slave_1: left promiscuous mode [ 781.162350][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.176743][ T1093] bridge_slave_0: left allmulticast mode [ 781.182789][ T1093] bridge_slave_0: left promiscuous mode [ 781.188633][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.239329][ T1093] veth1_macvtap: left promiscuous mode [ 781.244944][ T1093] veth0_macvtap: left promiscuous mode [ 781.250900][ T1093] veth1_vlan: left promiscuous mode [ 781.256301][ T1093] veth0_vlan: left promiscuous mode [ 781.266346][ T1093] veth1_macvtap: left promiscuous mode [ 781.272200][ T1093] veth0_macvtap: left promiscuous mode [ 781.277891][ T1093] veth1_vlan: left promiscuous mode [ 781.283749][ T1093] veth0_vlan: left promiscuous mode [ 782.125847][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 782.194733][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 782.257361][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.316094][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.945718][ T1093] bond0 (unregistering): Released all slaves [ 783.198816][ T5794] Bluetooth: hci2: command tx timeout [ 783.565542][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 783.625952][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 783.685811][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.745090][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.406378][ T1093] bond0 (unregistering): Released all slaves [ 784.793318][T12460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 784.853406][T12460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 784.902791][T12460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 784.924322][T12460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.020512][T12432] veth0_vlan: entered promiscuous mode [ 785.095899][T12478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 785.108733][T12478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.156728][T12432] veth1_vlan: entered promiscuous mode [ 785.175573][T12478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.202034][T12478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 785.310783][T12432] veth0_macvtap: entered promiscuous mode [ 785.353952][T12432] veth1_macvtap: entered promiscuous mode [ 785.423748][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.434901][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.448028][T12432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.461370][T12460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.472232][T12432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.483405][T12432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.495038][T12432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.511439][T12432] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.524321][T12432] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.533584][T12432] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.542720][T12432] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.651515][T12460] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.676963][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.684211][T12085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.722765][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.730097][T12085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.747069][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.757121][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.804706][T12478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.834113][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.867448][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.895480][T12478] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.943666][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.951002][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.995895][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.003180][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.434137][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.280256][T12460] veth0_vlan: entered promiscuous mode [ 787.356814][T12460] veth1_vlan: entered promiscuous mode [ 787.912004][T12478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.367977][T12460] veth0_macvtap: entered promiscuous mode [ 788.534065][T12460] veth1_macvtap: entered promiscuous mode [ 788.584857][T12478] veth0_vlan: entered promiscuous mode [ 788.901944][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.973523][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.079445][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.568868][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.593053][T12460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.606306][T12478] veth1_vlan: entered promiscuous mode [ 789.643218][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.673407][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.691439][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.702120][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.714210][T12460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.740607][T12460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.752481][T12460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.877539][T12460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.895045][T12460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.534850][T12478] veth0_macvtap: entered promiscuous mode [ 790.731148][T12478] veth1_macvtap: entered promiscuous mode [ 790.856543][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.889106][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.908708][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.925120][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.945769][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.968312][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.001582][T12478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.022042][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.058532][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.077882][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.096265][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.116417][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.134614][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.148042][T12478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.196357][T12478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.342129][T12478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.351878][T12478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.363569][T12478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.289257][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.297164][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.479007][T12039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.508744][T12039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.763271][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2170'. [ 792.813301][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.851073][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.053570][T12039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.160659][T11977] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 793.323328][T12039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.399275][T11977] usb 10-1: config 0 has an invalid interface number: 120 but max is 0 [ 794.428646][T11977] usb 10-1: config 0 has no interface number 0 [ 794.434948][T11977] usb 10-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 794.447361][T11977] usb 10-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 794.456906][T11977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.486622][T11977] usb 10-1: config 0 descriptor?? [ 794.563571][T11977] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.120/input/input5 [ 794.915265][T12633] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 796.719284][T12645] Device name cannot be null; rc = [-22] [ 796.985755][T12645] kernel profiling enabled (shift: 9) [ 798.408676][ T5995] usb 10-1: USB disconnect, device number 2 [ 801.593648][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2188'. [ 803.103587][T12707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2191'. [ 803.122043][ T5995] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 803.137199][T12707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2191'. [ 803.157044][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 803.582380][ T5995] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 803.603460][ T5995] usb 4-1: config 0 has no interface number 0 [ 803.624970][ T5995] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 803.734820][ T5995] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 803.768741][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.966748][ T5995] usb 4-1: config 0 descriptor?? [ 804.265513][ T5995] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input6 [ 804.278079][T12717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.882110][T11996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.054922][T11996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.259681][T11996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.506587][T11996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.534031][ T5997] usb 4-1: USB disconnect, device number 76 [ 807.480740][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 807.493046][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 