last executing test programs: 4m14.761634657s ago: executing program 4 (id=3448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 3m59.246388308s ago: executing program 3 (id=3421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 3m24.414551279s ago: executing program 4 (id=3448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 3m6.224002245s ago: executing program 3 (id=3421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2m40.838880633s ago: executing program 4 (id=3448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 2m14.085101918s ago: executing program 3 (id=3421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1m50.313544422s ago: executing program 4 (id=3448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 1m35.386825511s ago: executing program 3 (id=3421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1m6.33814411s ago: executing program 4 (id=3448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 59.417105751s ago: executing program 3 (id=3421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 50.117606815s ago: executing program 2 (id=4391): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) get_robust_list(0x0, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000300)}, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)}}, &(0x7f00000004c0)=0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x40) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f00000000c0), 0x1001) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621ba8"}}, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x8028c003, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 46.950016467s ago: executing program 2 (id=4394): syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000100)=ANY=[@ANYBLOB='nointegrity,usrquota,quota,iocharset=cp866,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x0, 0x60ed, &(0x7f0000006580)="$eJzs3U1vHVf9B/Df3Cc/9N826qLqP0LIbcNDKc1jCYECbSVgwYYF6hYlct0qIgWUBJRWEXHlDQteBAiJJUIsWfECumDLjhdApAQJ1AXqoLHPcca39+badXznOufzkZyZ35wZ3zP53vG91zPjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PzpXRcTlX6YFJyL+L/oRvYiVpl6LiJW1E3n9QUQ8F9vN8WxEDJcimu23/3k64tWI+OipiHv3b683i8/vsx/f+9Pff//jJ374tz8Oz/znzzf7r01b79at3/z7L3cOt88AAABQmrqu6yp9zD+ZPt/3uu4UADAX+fW/TvLyWfV3D7i+Wq1Wq9Xq7uu2erI77SIiNtvbNO8ZnI4HgGNmMz7uugt0SP5FG0TEE113AlhoVdcd4Ejcu397vUr5Vu3Xg7Wd9nwtyJ78N6vd+zumTWcZv8ZkXs+vrejHM1P6szKnPiySnH9vPP/LO+2jtN5R5z8v0/If7dz6VJycf388/zGPT/69ifmXKuc/OFD+ffkDAAAAAMACy7//P9Hx+d+lw+/Kvjzs/O/anPoAAAAAAAAAAI/aYcf/22X8PwAAAFhYzWf1xm+ferBs2t9ia5a/VUU8ObY+UJh0s8xq1/0AAAAAAAAAAAAAgJIMdq7hfauKGEbEk6urdV03X23j9UEddvvjrvT9h5J1/UMeAAB2fPTU2L38VcRyqxyurq7W9fLKar1aryzl97OjpeV6pfW5Nk+bZUujfbwhHozq5pstt7Zrm/V5eVb7+PdrHmtU9/fRsfnoIGgAaNl5NbrnFekxU9dPR9fvcjgeHP+PH8c/+9H18xQAAAA4enVd11X6c94n0/h+va47BQDMRX79Hz8voH709X8XrD9qtVqtLq9uqye70y4iYrO9TfOewXD8AHDMbMbHXXeBDsm/aIOIeK7rTgALreq6AxyJe/dvr1cp36r9epDGd8/XguzJf7Pa3i5vP2k6y/g1JvN6fm1FP56Z0p9n59SHRZLz743nf3mnfZTWO+r852Va/s1+nuigP13L+ffH8x/z+OTfm5h/qXL+gwPl35c/AAAAAAAssPz7/xMLdf539Fl3Z6aHnf9dO7JHBQAAAAAAAICjde/+7fV832s+//+5Ceu5//PxlPOv5F+knH9vLP8vj63Xb83fffNB/v+6f3v9Dzf/+f95ut/8l/JMlZ5ZVXpGVOmRqkGaHmbvPm1r2B81jzSsev1BuuanHr4TV+NabMTZPev20v/Hg/Zze9qbng632+v+Tvv5Pe2D3fa8/YU97cN0pVO9kttPx3r8LK7F29vtTdvSjP1fntFez2jP+fcd/0XK+Q9aX03+q6m9Gps27n7Y+9Rx355Oepw3rn7+12ePfndm2or+7r61Nfv3Qgf92f4/eWIUv7ixcf30rSs3b14/F2myZ+n5SJNHLOc/TF+7P/9f3GnPP/fbx+vdD0cHzn9RbMVgav4vtuab/X1pzn3rQs5/lL5y/m+n9snH/3HOf/rx/3IH/QEAAAAAAAAAAAAAAICHqet6+xbRNyLiYrr/p6t7MwGA+cqv/3WSl8+r7s/58dTqY15XC9afudaf1IvVH7X6ONZt9WSvt4uI+Gt7m+Y9w68mfTMAYJF9EhH/6LoTdEb+Bct/76+Znuq6M8Bc3Xj/g59cuXZt4/qNrnsCAAAAAAAAAHxWefzPtdb4z6fqur4ztt6e8V/fjLXDjv85yDO7A4xOGai6f/B9epit3qjfaw03/nxMG/97uDv3sPG/BzMebzijfTSjfWlG+/KM9ok3erTk/J9vjXd+KiJOjg2/XsL4r+Nj3pcg5/9C6/nc5P+lsfXa+de/O8759/bkf+bmez8/c+P9D165+t6Vdzfe3fjphXPnzl64ePHSpUtn3rl6bePszr8d9vho5fzz2NeuAy1Lzj9nLv+y5Py/kGr5lyXn/8VUy78sOf/8fk/+Zcn5588+8i9Lzv+lVMu/LDn/r6Ra/mXJ+b+cavmXJef/1VTLvyw5/1dSLf+y5PxPp1r+Zcn5n0n1PvNfOep+MR85/3yGy/Fflpx/vrJB/mXJ+Z9PtfzLkvO/kGr5lyXn/2qq5V+WnP/XUi3/suT8L6Za/mXJ+X891fIvS87/UqrlX5ac/zdSLf+y5Py/mWr5lyXn/1qq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/11Mt/7I8+Pv/ZsyYMZNnuv7JBAAAAAAAAAAAAACMm8flxF3vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17i5Hrru8AfvbqjQOJgZA6qSFrxxjjbLLrS3yhdTHh2nArgVDoBdv1rs2Cb3jtEmgkGwVKVIyKKtqGh7aAUJuXCqvigVaA8oBaVaoE7QN9QVSVeIiqgAJSpbaCbDXn/P//nZk9O7NrTzYz53w+UvzzzpyZc+bMmbP7Xec7AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzrW+Y+8xQlmWN//I/NmXZixp/v2lyU37Za1/oLQQAAABu1C/yP5+9NV1wZBU3alrmn1753a8vLi4uZu8f+dOxLywupisms2xsQ5bl10XX/vMDQ83LBI9lE0PDTV8Pd1n9SJfrR7tcP9bl+vEu12/ocv1El+uX7YBlbip+H5Pf2fb8r5uKXZrdlo3l120vudVjQxuGh+PvcnJD+W0Wx05m89npbC6baVm+WHYoX/6bWxvremsW1zXctK4tjSPkp4+eiNswFPbx9pZ1Ld1n9OPXZ5M/++mjJ/764jN3lM2uu6Hl/ort3LmtsZ2fCpcU2zqUbUj7JG7ncNN2bil5TkZatnMov13j7+3b+ewqt3NkaTPXVftzPpEN53//Xr6fRpt/rZf205Zw2f/cnWXZlaXNbl9m2bqy4WxjyyXDS8/PRHFENu6jcSi9NBtd03G6dRXHaWPObm89TttfE/H53xpuN7rCNjQ/TT/+5HjT8/7zxes5TqPGo17ptdJ+DPb6tdIvx2A8Lr6XP+jHS4/B7eHxP7pj5WOw9NgpOQbT4246Brd1OwaHx0fybU5PwlB+m6VjcHfL8iP5moby+fSOzsfg9MUz56cXPv6Je+fPHD81d2ru7N7du2f27t9/8ODB6ZPzp+dmij+vc2/3v43ZcHoNbAv7Lr4GXt22bPOhuvjl8WXn3+t9HU50eB1ualu216/D0fYHN7Q+L8jlx3Tx2nhvY6dPXB3OVniN5c/Prht/HabH3fQ6HG16HZZ+Tyl5HY6u4nXYWOb8rtX9zDLa9F/ZNqz8veDGjsFNTcdg+88j7cdgr38e6ZdjcCIcFz/YtfL3gi1hex+fWuvPIyPLjsH0cMO5p3FJ+nl/4mA+yo7LOxtX3DyeXVqYu3DfI8cvXrywOwtjXbys6VhpP143Nj2mbNnxOrzm4/XI/Csfv7Pk8k1hX03c2/hjYsXnqrHMvvs6P1f5d7fy/dly6Z4sjB5b7/1Z9t28sT/Hs+yL3/nkQ9969ItvWHF/NvLmp6Zv/GfxlEubzr9jK5x/Y+5/rlhfuqvHRsZGi9fvSNo7Yy3n49anajQ/dw3l6352enXn47Hw33qfj2/rcD7e3LZsr8/HY+0PLp6Ph7r9tuPGtD+fE+E4OT3T+XzcWGbznrUek6Mdz8d3hzkU9v9rQlJIuajp2FnpuE3rGh0dC49rNK6h9Tjd27L8WMhmjXU9uef6jtOddxf3NZIe3ZL1Ok4n25bt9XGafve10nE61O23b9en/fmcCMfFbXs7H6eNZZ7ad+PnzpviX5vOnePdjsGxkfHGNo+lgzA/32eLN8Vj8L7sRHYuO53N5teO58fTUL6uqftXdwyOh//W+1y5ucMxuLNt2V4fg+n72ErH3tDo8gffA+3P50Q4Lp64v/Mx2FjmjQd6+7PrznBJWqbpZ9f236+t9DuvO9t20/N1rIyG7fzOgc6/m20sc/rgWnNm5/10T7jk5pL91P76Xek1NZutz37aHLbzmYMr76fG9jSW+cKhVR5PR7Isu/zRB/Lf94Z/X/m7S9//esu/u5T9m87ljz7wkxef/Me1bD8Ag++5Ymwsvtc1/cvUav79HwAAABgIMfcPh5nI/wAAAFAZMffH/ys8kf8BAACgMmLuHw0zqUn+3/zGZ+afu5ylZv5iEK9Pu+HBYrnYcZ0JX08uLmlc/sBX5/77Hy6vbt3DWZb9/ME/KF1+84NxuwqTYTuvvan18mW+fu+q1n3s4ctpvc399S+F+4+PZ7WHQVkFdybLsm/e+rl8PZMfuJrPpx48ls+Hrjz+WGOZZw8VX8fbP/2yYvm/COXfIyePt9z+6bAffhTmzNvK90e83deuvmbLgfctrS/ebmjbLfnDfuKDxf3G98n5/GPF8nE/r7T93/rsk19rLP/Iq8q3//Jw+fY/Ge73q2H+7yuK5Zufg8bX8XafDtsf1xdvd99Xvl26/dc+Uyx//s3FcsfCjOvfGb7e/uZn5pv31yNDx1seV/aWYrm4/pnv/3F+fby/eP/t2z9x9GrL/mg/Pp76t+J+ptuWj5fH9UR/37b+xv00H59x/U/+4bGW/dxt/dceevoVjfttX/89bcud/+iufP1L99f6jk1/+enPla4vbs+Rvz3f8niOvDu8jsP6n/hgOB7D9f93rbi/9ndXOPbu1vNPXP5Lmy63PJ7orT8r1n/tdafyuWHipo03v+jFt1y5q7Hvsux7G4r767b+U391rmX7v3x7sT/i9bGj377+lcT1X/jY1NlzC5fmZ9NeffTW/L1z3l5sT9zeW8O5tf3ro+cufmjuwuTM5EyWTVb3LfSu21fC/Ekxrqz19rseDs/nnX/+zY07/vWz8fJ/f29x+dW3Fd+3Xh2W+3y4fFN4/m50/U9svT1/fQ89VXzd0mPvgS3b/+vgqhYMj7/954J4vJ9/+Yfy/dC4Lv++EV/XN7j9P5wt7ucbYb8uhndm3nb70vqal4/vjXD1PcXr/Yb3XzjNxef1b8Lz/Y4fFfcftys+3h+Gn2O+vbn1fBePj29cHm6///xdPK6E80l2pbg+LhX399Vnby/dvPg+JNmVO/Kv/yTdzx1repgrWfj4wvTp+bOXHpm+OLdwcXrh4584eubcpbMXj+bv5Xn0w91uv3R+2pifn2bn9u/L8rPVuWI8z17o7T//8InZAzM7ZudOHr908uLD5+cunDqxsHBibnZhx/GTJ+c+1u3287OHd+85tPfAnqlT87OHDx46tPfQ1PzZc43NKDaqi/