last executing test programs: 27m14.312640475s ago: executing program 32 (id=189): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r0, &(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 26m22.951351076s ago: executing program 33 (id=329): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x204050, &(0x7f0000000540)=ANY=[], 0x1, 0x6da, &(0x7f0000002240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x9128c0, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) 23m32.246515465s ago: executing program 2 (id=826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x80001000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x20000009, 0x1, 0xc, 0x80004006, 0x802}, 0x0, 0x0) 23m31.249469054s ago: executing program 2 (id=827): syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x108) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x150) 23m30.692468526s ago: executing program 2 (id=830): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x331, 0x1}}, 0x20) r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@ssd}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x35, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) 23m26.947508319s ago: executing program 2 (id=837): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0x6, 0x7, 0x0, 0xdd5, 0x88f7, 0x8f, 0x2, 0x8012, 0x1006, 0x5, 0x203, 0x7, 0x10000009, 0x3, 0x5, 0xfffffffd, 0x400008, 0x6, 0x9, 0x8e, 0x3, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0xc, 0x4, 0x400002, 0x22]}) 23m26.549368241s ago: executing program 2 (id=840): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 23m26.082673981s ago: executing program 2 (id=843): syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0xb0, &(0x7f0000000500)="$eJzs1z9KA0EcBeC3i/in0QN4hz2BIB5FrEQ7K0XIiXKVHCFtqhRp00wIky3CErKkWQLfBzPwm1fMFNO8xXb+nMekzJJym73S+/n9+3r/rnsGmuERV6fNZ+6S3Kf+gTbJ+q1mTeq83Px/9CvJzdRvBgAALtOmy+vqaO5y6APnjaoCLw8no/I06hoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACe0CAAD//73NIaI=") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4e1, &(0x7f0000000e40)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) 23m10.455663518s ago: executing program 34 (id=843): syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0xb0, &(0x7f0000000500)="$eJzs1z9KA0EcBeC3i/in0QN4hz2BIB5FrEQ7K0XIiXKVHCFtqhRp00wIky3CErKkWQLfBzPwm1fMFNO8xXb+nMekzJJym73S+/n9+3r/rnsGmuERV6fNZ+6S3Kf+gTbJ+q1mTeq83Px/9CvJzdRvBgAALtOmy+vqaO5y6APnjaoCLw8no/I06hoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACe0CAAD//73NIaI=") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4e1, &(0x7f0000000e40)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) 15m52.062595929s ago: executing program 5 (id=1961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r5}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) 15m50.790796803s ago: executing program 5 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) 15m50.370866788s ago: executing program 5 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0x4a, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x8, 0x0, 0x0}}, 0x10) 15m49.246033383s ago: executing program 5 (id=1969): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000000)={{r1}, 0x33333, 0x0, 0x5, 0x9}) 15m47.050774257s ago: executing program 5 (id=1977): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) 15m45.698598111s ago: executing program 5 (id=1981): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 15m29.466714287s ago: executing program 35 (id=1981): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 14m23.335548307s ago: executing program 3 (id=2174): r0 = socket(0x10, 0x803, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x80, 0x9, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x68, 0x9, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 14m23.263466577s ago: executing program 3 (id=2175): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$alg(0x26, 0x5, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0xc0800) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) 14m21.782641578s ago: executing program 3 (id=2179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) 14m21.502697664s ago: executing program 3 (id=2182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r4) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) eventfd(0xc33) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x2, 0x8, 0xdf2d, 0xb, 0x7fffffff, 0x100}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0xc, 0x467, 0x8000000000000001}, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = dup(r1) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) 14m16.464667035s ago: executing program 3 (id=2186): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610c", 0x25, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m16.295695706s ago: executing program 3 (id=2187): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 14m1.102151548s ago: executing program 36 (id=2187): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 13m15.219594473s ago: executing program 7 (id=2314): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04060c207f"], 0x7) 13m14.814319386s ago: executing program 7 (id=2315): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, 0x0, 0x10) 13m14.589836365s ago: executing program 7 (id=2317): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700010005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080006403622126c"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 13m9.301147958s ago: executing program 7 (id=2327): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 13m8.89647829s ago: executing program 7 (id=2328): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m8.326757693s ago: executing program 7 (id=2331): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$qrtr(r1, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000f80), 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13m7.586602289s ago: executing program 37 (id=2331): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$qrtr(r1, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000f80), 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13m1.970374534s ago: executing program 8 (id=2342): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) 13m1.498763625s ago: executing program 8 (id=2343): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000bc0)={0x0, 0xf, 0x3, "56c7f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 12m58.102966184s ago: executing program 8 (id=2350): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044094}, 0x40880) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xda, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 12m53.400593121s ago: executing program 8 (id=2359): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@noadinicb}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12m52.741246546s ago: executing program 38 (id=2359): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@noadinicb}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m0.278627158s ago: executing program 6 (id=4927): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3ff, @private0, 0x7}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) 3m0.074662585s ago: executing program 6 (id=4930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037f8ff9400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{0x0}], 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2m59.703029833s ago: executing program 6 (id=4931): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, 0x0, 0x0, 0x15f, 0x0) 2m50.593699935s ago: executing program 6 (id=4944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5", 0x6, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2m42.912488733s ago: executing program 6 (id=4948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037f8ff9400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r1 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2m42.582657686s ago: executing program 6 (id=4951): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000026c0), 0x0, 0x15f, 0x0) 2m26.357529514s ago: executing program 39 (id=4951): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000026c0), 0x0, 0x15f, 0x0) 6.693738998s ago: executing program 1 (id=5145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 5.714802704s ago: executing program 4 (id=5147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x40, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x40}, 0x1, 0x0, 0x0, 0x200c8004}, 0x4000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x5, @empty, 0x2}, @in6={0xa, 0x4e22, 0x401, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in={0x2, 0x4e24, @broadcast}], 0x48) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.58956091s ago: executing program 1 (id=5149): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, 0x240448c0}, 0x0) 5.450561098s ago: executing program 4 (id=5151): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 5.265543672s ago: executing program 1 (id=5153): r0 = gettid() getpgrp(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4c21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 5.223418128s ago: executing program 4 (id=5154): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x1, &(0x7f0000000a80)='M'}], 0x1}) 4.730783781s ago: executing program 0 (id=5156): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x100f2cf, 0x10100, 0x0, 0x163}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000340)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r8 = openat$cgroup_type(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 4.044907199s ago: executing program 1 (id=5159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file1\x00'}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000100)={@private0}, &(0x7f00000001c0)=0x14) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa2, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "717e414ba6a6"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0xfe, 0x3e}}}}}}}]}}, 0xfffffffffffffffc) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.406842461s ago: executing program 0 (id=5161): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, 0x240448c0}, 0x0) 2.951845619s ago: executing program 0 (id=5162): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) 2.55965811s ago: executing program 9 (id=5163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x2, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 2.390756472s ago: executing program 0 (id=5164): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1fb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x33, 0x1, 0x1, "8e02002029030000f9ffff00", 0x31424752}) 2.080726232s ago: executing program 9 (id=5165): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) 1.912291913s ago: executing program 0 (id=5166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) close(0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) 1.876830878s ago: executing program 4 (id=5167): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='[', 0x1}], 0x1) 1.822866055s ago: executing program 9 (id=5168): rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r0, 0x7) 1.533452842s ago: executing program 9 (id=5169): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x100f2cf, 0x10100, 0x0, 0x163}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000340)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r8 = openat$cgroup_type(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 1.482635519s ago: executing program 4 (id=5170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000022540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x8d0, 0xfff, 0x401, 0x5, 0x9, 0x0, 0x401, 0x9}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xd, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7f, 0x400000, 0x0, 0x3, 0x6, 0x1, 0x6, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20044890) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.210082954s ago: executing program 0 (id=5171): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0xfffffffffffffec9, 0x10}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x237b, 0x400, 0x7, 0x28b}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 373.768401ms ago: executing program 9 (id=5172): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) 303.69107ms ago: executing program 1 (id=5173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x2, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 303.126811ms ago: executing program 4 (id=5174): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x5, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 66.806431ms ago: executing program 9 (id=5175): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 1 (id=5176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r4, 0x0, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_clone3(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000000)=0x2) kernel console output (not intermixed with test programs): 1.498455][T22640] syzkaller0: entered allmulticast mode [ 1391.969237][ T27] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1392.182886][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 1392.200955][ T27] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1392.211749][ T27] usb 7-1: config 8 has an invalid interface number: 142 but max is 0 [ 1392.222535][ T27] usb 7-1: config 8 has no interface number 0 [ 1392.235744][ T27] usb 7-1: config 8 interface 142 has no altsetting 0 [ 1392.285668][ T27] usb 7-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=5f.8c [ 1392.298245][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.343018][ T27] usb 7-1: Product: syz [ 1392.351547][ T27] usb 7-1: Manufacturer: syz [ 1392.361021][ T27] usb 7-1: SerialNumber: syz [ 1392.639744][T22640] tipc: Enabled bearer , priority 0 [ 1392.663546][T22639] tipc: Resetting bearer [ 1392.732277][ T27] usb 7-1: USB disconnect, device number 14 [ 1392.987272][T22639] tipc: Disabling bearer [ 1394.625276][T22671] syzkaller0: entered promiscuous mode [ 1394.646619][T22671] syzkaller0: entered allmulticast mode [ 1394.681493][T22676] 9pnet_fd: Insufficient options for proto=fd [ 1396.262428][T22704] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1398.246313][ T27] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1398.449631][ T27] usb 10-1: Using ep0 maxpacket: 8 [ 1398.462613][ T27] usb 10-1: config 0 has no interfaces? [ 1398.471350][ T27] usb 10-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1398.491958][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.538860][ T27] usb 10-1: config 0 descriptor?? [ 1404.267868][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4290'. [ 1404.558605][T22738] ip6gretap0: entered promiscuous mode [ 1404.577166][T22738] macsec1: entered promiscuous mode [ 1404.590632][ T5784] usb 10-1: USB disconnect, device number 14 [ 1404.620106][T22738] ip6gretap0: left promiscuous mode [ 1405.123520][T22761] xt_policy: output policy not valid in PREROUTING and INPUT [ 1405.136577][T22760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.144577][T22760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.015937][T22774] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1409.519245][T22813] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4316'. [ 1409.614401][T22813] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1409.869253][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4315'. [ 1410.063130][ T5784] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1410.138954][T22817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.194741][T22818] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4316'. [ 1410.205049][T22818] bond1: peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1410.345472][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1410.433451][ T5784] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1410.550870][ T5784] usb 2-1: config 0 has no interface number 0 [ 1410.670918][ T5784] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1410.833144][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.841407][ T5784] usb 2-1: Product: syz [ 1410.867674][ T5784] usb 2-1: Manufacturer: syz [ 1410.872377][ T5784] usb 2-1: SerialNumber: syz [ 1410.983311][ T5784] usb 2-1: config 0 descriptor?? [ 1411.006995][ T5784] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1411.380180][T22831] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1411.592554][ T5784] gspca_spca1528: reg_w err -110 [ 1411.652220][ T5784] spca1528: probe of 2-1:0.1 failed with error -110 [ 1413.660202][T15031] usb 2-1: USB disconnect, device number 8 [ 