807.502311][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 807.517653][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 807.539413][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 807.568887][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 809.033881][T12769] chnl_net:caif_netlink_parms(): no params data found [ 809.285528][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.298328][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.759856][ T5794] Bluetooth: hci2: command tx timeout [ 810.509542][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 810.519607][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 810.606535][T12828] delete_channel: no stack [ 810.613832][T12828] delete_channel: no stack [ 810.658595][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 810.677912][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 810.692623][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 810.702068][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 811.523979][T12769] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.559105][T12769] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.576852][T12769] bridge_slave_0: entered allmulticast mode [ 811.599152][T12769] bridge_slave_0: entered promiscuous mode [ 811.630430][T12769] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.638055][T12769] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.652055][T12769] bridge_slave_1: entered allmulticast mode [ 811.660506][T12769] bridge_slave_1: entered promiscuous mode [ 811.891761][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802435f800: rx timeout, send abort [ 811.923718][ T5793] Bluetooth: hci2: command tx timeout [ 812.287782][T12769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.401870][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802435f800: abort rx timeout. Force session deactivation [ 812.475605][T12769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.575705][T12769] team0: Port device team_slave_0 added [ 812.586141][T12769] team0: Port device team_slave_1 added [ 812.624139][T12769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.633695][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.706866][T12769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.742575][T12769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.749714][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.778164][T12769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.871824][ T5793] Bluetooth: hci3: command tx timeout [ 813.908846][T11996] hsr_slave_0: left promiscuous mode [ 813.940668][T11996] hsr_slave_1: left promiscuous mode [ 813.969710][T11996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.977204][T11996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.998703][ T5793] Bluetooth: hci2: command tx timeout [ 814.009931][T11996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.017412][T11996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.033717][T11996] bridge_slave_1: left allmulticast mode [ 814.044822][T11996] bridge_slave_1: left promiscuous mode [ 814.052915][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.077573][T11996] bridge_slave_0: left allmulticast mode [ 814.103349][T11996] bridge_slave_0: left promiscuous mode [ 814.115813][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.187997][T11996] veth1_macvtap: left promiscuous mode [ 814.194436][T11996] veth0_macvtap: left promiscuous mode [ 814.200759][T11996] veth1_vlan: left promiscuous mode [ 814.206392][T11996] veth0_vlan: left promiscuous mode [ 814.958744][ T5793] Bluetooth: hci3: command tx timeout [ 815.071447][ T6012] IPVS: starting estimator thread 0... [ 815.077539][T12878] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 815.210029][T12886] IPVS: using max 18 ests per chain, 43200 per kthread [ 816.078709][ T5793] Bluetooth: hci2: command tx timeout [ 816.355168][T11996] team0 (unregistering): Port device team_slave_1 removed [ 816.481706][T12907] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 817.040684][ T5793] Bluetooth: hci3: command tx timeout [ 817.057593][T11996] team0 (unregistering): Port device team_slave_0 removed [ 817.350710][T11996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.484516][T11996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.884212][T12949] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 818.897116][ T5995] IPVS: starting estimator thread 0... [ 818.900256][T11996] bond0 (unregistering): Released all slaves [ 819.028882][T12953] IPVS: using max 19 ests per chain, 45600 per kthread [ 819.117725][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 819.128251][ T5793] Bluetooth: hci3: command tx timeout [ 819.162190][T12769] hsr_slave_0: entered promiscuous mode [ 819.190673][T12769] hsr_slave_1: entered promiscuous mode [ 819.201040][T12769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.217192][T12769] Cannot create hsr debugfs directory [ 819.805596][T12823] chnl_net:caif_netlink_parms(): no params data found [ 820.821528][T11996] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.897355][T12823] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.920137][T12823] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.927467][T12823] bridge_slave_0: entered allmulticast mode [ 820.960054][T12823] bridge_slave_0: entered promiscuous mode [ 821.052239][T11996] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.086115][T12823] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.096617][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.172199][T12823] bridge_slave_1: entered allmulticast mode [ 821.191277][T12823] bridge_slave_1: entered promiscuous mode [ 821.374377][T11996] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.984411][T12823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.142972][T11996] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.175042][T12823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.453545][T12823] team0: Port device team_slave_0 added [ 822.519180][T12823] team0: Port device team_slave_1 added [ 823.397704][T12823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.419044][T12823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.472038][T12823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.530950][T12823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.552595][T12823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.597275][T12823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.643628][T12769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 823.656414][T12769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 823.718842][T12769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 823.739619][T12769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 823.907356][T12823] hsr_slave_0: entered promiscuous mode [ 823.924919][T12823] hsr_slave_1: entered promiscuous mode [ 823.934356][T12823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 823.946307][T12823] Cannot create hsr debugfs directory [ 824.829935][T12769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.961886][T12769] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.977534][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.984872][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.046892][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.054114][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.247578][T12823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 825.263253][T12823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 825.292309][T12823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 825.317388][T12823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 825.365509][T11996] hsr_slave_0: left promiscuous mode [ 825.378558][T11996] hsr_slave_1: left promiscuous mode [ 825.385609][T11996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.398604][T11996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.407862][T11996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.422931][T11996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.431776][T11996] bridge_slave_1: left allmulticast mode [ 825.437486][T11996] bridge_slave_1: left promiscuous mode [ 825.450067][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.460073][T11996] bridge_slave_0: left allmulticast mode [ 825.465783][T11996] bridge_slave_0: left promiscuous mode [ 825.471972][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.502676][T11996] veth1_macvtap: left promiscuous mode [ 825.508331][T11996] veth0_macvtap: left promiscuous mode [ 825.514503][T11996] veth1_vlan: left promiscuous mode [ 825.521682][T11996] veth0_vlan: left promiscuous mode [ 826.192921][T11996] team0 (unregistering): Port device team_slave_1 removed [ 826.252144][T11996] team0 (unregistering): Port device team_slave_0 removed [ 826.305862][T11996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.370471][T11996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.025147][T11996] bond0 (unregistering): Released all slaves [ 827.307802][T12769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.373451][T12823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.467922][T12823] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.507240][T12769] veth0_vlan: entered promiscuous mode [ 