0zH5k6e+FofpOFw/sO7b7//n0zU2fOzc4dPjAzM3Wp2+3z701TjVv//tSFudPHL86fmZtamP/E3OHdh/bv39P13QDPnD+5MDl94dLZ6UsLcxemi8cyeTG/uPG9r9vtqaaF/yh+nm03VLwRX/aue/an92dt+OonV7yrYpG2NxB9JrwXzT+/5PzB1Xwdc/9YmElN8j8AAADUQcz942Em8j8AAABURsz9G8JM5H8AAACojJj7J8JMapL/K9f/33x5VevX/9f/b95f+v816/+/p9/6/8X5Qv+/N/T/O9P/70L/X/9f/1//n57qt/5/zP03ZVkt8z8AAADUQcz9G8NM5H8AAACojJj7bw4zkf8BAACgMmLuf1GYSU3yv/6//r/+v/6//n/5+vX/B5P+f2f6/13o/09n9er/X+nl9uv/6/+zXL/1/2Puf3GYSU3yPwAAANRBzP23hJnI/wAAAFAZMfffGmYi/wMAAEBlxNy/KcykJvlf/1//X/9f/1//v3z9+v+DqfL9//YXyBrp/3eh/+/z//X/9f/pqX7r/8fc/5Iwk5rkfwAAAKiDmPtfGmYi/wMAAED/Gb2+m8Xc/7Iwk2X5/zpXAAAAALzgYu6/LWsrgtfk3//1//X/9f/1//X/y9e/+v7/SKb/3z8q3/+/Qfr/Xej/6//r/+v/01P91v/Pc382kb08zKQm+R8AAADqIOb+28NM5H8AAACojJj7fynMRP4HAACAyoi5f3OYSU3yv/6//r/+v/6//n/5+n3+/2DS/+9M/78L/X/9/+7b/0dlP/dl+v/6/5Tqt/5/zP13hJnUJP8DAABAHcTcf2eYifwPAAAAlRFz/y+Hmcj/AAAAUBkx928JM6lJ/tf/1//X/9f/1/8vX7/+/2DS/+9M/78L/X/9f5//r/9PT/Vb/z/m/leEmdQk/wMAAEAdxNz/yjAT+R8AAAAqI+b+u8JM5H8AAACojJj7J8NMapL/9f/1//X/9f/1/8vXr/8/mPT/O9P/70L/X/9//fr/Px5vu0D/nyrqt/5/zP1bw0xqkv8BAACgDmLu3xZmIv8DAABAZcTcf3eYifwPAAAAlRFz//Ywk5rkf/1//X/9f/1//f/y9ev/Dyb9/870/7vQ/9f/9/n/+v/0VL/1/2Puf1WYSU3yPwAAANRBzP07wkzkfwAAAKiMmPtfHWYi/wMAAEBlxNy/M8ykJvlf/1//X/9f/1//v3z9+v+DSf+/M/3/LvT/9f/1//X/6al+6//H3P+aMJOa5H8AAACog5j7d4WZyP8AAABQGTH33xNmIv8DAABAZcTcPxVmUpP8r/+v/6//r/+v/1++fv3/waT/35n+fxf6//r/+v/6//RUv/X/Y+6/N8ykJvkfAAAA6iDm/vvCTOR/AAAAqIyY+6fDTOR/AAAAqIyY+2fCTGqS//X/9f/1//X/19T/v2vpfvX/C/r//UX/vzP9/y70//X/X/D+/5j+P5XSb/3/mPt3h5nUJP8DAABAHcTcvyfMRP4HAACAyoi5f2+YifwPAAAAlRFz/74wk5rkf/1//X/9f/1/n/9fvn79/8Gk/99Z7/v/8SHq/+v/6//7/H/9f5brt/5/zP33h5nUJP8DAABAHcTcvz/MRP4HAACAyoi5/0CYifwPAAAAlRFz/8Ewk5rk/yr3/xcXF1dcUv9f/795f+n/6/+XrV//fzDp/3fm8/+70P/X/9f/1/+np/qt/x9z/6Ewk5rkfwAAAKiDmPtfG2Yi/wMAAEBlxNz/K2Em8j8AAABURsz9vxpmUpP8X+X+fyf6//r/zftL/1//v2z9+v+DSf+/M/3/LvT/9f/1//X/6al+6//H3H84zKQm+R8AAADqIOb+Xwszkf8BAACgMmLuf12YifwPAAAAlRFz/5Ewk5rkf/1//X/9f/1//f/y9ev/Dyb9/870/7vQ/9f/1//X/6en+q3/H3P/68NMapL/AQAAoA5i7n8gzET+BwAAgMqIuf8NYSbyPwAAAFRGzP1vDDOpSf7X/9f/1//X/9f/L1+//v9g0v/vTP+/C/1//X/9f/1/eqrf+v8x978pzKQm+R8AAADqIOb+N4eZyP8AAABQGTH3vyXMRP4HAACAyoi5/61hJjXJ//r/+v/6//r/+v/l69f/H0z6/53p/3eh/6//r/+v/09P9Vv/P+b+Xw8zqUn+BwAAgDqIuf/BMBP5HwAAACoj5v63hZnI/wAAAFAZMfe/PcykJvlf/1//X/9f/1//v3z9+v+DSf+/swHr///ilnC5/n9B/7+/t3+w+v+LG9pvr//P86Hf+v8x978jzKQm+R8AAADqIOb+d4aZyP8AAABQGTH3vyvMRP4HAACAyoi5/zfCTGqS//X/G9ux1F7W/9f/zy/Q/9f/1/8fWPr/nQ1Y/9/n/7fR/+/v7R+s/v9y+v88H/qt/x9z/7vDTGqS/wEAAKAOYu5/KMxE/gcAAIDKiLn/PWEm8j8AAABURsz97w0zqUn+1//3+f/6//r/+v/l69f/H0z6/53p/3eh/6//r/+v/09P9Vv/P+b+h8NMapL/AQAAoA5i7n9fmIn8DwAAAJURc/9vhpnI/wAAAFAZMfe/P8ykJvlf/39Q+v+T+v/6//r/bY9H/1//v4z+f2f6/13o/+v/6//r/9NT/db/j7n/A2EmNcn/AAAAUAcx9/9WmIn8DwAAAJURc/9vh5nI/wAAAFAZMff/TphJTfK//v+g9P99/n+m/6//3/Z49P/1/8usX/8/nnn0//X/9f8j/X/9f/1/2vVb/z/m/t8NM6lJ/gcAAIA6iLn/g2Em8j8AAAAMhLL/J7tdzP1Hw0zkfwAAAKiMmPuPhZnUJP/r/+v/6//3af//z7b9yw+++85ju/X/9f/1/9dkXT//v/Hi9/n/+v/6/0k6P91VnNj0//X/9f/pt/5/zP3Hw0xqkv8BAACgDmLu/70wC0NX5H8AAACojpj7T4SZyP8AAABQGTH3z4aZ1CT/6//r/+v/92n/f4A//z/uD/3/Vj3r/8eTrv5/qXXt/79vqSeu/7/W/v946aX6/xXp//v8f/1//X+Cfuv/x9w/F2ZSk/wPAAAAdRBy//DJYi5dIf8DAABAZcTcfyrMRP4HAACAyoi5/0NhJjXJ//r/+v/6//r/Pv+/fP192//3+f8d6f931j/9/3L6//r/g7z9+v/6/yzXb/3/mPvnw0xqkv8BAACgDmLu/3CYifwPAAAAlRFz/0fCTOR/AAAAqIyY+0+HmdQk/+v/6//r/+v/6/+Xr1//fzD1ff9/ovP69f/1//X/B3f79f/1/1mu3/r/MfefCTOpSf4HAACAOoi5/2yYifwPAAAAlRFz/7kwE/kfAAAAKiPm/vNhJjXJ//r/+v+V7f+/Tv9/pfX/P3v30aTXXeVxvOWRZ6zyC5jFbGY/L8GLmfXwAliwYUMVxYIqMDlZJkeTg0kmmmiCDcYkkw3YJIPJmJwzBgwYqkRROueo1X37Pi35SrrP/3w+mzPTormPq2SZn6VvXf2//n9kq+//N9D/6//1/9v7+fX/+n/2W1v/n7v/IXFLk/0PAAAAHeTuf2jcYv8DAADAMHL3Xx632P8AAAAwjNz9D4tbmuz/Pf3/kZ2e/X9mvPr/kfp/7/8/8Pn6f/3/yM5v/3/lv37l0//r//X/Qf+v/9f/s9fa+v/c/Q+PW5rsfwAAAOggd/8j4hb7HwAAAIaRu/+RcYv9DwAAAMPI3f+ouKXJ/vf+f+//1/9P9f/H9P/6f/3/lvL+/3md+v/L77j0wXfd+F83ncnz9f/6f/2//p9lra3/z93/6Lilyf4HAACADnL3PyZusf8BAABgGLn7Hxu32P8AAAAwjNz9j4tbmux//b/+f+n+//gQ/b/3/+v/9f/bSv8/r1P/fzbP1//r//X/+n+Wtbb+P3f/4+OWJvsfAAAAOsjd/4S4xf4HAACAYeTuvyJusf8BAABgGLn7j8ctTfa//l//7/3/+n/9//Tz9f/bSf8/T/+/gf5f/6//1/+zqLX1/7n7r4xbmux/AAAA6CB3/xPjFvsfAAAAhpG7/0lxi/0PAAAAw8jd/+S4pcn+1//r//X/+n/9//Tz9f/bSf8/T/+/gf7/3vbzF+v/9f/6f3Y7w/7/nplfthfp/3P3PyVuabL/AQAAoIPc/U+NW+x/AAAAGEbu/qfFLfY/AAAADCN3/9Pjlib7X/+v/9f/6//1/9PP1/9vJ/3/vNX0/0eOTn5Z/7/1/b/3/+v/9f9dTP8yvs/a3v+fu/8ZcUuT/Q8AAAAd5O5/Ztxi/wMAAMAwcvc/K26x/wEAAGAYufufHbc02f/6f/2//l//r/+ffv5c/3/Trs+n/18X/f+81fT/B9D/6/+3+fPr//X/7Le2/j93/3Pilib7HwAAADrI3X9V3GL/AwAAwDBy9z83brH/AQAAYBi5+58XtzTZ/9P9/6kf1/8fjv7/9M+v/5/++bFU/5//jfr/2f7//7z/vyf9/zz9/wb6f/2//v+g/v/Ypu/X/zNlbf1/7v7nxy1N9j8AAAB0kLv/BXGL/Q8AAADDyN3/wrjF/gcAAIBh5O5/UdzSZP97/7/+X/+/ff2/9/+fdCHf/79z3vv/o/r/Q9L/z9P/b6D/1//r/73/n0Wtrf/P3f/iuKXJ/gcAAIAOcve/JG6x/wEAAGA77P6zA3v/QGnI3f/SuMX+BwAAgGHk7n9Z3DLW/r/ooB/Q/+v/9f/6/zX1/8cm/nWt/t/7/8+E/n+e/n8D/f+56OePDtb/X3PQ96+h/79C/8/KnNb/33zq6xeq/8/df3XcMtb+BwAAgNZy9788brH/AQAAYBi5+18Rt9j/AAAAMIzc/a+MW5rs/3Pe/x87+Nn6f/2//l//7/3/+v+l6f/n6f830P97/7/3/+v/WdRp/f8uF6r/z93/qrilyf4HAACADnL3vzpusf8BAABgGLn7r4lb7H8AAAAYRu7+18QtTfa/9//r//X/+n/9//Tz9f/bSf8/T/+/gf7/sP381VPfr//X/+v/2Wtt/X/u/tfGLU32PwAAAHSQu/91cYv9DwAAAMPI3f/6uMX+BwAAgGHk7n9D3NJk/+v/z23/n1/X/+v/d/T/+n/9/3nRtv8/MvVPov0O6P9ve+Dx+5z+Ff2//t/7//X/+n8WsIr+/8Sp/3WZu/+NcUuT/Q8AAAAd5O6/Nm6x/wEAAGAYufvfFLfY/wAAADCM3P1vjlua7H/9v/f/6//1//r/6efr/7dT2/7/kLz/fwP9v/5f/6//Z1Gr6P93/f+5+98StzTZ/wAAANBB7v63xi32PwAAAAwjd//b4hb7HwAAAIaRu//tcUuT/a//1//r//X/+v/p5+v/t5P+f57+fwP9v/5f/6//Z1HnoP8/svsfrmfa/+fuvy5uabL/AQAAoIPc/e+IW+x/AAAAGEbu/nfGLfY/AAAADCN3/7vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/zs7O9TMfYKr/P/Ef+v9F+/m9v8ovR/+v/2d91vb+/9z9745bmux/AAAA6CB3//Vxi/0PAAAAw8jdf0PcYv8DAADAMHL3vyduabL/9f/6f/2//l//P/18/f920v/P0/9v4P3/3v+v/9f/s6i19f+5+98btzTZ/wAAANBB7v4b4xb7HwAAAIaRu/99cYv9DwAAAMPI3X9T3NJk/+v/9f/6f/2//n/6+fr/7XTu+v8d/b/+X/+/gf5f/6//Z6+19f+5+98ftzTZ/wAAANBB7v4PxC32PwAAAAwjd/8H4xb7HwAAAIaRu/9DcUuT/a//1//r//X/+v/p5+v/t5P3/8/T/2+g/9f/6//1/yxqbf1/7v4Pxy1N9j8AAAB0kLv/5rjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1//p//b/+X/8//fzz0P9fsqP/X5z+f57+fwP9/5j9/0U7A/X/xw78fv0/a7S2/j93/8filib7HwAAADrI3f/xuMX+BwAAgGHk7v9E3GL/AwAAwDBy938ybmmy//X/+n/9v/5f/z/9fO//3076/3n6/w30/2P2/97/r//ngllb/5+7/1NxS5P9DwAAAB3k7r8lbrH/AQAAYBi5+z8dt9j/AAAAMIzc/Z+JW5rsf/2//l//r//X/08/X/+/nfT/8/T/G+j/9f/6f/0/i1pb/5+7/7NxS5P9DwAAAB3k7r81brH/AQAAYBi5+2+LW+x/AAAAGEbu/s/FLU32v/5f/38u+v+9n0P/f9KS/f8l+n/9v/5/0lr6/8su+//b9f/6f/2//l//r//vbm39f+7+z8ctTfY/AAAAdJC7/wtxi/0PAAAAw8jd/8W46d8v2CcCAAAAlpa7/0txS5Pf/9/f/1+8c7JQPWmq/49GTf+/i/7/9M/v/f/TPz+8/1//r/8/99bS/3v//9l9fv2//n+bP/8Z9f//vf/79f+MaG39f+7+2+OWJvsfAAAAOsjd/+W4xf4HAACAYeTu/0rcYv8DAADAMHL33xG3NNn/3v+v/9f/6//1/9PP1/9vJ/3/vHvf/+ffAevo/2+Pq//X/6/h8w/z/v9/0/+znLX1/7n7vxq3NNn/AAAA0EHu/q/FLfY/AAAADCN3/9fjFvsfAAAAhpG7/xtxS5P9r//X/+v/9f/6/+nn6/+3k/5/nvf/b6D/1/8f/vPfsvcLw/T/3v/PgtbW/+fu/2bc0mT/AwAAQAe5+78Vt9j/AAAAMIzc/d+OW+x/AAAAGEbu/u/ELU32v/5f/z9+/39//f+e5+v/9f8jO+v+Pv5GHqH/v3jmx/T/G+j/9f/e/6//Z1Fr6/9z998ZtzTZ/wAAANBB7v7vxi32PwAAAAwjd//34hb7HwAAAIaRu//7cUuT/a//79X/H9np2P97/7/+X//fiff/z9P/b6D/1//r//X/LGpt/X/u/h/ELU32PwAAAGyr+/7Pg+487H82d/8P4xb7HwAAAIaRu/9HcYv9DwAAAMPI3f/juKXJ/tf/9+r/e77/X/+v/9f/d6L/n6f/30D/r//X/+v/WdTa+v/c/T+JW3YNv6Nn/FcJAAAArEnu/p/GLU1+/x8AAAA6yN3/s7hl3/4/ccg/1Q4AAACsTe7+n8ctTX7/X/+/8v5/R/+v/9f/6//1/2dC/z/vXvb/J47o//X/M/T/+n/9P3utrf/P3f+LuOXA4fe/h/irBAAAAC6w0/6NQu7+X8YtTX7/HwAAADrI3f+ruMX+BwAAgGHk7v913NJk/+v/V97/n9X7/4/V/6X/b97/X3XJ5PP1//r/ken/53n//wb6f/2//l//z6LW1v/n7v9N3NJk/wMAAEAHuft/G7fY/wAAADCM3P2/i1vsfwAAABhG7v7fxy1N9r/+f8T+3/v/9f/zzx+n///PS4/fer8H3HCd/p9Tzmf/nz8X9P/6f/3/Sfp//b/+n73W1v/n7v9D3NJk/wMAAEAHufvvilvsfwAAABhG7v4/xi32PwAAAAwjd/+f4pYm+1//r//v2/9fe3c+c/v6/2yKu/f/3v+v/9/P+//n6f830P/r//X/+n8Wtbb+P3f/n+OWJvsfAAAAOsjdf3fcYv8DAADAMHL3/yVusf8BAABgGLn7/xq3NNn/+n/9f9/+/5Tt6/+9/39H/6//P4D+f57+fwP9v/5f/6//Z1Fr6/9z9/8tbmmy/wEAAKCD3P33xC32PwAAAAwjd//f4xb7HwAAAIaRu/8fcUuT/a//1//r//X/+v/p56+7/z+h/z+A/n+e/n8D/b/+X/+v/2dRa+v/c/f/MwAA//9h1XqP") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000001640), 