1413.817178][T22853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1413.838838][T22853] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1413.937225][T22857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1414.035001][T22857] bond5: peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1415.683223][T22889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4338'. [ 1416.036778][T22889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.044161][T22889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.051897][T22889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.059093][T22889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.114944][T22889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1416.265576][T11205] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1416.511698][T11205] usb 7-1: Using ep0 maxpacket: 16 [ 1416.553005][T11205] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1416.607563][T11205] usb 7-1: config 0 has no interface number 0 [ 1416.634525][T11205] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1416.670145][T11205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.693764][T11205] usb 7-1: Product: syz [ 1416.698069][T11205] usb 7-1: Manufacturer: syz [ 1416.725972][T11205] usb 7-1: SerialNumber: syz [ 1416.771513][T11205] usb 7-1: config 0 descriptor?? [ 1416.824693][T11205] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1417.424165][T11205] gspca_spca1528: reg_w err -110 [ 1417.466552][T11205] spca1528: probe of 7-1:0.1 failed with error -110 [ 1418.853645][T15031] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1419.069483][T15031] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.080131][T15031] usb 2-1: config 0 has no interfaces? [ 1419.085665][T15031] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1419.122073][T15031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.133627][T15031] usb 2-1: config 0 descriptor?? [ 1419.334269][T11205] usb 7-1: USB disconnect, device number 15 [ 1421.872015][T11205] usb 2-1: USB disconnect, device number 9 [ 1422.398718][ T5784] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1422.609253][ T5784] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.620230][ T5784] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1422.692503][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.715422][ T5784] usb 7-1: config 0 descriptor?? [ 1422.779106][ T5784] pwc: Askey VC010 type 2 USB webcam detected. [ 1423.178912][ T5784] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1423.210560][ T5784] pwc: recv_control_msg error -32 req 02 val 2700 [ 1423.289993][ T5784] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1423.335688][ T5784] pwc: recv_control_msg error -32 req 04 val 1000 [ 1423.378770][ T5784] pwc: recv_control_msg error -32 req 04 val 1300 [ 1423.386324][ T5784] pwc: recv_control_msg error -32 req 04 val 1400 [ 1423.400098][ T5784] pwc: recv_control_msg error -32 req 02 val 2000 [ 1427.245730][T22899] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1427.259236][T22899] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1427.273606][T22899] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1427.280017][T22900] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1427.300766][T22900] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1427.322600][T22900] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1427.350627][T22927] ip6erspan0: entered allmulticast mode [ 1427.548608][ T5784] pwc: recv_control_msg error -71 req 04 val 1500 [ 1427.593559][ T5784] pwc: recv_control_msg error -71 req 02 val 2500 [ 1427.620361][ T5784] pwc: recv_control_msg error -71 req 02 val 2400 [ 1427.634840][ T5784] pwc: recv_control_msg error -71 req 02 val 2600 [ 1427.667969][ T5784] pwc: recv_control_msg error -71 req 02 val 2900 [ 1427.687523][ T5784] pwc: recv_control_msg error -71 req 02 val 2800 [ 1427.705077][ T28] kauditd_printk_skb: 333 callbacks suppressed [ 1427.705094][ T28] audit: type=1326 audit(1768292697.625:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22943 comm="syz.6.4357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8f749 code=0x0 [ 1427.737547][ T5784] pwc: recv_control_msg error -71 req 04 val 1100 [ 1427.772311][ T5784] pwc: recv_control_msg error -71 req 04 val 1200 [ 1427.791508][ T5784] pwc: Registered as video103. [ 1427.800994][T22945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4354'. [ 1427.812620][ T5784] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input60 [ 1427.853000][ T5784] usb 7-1: USB disconnect, device number 16 [ 1428.002438][T22945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1439.742335][T23015] syzkaller0: entered promiscuous mode [ 1439.766069][T23015] syzkaller0: entered allmulticast mode [ 1439.866949][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1440.091568][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 1440.099262][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1440.108308][ T27] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.124158][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1440.156038][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1440.187392][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.226354][ T27] usbtmc 2-1:16.0: bulk endpoints not found [ 1440.295539][ T28] audit: type=1326 audit(1768292709.408:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.9.4384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x0 [ 1441.778257][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4394'. [ 1441.823088][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4394'. [ 1442.967911][ T27] usb 2-1: USB disconnect, device number 10 [ 1443.163326][ T28] audit: type=1326 audit(1768292712.073:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23084 comm="syz.1.4401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x0 [ 1444.712939][T23100] fuse: Unknown parameter 'max_r' [ 1446.454517][ T27] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1446.596487][T23120] fuse: Unknown parameter 'max_r' [ 1446.703945][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 1446.785146][ T27] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1446.807303][ T27] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.817609][ T27] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1446.836568][ T27] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1446.846211][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.865767][ T27] usbtmc 7-1:16.0: bulk endpoints not found [ 1447.829990][ T28] audit: type=1326 audit(1768292716.449:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23127 comm="syz.9.4412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x0 [ 1449.097329][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1449.103668][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1449.300990][ T5784] usb 7-1: USB disconnect, device number 17 [ 1449.730014][ T28] audit: type=1326 audit(1768292718.226:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.6.4422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8f749 code=0x0 [ 1450.506154][T23158] fuse: Unknown parameter 'max_r' [ 1452.132904][ T5784] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1452.357510][ T5784] usb 10-1: Using ep0 maxpacket: 8 [ 1452.376184][ T5784] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1452.406618][ T5784] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.454256][ T5784] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1452.507260][ T5784] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1452.534129][ T5784] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1452.580293][ T5784] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1452.610146][ T5784] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.645831][ T5784] usbtmc 10-1:16.0: bulk endpoints not found [ 1452.679320][T23185] netlink: 'syz.1.4432': attribute type 11 has an invalid length. [ 1453.024494][ T28] audit: type=1326 audit(1768292721.302:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23186 comm="syz.1.4433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x0 [ 1453.774478][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4434'. [ 1454.606326][T23203] fuse: Unknown parameter 'max_r' [ 1455.076548][ T27] usb 10-1: USB disconnect, device number 15 [ 1455.434627][T23207] binder: BINDER_SET_CONTEXT_MGR already set [ 1455.458845][T23207] binder: 23206:23207 ioctl 4018620d 2000000002c0 returned -16 [ 1456.151002][T23218] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4441'. [ 1456.605469][ T28] audit: type=1326 audit(1768292724.660:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23223 comm="syz.1.4444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x0 [ 1457.323811][T23230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4445'. [ 1457.373014][T23230] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1457.819991][T23234] netlink: 'syz.1.4446': attribute type 11 has an invalid length. [ 1458.361883][T23244] binder: BINDER_SET_CONTEXT_MGR already set [ 1458.392273][T23244] binder: 23243:23244 ioctl 4018620d 2000000002c0 returned -16 [ 1458.810381][T23251] fuse: Unknown parameter 'max_r' [ 1459.159339][ T28] audit: type=1326 audit(1768292727.044:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23252 comm="syz.9.4454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x0 [ 1459.402808][T23259] netlink: 'syz.1.4456': attribute type 11 has an invalid length. [ 1459.557035][ T28] audit: type=1326 audit(1768292727.409:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23261 comm="syz.6.4458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8f749 code=0x0 [ 1460.895013][T23279] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1460.980970][T23281] netlink: 'syz.4.4463': attribute type 1 has an invalid length. [ 1461.131260][T23281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1461.146634][T23283] bond4: (slave gretap1): making interface the new active one [ 1461.186756][T23283] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1461.812116][T23295] netlink: 'syz.1.4468': attribute type 11 has an invalid length. [ 1463.089902][T23311] fuse: Unknown parameter 'max_r' [ 1464.079610][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4479'. [ 1464.146177][T23325] veth0_macvtap: left promiscuous mode [ 1464.575405][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'. [ 1464.606867][T23333] bond0: option resend_igmp: invalid value (16711680) [ 1464.654389][T23333] bond0: option resend_igmp: allowed values 0 - 255 [ 1465.930810][T23349] tipc: Enabling of bearer rejected, failed to enable media [ 1466.698725][ T5784] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1466.874065][T23382] tipc: Enabling of bearer rejected, failed to enable media [ 1466.912162][ T5784] usb 7-1: Using ep0 maxpacket: 8 [ 1466.930704][ T5784] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1466.972302][ T5784] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1467.019844][ T28] audit: type=1326 audit(1768292734.385:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.021040][ T5784] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1467.110871][ T28] audit: type=1326 audit(1768292734.422:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.155154][ T5784] usb 7-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1467.220911][ T28] audit: type=1326 audit(1768292734.460:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.247727][ T5784] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1467.319243][ T5784] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1467.386514][ T28] audit: type=1326 audit(1768292734.460:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.416899][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.475857][ T5784] usbtmc 7-1:16.0: bulk endpoints not found [ 1467.560309][ T28] audit: type=1326 audit(1768292734.460:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.679837][ T28] audit: type=1326 audit(1768292734.460:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.782259][ T28] audit: type=1326 audit(1768292734.478:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.837645][ T28] audit: type=1326 audit(1768292734.478:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1467.895867][T11208] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1467.983611][ T28] audit: type=1326 audit(1768292734.478:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1468.120424][ T28] audit: type=1326 audit(1768292734.983:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23378 comm="syz.1.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x7ffc0000 [ 1468.173858][T11208] usb 2-1: Using ep0 maxpacket: 32 [ 1468.251679][T11208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.298148][T11208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.316050][T11208] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1468.330928][T11208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.349820][T11208] usb 2-1: config 0 descriptor?? [ 1469.236728][T23453] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4504'. [ 1469.639558][ T27] usb 7-1: USB disconnect, device number 18 [ 1470.722145][T23472] syzkaller0: entered promiscuous mode [ 1470.775991][T23472] syzkaller0: entered allmulticast mode [ 1470.866349][T23472] tipc: Enabled bearer , priority 0 [ 1470.998837][T23470] tipc: Resetting bearer [ 1471.213295][T23470] tipc: Disabling bearer [ 1471.692519][T23486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4512'. [ 1471.884637][ T27] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1472.071497][T11208] usbhid 2-1:0.0: can't add hid device: -71 [ 1472.079990][T11208] usbhid: probe of 2-1:0.0 failed with error -71 [ 1472.134172][T23487] netlink: 'syz.4.4513': attribute type 33 has an invalid length. [ 1472.142559][ T27] usb 10-1: Using ep0 maxpacket: 16 [ 1472.161514][T11208] usb 2-1: USB disconnect, device number 11 [ 1472.169407][ T27] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1472.182163][T23487] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4513'. [ 1472.197924][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.212218][ T27] usb 10-1: config 0 descriptor?? [ 1472.238468][ T27] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1472.452423][ T27] usb 10-1: Detected FT232B [ 1472.676699][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1472.695101][ T27] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1472.729926][ T27] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1472.782313][ T27] usb 10-1: USB disconnect, device number 16 [ 1472.827968][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1472.891877][ T27] ftdi_sio 10-1:0.0: device disconnected [ 1473.463047][T23513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1473.545377][T23513] veth0_macvtap: left promiscuous mode [ 1474.285699][T23531] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4531'. [ 1474.321874][T23531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4531'. [ 1475.042270][T23549] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4538'. [ 1475.087702][T23549] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1475.204714][T23550] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4538'. [ 1475.219454][T23550] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1475.331550][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1478.355161][T23571] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4544'. [ 1478.452326][T23593] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4551'. [ 1478.485859][T23593] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1478.709782][T23594] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4551'. [ 1478.776707][T23594] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1479.139605][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4552'. [ 1480.480898][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4562'. [ 1480.769695][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1480.769711][ T28] audit: type=1326 audit(1768292747.242:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1480.842419][ T28] audit: type=1326 audit(1768292747.299:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1480.905452][ T28] audit: type=1326 audit(1768292747.317:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1480.970711][ T28] audit: type=1326 audit(1768292747.317:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1481.061482][ T28] audit: type=1326 audit(1768292747.317:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1481.155862][ T28] audit: type=1326 audit(1768292747.317:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1481.254973][ T28] audit: type=1326 audit(1768292747.317:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1481.305018][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.342370][ T28] audit: type=1326 audit(1768292747.317:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1481.439966][ T28] audit: type=1326 audit(1768292747.317:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1481.520031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.549558][ T28] audit: type=1326 audit(1768292747.317:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23637 comm="syz.9.