827.532516][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.539746][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.570151][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.577361][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.597765][T12769] veth1_vlan: entered promiscuous mode [ 827.722960][T12769] veth0_macvtap: entered promiscuous mode [ 827.753699][T12769] veth1_macvtap: entered promiscuous mode [ 827.807166][T12769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.831218][T12769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.841686][T12769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.853856][T12769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.866021][T12769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.894311][T12769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.918706][T12769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.929539][T12769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.940145][T12769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.953561][T12769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.981179][T12769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.990355][T12769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.006261][T12769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.015482][T12769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.172905][T11996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.197872][T11996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.227657][T12823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.309156][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.318254][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.361893][T12823] veth0_vlan: entered promiscuous mode [ 828.395481][T12823] veth1_vlan: entered promiscuous mode [ 828.513945][T12823] veth0_macvtap: entered promiscuous mode [ 828.537354][T12823] veth1_macvtap: entered promiscuous mode [ 828.631060][T13077] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 829.347694][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.398360][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.453542][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.525298][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.563300][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.595565][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.631295][T12823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.715443][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.775835][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.808532][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.834189][ T5994] IPVS: starting estimator thread 0... [ 829.841475][T13087] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 829.848514][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.878501][T12823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.903247][T12823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.931822][T12823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.008799][T13093] IPVS: using max 25 ests per chain, 60000 per kthread [ 830.046323][T12823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.106358][T12823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.138920][T12823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.147716][T12823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.403905][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 830.794330][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.847356][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.972197][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.996684][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.188214][T13191] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 839.169980][T13208] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 839.176518][T13208] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 839.183226][T13208] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 839.198595][T13208] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 839.206757][T13208] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 839.228967][T13208] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 839.258902][T13208] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 840.907111][T13233] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 843.815373][T13281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 845.532793][T13301] binder: 13296:13301 ioctl 400c620e 200000000000 returned -22 [ 849.497165][ T5997] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 849.703396][ T5997] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 849.718096][ T5997] usb 4-1: config 0 has no interface number 0 [ 849.728672][ T5997] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 849.751123][ T5997] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 849.765889][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.777760][ T5997] usb 4-1: config 0 descriptor?? [ 849.800621][ T5997] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input7 [ 854.502067][ T9162] usb 4-1: USB disconnect, device number 77 [ 860.102423][ T1093] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.245987][ T1093] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.400901][ T1093] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.544907][ T1093] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.494494][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 861.507955][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 861.518290][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 861.538861][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 861.553683][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 861.561324][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 861.738616][T13516] binder: 13515:13516 ioctl 400c620e 200000000000 returned -22 [ 862.767377][T13527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2340'. [ 863.187605][T13543] binder_alloc: 13538: binder_alloc_buf, no vma [ 864.014509][ T5793] Bluetooth: hci1: command tx timeout [ 864.906563][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 864.933466][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 864.990918][T13562] ceph: No mds server is up or the cluster is laggy [ 865.561513][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 865.567646][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 865.580215][T13510] chnl_net:caif_netlink_parms(): no params data found [ 865.866865][ T1093] hsr_slave_0: left promiscuous mode [ 865.961188][ T1093] hsr_slave_1: left promiscuous mode [ 866.001025][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.022766][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.053048][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.072884][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.139500][ T5793] Bluetooth: hci1: command tx timeout [ 866.209497][ T1093] bridge_slave_1: left allmulticast mode [ 866.257445][ T1093] bridge_slave_1: left promiscuous mode [ 866.295834][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.330732][ T1093] bridge_slave_0: left allmulticast mode [ 866.351633][ T1093] bridge_slave_0: left promiscuous mode [ 866.358097][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.472526][ T1093] veth1_macvtap: left promiscuous mode [ 866.483501][ T1093] veth0_macvtap: left promiscuous mode [ 866.489886][T13592] binder_alloc: 13591: binder_alloc_buf, no vma [ 866.496550][ T1093] veth1_vlan: left promiscuous mode [ 866.519016][ T1093] veth0_vlan: left promiscuous mode [ 868.158668][ T5793] Bluetooth: hci1: command tx timeout [ 868.290299][ T8857] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 868.473709][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 868.481369][ T8857] usb 2-1: Using ep0 maxpacket: 32 [ 868.525042][ T8857] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 868.551987][ T8857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.560660][ T8857] usb 2-1: Product: syz [ 868.565064][ T8857] usb 2-1: Manufacturer: syz [ 868.581550][ T8857] usb 2-1: SerialNumber: syz [ 868.587258][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 868.600118][ T8857] usb 2-1: config 0 descriptor?? [ 868.634785][ T8857] usb 2-1: ucan: probing device on interface #0 [ 868.642599][ T8857] usb 2-1: ucan: invalid endpoint configuration [ 868.662865][ T8857] usb 2-1: ucan: probe failed; try to update the device firmware [ 868.731235][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.807976][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.004436][ T1093] bond0 (unregistering): Released all slaves [ 870.243077][ T5793] Bluetooth: hci1: command tx timeout [ 870.734334][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.774291][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.233632][T13510] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.246699][T13510] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.330590][ T9162] usb 2-1: USB disconnect, device number 66 [ 871.364321][T13510] bridge_slave_0: entered allmulticast mode [ 871.623107][T13510] bridge_slave_0: entered promiscuous mode [ 872.052840][T13510] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.062175][T13510] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.069765][T13510] bridge_slave_1: entered allmulticast mode [ 872.077307][T13510] bridge_slave_1: entered promiscuous mode [ 872.445387][T13510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.560507][T13510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.773619][ T1093] IPVS: stop unused estimator thread 0... [ 872.894716][T13510] team0: Port device team_slave_0 added [ 872.930731][T13510] team0: Port device team_slave_1 added [ 873.148668][T13693] binder: 13692:13693 ioctl 400c620e 200000000000 returned -22 [ 873.303360][T13510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.310468][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.340465][T13510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.355553][T13510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.363142][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.390750][T13510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.169962][T13510] hsr_slave_0: entered promiscuous mode [ 874.201034][T13510] hsr_slave_1: entered promiscuous mode [ 876.524198][T13743] binder: BINDER_SET_CONTEXT_MGR already set [ 876.556457][T13743] binder: 13741:13743 ioctl 4018620d 200000000040 returned -16 [ 878.029687][T13752] ceph: No mds server is up or the cluster is laggy [ 878.036847][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 878.058678][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 878.331997][T13764] tipc: Enabling of bearer rejected, failed to enable media [ 880.923639][T13510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 881.101815][T13794] binder: BINDER_SET_CONTEXT_MGR already set [ 881.108161][T13794] binder: 13793:13794 ioctl 4018620d 200000000040 returned -16 [ 881.263112][T13510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 881.371517][T13510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 881.589630][T13510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 883.323185][T13510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.398029][T13510] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.431944][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.439253][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.823841][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.831128][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.057061][T13510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 884.114137][T13510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 885.272272][T13848] binder_alloc: 13841: binder_alloc_buf, no vma [ 886.301298][T13510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.498817][T13863] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 889.029888][T13881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2404'. [ 889.074421][T13510] veth0_vlan: entered promiscuous mode [ 889.155576][T13510] veth1_vlan: entered promiscuous mode [ 889.259230][T13510] veth0_macvtap: entered promiscuous mode [ 889.310429][T13510] veth1_macvtap: entered promiscuous mode [ 889.333381][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.378246][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.393917][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.404952][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.415200][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.427364][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.440896][T13510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.473503][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.486114][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.496855][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.507572][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.560005][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.562069][T13897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 889.582950][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.595864][T13510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.687364][T13510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.721165][T13510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.731468][T13510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.740399][T13510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.894171][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.904658][ T8669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.944741][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.948250][ T8669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.591943][T13916] binder: 13912:13916 ioctl 400c620e 200000000000 returned -22 [ 894.653327][T13937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 896.749225][T13958] binder: 13956:13958 ioctl 400c620e 200000000000 returned -22 [ 900.504697][T13992] block device autoloading is deprecated and will be removed. [ 902.393747][T14027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 905.179538][ T5979] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 905.842781][ T5979] usb 2-1: device descriptor read/64, error -71 [ 906.198595][ T5979] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 906.439850][T14084] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 907.014265][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2455'. [ 908.856921][T14101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2461'. [ 910.725382][T14124] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 919.235287][T14258] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2502'. [ 921.112669][T14275] binder: 14271:14275 ioctl 400c620e 200000000000 returned -22 [ 925.893152][T14313] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 930.140376][T14356] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 930.718574][T14363] netlink: 'syz.1.2529': attribute type 2 has an invalid length. [ 930.726403][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2529'. [ 932.164004][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.170915][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.249416][T14389] Bluetooth: hci2: command 0x0406 tx timeout [ 934.256473][T14389] Bluetooth: hci3: command 0x0406 tx timeout [ 934.516154][T14409] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 937.520377][T14425] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 940.840332][T14470] netlink: set zone limit has 8 unknown bytes [ 944.293014][T14532] binder: 14529:14532 ioctl 4018620d 0 returned -22 [ 945.147747][ T5794] Bluetooth: hci3: unexpected event for opcode 0x080c [ 949.545354][T14646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2600'. [ 951.266653][T14665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 958.197541][T14741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2625'. [ 960.371192][T14771] binder: 14770:14771 ioctl c0306201 0 returned -14 [ 961.966305][T14801] netlink: set zone limit has 8 unknown bytes [ 962.727334][T14813] binder: 14811:14813 ioctl c0306201 0 returned -14 [ 964.324383][T14835] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 965.919134][T14855] binder: 14852:14855 ioctl c0306201 0 returned -14 [ 969.511685][T14941] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 973.325951][T14983] binder: 14982:14983 ioctl 400c620e 200000000000 returned -22 [ 976.972547][T15044] binder: 15041:15044 ioctl 400c620e 200000000000 returned -22 [ 977.156968][T15013] Invalid ELF header len 8 [ 979.047836][T15088] binder: 15087:15088 ioctl 400c620e 200000000000 returned -22 [ 980.903832][T15108] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2715'. [ 981.885031][T15123] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 982.056909][T15129] binder: 15128:15129 ioctl 400c620e 200000000000 returned -22 [ 984.405288][T15167] binder: 15165:15167 ioctl 400c620e 200000000000 returned -22 [ 986.743225][T15215] binder: 15214:15215 ioctl 400c620e 200000000000 returned -22 [ 987.878426][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2751'. [ 988.504612][T15247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 990.018671][T15258] binder: 15257:15258 ioctl 400c620e 200000000000 returned -22 [ 991.572126][ T28] audit: type=1800 audit(991.458:1292): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2760" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 992.031688][T15278] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2762'. [ 993.996119][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.009506][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.637334][T15317] binder: 15316:15317 ioctl 400c620e 200000000000 returned -22 [ 995.193107][T15326] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 996.959528][T15344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2778'. [ 999.403176][T15391] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1000.523425][ T5794] Bluetooth: hci2: unexpected event for opcode 0x080c [ 1003.315962][ T5794] Bluetooth: hci3: unexpected event for opcode 0x080c [ 1006.692415][T15492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2816'. [ 1007.047680][T15501] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1010.597228][ T5794] Bluetooth: hci3: unexpected event for opcode 0x080c [ 1014.143139][T15588] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1014.356452][T15594] binder: 15592:15594 ioctl c0306201 0 returned -14 [ 1014.767009][T15607] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1014.808268][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2842'. [ 1016.489817][T15622] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2846'. [ 1016.605433][T15625] binder: 15624:15625 ioctl c0306201 0 returned -14 [ 1017.874465][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2852'. [ 1018.605323][T15632] bridge_slave_0: left allmulticast mode [ 1018.638121][T15632] bridge_slave_0: left promiscuous mode [ 1018.660906][T15632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.723332][T15632] bridge_slave_1: left allmulticast mode [ 1018.750378][T15632] bridge_slave_1: left promiscuous mode [ 1018.788971][T15632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.839250][T15632] bond0: (slave bond_slave_0): Releasing backup interface [ 1018.930173][T15632] bond0: (slave bond_slave_1): Releasing backup interface [ 1019.073268][T15632] team0: Port device team_slave_0 removed [ 1019.113687][T15632] team0: Port device team_slave_1 removed [ 1019.135817][T15632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.182498][T15632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.280819][T15632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.288316][T15632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.870031][T15661] vlan0: entered promiscuous mode [ 1019.944129][T15661] team0: Port device vlan0 added [ 1020.134533][T15682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2856'. [ 1021.382580][T15714] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1022.537268][T15727] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1024.859167][T15746] binder: 15745:15746 ioctl 400c620e 200000000000 returned -22 [ 1027.228300][T15777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2877'. [ 1027.892363][T15786] binder: 15785:15786 ioctl 400c620e 200000000000 returned -22 [ 1029.593264][T15811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1031.775645][T15836] binder: 15835:15836 ioctl 400c620e 200000000000 returned -22 [ 1032.693733][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 1033.553179][T15860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2897'. [ 1034.341729][T15885] binder: 15883:15885 ioctl 400c620e 200000000000 returned -22 [ 1036.367758][T15913] overlayfs: failed to resolve './bus': -2 [ 1038.444053][T15933] binder: 15931:15933 ioctl 400c620e 200000000000 returned -22 [ 1039.557639][T15939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1039.756808][T15956] overlayfs: failed to resolve './bus': -2 [ 1040.799137][T15975] binder: 15973:15975 ioctl 400c620e 200000000000 returned -22 [ 1041.620217][T15998] overlayfs: failed to resolve './bus': -2 [ 1041.746036][T16002] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1043.632499][T16014] binder: 16013:16014 ioctl 400c620e 200000000000 returned -22 [ 1044.529390][T16041] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1047.042782][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 1047.179910][T16068] binder: 16065:16068 ioctl 400c620e 200000000000 returned -22 [ 1050.683651][T16137] binder: 16136:16137 ioctl 400c620e 200000000000 returned -22 [ 1052.192893][ T5793] Bluetooth: hci3: unexpected event for opcode 0x080c [ 1052.753767][T16184] binder: 16183:16184 ioctl 400c620e 200000000000 returned -22 [ 1053.084091][T16196] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1055.103666][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.113172][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.725228][T16237] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2984'. [ 1055.949602][ T5793] Bluetooth: hci2: unexpected event for opcode 0x080c [ 1056.298976][T16242] tipc: Started in network mode [ 1056.328796][T16242] tipc: Node identity 6634f42df0d, cluster identity 4711 [ 1056.361121][T16242] tipc: Enabled bearer , priority 0 [ 1056.378924][T16243] syzkaller0: entered promiscuous mode [ 1056.402096][T16243] syzkaller0: entered allmulticast mode [ 1056.440350][T16242] tipc: Resetting bearer [ 1056.526977][T16251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1057.412331][T16241] tipc: Resetting bearer [ 1057.467580][T16241] tipc: Disabling bearer [ 1059.193662][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'. [ 1059.508948][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'. [ 1059.659551][T16290] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2995'. [ 1060.103292][ T5793] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1060.720531][T16303] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1062.115569][T16321] tipc: Started in network mode [ 1062.133715][T16321] tipc: Node identity c6ce18ae9199, cluster identity 4711 [ 1062.166901][T16323] overlayfs: missing 'lowerdir' [ 1062.170806][T16321] tipc: Enabled bearer , priority 0 [ 1062.215124][T16325] syzkaller0: entered promiscuous mode [ 1062.263243][T16325] syzkaller0: entered allmulticast mode [ 1062.291425][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1062.401824][T16330] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3008'. [ 1062.411797][T16321] tipc: Resetting bearer [ 1062.456373][T16320] tipc: Resetting bearer [ 1062.527421][T16320] tipc: Disabling bearer [ 1062.567901][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1063.109543][T16355] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1063.297497][T16356] binder: 16353:16356 ioctl 400c620e 0 returned -14 [ 1064.842188][T16370] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1065.647593][T16373] overlayfs: missing 'lowerdir' [ 1065.879266][T16381] tipc: Enabled bearer , priority 0 [ 1065.899441][T16381] syzkaller0: entered promiscuous mode [ 1065.904999][T16381] syzkaller0: entered allmulticast mode [ 1065.993225][T16380] tipc: Resetting bearer [ 1066.110948][T16380] tipc: Disabling bearer [ 1066.139007][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 1066.286706][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 1067.011620][ T5793] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1068.226798][T16417] overlayfs: missing 'lowerdir' [ 1068.298834][T16420] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1069.492352][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3032'. [ 1070.321737][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3032'. [ 1071.149380][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3036'. [ 1071.195681][T16453] tipc: Started in network mode [ 1071.215629][T16453] tipc: Node identity 4ae97b1c211b, cluster identity 4711 [ 1071.227931][T16453] tipc: Enabled bearer , priority 0 [ 1071.246889][T16453] syzkaller0: entered promiscuous mode [ 1071.255948][T16453] syzkaller0: entered allmulticast mode [ 1071.371315][T16460] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1071.380976][T16451] tipc: Resetting bearer [ 1071.507817][T16451] tipc: Disabling bearer [ 1071.845545][T16466] overlayfs: missing 'lowerdir' [ 1073.551369][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'. [ 1073.779747][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'. [ 1074.803156][T16471] bridge_slave_0: left allmulticast mode [ 1074.979499][T16471] bridge_slave_0: left promiscuous mode [ 1074.986014][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.383233][T16471] bridge_slave_1: left allmulticast mode [ 1075.440783][T16471] bridge_slave_1: left promiscuous mode [ 1075.535542][T16471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.715800][T16471] bond0: (slave bond_slave_0): Releasing backup interface [ 1075.852211][T16471] bond0: (slave bond_slave_1): Releasing backup interface [ 1076.133135][T16471] team0: Port device team_slave_0 removed [ 1076.203270][T16471] team0: Port device team_slave_1 removed [ 1076.250341][T16471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.257822][T16471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.301660][T16471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.364180][T16471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.587587][T16508] vlan0: entered promiscuous mode [ 1076.668534][T16508] team0: Port device vlan0 added [ 1078.675485][ T5793] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1079.665723][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3061'. [ 1081.537196][T16583] tipc: Enabled bearer , priority 0 [ 1081.571202][T16583] syzkaller0: entered promiscuous mode [ 1081.576805][T16583] syzkaller0: entered allmulticast mode [ 1081.714419][T16580] tipc: Resetting bearer [ 1081.800705][T16580] tipc: Disabling bearer [ 1084.634484][T16625] tipc: Started in network mode [ 1084.648535][T16625] tipc: Node identity 96ec7f27311e, cluster identity 4711 [ 1084.657449][T16625] tipc: Enabled bearer , priority 0 [ 1084.790330][T16625] tipc: Resetting bearer [ 1084.996007][T16624] tipc: Disabling bearer [ 1085.835647][T16648] overlayfs: missing 'lowerdir' [ 1087.006288][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1087.119617][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1087.439579][ T28] audit: type=1326 audit(1087.348:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1087.652430][ T28] audit: type=1326 audit(1087.348:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1088.244548][ T28] audit: type=1326 audit(1087.358:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1088.551740][ T28] audit: type=1326 audit(1087.358:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1088.837742][ T28] audit: type=1326 audit(1087.358:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1088.929638][ T28] audit: type=1326 audit(1087.358:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1089.043303][ T28] audit: type=1326 audit(1087.358:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1089.418119][ T28] audit: type=1326 audit(1087.368:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1090.076415][ T28] audit: type=1326 