0x0, 0x0) clock_gettime(0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bbdd67796a5a28774c51a0d448e48b1ddc681064b78e"], 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) r6 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x202) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f0000408000/0x3000)=nil, 0x3000) write$binfmt_script(r4, &(0x7f0000001500)={'#! ', './file0/../file0', [{0x20, 'x+%'}, {0x20, '/dev/audio#\x00'}, {0x20, '\x00'}], 0xa, "a95b5b621218d0a9d9b7d24092837c87de5daab60798ce843598a90641a8588fc7b3e1b85e611fad482f35eb9f18c2fc97cd987e58cf89090ec2c5e5ad72a6bf7f091793340ebc3571e88142dc11b355cedc3ca04d445a33fbe38900ab55fdeaf29ac18b7d23374e917d59c7261c17feb80c"}, 0x99) write$binfmt_elf64(r6, &(0x7f0000001280)=ANY=[@ANYBLOB="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"/611], 0x263) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000100)=0x7ff) chdir(&(0x7f00000001c0)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ftruncate(r8, 0xc17a) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) 44.453038273s ago: executing program 2 (id=4395): r0 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x90) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) 44.173610788s ago: executing program 2 (id=4396): prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000008680)=""/102398, 0x18ffe}], 0x1, 0x0, 0x1) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000a80)='.\x00', 0x1808003, &(0x7f00000002c0)=ANY=[], 0x44, 0xa0e, &(0x7f0000000ac0)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x280a0d1, &(0x7f00000005c0)=ANY=[@ANYRES16=r1], 0xff, 0x29c, &(0x7f0000000a40)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x3}}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44881, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x2, 0x2, 0x10000, 0x1000, &(0x7f0000008000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000001300)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\x1f\xa4s8K\xf4\xb2e\xe0\r\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x5) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) 43.456307901s ago: executing program 2 (id=4397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@struct={0x8, 0x5, 0x0, 0xf, 0x1, 0x3, [{0x1, 0x0, 0x3}, {0xb, 0x1, 0x5}, {0xd, 0x5}, {0x10, 0x3, 0xd07}, {0x6, 0x5, 0xb333}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x6a, 0xfffffdd7, 0x6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f00000000c0)=""/65}, 0x20) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000300)={0x6, 0x3}) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0xc5000000}, 0x48) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_open={0xf, 0x1, {0x0, {}, @void, @void}}}}]}, 0x40}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000000000000000000000000010500000020000100008000000000000b02000000000067e368ed31d80b2d420f98deafe79a1d8d5a16b41aa830313f8150158a26b59d10b21a9bf9478483f499b89116ae939f12d17009ad2c1ad8b5bb2010119260c0f4cbf3bdab6d47d006183186fed2bf414f3b9db425831e7025393b786c4770fb14a10e6344d2253b8de72b0b5fc3c85e6da623"], 0x0, 0x4e}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0xfffffffffffffce7, 0x0, 0x0}, 0x50) r9 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) 42.667248852s ago: executing program 2 (id=4399): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x2602, &(0x7f0000000380)={0x0, 0x3, 0x100, 0x3, 0x4000340, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) fsopen(0x0, 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x43, 0x8, 0x80000001, 0x3, 0x81, "11e06893f55334da8db2923c8d277373c9bacd", 0x1ff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") open$dir(&(0x7f0000000140)='./file0\x00', 0x482281, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) sendto$inet6(r1, &(0x7f0000000000)="eb", 0x1a000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0xc8842, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x5421, &(0x7f0000000100)) pipe2(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sync() sync() 18.769132111s ago: executing program 4 (id=3448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 16.318921815s ago: executing program 1 (id=4433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="30dc1d765a155b65ecd9b642c00f2b12066ae79d60c3f5e71046cfbab2584467a30265fc4937e625c31e0fa8cf9936ed01e07ab7e779c8f005c24e3433b51f47", 0x40}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/135, 0x10}, {&(0x7f0000000480)=""/141, 0x30}], 0x2}}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x80400, 0x0) mmap(&(0x7f00008f3000/0x12000)=nil, 0x12000, 0x1000001, 0x810, r6, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) dup(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, 0x0) close_range(r7, r8, 0x0) 16.31867731s ago: executing program 3 (id=3421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 14.349747702s ago: executing program 1 (id=4435): socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x80041284, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x10000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x9861e77b55bdd3d0, 0x129) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000200)={r3}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x40) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r5, 0x1, r2, 0x3}) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) accept4$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@private2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)=r5) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r5}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0xb, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b40000004900d96d28bd7000fedbdf250a003800", @ANYRESOCT=r7, @ANYBLOB="0100000014000100fcf8000000000000000000000000000014000100fe8000000000000000000000000000aa080002"], 0xb4}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0010000000000000b7030000000000ba4901850000007c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.681661853s ago: executing program 0 (id=4436): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0xf}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x208080, &(0x7f0000000040), 0x1, 0x5a2, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0x37, 0x0}, 0x0) 13.047192993s ago: executing program 1 (id=4437): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000000200000028000480240001800c0001007061796c6f61640014000280080003400000000008a20d8238a3d7c026c8e80004ba0000000009000900020073797a3200000000140000001100010000000004000000e875500d22b8c1e246baf07a4c00000000"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000006100), 