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x7ffc0000 [ 1482.866777][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4574'. [ 1484.963364][ T5784] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1485.215090][ T5784] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1485.267154][ T5784] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1485.309632][ T5784] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1485.373195][ T5784] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1485.413657][ T5784] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.682773][ T5784] usb 10-1: usb_control_msg returned -32 [ 1485.688551][ T5784] usbtmc 10-1:16.0: can't read capabilities [ 1486.457973][T23709] vivid-007: disconnect [ 1486.464973][T23708] vivid-007: reconnect [ 1487.749727][ T5784] usb 10-1: USB disconnect, device number 17 [ 1488.029435][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1488.029447][ T28] audit: type=1326 audit(1768292754.031:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23732 comm="syz.4.4595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bd98f749 code=0x0 [ 1489.401632][T23749] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4602'. [ 1489.410910][T23749] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1489.462285][T23749] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4602'. [ 1489.473015][T23749] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1489.715118][ T28] audit: type=1326 audit(1768292755.612:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23760 comm="syz.6.4607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8f749 code=0x0 [ 1491.208589][T11208] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1491.435731][T11208] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1491.455648][T11208] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1491.486725][T11208] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1491.507219][T11208] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1491.573582][T11208] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1491.606323][T11208] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1491.625460][T11208] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1491.645521][T11208] usb 7-1: Product: syz [ 1491.656355][T11208] usb 7-1: Manufacturer: syz [ 1491.690113][T11208] cdc_wdm 7-1:1.0: skipping garbage [ 1491.699685][T11208] cdc_wdm 7-1:1.0: skipping garbage [ 1491.750100][T11208] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1491.764741][T11208] cdc_wdm 7-1:1.0: Unknown control protocol [ 1491.938054][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1491.945122][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1491.952429][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1491.959111][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1491.966131][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1491.972856][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1491.979452][T11208] usb 7-1: USB disconnect, device number 19 [ 1491.986185][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1491.986214][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1491.986244][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1492.483894][ T28] audit: type=1326 audit(1768292758.193:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.4.4617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bd98f749 code=0x0 [ 1492.587738][T23793] syzkaller0: entered promiscuous mode [ 1492.609467][T23793] syzkaller0: entered allmulticast mode [ 1492.805379][T23800] fuse: Unknown parameter 'max_r' [ 1497.744758][ T28] audit: type=1326 audit(1768292763.111:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.4.4627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bd98f749 code=0x0 [ 1501.744266][T23849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4631'. [ 1501.797840][T23849] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1501.839016][T23849] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1501.902542][T23849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4631'. [ 1501.911737][T23849] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1501.974695][T23849] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1502.824304][T23870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.851237][T23870] batadv_slave_0: entered promiscuous mode [ 1503.055070][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1503.255595][T23879] tipc: Enabled bearer , priority 0 [ 1503.323569][T23876] tipc: Disabling bearer [ 1503.522900][T23883] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4642'. [ 1503.574671][T23883] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1503.656633][T23883] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1503.720400][T23884] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4642'. [ 1503.765295][T23884] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1503.817811][T23884] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1505.645338][T11205] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1505.850692][T11205] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1505.870915][T11205] usb 2-1: config 0 has no interface number 0 [ 1505.908497][T11205] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 1505.943715][T11205] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1505.974806][T11205] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1505.997279][T11205] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 1506.018087][T11205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.049151][T11205] usb 2-1: config 0 descriptor?? [ 1506.062541][T23902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1506.077215][T11205] option 2-1:0.84: GSM modem (1-port) converter detected [ 1506.502135][T23909] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4653'. [ 1506.537061][T23909] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1506.571973][T23909] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1506.619941][T23913] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4653'. [ 1506.641340][T23913] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1506.673676][T23913] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1506.975983][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4655'. [ 1507.076164][T23917] veth0_macvtap: left promiscuous mode [ 1508.989085][T23937] fuse: Unknown parameter 'max_r' [ 1509.040138][T23936] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1509.650405][T23942] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4664'. [ 1509.699698][T23942] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1509.750838][T23942] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1509.810481][T23943] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4664'. [ 1509.810850][T11205] usb 2-1: USB disconnect, device number 12 [ 1509.831377][T23943] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1509.878564][T23943] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1509.881016][T11205] option 2-1:0.84: device disconnected [ 1510.430012][T23951] binder: 23950:23951 ioctl 4018620d 0 returned -22 [ 1511.484452][T23969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.499242][T23969] batadv_slave_0: entered promiscuous mode [ 1511.765928][T23971] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1511.805399][T23971] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1511.922773][T23973] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1511.932094][T23973] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1512.823757][T23982] netlink: 'syz.9.4679': attribute type 11 has an invalid length. [ 1513.484080][T23990] binder: 23989:23990 ioctl 4018620d 0 returned -22 [ 1514.050643][T11205] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1514.264809][T11205] usb 10-1: Using ep0 maxpacket: 16 [ 1514.291257][T11205] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1514.317768][T11205] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1514.360475][T11205] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.471917][T11205] usb 10-1: Product: syz [ 1514.495768][T11205] usb 10-1: Manufacturer: syz [ 1514.522845][T11205] usb 10-1: SerialNumber: syz [ 1514.565109][T11205] usb 10-1: config 0 descriptor?? [ 1514.608387][T11205] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1514.691043][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.697607][T11205] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1514.704210][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1515.257659][T11205] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1515.769463][T11205] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1515.823600][T11205] em28xx 10-1:0.0: board has no eeprom [ 1516.264327][T11205] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1516.272546][T11205] em28xx 10-1:0.0: dvb set to bulk mode. [ 1516.286557][ T5784] em28xx 10-1:0.0: Binding DVB extension [ 1517.029391][T24031] syzkaller0: entered promiscuous mode [ 1517.053066][T24031] syzkaller0: entered allmulticast mode [ 1517.602016][T23997] em28xx 10-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 1517.666629][T11208] usb 10-1: USB disconnect, device number 18 [ 1517.697734][T11208] em28xx 10-1:0.0: Disconnecting em28xx [ 1517.939605][ T5784] em28xx 10-1:0.0: Registering input extension [ 1517.979334][T11208] em28xx 10-1:0.0: Closing input extension [ 1518.164405][T11208] em28xx 10-1:0.0: Freeing device [ 1518.605659][T24049] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1522.060470][T24070] binder: BINDER_SET_CONTEXT_MGR already set [ 1522.066538][T24070] binder: 24069:24070 ioctl 4018620d 2000000002c0 returned -16 [ 1523.322299][T11208] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1523.529098][T11208] usb 10-1: Using ep0 maxpacket: 8 [ 1523.541991][T11208] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1523.557880][T11208] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1523.579259][T11208] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1523.589204][T11208] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1523.615560][T11208] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1523.630437][T11208] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1523.643685][T11208] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.910565][T11208] usb 10-1: usb_control_msg returned -32 [ 1523.916361][T11208] usbtmc 10-1:16.0: can't read capabilities [ 1523.953540][T11208] usb 10-1: USB disconnect, device number 19 [ 1525.996427][T24055] tipc: Enabling of bearer rejected, failed to enable media [ 1526.514819][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1527.546383][ T27] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1527.763306][ T27] usb 10-1: Using ep0 maxpacket: 8 [ 1527.783118][ T27] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1527.808767][ T27] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1527.834045][ T27] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1527.862229][ T27] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1527.891947][ T27] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1527.935394][ T27] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1527.957472][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.247585][ T27] usb 10-1: usb_control_msg returned -32 [ 1528.262207][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4717'. [ 1528.287662][ T27] usbtmc 10-1:16.0: can't read capabilities [ 1528.319898][ T27] usb 10-1: USB disconnect, device number 20 [ 1528.823819][T24127] tipc: Enabling of bearer rejected, failed to enable media [ 1530.531737][T24142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4722'. [ 1531.310788][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1531.523064][T24163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1531.524811][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 1531.566059][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1531.575369][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1531.610095][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1531.641652][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1531.668225][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1531.713881][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1531.759762][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.908788][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4728'. [ 1531.996401][ T27] usb 2-1: usb_control_msg returned -32 [ 1532.002075][ T27] usbtmc 2-1:16.0: can't read capabilities [ 1532.051821][ T27] usb 2-1: USB disconnect, device number 13 [ 1532.142604][T24174] tipc: Enabling of bearer rejected, failed to enable media [ 1533.021717][T11205] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1533.239637][T11205] usb 2-1: Using ep0 maxpacket: 16 [ 1533.257485][T11205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1533.292430][T11205] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1533.319390][T11205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.338483][T11205] usb 2-1: Product: syz [ 1533.359716][T11205] usb 2-1: Manufacturer: syz [ 1533.369804][T11205] usb 2-1: SerialNumber: syz [ 1533.387555][T11205] usb 2-1: config 0 descriptor?? [ 1533.405377][T11205] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1533.426553][T11205] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1534.058201][T11205] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1534.212592][T24195] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4734'. [ 1534.246105][T24195] veth0_macvtap: left promiscuous mode [ 1534.519475][T11205] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1534.527572][T11205] em28xx 2-1:0.0: board has no eeprom [ 1535.712490][T24184] em28xx 2-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 1535.780757][T11205] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1535.832811][T11205] em28xx 2-1:0.0: dvb set to bulk mode. [ 1535.881676][ T5784] em28xx 2-1:0.0: Binding DVB extension [ 1535.913298][T11205] usb 2-1: USB disconnect, device number 14 [ 1535.951431][T11205] em28xx 2-1:0.0: Disconnecting em28xx [ 1536.032485][ T5784] em28xx 2-1:0.0: Registering input extension [ 1536.060049][T11205] em28xx 2-1:0.0: Closing input extension [ 1536.102648][T11205] em28xx 2-1:0.0: Freeing device [ 1536.287333][T24219] tipc: Enabling of bearer rejected, failed to enable media [ 1537.320005][T24243] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1537.773915][T24251] xt_hashlimit: size too large, truncated to 1048576 [ 1538.294287][ T27] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1538.571911][ T27] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1538.580176][ T27] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1538.677394][ T27] usb 10-1: config 0 has no interface number 0 [ 1538.717483][ T27] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1538.753618][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.761790][ T27] usb 10-1: Product: syz [ 1538.824659][ T27] usb 10-1: Manufacturer: syz [ 1538.839184][ T27] usb 10-1: SerialNumber: syz [ 1538.872545][ T27] usb 10-1: config 0 descriptor?? [ 1539.887834][T24269] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4746'. [ 1542.926890][ T5784] usb 10-1: USB disconnect, device number 21 [ 1543.269594][ T28] audit: type=1326 audit(1768292805.696:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24290 comm="syz.1.4753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x0 [ 1544.790328][T24311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1544.817231][T24311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1544.827227][T24311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1544.845128][T24311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1544.855076][T24311] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1544.878568][T24311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1545.006248][T24314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1545.035313][T24314] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1545.141130][T24315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1545.167582][T24315] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1545.460572][ T28] audit: type=1326 audit(1768292807.744:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24322 comm="syz.1.4765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x0 [ 1545.754580][T24309] chnl_net:caif_netlink_parms(): no params data found [ 1545.868147][T24332] netlink: 'syz.6.4766': attribute type 19 has an invalid length. [ 1546.176086][T24309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.227397][T24309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.239583][T24309] bridge_slave_0: entered allmulticast mode [ 1546.247192][T24309] bridge_slave_0: entered promiscuous mode [ 1546.300576][T24309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.314315][T24309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.330049][T24309] bridge_slave_1: entered allmulticast mode [ 1546.358527][T24309] bridge_slave_1: entered promiscuous mode [ 1546.471581][T24309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.504857][T24309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.786688][T24309] team0: Port device team_slave_0 added [ 1546.858784][T24309] team0: Port device team_slave_1 added [ 1547.036097][T24309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.088628][T24309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.180963][T11907] Bluetooth: hci2: command tx timeout [ 1547.194916][T24309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.385594][T24309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.411241][T24309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.482622][T24309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.498096][T24357] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4771'. [ 1547.511333][T24357] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1547.619542][T24358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4771'. [ 1547.640607][T24358] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1547.685990][T24361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4772'. [ 1547.996666][T24309] hsr_slave_0: entered promiscuous mode [ 1548.020466][T24309] hsr_slave_1: entered promiscuous mode [ 1548.064301][ T28] audit: type=1326 audit(1768292810.175:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24369 comm="syz.6.4776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8f749 code=0x0 [ 1548.526629][T24309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.765526][T24309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.083578][T24309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.282688][T24309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.394752][T11907] Bluetooth: hci2: command tx timeout [ 1550.416342][T24309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1550.443743][T24309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1550.510040][T24309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1550.536178][T24309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1550.560918][T24391] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1550.641292][T11208] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 1550.650088][T11208] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 1550.670053][T11208] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 1550.745470][T11208] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 1550.943159][T24309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.028556][T24309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.089207][T14630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.096423][T14630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.135843][T14630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.143062][T14630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.618546][T11907] Bluetooth: hci2: command tx timeout [ 1551.767131][T24309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.804886][T24309] veth0_vlan: entered promiscuous mode [ 1552.936011][T24309] veth1_vlan: entered promiscuous mode [ 1553.124931][T24309] veth0_macvtap: entered promiscuous mode [ 1553.178169][T24309] veth1_macvtap: entered promiscuous mode [ 1553.281805][T24309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.331639][T24309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.369577][T24423] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4783'. [ 1553.372241][T24309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.425736][T24309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.466936][T24309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.521462][T24309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.564063][T24309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.583961][T24309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.605617][T24309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.627042][T24309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.699061][ T28] audit: type=1326 audit(1768292815.431:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.6.4785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8f749 code=0x0 [ 1553.839416][T23423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.844055][T11907] Bluetooth: hci2: command tx timeout [ 1553.884849][T23423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.906970][T24206] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1553.957197][T23423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.966644][T23423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.142233][T24206] usb 2-1: Using ep0 maxpacket: 32 [ 1554.151086][T24206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.174542][T24206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.184443][T24206] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1554.217116][T24206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.250221][T24206] usb 2-1: config 0 descriptor?? [ 1554.717432][T24425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.749975][T24425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.806508][T24206] ft260 0003:0403:6030.0007: unknown main item tag 0x7 [ 1555.014267][T24206] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 1555.229145][T24206] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1555.266773][T24465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4793'. [ 1555.444879][T24206] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 1555.682297][T16409] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1555.724300][ T28] audit: type=1326 audit(1768292817.338:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.4.4797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7edd18f749 code=0x0 [ 1555.762366][T24425] ft260 0003:0403:6030.0007: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 1555.885378][T16409] usb 10-1: Using ep0 maxpacket: 32 [ 1555.893485][T16409] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1555.908130][T16409] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1555.919146][T16409] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.945081][T16409] usb 10-1: Product: syz [ 1555.955204][T24425] ft260 0003:0403:6030.0007: failed to reset I2C controller: -108 [ 1555.971146][T16409] usb 10-1: Manufacturer: syz [ 1555.992239][T16409] usb 10-1: SerialNumber: syz [ 1556.061019][T16409] usb 10-1: config 0 descriptor?? [ 1556.079083][T16409] gs_usb 10-1:0.0: Required endpoints not found [ 1556.328544][T16409] usb 10-1: USB disconnect, device number 22 [ 1556.439232][T24461] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4790'. [ 1556.940916][T15031] usb 2-1: USB disconnect, device number 15 [ 1558.165713][T24491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4804'. [ 1558.480206][ T28] audit: type=1326 audit(1768292819.919:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24494 comm="syz.1.4806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x0 [ 1558.740611][ T27] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1558.818357][T24504] tipc: Enabled bearer , priority 0 [ 1558.860160][T24503] tipc: Disabling bearer [ 1558.962506][ T27] usb 10-1: Using ep0 maxpacket: 32 [ 1558.975192][ T27] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.010771][ T27] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.037546][ T27] usb 10-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1559.060491][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.096453][ T27] usb 10-1: config 0 descriptor?? [ 1559.357101][ T27] usbhid 10-1:0.0: can't add hid device: -71 [ 1559.372435][ T27] usbhid: probe of 10-1:0.0 failed with error -71 [ 1559.405165][ T27] usb 10-1: USB disconnect, device number 23 [ 1559.512786][T24514] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4814'. [ 1560.715861][ T28] audit: type=1326 audit(1768292822.005:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24538 comm="syz.1.4823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c518f749 code=0x0 [ 1561.936781][T24542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1562.927746][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4830'. [ 1563.054057][ T28] audit: type=1326 audit(1768292824.193:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24562 comm="syz.9.4832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x0 [ 1563.181351][T24565] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4833'. [ 1563.218971][ T28] audit: type=1800 audit(1768292824.333:846): pid=24565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4833" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1564.937308][T24596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1564.947067][T24596] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1565.004566][T24596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1565.014407][T24596] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 1566.106258][T24605] pim6reg1: entered promiscuous mode [ 1566.130040][T24605] pim6reg1: entered allmulticast mode [ 1566.644651][T24614] syzkaller0: entered promiscuous mode [ 1566.665276][T24614] syzkaller0: entered allmulticast mode [ 1566.899466][ T5784] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1567.137414][ T5784] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1567.170588][ T5784] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1567.190061][ T5784] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1567.219521][ T5784] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1567.231581][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.528951][ T5784] usb 2-1: usb_control_msg returned -32 [ 1567.552701][ T5784] usbtmc 2-1:16.0: can't read capabilities [ 1567.574018][T16409] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1567.606493][ T5784] usb 2-1: USB disconnect, device number 16 [ 1567.799315][T16409] usb 7-1: Using ep0 maxpacket: 16 [ 1567.855207][T16409] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1567.891689][T16409] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1567.900944][T16409] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.909435][T16409] usb 7-1: Product: syz [ 1567.913707][T16409] usb 7-1: Manufacturer: syz [ 1567.942675][T16409] usb 7-1: SerialNumber: syz [ 1567.952260][T16409] usb 7-1: config 0 descriptor?? [ 1567.984444][T16409] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1568.012297][T16409] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1568.641108][T16409] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1569.154868][T16409] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1569.199362][T16409] em28xx 7-1:0.0: board has no eeprom [ 1569.616663][T16409] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1569.624653][T16409] em28xx 7-1:0.0: dvb set to bulk mode. [ 1569.637695][T15031] em28xx 7-1:0.0: Binding DVB extension [ 1570.611909][T24624] em28xx 7-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 1570.672976][T24206] usb 7-1: USB disconnect, device number 20 [ 1570.688684][T24206] em28xx 7-1:0.0: Disconnecting em28xx [ 1570.812479][T15031] em28xx 7-1:0.0: Registering input extension [ 1570.835192][T24206] em28xx 7-1:0.0: Closing input extension [ 1570.938652][T24206] em28xx 7-1:0.0: Freeing device [ 1575.014860][T15031] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1575.241973][T15031] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1575.255888][T15031] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1575.290926][T15031] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1575.304369][T15031] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1575.335964][T15031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.615272][T15031] usb 2-1: usb_control_msg returned -32 [ 1575.621692][T15031] usbtmc 2-1:16.0: can't read capabilities [ 1575.678862][T15031] usb 2-1: USB disconnect, device number 17 [ 1576.315319][T24665] binder: BINDER_SET_CONTEXT_MGR already set [ 1576.344754][T24665] binder: 24664:24665 ioctl 4018620d 2000000002c0 returned -16 [ 1576.875117][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4852'. [ 1579.348178][T24206] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1579.574530][T24206] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1579.595214][T24206] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1579.636608][T24206] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1579.679286][T24206] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1579.703486][T24206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.727226][T24692] syzkaller0: entered promiscuous mode [ 1579.757784][T24692] syzkaller0: entered allmulticast mode [ 1579.821698][T24692] tipc: Enabled bearer , priority 0 [ 1579.872015][T24691] tipc: Resetting bearer [ 1579.973586][T24206] usb 7-1: usb_control_msg returned -32 [ 1579.994516][T24691] tipc: Disabling bearer [ 1579.996410][T24206] usbtmc 7-1:16.0: can't read capabilities [ 1580.039677][T24206] usb 7-1: USB disconnect, device number 21 [ 1580.167981][T24694] syzkaller0: entered promiscuous mode [ 1580.179625][T24694] syzkaller0: entered allmulticast mode [ 1580.372619][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1580.379077][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1581.981846][T24720] fuse: Unknown parameter 'max_r' [ 1590.266490][T24718] kthread_run failed with err -4 [ 1591.668379][T24758] syzkaller0: entered promiscuous mode [ 1591.674271][T24758] syzkaller0: entered allmulticast mode [ 1592.231551][T24764] syzkaller0: entered promiscuous mode [ 1592.243309][T24764] syzkaller0: entered allmulticast mode [ 1592.298057][T24767] tipc: Enabled bearer , priority 0 [ 1593.902496][T24430] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1594.084450][T24430] usb 7-1: Using ep0 maxpacket: 32 [ 1594.091875][T24430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.105345][T24430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.127660][T24430] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1594.136807][T24430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.177485][T24430] usb 7-1: config 0 descriptor?? [ 1594.668950][T24784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.678028][T24784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.725610][T24430] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 1594.934574][T24430] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 1595.163274][T24430] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 1595.385189][T24430] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 1595.644226][T24784] ft260 0003:0403:6030.0008: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 1595.840539][T24784] ft260 0003:0403:6030.0008: failed to reset I2C controller: -108 [ 1596.850241][ T5784] usb 7-1: USB disconnect, device number 22 [ 1600.636319][T24761] tipc: Resetting bearer [ 1600.700267][T24761] tipc: Disabling bearer [ 1602.535346][T24819] syzkaller0: entered promiscuous mode [ 1602.587455][T24819] syzkaller0: entered allmulticast mode [ 1605.375111][T24863] binder: 24862:24863 ioctl 4018620d 0 returned -22 [ 1607.740424][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1611.547477][T24856] tipc: Enabling of bearer rejected, failed to enable media [ 1612.274477][ T5784] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1612.518922][ T5784] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1612.542023][ T5784] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1612.616205][ T5784] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.700748][ T5784] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1612.769028][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.016466][T24905] binder: 24904:24905 ioctl 4018620d 0 returned -22 [ 1613.036645][ T5784] usb 2-1: usb_control_msg returned -32 [ 1613.043634][ T5784] usbtmc 2-1:16.0: can't read capabilities [ 1613.680867][T24910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4926'. [ 1614.251516][T24916] syzkaller0: entered promiscuous mode [ 1614.257565][T24916] syzkaller0: entered allmulticast mode [ 1614.484740][T24917] syzkaller0: entered promiscuous mode [ 1614.499614][T24917] syzkaller0: entered allmulticast mode [ 1614.508130][T24922] tipc: Enabled bearer , priority 0 [ 1614.995376][ T5784] usb 2-1: USB disconnect, device number 18 [ 1616.757798][T24938] binder: 24937:24938 ioctl 4018620d 0 returned -22 [ 1618.632735][T24311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1618.668025][T24311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1618.678366][T24311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1618.731522][T24311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1618.739512][T24311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1618.755306][T24311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1621.041353][T11907] Bluetooth: hci3: command tx timeout [ 1622.363656][T24914] tipc: Resetting bearer [ 1622.429911][T24914] tipc: Disabling bearer [ 1622.441404][T16409] tipc: Node number set to 1121586935 [ 1622.633150][T23433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.873832][T23433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.053181][T23433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.224698][T23433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.240263][T24430] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1623.310710][T11907] Bluetooth: hci3: command tx timeout [ 1623.452819][T24430] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1623.464065][T24430] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1623.506156][T24430] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1623.530718][T24430] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1623.540006][T24430] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.787083][T24430] usb 10-1: usb_control_msg returned -32 [ 1623.823965][T24430] usbtmc 10-1:16.0: can't read capabilities [ 1623.993996][T24961] syzkaller0: entered promiscuous mode [ 1624.008033][T24961] syzkaller0: entered allmulticast mode [ 1624.220152][T24941] chnl_net:caif_netlink_parms(): no params data found [ 1625.550763][T11907] Bluetooth: hci3: command tx timeout [ 1626.129715][ T27] usb 10-1: USB disconnect, device number 24 [ 1627.759439][T11907] Bluetooth: hci3: command tx timeout [ 1631.363800][T24984] tipc: Enabling of bearer rejected, failed to enable media [ 1631.406037][T23433] tipc: Left network mode [ 1631.680602][ T28] audit: type=1326 audit(1768292888.369:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25009 comm="syz.9.4949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4811b8f749 code=0x0 [ 1632.044087][T24941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.058532][T24941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.078767][T24941] bridge_slave_0: entered allmulticast mode [ 1632.114261][T24941] bridge_slave_0: entered promiscuous mode [ 1632.537742][T24941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.568806][T24941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.581429][T24941] bridge_slave_1: entered allmulticast mode [ 1632.611548][T24941] bridge_slave_1: entered promiscuous mode [ 1632.989107][T16409] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1633.155114][T24941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.221341][T16409] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1633.233937][T16409] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1633.273843][T16409] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1633.344847][T24941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.354777][T16409] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1633.438826][T16409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.669138][T24941] team0: Port device team_slave_0 added [ 1633.706638][T16409] usb 10-1: usb_control_msg returned -32 [ 1633.712348][T16409] usbtmc 10-1:16.0: can't read capabilities [ 1633.799722][T24941] team0: Port device team_slave_1 added [ 1633.907828][T24941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.915563][T24941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.973167][T24941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1634.111691][T24941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1634.118834][T24941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1634.158153][T24941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.225688][T23433] bond0: (slave wlan1): Releasing backup interface [ 1634.320050][T25044] syzkaller0: entered promiscuous mode [ 1634.329685][T25044] syzkaller0: entered allmulticast mode [ 1634.407118][T24941] hsr_slave_0: entered promiscuous mode [ 1634.429277][T24941] hsr_slave_1: entered promiscuous mode [ 1634.444958][T24941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1634.452697][T24941] Cannot create hsr debugfs directory [ 1635.906962][T15031] usb 10-1: USB disconnect, device number 25 [ 1641.459749][T25049] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4956'. [ 1641.519253][T23433] hsr_slave_0: left promiscuous mode [ 1641.532011][T23433] hsr_slave_1: left promiscuous mode [ 1641.547472][T23433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.587685][T23433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.608326][T23433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.619180][T23433] bridge_slave_1: left allmulticast mode [ 1641.624909][T23433] bridge_slave_1: left promiscuous mode [ 1641.649434][T23433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.659642][T23433] bridge_slave_0: left allmulticast mode [ 1641.665671][T23433] bridge_slave_0: left promiscuous mode [ 1641.671598][T23433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.729621][T23433] veth1_macvtap: left promiscuous mode [ 1641.735434][T23433] veth1_vlan: left promiscuous mode [ 1641.742074][T23433] veth0_vlan: left promiscuous mode [ 1642.038860][T23433] bond11 (unregistering): Released all slaves [ 1642.084757][T23433] bond10 (unregistering): Released all slaves [ 1642.112898][T23433] bond9 (unregistering): Released all slaves [ 1642.145448][T23433] bond8 (unregistering): Released all slaves [ 1642.169878][T23433] bond7 (unregistering): Released all slaves [ 1642.204272][T23433] bond6 (unregistering): Released all slaves [ 1642.251208][T23433] bond5 (unregistering): Released all slaves [ 1642.707041][T23433] bond4 (unregistering): Released all slaves [ 1643.123338][T23433] bond3 (unregistering): Released all slaves [ 1643.602809][T23433] bond2 (unregistering): Released all slaves [ 1644.010319][T23433] bond1 (unregistering): Released all slaves [ 1645.252451][T23433] team0 (unregistering): Port device team_slave_1 removed [ 1645.370923][T23433] team0 (unregistering): Port device team_slave_0 removed [ 1645.476147][T23433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.590423][T23433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.075512][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1646.082143][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1647.219671][T23433] bond0 (unregistering): Released all slaves [ 1647.423754][T25050] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4956'. [ 1647.585020][T25062] tipc: Enabling of bearer rejected, failed to enable media [ 1648.740823][T15031] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1649.019181][T15031] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1649.029023][T15031] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1649.071855][T15031] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1649.145037][T15031] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1649.158505][T15031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.277818][T24311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1649.309933][T25085] syzkaller0: entered promiscuous mode [ 1649.328697][T24311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1649.341837][T24311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1649.353716][T25085] syzkaller0: entered allmulticast mode [ 1649.378171][T24311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1649.406499][T24311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1649.422032][T24311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1649.432862][T15031] usb 5-1: usb_control_msg returned -32 [ 1649.438933][T15031] usbtmc 5-1:16.0: can't read capabilities [ 1651.631418][T11907] Bluetooth: hci4: command tx timeout [ 1651.653520][T24430] usb 5-1: USB disconnect, device number 8 [ 1653.856028][T11907] Bluetooth: hci4: command tx timeout [ 1656.079919][T11907] Bluetooth: hci4: command tx timeout [ 1656.483301][T25102] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4965'. [ 1656.492439][T25103] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4965'. [ 1656.521451][T23433] IPVS: stop unused estimator thread 0... [ 1656.927490][T25111] syzkaller0: entered promiscuous mode [ 1656.945903][T25111] syzkaller0: entered allmulticast mode [ 1657.185473][T23437] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.235906][T25108] tipc: Enabled bearer , priority 0 [ 1657.315085][T23437] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.340517][T25107] tipc: Resetting bearer [ 1657.403524][T25107] tipc: Disabling bearer [ 1657.420859][T24941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1657.465297][T23437] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.532963][T24941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1657.573857][T24941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1657.600115][T24941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1657.753930][T23437] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.031690][T25090] chnl_net:caif_netlink_parms(): no params data found [ 1658.305181][T11907] Bluetooth: hci4: command tx timeout [ 1658.351774][ T27] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1658.550889][T25142] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4972'. [ 1658.595873][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1658.639189][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1658.680125][T24941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.704480][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1658.739730][T25141] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4972'. [ 1658.785990][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1658.822785][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.855924][T25090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.897475][T25090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.911389][T25090] bridge_slave_0: entered allmulticast mode [ 1658.930588][T25090] bridge_slave_0: entered promiscuous mode [ 1658.967389][T23437] tipc: Left network mode [ 1658.988460][T25090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.011592][T25090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.019216][T25090] bridge_slave_1: entered allmulticast mode [ 1659.027269][T25090] bridge_slave_1: entered promiscuous mode [ 1659.085681][ T27] usb 5-1: usb_control_msg returned -32 [ 1659.097145][ T27] usbtmc 5-1:16.0: can't read capabilities [ 1659.125796][T24941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.436958][T25148] syzkaller0: entered promiscuous mode [ 1659.442667][T25148] syzkaller0: entered allmulticast mode [ 1659.479537][T25090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.511861][T25090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.217430][ T27] usb 5-1: USB disconnect, device number 9 [ 1667.539157][T23428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.546433][T23428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.582352][T25175] tipc: Enabling of bearer rejected, failed to enable media [ 1667.668420][T25090] team0: Port device team_slave_0 added [ 1667.695832][T25090] team0: Port device team_slave_1 added [ 1667.983324][T23425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.990700][T23425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.046911][T25090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.053956][T25090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1668.111489][T25090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.129995][T25090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.137153][T25090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1668.177317][T25090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.331538][T25186] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1668.345195][T25187] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1668.422057][T25090] hsr_slave_0: entered promiscuous mode [ 1668.440394][T25090] hsr_slave_1: entered promiscuous mode [ 1668.469352][T25090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1668.499946][T25090] Cannot create hsr debugfs directory [ 1669.571517][T25204] tipc: Started in network mode [ 1669.605836][T25204] tipc: Node identity 3e752c1010e9, cluster identity 4711 [ 1669.613215][T25204] tipc: Enabled bearer , priority 0 [ 1669.670838][T25207] syzkaller0: entered promiscuous mode [ 1669.691450][T25207] syzkaller0: entered allmulticast mode [ 1669.791251][T25203] tipc: Resetting bearer [ 1669.923338][T25203] tipc: Disabling bearer [ 1670.281665][T23437] hsr_slave_0: left promiscuous mode [ 1670.302903][T23437] hsr_slave_1: left promiscuous mode [ 1670.342960][T23437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.365820][T23437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1670.381308][T23437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1670.389999][T23437] bridge_slave_1: left allmulticast mode [ 1670.395723][T23437] bridge_slave_1: left promiscuous mode [ 1670.411603][T23437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.445939][T23437] bridge_slave_0: left allmulticast mode [ 1670.461778][T23437] bridge_slave_0: left promiscuous mode [ 1670.467744][T23437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.713888][T23437] veth1_macvtap: left promiscuous mode [ 1670.738731][T23437] veth1_vlan: left promiscuous mode [ 1670.752658][T23437] veth0_vlan: left promiscuous mode [ 1671.255928][T23437] bond1 (unregistering): Released all slaves [ 1672.781193][T23437] team0 (unregistering): Port device team_slave_1 removed [ 1672.968828][T23437] team0 (unregistering): Port device team_slave_0 removed [ 1673.115550][T23437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.269876][T23437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.871254][T23437] bond0 (unregistering): Released all slaves [ 1675.452546][T25231] syzkaller0: entered promiscuous mode [ 1675.462981][T25231] syzkaller0: entered allmulticast mode [ 1675.471913][T25249] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4986'. [ 1675.482046][T25250] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4986'. [ 1675.668367][T24311] Bluetooth: hci2: command 0x0406 tx timeout [ 1676.687845][T25256] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1682.787714][T24311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1682.849604][T24311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1682.901793][T24311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1682.934387][T24311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1682.972450][T24311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1682.983496][T24311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1683.481137][T25264] tipc: Enabling of bearer rejected, failed to enable media [ 1684.067165][T25285] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4993'. [ 1684.094816][T25286] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4993'. [ 1685.021775][T25304] syzkaller0: entered promiscuous mode [ 1685.036461][T25304] syzkaller0: entered allmulticast mode [ 1685.253700][T24311] Bluetooth: hci1: command tx timeout [ 1687.479899][T24311] Bluetooth: hci1: command tx timeout [ 1689.699004][T24311] Bluetooth: hci1: command tx timeout [ 1691.936934][T24311] Bluetooth: hci1: command tx timeout [ 1692.195177][T25338] tipc: Enabling of bearer rejected, failed to enable media [ 1692.344826][T23437] IPVS: stop