audit(1087.368:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1090.108642][ T28] audit: type=1326 audit(1087.368:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbf6f38eb69 code=0x7ffc0000 [ 1092.570285][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 1092.726099][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 1094.279113][T16749] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1096.545283][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 1096.764719][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 1098.261743][T16812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1101.522466][T16866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1102.408775][T16889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3141'. [ 1102.438944][T16889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3141'. [ 1108.049819][T17002] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1110.945824][T17052] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1112.818889][T17085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1113.873214][T17100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1113.902180][T17100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1114.149679][T17113] tipc: Enabled bearer , priority 0 [ 1114.189193][T17113] tipc: Resetting bearer [ 1114.233631][T17112] tipc: Disabling bearer [ 1116.679272][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.685727][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.960076][T17146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1117.005863][T17146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1117.102138][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1117.102177][ T28] audit: type=1326 audit(1117.008:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1117.671066][ T28] audit: type=1326 audit(1117.018:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1117.750182][ T28] audit: type=1326 audit(1117.018:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1117.783506][ T28] audit: type=1326 audit(1117.018:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1117.937786][ T28] audit: type=1326 audit(1117.018:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1118.020567][ T28] audit: type=1326 audit(1117.018:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1118.095556][ T28] audit: type=1326 audit(1117.018:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1118.188487][ T28] audit: type=1326 audit(1117.018:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1118.267082][ T28] audit: type=1326 audit(1117.028:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1118.380666][ T28] audit: type=1326 audit(1117.028:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1120.564119][T17161] bridge_slave_0: left allmulticast mode [ 1120.578428][T17161] bridge_slave_0: left promiscuous mode [ 1120.584310][T17161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.397813][T17161] bridge_slave_1: left allmulticast mode [ 1121.429485][T17161] bridge_slave_1: left promiscuous mode [ 1121.460054][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.492716][T17161] bond0: (slave bond_slave_0): Releasing backup interface [ 1121.542518][T17161] bond0: (slave bond_slave_1): Releasing backup interface [ 1121.641749][T17161] team0: Port device team_slave_0 removed [ 1121.665223][T17161] team0: Port device team_slave_1 removed [ 1121.699813][T17161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.707538][T17161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.725964][T17161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.744339][T17161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.778673][T17198] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1121.788916][T17198] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1121.798837][T17198] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1121.812255][T17194] vlan0: entered promiscuous mode [ 1121.867465][T17194] team0: Port device vlan0 added [ 1122.057998][T17206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1122.110268][T17206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1123.087966][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1123.088012][ T28] audit: type=1326 audit(1123.008:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.295805][ T28] audit: type=1326 audit(1123.008:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.566946][ T28] audit: type=1326 audit(1123.008:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.608293][ T28] audit: type=1326 audit(1123.008:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.642897][ T28] audit: type=1326 audit(1123.008:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.879624][ T28] audit: type=1326 audit(1123.008:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.935943][ T28] audit: type=1326 audit(1123.008:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.958136][ T28] audit: type=1326 audit(1123.018:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1123.994823][ T28] audit: type=1326 audit(1123.018:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1124.047379][ T28] audit: type=1326 audit(1123.018:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f22d2b8eb69 code=0x7ffc0000 [ 1130.446771][T17308] tipc: Enabled bearer , priority 0 [ 1130.501939][T17308] tipc: Resetting bearer [ 1130.676262][T17305] tipc: Disabling bearer [ 1138.913531][T17419] tipc: Enabling of bearer rejected, failed to enable media [ 1140.052776][ T5793] Bluetooth: hci3: unexpected event for opcode 0x080c [ 1141.560922][T17418] team0: Port device vlan0 removed [ 1141.688207][T17418] team0: Port device vlan0 added [ 1145.329254][T17489] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1148.492728][T17509] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1150.649501][T17549] tipc: Enabling of bearer rejected, failed to enable media [ 1150.788551][T17559] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1153.757398][T17610] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1155.440345][T17593] team0: Port device vlan0 removed [ 1155.587270][T17625] team0: Port device vlan0 added [ 1159.666220][T17678] tipc: Enabling of bearer rejected, failed to enable media [ 1161.811774][T17731] tipc: Enabling of bearer rejected, failed to enable media [ 1164.484646][T17796] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3369'. [ 1164.806641][T17803] tipc: Enabling of bearer rejected, failed to enable media [ 1167.183687][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 1167.183727][ T28] audit: type=1326 audit(1167.068:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.183874][ T28] audit: type=1326 audit(1167.068:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.183915][ T28] audit: type=1326 audit(1167.068:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.183956][ T28] audit: type=1326 audit(1167.078:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.184136][ T28] audit: type=1326 audit(1167.088:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.184294][ T28] audit: type=1326 audit(1167.088:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.184452][ T28] audit: type=1326 audit(1167.088:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.184675][ T28] audit: type=1326 audit(1167.088:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.184833][ T28] audit: type=1326 audit(1167.088:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1167.185015][ T28] audit: type=1326 audit(1167.098:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.4.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1168.455557][T17879] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1171.519841][T17936] tipc: Enabling of bearer rejected, failed to enable media [ 1172.421353][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1172.421395][ T28] audit: type=1326 audit(1172.318:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1172.924948][ T28] audit: type=1326 audit(1172.318:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1173.159655][ T28] audit: type=1326 audit(1172.318:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1173.218433][ T28] audit: type=1326 audit(1172.328:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1173.569324][ T28] audit: type=1326 audit(1172.328:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1173.818342][ T28] audit: type=1326 audit(1172.328:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1173.952236][ T28] audit: type=1326 audit(1172.328:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1174.043591][ T28] audit: type=1326 audit(1172.328:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1174.087122][ T28] audit: type=1326 audit(1172.328:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1174.137328][ T28] audit: type=1326 audit(1172.328:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17951 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f002398eb69 code=0x7ffc0000 [ 1177.512341][T18027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1178.470581][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.486845][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.412959][T18081] tipc: Enabled bearer , priority 0 [ 1182.002019][T18081] tipc: Resetting bearer [ 1182.119358][T18080] tipc: Disabling bearer [ 1184.701333][T18146] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1187.043185][T18189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1188.011373][T18177] team0: Port device vlan0 removed [ 1188.098211][T18190] team0: Port device vlan0 added [ 1189.762363][T18202] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3454'. [ 1192.888695][T18259] team0: Port device vlan0 removed [ 1192.993327][T18264] team0: Port device vlan0 added [ 1194.230044][T18289] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1196.567302][T18336] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1204.719036][T18433] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1205.671115][T18463] overlayfs: failed to resolve './file2': -2 [ 1206.685622][T18482] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3519'. [ 1206.892376][T18491] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1209.254925][T18521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1210.400385][T18530] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1211.845995][T18540] overlayfs: failed to resolve './file2': -2 [ 1213.743597][T18582] block device autoloading is deprecated and will be removed. [ 1214.196391][T18596] syzkaller0: entered promiscuous mode [ 1214.215819][T18596] syzkaller0: entered allmulticast mode [ 1214.957738][ T5793] Bluetooth: hci3: unexpected event for opcode 0x080c [ 1215.856875][T18649] fuse: Bad value for 'fd' [ 1217.199822][T18642] team0: Port device vlan0 removed [ 1217.848888][T18667] team0: Port device vlan0 added [ 1221.720206][T18771] team0: Port device vlan0 removed [ 1222.259776][T18744] team0: Port device vlan0 added [ 1224.668592][T18844] overlayfs: missing 'lowerdir' [ 1228.091753][T18892] overlayfs: missing 'lowerdir' [ 1228.422763][T18849] team0: Port device vlan0 removed [ 1228.510145][T18898] team0: Port device vlan0 added [ 1228.660336][T18911] fuse: Bad value for 'fd' [ 1231.755615][T18939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3643'. [ 1234.451117][ T5793] Bluetooth: hci2: unexpected event for opcode 0x080c [ 1238.830191][T18985] team0: Port device vlan0 removed [ 1238.930658][T19024] team0: Port device vlan0 added [ 1238.984236][T19034] overlayfs: missing 'lowerdir' [ 1239.213993][T19031] syzkaller0: entered promiscuous mode [ 1239.228138][T19031] syzkaller0: entered allmulticast mode [ 1239.367176][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.381590][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.291616][ T5793] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1243.504573][T19084] bridge_slave_0: left allmulticast mode [ 1243.548733][T19084] bridge_slave_0: left promiscuous mode [ 1243.599718][T19084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.636111][T19084] bridge_slave_1: left allmulticast mode [ 1243.916187][T19084] bridge_slave_1: left promiscuous mode [ 1244.455361][T19084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.579906][T19084] bond0: (slave bond_slave_0): Releasing backup interface [ 1244.680208][T19084] bond0: (slave bond_slave_1): Releasing backup interface [ 1244.698345][T19114] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1245.717084][T19084] team0: Port device team_slave_0 removed [ 1245.846458][T19084] team0: Port device team_slave_1 removed [ 1245.867129][T19084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.875396][T19084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.886108][T19084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.916812][T19084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.074784][T19108] vlan0: entered promiscuous mode [ 1246.133337][T19108] team0: Port device vlan0 added [ 1248.950020][T19166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1258.153030][T19272] syzkaller0: entered promiscuous mode [ 1258.187033][T19272] syzkaller0: entered allmulticast mode [ 1258.949838][T19256] team0: Port device vlan0 removed [ 1259.103955][T19256] team0: Port device vlan0 added [ 1264.236286][T19348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1268.239569][T19362] team0: Port device vlan0 removed [ 1268.357590][T19400] team0: Port device vlan0 added [ 1274.870334][T19468] team0: Port device vlan0 removed [ 1274.990147][T19491] team0: Port device vlan0 added [ 1277.660107][T19547] macvtap1: entered allmulticast mode [ 1277.665676][T19547] veth0_macvtap: entered allmulticast mode [ 1278.595685][T19555] macvtap1: entered allmulticast mode [ 1278.628602][T19555] veth0_macvtap: entered allmulticast mode [ 1281.314900][T19610] tipc: Enabling of bearer rejected, failed to enable media [ 1281.342376][T19610] syzkaller0: entered promiscuous mode [ 1281.357867][T19610] syzkaller0: entered allmulticast mode [ 1282.121214][ T5793] Bluetooth: hci2: unexpected event for opcode 0x080c [ 1283.979388][T19670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1284.942413][T19674] tipc: Enabling of bearer rejected, failed to enable media [ 1284.985226][ T5793] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1284.994728][T19674] syzkaller0: entered promiscuous mode [ 1285.033631][T19674] syzkaller0: entered allmulticast mode [ 1285.418635][T19681] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1286.640362][T19713] macvtap1: entered allmulticast mode [ 1286.645941][T19713] veth0_macvtap: entered allmulticast mode [ 1287.848701][T19723] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1288.847437][ T5793] Bluetooth: hci2: unexpected event for opcode 0x080c [ 1289.596172][T19735] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3800'. [ 1291.458628][T19755] macvtap2: entered allmulticast mode [ 1293.017051][ T5793] Bluetooth: hci3: unexpected event for opcode 0x080c [ 1293.464664][T19778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3811'. [ 1295.045656][T19811] tipc: Enabling of bearer rejected, failed to enable media [ 1295.083267][T19811] syzkaller0: entered promiscuous mode [ 1295.114345][T19811] syzkaller0: entered allmulticast mode [ 1296.303415][T19825] tipc: Enabled bearer , priority 10 [ 1296.339819][T19825] lo speed is unknown, defaulting to 1000 [ 1296.347320][T19825] lo speed is unknown, defaulting to 1000 [ 1296.371623][T19825] lo speed is unknown, defaulting to 1000 [ 1296.412624][T19825] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1296.480089][T19825] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1296.627546][T19825] lo speed is unknown, defaulting to 1000 [ 1296.646263][T19825] lo speed is unknown, defaulting to 1000 [ 1296.662231][T19825] lo speed is unknown, defaulting to 1000 [ 1296.678130][T19825] lo speed is unknown, defaulting to 1000 [ 1297.213606][T19830] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3822'. [ 1297.375557][ T6012] tipc: Node number set to 1811053340 [ 1298.770108][T19851] macvtap2: entered allmulticast mode [ 1300.900146][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.906613][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.439359][ T5793] Bluetooth: hci2: unexpected event for opcode 0x080c [ 1304.398740][T19915] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1308.145165][T19933] tipc: Enabling of bearer rejected, failed to enable media [ 1308.179438][T19933] syzkaller0: entered promiscuous mode [ 1308.184989][T19933] syzkaller0: entered allmulticast mode [ 1308.734200][T19951] macvtap3: entered allmulticast mode [ 1310.786077][T19967] macvtap2: entered allmulticast mode [ 1311.754193][T19992] tipc: Enabling of bearer rejected, failed to enable media [ 1311.827209][T19992] syzkaller0: entered promiscuous mode [ 1311.838521][T19992] syzkaller0: entered allmulticast mode [ 1314.358157][T20016] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3864'. [ 1314.566507][T20025] siw: device registration error -23 [ 1318.578906][ T5793] Bluetooth: hci2: unexpected event for opcode 0x080c [ 1319.571237][T20056] siw: device registration error -23 [ 1320.915024][T20050] ================================================================== [ 1320.923126][T20050] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 1320.931133][T20050] Read of size 8 at addr ffff88802d52e030 by task syz.1.3875/20050 [ 1320.939031][T20050] [ 1320.941373][T20050] CPU: 1 PID: 20050 Comm: syz.1.3875 Not tainted 6.6.101-syzkaller #0 [ 1320.949544][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1320.959646][T20050] Call Trace: [ 1320.962980][T20050] [ 1320.965949][T20050] dump_stack_lvl+0x16c/0x230 [ 1320.970660][T20050] ? read_lock_is_recursive+0x20/0x20 [ 1320.976052][T20050] ? show_regs_print_info+0x20/0x20 [ 1320.981299][T20050] ? load_image+0x3b0/0x3b0 [ 1320.985857][T20050] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1320.991259][T20050] ? __virt_addr_valid+0x18c/0x540 [ 1320.996562][T20050] ? __virt_addr_valid+0x469/0x540 [ 1321.001742][T20050] print_report+0xac/0x220 [ 1321.006202][T20050] ? sysfs_remove_file_ns+0x3d/0x70 [ 1321.011466][T20050] kasan_report+0x117/0x150 [ 1321.016044][T20050] ? __lock_acquire+0x7c80/0x7c80 [ 1321.021152][T20050] ? sysfs_remove_file_ns+0x3d/0x70 [ 1321.026373][T20050] sysfs_remove_file_ns+0x3d/0x70 [ 1321.031416][T20050] bus_remove_driver+0x193/0x2f0 [ 1321.036368][T20050] comedi_device_detach+0x131/0x6f0 [ 1321.041593][T20050] comedi_unlocked_ioctl+0xbd0/0xf90 [ 1321.046897][T20050] ? comedi_poll+0x8c0/0x8c0 [ 1321.051518][T20050] ? __fget_files+0x28/0x4d0 [ 1321.056131][T20050] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1321.061079][T20050] ? security_file_ioctl+0x80/0xa0 [ 1321.066211][T20050] ? comedi_poll+0x8c0/0x8c0 [ 1321.070873][T20050] __se_sys_ioctl+0xfd/0x170 [ 