0x49f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050000000000000002000020d3"]) 12.06899631s ago: executing program 0 (id=4438): syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x96}, "ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8be7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadabcd55be1fd272b82f6dd32f35208d7aac762d4e6de9"}, 0x9a) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x0, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x401) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x74) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x9, 0x2, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x66, 0x0, 0x70, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@end]}}}}}) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) 10.978516846s ago: executing program 0 (id=4439): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f00000001c0)) 10.5473368s ago: executing program 0 (id=4440): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r7, 0x731, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x1c}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) 9.355068768s ago: executing program 0 (id=4441): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xffffffff}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x400c006, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) capset(0x0, &(0x7f0000000340)) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 7.966272883s ago: executing program 0 (id=4442): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x2602, &(0x7f0000000380)={0x0, 0x3, 0x100, 0x3, 0x4000340, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x0, 0x8, 0x80000001, 0x3, 0x81, "11e06893f55334da8db2923c8d277373c9bacd", 0x1ff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") open$dir(&(0x7f0000000140)='./file0\x00', 0x482281, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) sendto$inet6(r1, &(0x7f0000000000)="eb", 0x1a000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0xc8842, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x5421, &(0x7f0000000100)) pipe2(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sync() sync() 6.046844398s ago: executing program 1 (id=4443): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xffffffff}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000000000007110350000000000a5000000000000019500000000000000", @ANYRES64=r6, @ANYRESDEC=r4, @ANYRES32, @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x400c006, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r7, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4.500960204s ago: executing program 1 (id=4444): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000100)={[{@init_itable}]}, 0xfe, 0x49e, &(0x7f0000000180)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(r0, 0x0, r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) setpriority(0x1, r2, 0x101) socket$inet6(0xa, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40383d0c, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x20000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_any}], [{@fsmagic}, {@flag='nomand'}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000004) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 0s ago: executing program 1 (id=4445): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x2602, &(0x7f0000000380)={0x0, 0x3, 0x100, 0x3, 0x4000340, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x0, 0x8, 0x80000001, 0x3, 0x81, "11e06893f55334da8db2923c8d277373c9bacd", 0x1ff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") open$dir(&(0x7f0000000140)='./file0\x00', 0x482281, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) sendto$inet6(r1, &(0x7f0000000000)="eb", 0x1a000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0xc8842, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x5421, &(0x7f0000000100)) pipe2(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sync() sync() kernel console output (not intermixed with test programs): cc 0x0c03 length: 249 > 1 [ 3119.915635][T13699] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3119.925189][T13699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3119.936059][T13699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3119.947367][T13699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3119.957240][T13699] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3120.012676][T30766] syz-executor: attempt to access beyond end of device [ 3120.012676][T30766] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3120.038036][T30766] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3120.861409][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3120.911676][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3120.944216][ T11] bond0 (unregistering): Released all slaves [ 3121.578393][T16941] Bluetooth: hci4: command tx timeout [ 3122.060911][T16941] Bluetooth: hci5: command tx timeout [ 3122.468581][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3122.510148][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3122.511738][T32029] netlink: 'syz.2.4347': attribute type 64 has an invalid length. [ 3122.658609][ T11] hsr_slave_0: left promiscuous mode [ 3122.687929][ T11] hsr_slave_1: left promiscuous mode [ 3122.713777][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3122.726536][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3122.737780][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3122.752648][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3122.837020][ T11] veth1_macvtap: left promiscuous mode [ 3122.845339][ T11] veth0_macvtap: left promiscuous mode [ 3122.866911][ T11] veth1_vlan: left promiscuous mode [ 3122.872586][ T11] veth0_vlan: left promiscuous mode [ 3123.660627][T16941] Bluetooth: hci4: command tx timeout [ 3124.130373][T16941] Bluetooth: hci5: command tx timeout [ 3124.496881][ T11] team0 (unregistering): Port device team_slave_1 removed [ 3124.658446][ T11] team0 (unregistering): Port device team_slave_0 removed [ 3126.110430][T31978] chnl_net:caif_netlink_parms(): no params data found [ 3126.164515][T16478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3126.190444][T16478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3126.230212][T16941] Bluetooth: hci5: command tx timeout [ 3127.031078][T32053] loop2: detected capacity change from 0 to 512 [ 3127.379584][T32017] chnl_net:caif_netlink_parms(): no params data found [ 3128.042640][T31978] bridge0: port 1(bridge_slave_0) entered blocking state [ 3128.071082][T31978] bridge0: port 1(bridge_slave_0) entered disabled state [ 3128.078442][T31978] bridge_slave_0: entered allmulticast mode [ 3128.103196][T31978] bridge_slave_0: entered promiscuous mode [ 3128.126825][T31978] bridge0: port 2(bridge_slave_1) entered blocking state [ 3128.164690][T31978] bridge0: port 2(bridge_slave_1) entered disabled state [ 3128.180527][T31978] bridge_slave_1: entered allmulticast mode [ 3128.188905][T31978] bridge_slave_1: entered promiscuous mode [ 3128.292018][T16941] Bluetooth: hci5: command tx timeout [ 