unused estimator thread 0... [ 1692.590222][T25364] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5002'. [ 1692.810439][T25367] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5002'. [ 1693.157868][T25090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1693.214651][T25272] chnl_net:caif_netlink_parms(): no params data found [ 1693.279657][T25090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1693.310827][T25090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1693.721176][T25090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1694.769243][T25404] syzkaller0: entered promiscuous mode [ 1694.790360][T25404] syzkaller0: entered allmulticast mode [ 1694.829018][T25272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.855945][T25272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.885532][T25272] bridge_slave_0: entered allmulticast mode [ 1694.904112][T25272] bridge_slave_0: entered promiscuous mode [ 1694.928668][T25272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.935872][T25272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.947364][T25272] bridge_slave_1: entered allmulticast mode [ 1694.957776][T25272] bridge_slave_1: entered promiscuous mode [ 1701.795989][T25425] tipc: Enabling of bearer rejected, failed to enable media [ 1701.886341][T25272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.939359][T25272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.074546][T25272] team0: Port device team_slave_0 added [ 1702.184894][T25429] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5009'. [ 1702.267955][T25272] team0: Port device team_slave_1 added [ 1702.274153][T25434] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5009'. [ 1702.576657][T25272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.583689][T25272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.686086][T25272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.789344][T25272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.796361][T25272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.896850][T25272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.592026][T25272] hsr_slave_0: entered promiscuous mode [ 1703.606856][T25272] hsr_slave_1: entered promiscuous mode [ 1703.625872][T25272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1703.646368][T25272] Cannot create hsr debugfs directory [ 1703.659091][T25090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.862702][T25463] syzkaller0: entered promiscuous mode [ 1703.869164][T25463] syzkaller0: entered allmulticast mode [ 1704.024553][T25463] tipc: Enabled bearer , priority 0 [ 1704.056242][T25462] tipc: Resetting bearer [ 1704.134246][T25462] tipc: Disabling bearer [ 1704.171062][T25090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.353659][T23436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.360902][T23436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.621894][T23436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.629161][T23436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.916982][T25475] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5018'. [ 1705.082088][T25477] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5018'. [ 1705.152287][T23437] hsr_slave_0: left promiscuous mode [ 1705.184662][T23437] hsr_slave_1: left promiscuous mode [ 1705.191615][T23437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.213782][T23437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.260833][T23437] bridge_slave_1: left allmulticast mode [ 1705.267044][T23437] bridge_slave_1: left promiscuous mode [ 1705.291091][T23437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.314568][T23437] bridge_slave_0: left allmulticast mode [ 1705.320317][T23437] bridge_slave_0: left promiscuous mode [ 1705.344523][T23437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.271150][T23437] team0 (unregistering): Port device team_slave_1 removed [ 1706.389851][T23437] team0 (unregistering): Port device team_slave_0 removed [ 1706.511048][T23437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.640399][T23437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.069727][T23437] bond0 (unregistering): Released all slaves [ 1708.255598][T25488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5020'. [ 1708.339292][T25496] syzkaller0: entered promiscuous mode [ 1708.349066][T25496] syzkaller0: entered allmulticast mode [ 1708.370678][T25503] tipc: Enabled bearer , priority 0 [ 1708.411927][T25493] tipc: Resetting bearer [ 1708.442490][T25508] binder: BINDER_SET_CONTEXT_MGR already set [ 1708.452330][T25508] binder: 25507:25508 ioctl 4018620d 200000000100 returned -16 [ 1708.464561][T25508] binder: BINDER_SET_CONTEXT_MGR already set [ 1708.474982][T25508] binder: 25507:25508 ioctl 4018620d 2000000002c0 returned -16 [ 1708.517517][T25493] tipc: Disabling bearer [ 1708.616151][T25090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1709.726061][T25090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1709.979266][T25272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1710.034197][T25090] veth0_vlan: entered promiscuous mode [ 1710.057699][T25272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1710.109677][T25272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1710.219026][T25272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1710.276128][T25533] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1710.470062][T25534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1710.586248][T25090] veth1_vlan: entered promiscuous mode [ 1710.768076][T25090] veth0_macvtap: entered promiscuous mode [ 1710.848327][T25090] veth1_macvtap: entered promiscuous mode [ 1710.989168][T25090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.025549][T25090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.067518][T25090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.133575][T25090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1711.156376][T25090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.184193][T25090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1711.199447][T25272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.301796][T25556] syzkaller0: entered promiscuous mode [ 1711.316867][T25556] syzkaller0: entered allmulticast mode [ 1711.473041][T25556] tipc: Enabled bearer , priority 0 [ 1711.492036][T25272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.532379][T23433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.539642][T23433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1711.573509][T25090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.592654][T25090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.625352][T25090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.649206][T25090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.699377][T25554] tipc: Resetting bearer [ 1711.798043][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1711.804943][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1711.821273][T25554] tipc: Disabling bearer [ 1711.837722][T23433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.844878][T23433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1712.432753][T16018] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1712.630215][T16018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1712.648069][T16018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7331, setting to 64 [ 1712.705744][T16018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1712.776523][T16018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1712.799483][T16018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.092655][T16018] usb 5-1: usb_control_msg returned -32 [ 1713.100128][T16018] usbtmc 5-1:16.0: can't read capabilities [ 1713.905719][T23437] bond4: (slave gretap1): Releasing active interface [ 1714.152407][T11907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1714.168293][T11907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1714.208101][T11907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1714.286940][T11907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1714.302004][T11907] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1714.311175][T11907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1714.574291][T25272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.706810][T23437] bond0: (slave wlan1): Releasing backup interface [ 1715.103048][T23437] hsr_slave_0: left promiscuous mode [ 1715.115342][T23437] hsr_slave_1: left promiscuous mode [ 1715.134434][T23437] bridge_slave_1: left allmulticast mode [ 1715.157236][T23437] bridge_slave_1: left promiscuous mode [ 1715.188395][T23437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.250757][T23437] bridge_slave_0: left allmulticast mode [ 1715.286411][T23437] bridge_slave_0: left promiscuous mode [ 1715.314448][T23437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.391104][T16409] usb 5-1: USB disconnect, device number 10 [ 1715.536427][T23437] veth1_macvtap: left promiscuous mode [ 1715.542096][T23437] veth1_vlan: left promiscuous mode [ 1715.578241][T23437] veth0_vlan: left promiscuous mode [ 1716.459671][T23437] bond4 (unregistering): Released all slaves [ 1716.486813][T23437] bond3 (unregistering): Released all slaves [ 1716.562372][T24311] Bluetooth: hci3: command tx timeout [ 1716.629953][T23437] pim6reg (unregistering): left allmulticast mode [ 1717.105283][T23437] bond2 (unregistering): Released all slaves [ 1717.708657][T23437] bond1 (unregistering): Released all slaves [ 1718.801165][T24311] Bluetooth: hci3: command tx timeout [ 1718.902161][T23437] team0 (unregistering): Port device team_slave_1 removed [ 1719.038647][T23437] team0 (unregistering): Port device team_slave_0 removed [ 1719.185449][T23437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1719.328592][T23437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1720.674610][T23437] bond0 (unregistering): Released all slaves [ 1720.893239][T25612] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5035'. [ 1720.903140][T25612] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1720.913563][T25613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5035'. [ 1720.952744][T25613] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1721.014292][T24311] Bluetooth: hci3: command tx timeout [ 1721.087578][T25639] tipc: Enabling of bearer rejected, failed to enable media [ 1721.109299][T25272] veth0_vlan: entered promiscuous mode [ 1721.171501][T25272] veth1_vlan: entered promiscuous mode [ 1721.756166][T25597] chnl_net:caif_netlink_parms(): no params data found [ 1721.900758][T25272] veth0_macvtap: entered promiscuous mode [ 1722.158370][T25657] fuse: Unknown parameter 'max_r' [ 1722.202306][T25272] veth1_macvtap: entered promiscuous mode [ 1722.428289][T23437] IPVS: stop unused estimator thread 0... [ 1722.435053][T25597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.442188][T25597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.473568][T25597] bridge_slave_0: entered allmulticast mode [ 1722.510312][T25597] bridge_slave_0: entered promiscuous mode [ 1722.549177][T25272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1722.624989][T25272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.661072][T25272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1722.711037][T25272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.755862][T25272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1722.781491][T25597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.807695][T25597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.815064][T25597] bridge_slave_1: entered allmulticast mode [ 1722.862689][T25597] bridge_slave_1: entered promiscuous mode [ 1723.027885][T25597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.089139][T25597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.139626][T25272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1723.202885][T25272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.212800][T25272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1723.235622][T24311] Bluetooth: hci3: command tx timeout [ 1723.247966][T25272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.259888][T25272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1723.499221][T25272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.534553][T25272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.568891][T25272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.598785][T25272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.670340][T25597] team0: Port device team_slave_0 added [ 1723.713925][T25597] team0: Port device team_slave_1 added [ 1723.881703][T23437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.222227][T23437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.276141][T25597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.338967][T25597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.395267][T25597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.485558][T23437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.527588][T25597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.562289][T25597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.677987][T25597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.924068][T23437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.261623][T25597] hsr_slave_0: entered promiscuous mode [ 1725.300083][T25597] hsr_slave_1: entered promiscuous mode [ 1725.325726][T25597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1725.349755][T25597] Cannot create hsr debugfs directory [ 1725.563974][T14627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.592612][T14627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.062129][T14621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.116531][T14621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.122552][T25754] fuse: Unknown parameter 'max_r' [ 1734.227801][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4936'. [ 1734.252431][T25750] veth0_macvtap: left promiscuous mode [ 1736.148248][T25778] syzkaller0: entered promiscuous mode [ 1736.154269][T25778] syzkaller0: entered allmulticast mode [ 1736.397167][T25783] tipc: Enabled bearer , priority 0 [ 1736.496988][T25777] tipc: Resetting bearer [ 1736.669303][T25777] tipc: Disabling bearer [ 1736.822304][T25597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1736.861677][T25597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1736.947650][T25597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1737.045845][T23437] hsr_slave_0: left promiscuous mode [ 1737.065611][T23437] hsr_slave_1: left promiscuous mode [ 1737.082062][T23437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.106568][T23437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.138179][T23437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.319273][T23437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.361818][T23437] bridge_slave_1: left allmulticast mode [ 1737.367940][T23437] bridge_slave_1: left promiscuous mode [ 1737.377033][T23437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.427630][T23437] bridge_slave_0: left allmulticast mode [ 1737.438017][T23437] bridge_slave_0: left promiscuous mode [ 1737.443912][T23437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.769073][T23437] veth1_macvtap: left promiscuous mode [ 1737.802902][T23437] veth0_macvtap: left promiscuous mode [ 1737.893480][T25822] fuse: Unknown parameter 'max_r' [ 1737.953189][T23437] veth1_vlan: left promiscuous mode [ 1737.971578][T23437] veth0_vlan: left promiscuous mode [ 1740.353633][T23437] team0 (unregistering): Port device team_slave_1 removed [ 1740.483853][T23437] team0 (unregistering): Port device team_slave_0 removed [ 1740.613876][T23437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.750914][T23437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.356944][T23437] bond0 (unregistering): Released all slaves [ 1742.534577][T25597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1749.999109][T25870] syzkaller0: entered promiscuous mode [ 1750.021355][T25870] syzkaller0: entered allmulticast mode [ 1750.092801][T25597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.344373][T25876] tipc: Enabled bearer , priority 0 [ 1750.382445][T25597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.457248][T25869] tipc: Resetting bearer [ 1750.632869][T25869] tipc: Disabling bearer [ 