1321.075508][T20050] do_syscall_64+0x55/0xb0 [ 1321.080041][T20050] ? clear_bhb_loop+0x40/0x90 [ 1321.084741][T20050] ? clear_bhb_loop+0x40/0x90 [ 1321.089698][T20050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.095638][T20050] RIP: 0033:0x7fbf6f38eb69 [ 1321.100080][T20050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1321.119715][T20050] RSP: 002b:00007fbf6f1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.128264][T20050] RAX: ffffffffffffffda RBX: 00007fbf6f5b5fa0 RCX: 00007fbf6f38eb69 [ 1321.136303][T20050] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1321.144320][T20050] RBP: 00007fbf6f411df1 R08: 0000000000000000 R09: 0000000000000000 [ 1321.152307][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.160300][T20050] R13: 0000000000000000 R14: 00007fbf6f5b5fa0 R15: 00007ffc944ed4d8 [ 1321.168326][T20050] [ 1321.171367][T20050] [ 1321.173710][T20050] Allocated by task 2: [ 1321.177805][T20050] kasan_set_track+0x4e/0x70 [ 1321.182411][T20050] __kasan_kmalloc+0x8f/0xa0 [ 1321.187031][T20050] set_kthread_struct+0xb7/0x1f0 [ 1321.191988][T20050] copy_process+0x107a/0x3d70 [ 1321.196684][T20050] kernel_clone+0x21b/0x840 [ 1321.201200][T20050] kernel_thread+0x10d/0x160 [ 1321.205823][T20050] kthreadd+0x560/0x730 [ 1321.210071][T20050] ret_from_fork+0x48/0x80 [ 1321.214591][T20050] ret_from_fork_asm+0x11/0x20 [ 1321.219389][T20050] [ 1321.221828][T20050] Last potentially related work creation: [ 1321.227554][T20050] kasan_save_stack+0x3e/0x60 [ 1321.232248][T20050] __kasan_record_aux_stack+0xaf/0xc0 [ 1321.237660][T20050] call_rcu+0x158/0x930 [ 1321.241833][T20050] fib_create_info+0x1845/0x2460 [ 1321.246802][T20050] fib_table_insert+0xc7/0x1b50 [ 1321.251679][T20050] fib_magic+0x2c5/0x390 [ 1321.255968][T20050] fib_add_ifaddr+0x144/0x5e0 [ 1321.260710][T20050] fib_netdev_event+0x389/0x490 [ 1321.265597][T20050] notifier_call_chain+0x197/0x390 [ 1321.270724][T20050] __dev_notify_flags+0x18e/0x2e0 [ 1321.275760][T20050] dev_change_flags+0xe8/0x1a0 [ 1321.280541][T20050] do_setlink+0xc74/0x3fb0 [ 1321.285014][T20050] rtnl_newlink+0x175b/0x2020 [ 1321.289732][T20050] rtnetlink_rcv_msg+0x7c7/0xf10 [ 1321.292765][T20068] macvtap3: entered allmulticast mode [ 1321.294693][T20050] netlink_rcv_skb+0x216/0x480 [ 1321.294720][T20050] netlink_unicast+0x751/0x8d0 [ 1321.309704][T20050] netlink_sendmsg+0x8c1/0xbe0 [ 1321.314863][T20050] __sys_sendto+0x46a/0x620 [ 1321.319418][T20050] __x64_sys_sendto+0xde/0xf0 [ 1321.324138][T20050] do_syscall_64+0x55/0xb0 [ 1321.328606][T20050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.334548][T20050] [ 1321.336901][T20050] Second to last potentially related work creation: [ 1321.343511][T20050] kasan_save_stack+0x3e/0x60 [ 1321.348257][T20050] __kasan_record_aux_stack+0xaf/0xc0 [ 1321.353664][T20050] kvfree_call_rcu+0xee/0x780 [ 1321.358381][T20050] drop_sysctl_table+0x356/0x4b0 [ 1321.363351][T20050] drop_sysctl_table+0x36d/0x4b0 [ 1321.368316][T20050] unregister_sysctl_table+0x41/0x60 [ 1321.373618][T20050] lowpan_frags_exit_net+0x60/0xb0 [ 1321.378740][T20050] cleanup_net+0x6f4/0xb90 [ 1321.383182][T20050] process_scheduled_works+0xa45/0x15b0 [ 1321.388756][T20050] worker_thread+0xa55/0xfc0 [ 1321.393374][T20050] kthread+0x2fa/0x390 [ 1321.397741][T20050] ret_from_fork+0x48/0x80 [ 1321.402178][T20050] ret_from_fork_asm+0x11/0x20 [ 1321.406968][T20050] [ 1321.409306][T20050] The buggy address belongs to the object at ffff88802d52e000 [ 1321.409306][T20050] which belongs to the cache kmalloc-256 of size 256 [ 1321.423385][T20050] The buggy address is located 48 bytes inside of [ 1321.423385][T20050] freed 256-byte region [ffff88802d52e000, ffff88802d52e100) [ 1321.437141][T20050] [ 1321.439600][T20050] The buggy address belongs to the physical page: [ 1321.446057][T20050] page:ffffea0000b54b80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802d52f800 pfn:0x2d52e [ 1321.457531][T20050] head:ffffea0000b54b80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1321.466477][T20050] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1321.474565][T20050] page_type: 0xffffffff() [ 1321.478916][T20050] raw: 00fff00000000840 ffff888017841b40 ffffea0001649690 ffffea0000739a10 [ 1321.487509][T20050] raw: ffff88802d52f800 0000000000100009 00000001ffffffff 0000000000000000 [ 1321.496112][T20050] page dumped because: kasan: bad access detected [ 1321.502559][T20050] page_owner tracks the page as allocated [ 1321.508293][T20050] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5785, tgid 5785 (syz-executor), ts 93552922666, free_ts 93351831980 [ 1321.529952][T20050] post_alloc_hook+0x1cd/0x210 [ 1321.535291][T20050] get_page_from_freelist+0x195c/0x19f0 [ 1321.540946][T20050] __alloc_pages+0x1e3/0x460 [ 1321.545567][T20050] alloc_slab_page+0x5d/0x170 [ 1321.550293][T20050] new_slab+0x87/0x2e0 [ 1321.554420][T20050] ___slab_alloc+0xc6d/0x12f0 [ 1321.559130][T20050] __kmem_cache_alloc_node+0x1a2/0x260 [ 1321.564617][T20050] kmalloc_trace+0x2a/0xe0 [ 1321.569082][T20050] ____ip_mc_inc_group+0x2ad/0xac0 [ 1321.574375][T20050] ip_mc_up+0x125/0x300 [ 1321.578550][T20050] inetdev_event+0x1009/0x15c0 [ 1321.583337][T20050] notifier_call_chain+0x197/0x390 [ 1321.588474][T20050] __dev_notify_flags+0x18e/0x2e0 [ 1321.593534][T20050] dev_change_flags+0xe8/0x1a0 [ 1321.598343][T20050] do_setlink+0xc74/0x3fb0 [ 1321.602801][T20050] rtnl_newlink+0x175b/0x2020 [ 1321.607504][T20050] page last free stack trace: [ 1321.612196][T20050] free_unref_page_prepare+0x7ce/0x8e0 [ 1321.617704][T20050] free_unref_page+0x32/0x2e0 [ 1321.622409][T20050] __slab_free+0x35e/0x410 [ 1321.626881][T20050] qlist_free_all+0x75/0xe0 [ 1321.631427][T20050] kasan_quarantine_reduce+0x143/0x160 [ 1321.636899][T20050] __kasan_slab_alloc+0x22/0x80 [ 1321.641769][T20050] slab_post_alloc_hook+0x6e/0x4d0 [ 1321.646925][T20050] kmem_cache_alloc+0x11e/0x2e0 [ 1321.651789][T20050] vm_area_alloc+0x24/0x1d0 [ 1321.656314][T20050] mmap_region+0xbe6/0x1f80 [ 1321.660891][T20050] do_mmap+0x8d1/0xfd0 [ 1321.665162][T20050] vm_mmap_pgoff+0x1c0/0x400 [ 1321.669868][T20050] ksys_mmap_pgoff+0x520/0x700 [ 1321.674667][T20050] do_syscall_64+0x55/0xb0 [ 1321.679107][T20050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.685024][T20050] [ 1321.687364][T20050] Memory state around the buggy address: [ 1321.692995][T20050] ffff88802d52df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1321.701163][T20050] ffff88802d52df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1321.709241][T20050] >ffff88802d52e000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1321.717304][T20050] ^ [ 1321.722947][T20050] ffff88802d52e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1321.731023][T20050] ffff88802d52e100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1321.739108][T20050] ================================================================== [ 1321.909473][T20050] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1321.916733][T20050] CPU: 1 PID: 20050 Comm: syz.1.3875 Not tainted 6.6.101-syzkaller #0 [ 1321.925053][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1321.935139][T20050] Call Trace: [ 1321.938441][T20050] [ 1321.941404][T20050] dump_stack_lvl+0x16c/0x230 [ 1321.946103][T20050] ? show_regs_print_info+0x20/0x20 [ 1321.951320][T20050] ? load_image+0x3b0/0x3b0 [ 1321.955865][T20050] panic+0x2c0/0x710 [ 1321.959821][T20050] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1321.966013][T20050] ? bpf_jit_dump+0xd0/0xd0 [ 1321.970537][T20050] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1321.976463][T20050] ? _raw_spin_unlock+0x40/0x40 [ 1321.981452][T20050] ? sysfs_remove_file_ns+0x3d/0x70 [ 1321.986692][T20050] check_panic_on_warn+0x84/0xa0 [ 1321.991680][T20050] ? sysfs_remove_file_ns+0x3d/0x70 [ 1321.996901][T20050] end_report+0x6f/0x140 [ 1322.001167][T20050] kasan_report+0x128/0x150 [ 1322.005693][T20050] ? __lock_acquire+0x7c80/0x7c80 [ 1322.010759][T20050] ? sysfs_remove_file_ns+0x3d/0x70 [ 1322.016002][T20050] sysfs_remove_file_ns+0x3d/0x70 [ 1322.021077][T20050] bus_remove_driver+0x193/0x2f0 [ 1322.026037][T20050] comedi_device_detach+0x131/0x6f0 [ 1322.031256][T20050] comedi_unlocked_ioctl+0xbd0/0xf90 [ 1322.036560][T20050] ? comedi_poll+0x8c0/0x8c0 [ 1322.041307][T20050] ? __fget_files+0x28/0x4d0 [ 1322.045906][T20050] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1322.050849][T20050] ? security_file_ioctl+0x80/0xa0 [ 1322.055987][T20050] ? comedi_poll+0x8c0/0x8c0 [ 1322.060677][T20050] __se_sys_ioctl+0xfd/0x170 [ 1322.065275][T20050] do_syscall_64+0x55/0xb0 [ 1322.069699][T20050] ? clear_bhb_loop+0x40/0x90 [ 1322.074375][T20050] ? clear_bhb_loop+0x40/0x90 [ 1322.079054][T20050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1322.085044][T20050] RIP: 0033:0x7fbf6f38eb69 [ 1322.089462][T20050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.109076][T20050] RSP: 002b:00007fbf6f1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1322.117609][T20050] RAX: ffffffffffffffda RBX: 00007fbf6f5b5fa0 RCX: 00007fbf6f38eb69 [ 1322.125604][T20050] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1322.133669][T20050] RBP: 00007fbf6f411df1 R08: 0000000000000000 R09: 0000000000000000 [ 1322.141652][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.149629][T20050] R13: 0000000000000000 R14: 00007fbf6f5b5fa0 R15: 00007ffc944ed4d8 [ 1322.157612][T20050] [ 1322.162820][T20050] Kernel Offset: disabled [ 1322.167168][T20050] Rebooting in 86400 seconds..