3128.555854][T31978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3128.613939][T31978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3128.733324][T32017] bridge0: port 1(bridge_slave_0) entered blocking state [ 3128.746876][T32017] bridge0: port 1(bridge_slave_0) entered disabled state [ 3128.758319][T32017] bridge_slave_0: entered allmulticast mode [ 3128.769281][T32017] bridge_slave_0: entered promiscuous mode [ 3128.791568][T32017] bridge0: port 2(bridge_slave_1) entered blocking state [ 3128.807470][T32017] bridge0: port 2(bridge_slave_1) entered disabled state [ 3128.815895][T32017] bridge_slave_1: entered allmulticast mode [ 3128.833063][T32017] bridge_slave_1: entered promiscuous mode [ 3128.989246][T31978] team0: Port device team_slave_0 added [ 3129.133264][T31978] team0: Port device team_slave_1 added [ 3129.151931][T32017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3129.257292][T31978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3129.275751][T31978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3129.316210][T31978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3129.337153][T32017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3129.492298][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3129.543265][T31978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3129.560215][T31978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3129.595155][T31978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3129.665529][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3129.715601][T31876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3129.815778][T32017] team0: Port device team_slave_0 added [ 3129.857592][T32017] team0: Port device team_slave_1 added [ 3129.957301][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.010884][T31876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3130.169737][T31978] hsr_slave_0: entered promiscuous mode [ 3130.208706][T31978] hsr_slave_1: entered promiscuous mode [ 3130.232251][T31978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3130.239897][T31978] Cannot create hsr debugfs directory [ 3130.386958][T31876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3130.513671][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.627500][T13699] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3130.644783][T13699] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3130.666602][T13699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3130.667911][T32017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3130.676760][T13699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3130.689206][T13699] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3130.698707][T13699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3130.719944][T32017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3130.747210][T32017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3130.760226][T31876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3130.922895][T32017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3130.929967][T32017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3130.980400][T32017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3131.328661][T32017] hsr_slave_0: entered promiscuous mode [ 3131.370904][T32017] hsr_slave_1: entered promiscuous mode [ 3131.377886][T32017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3131.394736][T32017] Cannot create hsr debugfs directory [ 3131.858061][ T11] bridge_slave_1: left allmulticast mode [ 3131.863962][ T11] bridge_slave_1: left promiscuous mode [ 3131.869891][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 3131.921824][ T11] bridge_slave_0: left allmulticast mode [ 3131.929076][ T11] bridge_slave_0: left promiscuous mode [ 3131.950834][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 3132.850387][T13699] Bluetooth: hci3: command tx timeout [ 3133.640600][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3133.685324][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3133.707744][ T11] bond0 (unregistering): Released all slaves [ 3134.662795][ T11] hsr_slave_0: left promiscuous mode [ 3134.669192][ T11] hsr_slave_1: left promiscuous mode [ 3134.687594][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3134.702593][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3134.711356][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3134.718815][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3134.777478][ T11] veth1_macvtap: left promiscuous mode [ 3134.783410][ T11] veth0_macvtap: left promiscuous mode [ 3134.789208][ T11] veth1_vlan: left promiscuous mode [ 3134.807012][ T11] veth0_vlan: left promiscuous mode [ 3134.930439][T13699] Bluetooth: hci3: command tx timeout [ 3136.244635][ T11] team0 (unregistering): Port device team_slave_1 removed [ 3136.394509][ T11] team0 (unregistering): Port device team_slave_0 removed [ 3136.888499][T16941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3136.939028][T16941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3136.972187][T16941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3137.014974][T16941] Bluetooth: hci3: command tx timeout [ 3137.072979][T16941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3137.081870][T16941] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3137.100602][T16941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3138.466995][T32086] chnl_net:caif_netlink_parms(): no params data found [ 3138.550019][T31876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3138.868866][T31876] 8021q: adding VLAN 0 to HW filter on device team0 [ 3139.090730][T13699] Bluetooth: hci3: command tx timeout [ 3139.109871][T31978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3139.158193][T27736] bridge0: port 1(bridge_slave_0) entered blocking state [ 3139.165523][T27736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3139.185315][T13699] Bluetooth: hci6: command tx timeout [ 3139.304428][T32017] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3139.337473][T31978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3139.366533][T31978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3139.562743][T31978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3139.662684][T32017] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3139.693170][T28746] bridge0: port 2(bridge_slave_1) entered blocking state [ 3139.700525][T28746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3139.765074][T32086] bridge0: port 1(bridge_slave_0) entered blocking state [ 3139.775533][T32086] bridge0: port 1(bridge_slave_0) entered disabled state [ 3139.785449][T32086] bridge_slave_0: entered allmulticast mode [ 3139.794298][T32086] bridge_slave_0: entered promiscuous mode [ 3139.965053][T32017] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3139.995856][T32086] bridge0: port 2(bridge_slave_1) entered blocking state [ 3140.007826][T32086] bridge0: port 2(bridge_slave_1) entered disabled state [ 3140.024011][T32086] bridge_slave_1: entered allmulticast mode [ 3140.038364][T32086] bridge_slave_1: entered promiscuous mode [ 