1750.690984][T23436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.698213][T23436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.708399][T16409] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1750.780619][T25880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5071'. [ 1750.892823][T23436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.900008][T23436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.964605][T16409] usb 5-1: Using ep0 maxpacket: 8 [ 1751.018433][T16409] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1751.043987][T16409] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1751.160300][T16409] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1751.233830][T25597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1751.258506][T16409] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1751.317483][T16409] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1751.326625][T16409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.561004][T25897] fuse: Unknown parameter 'max_r' [ 1752.804066][T16409] usb 5-1: GET_CAPABILITIES returned 0 [ 1752.809594][T16409] usbtmc 5-1:16.0: can't read capabilities [ 1753.194216][T16409] usb 5-1: USB disconnect, device number 11 [ 1753.370239][T25597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.852677][T25597] veth0_vlan: entered promiscuous mode [ 1753.890948][T16213] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1754.064814][T25597] veth1_vlan: entered promiscuous mode [ 1754.108647][T16213] usb 10-1: Using ep0 maxpacket: 16 [ 1754.137695][T16213] usb 10-1: config 0 has no interfaces? [ 1754.193637][T16213] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1754.241463][T16213] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1754.252230][T16213] usb 10-1: Manufacturer: syz [ 1754.276934][T16213] usb 10-1: config 0 descriptor?? [ 1754.381837][T25597] veth0_macvtap: entered promiscuous mode [ 1754.450141][T25597] veth1_macvtap: entered promiscuous mode [ 1755.160562][T25597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.185932][T25597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.231565][T25597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.288593][T25597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.327462][T25597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1755.424485][T25938] tipc: Enabled bearer , priority 0 [ 1755.449489][T25597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1755.477733][T25597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.546279][T25597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1755.578987][T25597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.637839][T25597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1755.694128][T25942] syzkaller0: entered promiscuous mode [ 1755.708395][T25942] syzkaller0: entered allmulticast mode [ 1755.738451][T25597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.767928][T25597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.777235][T25597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.786084][T25597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.821989][T25936] tipc: Resetting bearer [ 1755.951919][T25936] tipc: Disabling bearer [ 1756.244351][T23437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.297178][T23437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.581442][T23436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.589363][T23436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.016348][T25962] fuse: Unknown parameter 'max_r' [ 1757.391709][T16409] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1757.594038][ T28] audit: type=1326 audit(1768293006.043:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25978 comm="syz.0.4960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d1d8f749 code=0x0 [ 1757.620352][T16409] usb 2-1: Using ep0 maxpacket: 16 [ 1757.643591][T16409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1757.676908][T16409] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1757.704157][T16409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.748223][T16409] usb 2-1: Product: syz [ 1757.755014][T16409] usb 2-1: Manufacturer: syz [ 1757.781540][T16409] usb 2-1: SerialNumber: syz [ 1757.810856][T16409] usb 2-1: config 0 descriptor?? [ 1757.854602][T16409] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1757.878176][T16409] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1758.501401][T16409] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1758.638657][T24430] usb 10-1: USB disconnect, device number 26 [ 1758.998000][T16409] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1759.041850][T16409] em28xx 2-1:0.0: board has no eeprom [ 1759.381168][T16409] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1759.389081][T16409] em28xx 2-1:0.0: dvb set to bulk mode. [ 1759.410969][T16018] em28xx 2-1:0.0: Binding DVB extension [ 1759.501945][T16409] usb 2-1: USB disconnect, device number 19 [ 1759.520056][T16409] em28xx 2-1:0.0: Disconnecting em28xx [ 1759.674885][T16018] em28xx 2-1:0.0: Registering input extension [ 1759.704621][T16409] em28xx 2-1:0.0: Closing input extension [ 1759.742444][T16409] em28xx 2-1:0.0: Freeing device [ 1760.260606][T11907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1760.283951][T11907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1760.315135][T11907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1760.380587][T11907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1760.402408][T11907] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1760.410065][T11907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1760.695356][T26026] tipc: Enabling of bearer rejected, failed to enable media [ 1761.197898][T26042] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1761.760011][T26027] chnl_net:caif_netlink_parms(): no params data found [ 1762.360608][T26059] fuse: Unknown parameter 'max_r' [ 1762.706597][T24311] Bluetooth: hci0: command tx timeout [ 1762.980372][T23436] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.419213][T23436] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.932217][T23436] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.033489][T26027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.040795][T26027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.075718][T26027] bridge_slave_0: entered allmulticast mode [ 1764.082838][T26027] bridge_slave_0: entered promiscuous mode [ 1764.126315][T26027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.152687][T26027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.167273][T26027] bridge_slave_1: entered allmulticast mode [ 1764.203750][T26027] bridge_slave_1: entered promiscuous mode [ 1764.350602][T23436] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.800225][T26027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.899827][T24311] Bluetooth: hci0: command tx timeout [ 1764.971368][T26027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.457737][T26027] team0: Port device team_slave_0 added [ 1765.627845][T26027] team0: Port device team_slave_1 added [ 1765.881736][T23436] tipc: Left network mode [ 1766.072098][T26027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.118813][T26027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.230959][T26027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.653518][T26027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.660539][T26027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.741680][T26027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.909856][T16018] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1767.156082][T16018] usb 2-1: Using ep0 maxpacket: 16 [ 1767.164622][T24311] Bluetooth: hci0: command tx timeout [ 1767.174894][T16018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1767.190439][T16018] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1767.199672][T16018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.207719][T16018] usb 2-1: Product: syz [ 1767.214450][T16018] usb 2-1: Manufacturer: syz [ 1767.219152][T16018] usb 2-1: SerialNumber: syz [ 1767.227816][T16018] usb 2-1: config 0 descriptor?? [ 1767.245105][T16018] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1767.254666][T16018] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1767.357606][T26027] hsr_slave_0: entered promiscuous mode [ 1767.376417][T26027] hsr_slave_1: entered promiscuous mode [ 1767.393907][T26027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1767.417744][T26027] Cannot create hsr debugfs directory [ 1767.901052][T16018] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1768.422105][T16018] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1768.461019][T16018] em28xx 2-1:0.0: board has no eeprom [ 1768.888558][T16018] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1768.920160][T16018] em28xx 2-1:0.0: dvb set to bulk mode. [ 1768.925887][T25584] em28xx 2-1:0.0: Binding DVB extension [ 1769.008563][T24206] usb 2-1: USB disconnect, device number 20 [ 1769.015610][T24206] em28xx 2-1:0.0: Disconnecting em28xx [ 1769.202562][T25584] em28xx 2-1:0.0: Registering input extension [ 1769.212699][T24206] em28xx 2-1:0.0: Closing input extension [ 1769.300214][T24206] em28xx 2-1:0.0: Freeing device [ 1769.347566][T24311] Bluetooth: hci0: command tx timeout [ 1770.216303][ T28] audit: type=1326 audit(1768293017.881:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.4.5104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7edd18f749 code=0x0 [ 1770.263817][T23436] hsr_slave_0: left promiscuous mode [ 1770.325969][T23436] hsr_slave_1: left promiscuous mode [ 1770.362590][T23436] bridge_slave_1: left allmulticast mode [ 1770.412074][T23436] bridge_slave_1: left promiscuous mode [ 1770.439635][T23436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.485122][T23436] bridge_slave_0: left allmulticast mode [ 1770.495651][T23436] bridge_slave_0: left promiscuous mode [ 1770.501703][T23436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.699738][T23436] veth1_macvtap: left promiscuous mode [ 1770.722229][T23436] veth1_vlan: left promiscuous mode [ 1770.741009][T23436] veth0_vlan: left promiscuous mode [ 1771.399968][T23436] bond9 (unregistering): Released all slaves [ 1771.431218][T23436] bond8 (unregistering): Released all slaves [ 1771.468041][T23436] bond7 (unregistering): Released all slaves [ 1771.535047][T23436] bond6 (unregistering): Released all slaves [ 1771.558633][T23436] bond5 (unregistering): Released all slaves [ 1771.615835][T23436] bond4 (unregistering): Released all slaves [ 1771.828896][ T5784] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1772.033701][T23436] bond3 (unregistering): Released all slaves [ 1772.267108][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 1772.289109][ T5784] usb 5-1: config 0 has no interfaces? [ 1772.318157][ T5784] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1772.368991][ T5784] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1772.398897][ T5784] usb 5-1: Manufacturer: syz [ 1772.440082][ T5784] usb 5-1: config 0 descriptor?? [ 1773.345639][T23436] bond2 (unregistering): Released all slaves [ 1774.339844][T23436] bond1 (unregistering): Released all slaves [ 1774.805088][T26199] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1775.088201][ T28] audit: type=1326 audit(1768293022.463:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26200 comm="syz.0.5113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d1d8f749 code=0x0 [ 1776.089057][T23436] team0 (unregistering): Port device team_slave_1 removed [ 1776.314110][T23436] team0 (unregistering): Port device team_slave_0 removed [ 1776.440799][T23436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.565483][T23436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.481399][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1777.487890][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1778.188259][T23436] bond0 (unregistering): Released all slaves [ 1778.888227][T26027] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1778.928584][T26027] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1778.993247][T26027] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1779.045451][T26027] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1779.170904][T16409] usb 5-1: USB disconnect, device number 12 [ 1779.869017][T23436] IPVS: stop unused estimator thread 0... [ 1780.303953][T26027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1780.383130][T26027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1780.540819][T23426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.548091][T23426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1780.641434][T23426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.648707][T23426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.018375][T26284] fuse: Unknown parameter 'max_r' [ 1782.408798][T26027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1783.702929][T26316] netlink: 'syz.1.5134': attribute type 10 has an invalid length. [ 1783.811942][T26316] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1784.032774][T26027] veth0_vlan: entered promiscuous mode [ 1784.087887][T26027] veth1_vlan: entered promiscuous mode [ 1784.305575][T26027] veth0_macvtap: entered promiscuous mode [ 1784.363321][T26027] veth1_macvtap: entered promiscuous mode [ 1784.506273][T26027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1784.506293][T26027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.506303][T26027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1784.506319][T26027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.506328][T26027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1784.506338][T26027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.507595][T26027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1784.526845][T26027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.526870][T26027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.526884][T26027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.526900][T26027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.526915][T26027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1784.526930][T26027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.528559][T26027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1784.557552][T26027] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.557592][T26027] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.557620][T26027] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.557649][T26027] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.045725][T23437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.045750][T23437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.438287][T14621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.438313][T14621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.668155][T26353] fuse: Unknown parameter 'max_r' [ 1785.954934][T26349] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5141'. [ 1789.132973][ T28] audit: type=1326 audit(1768293035.601:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26412 comm="syz.1.5153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75f8d8f749 code=0x0 [ 1789.441581][T24206] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1789.645118][T24206] usb 5-1: Using ep0 maxpacket: 32 [ 1789.662938][T24206] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1789.679434][T24206] usb 5-1: config 0 has no interface number 0 [ 1789.708602][T24206] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1789.763375][T24206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.782452][T24206] usb 5-1: Product: syz [ 1789.804118][T24206] usb 5-1: Manufacturer: syz [ 1789.814922][T24206] usb 5-1: SerialNumber: syz [ 1789.829197][T24206] usb 5-1: config 0 descriptor?? [ 1789.873277][T24206] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1789.939343][T24206] usb 5-1: selecting invalid altsetting 1 [ 1789.973520][T24206] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1790.041789][T24206] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1790.117859][T24206] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1790.127084][T24206] usb 5-1: media controller created [ 1790.170130][T24206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1790.842470][T24430] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1791.102318][T24430] usb 2-1: Using ep0 maxpacket: 16 [ 1791.148885][T24430] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1791.202964][T24430] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1791.249095][T26416] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1791.306874][T24206] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1791.325103][T24206] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1791.362732][T24206] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1791.524958][T24206] usb 