3140.201042][T32017] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3140.345257][T32086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3140.372199][T32086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3140.409377][T32134] chnl_net:caif_netlink_parms(): no params data found [ 3140.579710][T32086] team0: Port device team_slave_0 added [ 3140.622457][T32086] team0: Port device team_slave_1 added [ 3140.969594][T32086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3141.001466][T32086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3141.076938][T32086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3141.139219][T32086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3141.159673][T32086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3141.186588][T32086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3141.260253][T13699] Bluetooth: hci6: command tx timeout [ 3141.681100][T32134] bridge0: port 1(bridge_slave_0) entered blocking state [ 3141.688329][T32134] bridge0: port 1(bridge_slave_0) entered disabled state [ 3141.709476][T32134] bridge_slave_0: entered allmulticast mode [ 3141.729125][T32134] bridge_slave_0: entered promiscuous mode [ 3141.893972][T32134] bridge0: port 2(bridge_slave_1) entered blocking state [ 3141.909489][T32134] bridge0: port 2(bridge_slave_1) entered disabled state [ 3141.930688][T32134] bridge_slave_1: entered allmulticast mode [ 3141.939249][T32134] bridge_slave_1: entered promiscuous mode [ 3141.981216][T32086] hsr_slave_0: entered promiscuous mode [ 3141.991027][T32086] hsr_slave_1: entered promiscuous mode [ 3142.066683][T32017] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3142.253647][T32017] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3142.279634][T32017] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3142.305162][T32017] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3142.425937][T32134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3142.492020][T31978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3142.526060][T32134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3142.639491][T32134] team0: Port device team_slave_0 added [ 3142.665872][T32134] team0: Port device team_slave_1 added [ 3142.884994][T32134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3142.902221][T32134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3142.949057][T32134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3142.965637][T32134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3142.974316][T32134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3143.023321][T32134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3143.142695][T32134] hsr_slave_0: entered promiscuous mode [ 3143.150027][T32134] hsr_slave_1: entered promiscuous mode [ 3143.157581][T32134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3143.166433][T32134] Cannot create hsr debugfs directory [ 3143.188757][T31978] 8021q: adding VLAN 0 to HW filter on device team0 [ 3143.266042][T31876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3143.330939][T13699] Bluetooth: hci6: command tx timeout [ 3143.522915][T27736] bridge0: port 1(bridge_slave_0) entered blocking state [ 3143.530315][T27736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3143.727249][T26488] bridge0: port 2(bridge_slave_1) entered blocking state [ 3143.734632][T26488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3144.957641][T32017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3145.132369][T32086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3145.171785][T32086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3145.275897][T32134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3145.318159][T32086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3145.381424][T32017] 8021q: adding VLAN 0 to HW filter on device team0 [ 3145.412144][T13699] Bluetooth: hci6: command tx timeout [ 3145.421532][T32086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3145.573848][T32134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3145.627489][T31876] veth0_vlan: entered promiscuous mode [ 3145.663215][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 3145.670549][T14257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3145.801626][T32134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3145.833661][T27736] bridge0: port 2(bridge_slave_1) entered blocking state [ 3145.841001][T27736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3145.924364][T31876] veth1_vlan: entered promiscuous mode [ 3146.011445][T32134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3146.073291][T31978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3146.561325][T31876] veth0_macvtap: entered promiscuous mode [ 3146.760932][T31876] veth1_macvtap: entered promiscuous mode [ 3146.812233][T32086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3146.966362][T31978] veth0_vlan: entered promiscuous mode [ 3147.148448][T32017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3147.169402][T32134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3147.198527][T32086] 8021q: adding VLAN 0 to HW filter on device team0 [ 3147.239967][T31978] veth1_vlan: entered promiscuous mode [ 3147.249692][T32134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3147.313388][T32134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3147.353606][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 3147.360974][ T5190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3147.384790][T31876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.410911][T31876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.433023][T31876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.460163][T31876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.482949][T31876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3147.533920][T32134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3147.588555][T31876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.612221][T31876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.623402][T31876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.634327][T31876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.647344][T31876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3147.685620][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 3147.692941][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3147.774960][T31876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3147.807410][T31876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3147.840225][T31876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3147.849029][T31876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.022799][T32017] veth0_vlan: entered promiscuous mode [ 3148.152151][T31978] veth0_macvtap: entered promiscuous mode [ 3148.207697][T32017] veth1_vlan: entered promiscuous mode [ 3148.246580][T31978] veth1_macvtap: entered promiscuous mode [ 3148.417729][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3148.460261][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3148.480253][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3148.510301][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3148.532559][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3148.550957][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3148.568287][T31978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3148.586987][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3148.620374][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3148.642344][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3148.670664][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3148.686039][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3148.697258][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3148.713608][T31978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3148.865508][T31978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.874865][T31978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.887600][T31978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.897383][T31978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3149.282471][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.316804][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.357964][T32017] veth0_macvtap: entered promiscuous mode [ 3149.415002][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3149.435771][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3149.441496][T32134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3149.583093][T32017] veth1_macvtap: entered promiscuous mode [ 3149.851124][ T5267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.859107][ T5267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.920619][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.921579][T23647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.965536][T23647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.990599][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.013257][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3150.041839][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.076550][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3150.104731][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.137861][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3150.160476][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.182981][T32017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3150.219764][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.260159][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.291186][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.320179][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.340284][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.370127][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.400345][T32017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.428722][T32017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.453121][T32017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3150.594571][T32134] 8021q: adding VLAN 0 to HW filter on device team0 [ 3150.684127][T32017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.715991][T32017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.740261][T32017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.749029][T32017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.911391][T32086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3150.923956][T27518] bridge0: port 1(bridge_slave_0) entered blocking state [ 3150.931296][T27518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3151.033905][T16478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3151.047190][T16478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3151.078767][T32251] bridge0: port 2(bridge_slave_1) entered blocking state [ 3151.086188][T32251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3151.739273][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3152.031626][ T29] audit: type=1400 audit(1719379525.600:1549): avc: denied { sqpoll } for pid=32252 comm="syz.0.4342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3152.538786][T32259] loop0: detected capacity change from 0 to 1024 [ 3152.647140][T32259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3153.166459][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.346462][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.398833][T32134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3153.543920][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.651721][T32086] veth0_vlan: entered promiscuous mode [ 3153.774720][T23647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3153.830920][T23647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3153.856131][T32086] veth1_vlan: entered promiscuous mode [ 3154.047158][T16478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3154.067917][T16478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3154.148209][T32086] veth0_macvtap: entered promiscuous mode [ 3154.235854][T32086] veth1_macvtap: entered promiscuous mode [ 3154.305513][ T11] bridge_slave_1: left allmulticast mode [ 3154.330477][ T11] bridge_slave_1: left promiscuous mode [ 3154.336444][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 3154.413494][ T11] bridge_slave_0: left allmulticast mode [ 3154.419212][ T11] bridge_slave_0: left promiscuous mode [ 3154.461658][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 3154.464035][T32268] syz.0.4350: attempt to access beyond end of device [ 3154.464035][T32268] nbd0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 3154.521551][T32268] VFS: could not find a valid V7 on nbd0. [ 3154.771570][T21520] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3154.990283][T21520] usb 2-1: Using ep0 maxpacket: 16 [ 3155.007537][T21520] usb 2-1: config 0 has an invalid interface number: 255 but max is 2 [ 3155.035975][T21520] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 3155.063614][T21520] usb 2-1: config 0 has an invalid interface number: 132 but max is 2 [ 3155.085672][T21520] usb 2-1: config 0 has an invalid interface number: 251 but max is 2 [ 3155.103243][T21520] usb 2-1: config 0 has an invalid interface number: 194 but max is 2 [ 3155.123686][T21520] usb 2-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 3155.143984][T21520] usb 2-1: config 0 has no interface number 0 [ 3155.161892][T21520] usb 2-1: config 0 has no interface number 1 [ 3155.200288][T21520] usb 2-1: config 0 has no interface number 2 [ 3155.208129][T21520] usb 2-1: config 0 has no interface number 3 [ 3155.215233][T21520] usb 2-1: config 0 interface 255 altsetting 2 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 3155.254599][T21520] usb 2-1: config 0 interface 255 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3155.266726][T21520] usb 2-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 3155.283518][T21520] usb 2-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 3155.323489][T21520] usb 2-1: config 0 interface 255 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 3155.372606][T21520] usb 2-1: config 0 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 3155.396401][T21520] usb 2-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 3155.416797][T21520] usb 2-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 3155.442940][T21520] usb 2-1: config 0 interface 132 altsetting 93 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 3155.456122][T16941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3155.456907][T21520] usb 