5-1: USB disconnect, device number 13 [ 1792.633785][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5166'. [ 1792.667019][T26465] veth0_macvtap: left promiscuous mode [ 1793.812416][T24430] usb 2-1: string descriptor 0 read error: -71 [ 1793.849965][T24430] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1793.911626][T24430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.952129][T24430] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1793.999655][T24430] usb 2-1: no configuration chosen from 1 choice [ 1794.064346][T24430] usb 2-1: USB disconnect, device number 21 [ 1794.305310][T26497] netlink: 'syz.9.5175': attribute type 4 has an invalid length. [ 1794.340344][T26495] [ 1794.342750][T26495] ====================================================== [ 1794.349810][T26495] WARNING: possible circular locking dependency detected [ 1794.356880][T26495] syzkaller #0 Not tainted [ 1794.361330][T26495] ------------------------------------------------------ [ 1794.368501][T26495] syz.4.5174/26495 is trying to acquire lock: [ 1794.374615][T26495] ffffffff8ca648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1ba/0x480 [ 1794.383762][T26495] [ 1794.383762][T26495] but task is already holding lock: [ 1794.391170][T26495] ffff888148d26540 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1b92/0x2460 [ 1794.401690][T26495] [ 1794.401690][T26495] which lock already depends on the new lock. [ 1794.401690][T26495] [ 1794.412136][T26495] [ 1794.412136][T26495] the existing dependency chain (in reverse order) is: [ 1794.421195][T26495] [ 1794.421195][T26495] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 1794.429603][T26495] down_write+0x97/0x1f0 [ 1794.434428][T26495] set_blocksize+0x249/0x4b0 [ 1794.439601][T26495] sb_min_blocksize+0xbe/0x190 [ 1794.444953][T26495] ext4_fill_super+0x6d8/0x66f0 [ 1794.450378][T26495] get_tree_bdev+0x3e4/0x510 [ 1794.455534][T26495] vfs_get_tree+0x8c/0x280 [ 1794.460515][T26495] do_new_mount+0x24b/0xa40 [ 1794.465573][T26495] init_mount+0xd2/0x120 [ 1794.470384][T26495] do_mount_root+0x97/0x230 [ 1794.475464][T26495] mount_root_generic+0x195/0x3c0 [ 1794.481067][T26495] prepare_namespace+0xc2/0x100 [ 1794.486480][T26495] kernel_init_freeable+0x413/0x570 [ 1794.492231][T26495] kernel_init+0x1d/0x1c0 [ 1794.497112][T26495] ret_from_fork+0x48/0x80 [ 1794.502087][T26495] ret_from_fork_asm+0x11/0x20 [ 1794.507489][T26495] [ 1794.507489][T26495] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 1794.516136][T26495] down_write+0x97/0x1f0 [ 1794.520950][T26495] set_blocksize+0x201/0x4b0 [ 1794.526089][T26495] sb_set_blocksize+0x4a/0x100 [ 1794.531396][T26495] udf_load_vrs+0xe3/0xf00 [ 1794.536362][T26495] udf_fill_super+0x67d/0x1720 [ 1794.541783][T26495] mount_bdev+0x22b/0x2d0 [ 1794.546657][T26495] legacy_get_tree+0xea/0x180 [ 1794.551880][T26495] vfs_get_tree+0x8c/0x280 [ 1794.556850][T26495] do_new_mount+0x24b/0xa40 [ 1794.561904][T26495] __se_sys_mount+0x2da/0x3c0 [ 1794.567133][T26495] do_syscall_64+0x55/0xb0 [ 1794.572091][T26495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1794.578541][T26495] [ 1794.578541][T26495] -> #2 (&type->s_umount_key#80){++++}-{3:3}: [ 1794.586839][T26495] down_read+0x46/0x2e0 [ 1794.591575][T26495] super_lock+0x167/0x360 [ 1794.596512][T26495] fs_bdev_mark_dead+0xad/0x1f0 [ 1794.601911][T26495] bdev_mark_dead+0x83/0x1a0 [ 1794.607055][T26495] disk_force_media_change+0x132/0x1b0 [ 1794.613094][T26495] nbd_ioctl+0x431/0xed0 [ 1794.617889][T26495] blkdev_ioctl+0x58b/0x6f0 [ 1794.622944][T26495] __se_sys_ioctl+0xfd/0x170 [ 1794.628090][T26495] do_syscall_64+0x55/0xb0 [ 1794.633049][T26495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1794.639487][T26495] [ 1794.639487][T26495] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 1794.647682][T26495] __mutex_lock+0x129/0xcc0 [ 1794.652739][T26495] bd_finish_claiming+0x22f/0x3f0 [ 1794.658314][T26495] blkdev_get_by_dev+0x45c/0x600 [ 1794.663793][T26495] bdev_open_by_dev+0x77/0x100 [ 1794.669111][T26495] setup_bdev_super+0x59/0x660 [ 1794.674419][T26495] mount_bdev+0x1dd/0x2d0 [ 1794.679293][T26495] legacy_get_tree+0xea/0x180 [ 1794.684515][T26495] vfs_get_tree+0x8c/0x280 [ 1794.689529][T26495] do_new_mount+0x24b/0xa40 [ 1794.694579][T26495] init_mount+0xd2/0x120 [ 1794.699374][T26495] do_mount_root+0x97/0x230 [ 1794.704433][T26495] mount_root_generic+0x195/0x3c0 [ 1794.710018][T26495] prepare_namespace+0xc2/0x100 [ 1794.715420][T26495] kernel_init_freeable+0x413/0x570 [ 1794.721174][T26495] kernel_init+0x1d/0x1c0 [ 1794.726059][T26495] ret_from_fork+0x48/0x80 [ 1794.731022][T26495] ret_from_fork_asm+0x11/0x20 [ 1794.736348][T26495] [ 1794.736348][T26495] -> #0 (bdev_lock){+.+.}-{3:3}: [ 1794.743531][T26495] __lock_acquire+0x2ddb/0x7c80 [ 1794.748936][T26495] lock_acquire+0x197/0x410 [ 1794.753991][T26495] __mutex_lock+0x129/0xcc0 [ 1794.759039][T26495] bd_prepare_to_claim+0x1ba/0x480 [ 1794.764699][T26495] truncate_bdev_range+0x4e/0x260 [ 1794.770263][T26495] blkdev_common_ioctl+0x1ba8/0x2460 [ 1794.776091][T26495] blkdev_ioctl+0x4eb/0x6f0 [ 1794.781145][T26495] __se_sys_ioctl+0xfd/0x170 [ 1794.786292][T26495] do_syscall_64+0x55/0xb0 [ 1794.791252][T26495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1794.797692][T26495] [ 1794.797692][T26495] other info that might help us debug this: [ 1794.797692][T26495] [ 1794.808023][T26495] Chain exists of: [ 1794.808023][T26495] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 1794.808023][T26495] [ 1794.822252][T26495] Possible unsafe locking scenario: [ 1794.822252][T26495] [ 1794.829726][T26495] CPU0 CPU1 [ 1794.835107][T26495] ---- ---- [ 1794.840506][T26495] lock(mapping.invalidate_lock); [ 1794.845648][T26495] lock(&sb->s_type->i_mutex_key#8); [ 1794.853569][T26495] lock(mapping.invalidate_lock); [ 1794.861313][T26495] lock(bdev_lock); [ 1794.865230][T26495] [ 1794.865230][T26495] *** DEADLOCK *** [ 1794.865230][T26495] [ 1794.873395][T26495] 2 locks held by syz.4.5174/26495: [ 1794.878615][T26495] #0: ffff888148d263b0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x1b61/0x2460 [ 1794.889817][T26495] #1: ffff888148d26540 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1b92/0x2460 [ 1794.900755][T26495] [ 1794.900755][T26495] stack backtrace: [ 1794.906728][T26495] CPU: 1 PID: 26495 Comm: syz.4.5174 Not tainted syzkaller #0 [ 1794.914325][T26495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1794.924418][T26495] Call Trace: [ 1794.927746][T26495] [ 1794.930716][T26495] dump_stack_lvl+0x16c/0x230 [ 1794.935434][T26495] ? load_image+0x3b0/0x3b0 [ 1794.939968][T26495] ? show_regs_print_info+0x20/0x20 [ 1794.945198][T26495] ? print_circular_bug+0x12b/0x1a0 [ 1794.950562][T26495] check_noncircular+0x2bd/0x3c0 [ 1794.955543][T26495] ? print_deadlock_bug+0x5d0/0x5d0 [ 1794.960770][T26495] ? lockdep_lock+0xe0/0x220 [ 1794.965389][T26495] ? mark_lock+0x94/0x320 [ 1794.969754][T26495] ? _find_first_zero_bit+0xd3/0x100 [ 1794.975083][T26495] __lock_acquire+0x2ddb/0x7c80 [ 1794.979972][T26495] ? lock_chain_count+0x20/0x20 [ 1794.984847][T26495] ? verify_lock_unused+0x140/0x140 [ 1794.990102][T26495] ? lockdep_hardirqs_on+0x98/0x150 [ 1794.995335][T26495] ? finish_task_switch+0x265/0x920 [ 1795.000558][T26495] ? __schedule+0x14da/0x44d0 [ 1795.005315][T26495] lock_acquire+0x197/0x410 [ 1795.009848][T26495] ? bd_prepare_to_claim+0x1ba/0x480 [ 1795.015194][T26495] ? __might_sleep+0xe0/0xe0 [ 1795.019823][T26495] ? mark_lock+0x94/0x320 [ 1795.024175][T26495] ? read_lock_is_recursive+0x20/0x20 [ 1795.029577][T26495] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1795.035586][T26495] ? lock_chain_count+0x20/0x20 [ 1795.040815][T26495] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1795.045873][T26495] __mutex_lock+0x129/0xcc0 [ 1795.050401][T26495] ? bd_prepare_to_claim+0x1ba/0x480 [ 1795.055714][T26495] ? rcu_is_watching+0x15/0xb0 [ 1795.060530][T26495] ? trace_contention_end+0x3b/0x110 [ 1795.065842][T26495] ? rwsem_down_write_slowpath+0xda5/0xfa0 [ 1795.071678][T26495] ? bd_prepare_to_claim+0x1ba/0x480 [ 1795.076990][T26495] ? rwsem_down_write_slowpath+0x7b7/0xfa0 [ 1795.082826][T26495] ? mutex_lock_nested+0x20/0x20 [ 1795.087795][T26495] ? rwsem_down_read_slowpath+0x840/0x840 [ 1795.093543][T26495] ? invalidate_bdev+0xc0/0xc0 [ 1795.098339][T26495] bd_prepare_to_claim+0x1ba/0x480 [ 1795.103484][T26495] ? invalidate_bdev+0xc0/0xc0 [ 1795.108276][T26495] ? truncate_bdev_range+0x260/0x260 [ 1795.113590][T26495] ? __might_fault+0xaa/0x120 [ 1795.118298][T26495] ? down_write+0x162/0x1f0 [ 1795.122853][T26495] ? down_read_killable+0x340/0x340 [ 1795.128116][T26495] ? __might_fault+0xaa/0x120 [ 1795.132825][T26495] truncate_bdev_range+0x4e/0x260 [ 1795.137880][T26495] blkdev_common_ioctl+0x1ba8/0x2460 [ 1795.143198][T26495] ? blkdev_bszset+0x1f0/0x1f0 [ 1795.148086][T26495] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1795.153601][T26495] blkdev_ioctl+0x4eb/0x6f0 [ 1795.158132][T26495] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1795.163621][T26495] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1795.168589][T26495] ? security_file_ioctl+0x80/0xa0 [ 1795.173762][T26495] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1795.179254][T26495] __se_sys_ioctl+0xfd/0x170 [ 1795.183873][T26495] do_syscall_64+0x55/0xb0 [ 1795.188317][T26495] ? clear_bhb_loop+0x40/0x90 [ 1795.193103][T26495] ? clear_bhb_loop+0x40/0x90 [ 1795.197807][T26495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.203754][T26495] RIP: 0033:0x7f7edd18f749 [ 1795.208204][T26495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1795.227838][T26495] RSP: 002b:00007f7ede09c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.236278][T26495] RAX: ffffffffffffffda RBX: 00007f7edd3e6090 RCX: 00007f7edd18f749 [ 1795.244275][T26495] RDX: 0000200000000240 RSI: 000000000000127f RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1795.252273][T26495] RBP: 00007f7edd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1795.260281][T26495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.268282][T26495] R13: 00007f7edd3e6128 R14: 00007f7edd3e6090 R15: 00007ffc3df180e8 [ 1795.276404][T26495] [ 1796.423148][T23425] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.676716][T23425] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.823782][T23425] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.957864][T23425] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.950519][T23425] hsr_slave_0: left promiscuous mode [ 1797.956599][T23425] hsr_slave_1: left promiscuous mode [ 1797.967477][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1797.974976][T23425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.997516][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1798.005092][T23425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.029506][T23425] bridge_slave_1: left allmulticast mode [ 1798.035225][T23425] bridge_slave_1: left promiscuous mode [ 1798.050593][T23425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.065296][T23425] bridge_slave_0: left allmulticast mode [ 1798.071030][T23425] bridge_slave_0: left promiscuous mode [ 1798.093254][T23425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.115706][T23425] veth1_macvtap: left promiscuous mode [ 1798.121426][T23425] veth0_macvtap: left promiscuous mode [ 1798.136918][T23425] veth1_vlan: left promiscuous mode [ 1798.142300][T23425] veth0_vlan: left promiscuous mode [ 1798.572204][T23425] team0 (unregistering): Port device team_slave_1 removed [ 1798.645492][T23425] team0 (unregistering): Port device team_slave_0 removed [ 1798.664819][T23425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.683170][T23425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.835502][T23425] bond0 (unregistering): Released all slaves [ 1799.478906][T23425] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.529843][T23425] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.608124][T23425] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.695255][T23425] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.873217][T23425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.939988][T23425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.003688][T23425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.068840][T23425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.243940][T23425] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.304558][T23425] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.368664][T23425] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.445299][T23425] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.671226][T23425] tipc: Left network mode [ 1801.515690][T23425] bond0: (slave wlan1): Releasing backup interface [ 1802.063458][T23425] hsr_slave_0: left promiscuous mode [ 1802.069626][T23425] hsr_slave_1: left promiscuous mode [ 1802.075857][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.085063][T23425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.093969][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.101419][T23425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.110769][T23425] bridge_slave_1: left allmulticast mode [ 1802.119565][T23425] bridge_slave_1: left promiscuous mode [ 1802.135483][T23425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.144764][T23425] bridge_slave_0: left allmulticast mode [ 1802.151190][T23425] bridge_slave_0: left promiscuous mode [ 1802.158313][T23425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.171657][T23425] hsr_slave_0: left promiscuous mode [ 1802.177625][T23425] hsr_slave_1: left promiscuous mode [ 1802.184745][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.192313][T23425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.201446][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.208909][T23425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.216755][T23425] bridge_slave_1: left allmulticast mode [ 1802.225880][T23425] bridge_slave_1: left promiscuous mode [ 1802.231720][T23425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.241235][T23425] bridge_slave_0: left allmulticast mode [ 1802.250769][T23425] bridge_slave_0: left promiscuous mode [ 1802.256790][T23425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.270719][T23425] hsr_slave_0: left promiscuous mode [ 1802.277828][T23425] hsr_slave_1: left promiscuous mode [ 1802.283895][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.293697][T23425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.302028][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.309758][T23425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.319132][T23425] bridge_slave_1: left allmulticast mode [ 1802.324830][T23425] bridge_slave_1: left promiscuous mode [ 1802.331074][T23425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.342005][T23425] bridge_slave_0: left allmulticast mode [ 1802.347718][T23425] bridge_slave_0: left promiscuous mode [ 1802.354204][T23425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.375264][T23425] veth1_macvtap: left promiscuous mode [ 1802.381028][T23425] veth1_vlan: left promiscuous mode [ 1802.388072][T23425] veth0_vlan: left promiscuous mode [ 1802.397063][T23425] veth1_macvtap: left promiscuous mode [ 1802.404160][T23425] veth1_vlan: left promiscuous mode [ 1802.409513][T23425] veth0_vlan: left promiscuous mode [ 1802.417915][T23425] veth1_macvtap: left promiscuous mode [ 1802.423505][T23425] veth0_macvtap: left promiscuous mode [ 1802.431155][T23425] veth1_vlan: left promiscuous mode [ 1802.437233][T23425] veth0_vlan: left promiscuous mode [ 1803.089007][T23425] team0 (unregistering): Port device team_slave_1 removed [ 1803.145794][T23425] team0 (unregistering): Port device team_slave_0 removed [ 1803.203413][T23425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.267179][T23425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.417229][T23425] bond0 (unregistering): Released all slaves [ 1803.779769][T23425] team0 (unregistering): Port device team_slave_1 removed [ 1803.810609][T23425] team0 (unregistering): Port device team_slave_0 removed [ 1803.884983][T23425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.961044][T23425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1804.117829][T23425] bond0 (unregistering): Released all slaves [ 1804.192563][T23425] bond1 (unregistering): Released all slaves