2-1: config 0 interface 132 altsetting 93 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3155.480811][T21520] usb 2-1: config 0 interface 251 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 3155.492533][T21520] usb 2-1: config 0 interface 251 altsetting 116 has a duplicate endpoint with address 0xD, skipping [ 3155.501651][T16941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3155.515322][T16941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3155.536432][T16941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3155.540304][T21520] usb 2-1: config 0 interface 251 altsetting 116 has a duplicate endpoint with address 0xC, skipping [ 3155.561196][T16941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3155.569081][T16941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3155.570418][T21520] usb 2-1: config 0 interface 251 altsetting 116 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 3155.605441][T21520] usb 2-1: config 0 interface 194 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 3155.697514][T21520] usb 2-1: config 0 interface 194 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 3155.717175][T21520] usb 2-1: config 0 interface 255 has no altsetting 0 [ 3155.733272][T21520] usb 2-1: config 0 interface 132 has no altsetting 0 [ 3155.780375][T21520] usb 2-1: config 0 interface 251 has no altsetting 0 [ 3155.806998][T21520] usb 2-1: config 0 interface 194 has no altsetting 0 [ 3155.825628][T21520] usb 2-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 3155.843718][T21520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3155.883043][T21520] usb 2-1: Product: ᰉ [ 3155.889731][T21520] usb 2-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 3155.923857][T21520] usb 2-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止 [ 3155.974150][T21520] usb 2-1: config 0 descriptor?? [ 3156.359362][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3156.378654][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3156.394358][ T11] bond0 (unregistering): Released all slaves [ 3156.445469][T32134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3156.446698][ T29] audit: type=1800 audit(1719379530.180:1550): pid=32273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4345" name="file1" dev="sda1" ino=2432 res=0 errno=0 [ 3156.475801][T32266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4350'. [ 3156.868895][T21520] usb 2-1: USB disconnect, device number 49 [ 3157.085921][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3157.117605][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.143361][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3157.164687][T32277] loop0: detected capacity change from 0 to 2048 [ 3157.164992][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.210743][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3157.240896][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.250957][T32277] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 3157.270799][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3157.291305][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.303838][T32277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3157.331761][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3157.345579][ T29] audit: type=1804 audit(1719379531.080:1551): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4352" name="/root/syzkaller.oiucwF/3/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 3157.352444][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.387769][T32277] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 3157.401930][ T29] audit: type=1800 audit(1719379531.110:1552): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4352" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 3157.403466][T32086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3157.485106][ T29] audit: type=1804 audit(1719379531.120:1553): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4352" name="/root/syzkaller.oiucwF/3/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 3157.520963][ T29] audit: type=1804 audit(1719379531.120:1554): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4352" name="/root/syzkaller.oiucwF/3/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 3157.562217][ T29] audit: type=1804 audit(1719379531.180:1555): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4352" name="/root/syzkaller.oiucwF/3/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 3157.639460][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3157.662600][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.680815][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3157.699463][ T29] audit: type=1800 audit(1719379531.180:1556): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4352" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 3157.700149][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.741587][T16941] Bluetooth: hci1: command tx timeout [ 3157.749386][ T29] audit: type=1804 audit(1719379531.190:1557): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4352" name="/root/syzkaller.oiucwF/3/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 3157.767629][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3157.773562][ T29] audit: type=1800 audit(1719379531.190:1558): pid=32277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4352" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 3157.817874][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.828255][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3157.861653][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.900127][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3157.919342][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3157.945639][T32086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3158.229409][T32086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3158.280190][T32086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3158.288976][T32086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3158.299024][T32086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3158.438138][ T11] hsr_slave_0: left promiscuous mode [ 3158.456906][ T11] hsr_slave_1: left promiscuous mode [ 3158.485340][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3158.506339][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3158.521705][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3158.529222][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3158.672789][ T11] veth1_macvtap: left promiscuous mode [ 3158.678456][ T11] veth0_macvtap: left promiscuous mode [ 3158.684923][ T11] veth1_vlan: left promiscuous mode [ 3158.692331][ T11] veth0_vlan: left promiscuous mode [ 3159.810958][T16941] Bluetooth: hci1: command tx timeout [ 3160.782741][ T11] team0 (unregistering): Port device team_slave_1 removed [ 3160.952083][ T11] team0 (unregistering): Port device team_slave_0 removed [ 3161.891366][T16941] Bluetooth: hci1: command tx timeout [ 3162.622807][T32286] netlink: 'syz.0.4356': attribute type 64 has an invalid length. [ 3162.792519][T32134] veth0_vlan: entered promiscuous mode [ 3163.025408][T32134] veth1_vlan: entered promiscuous mode [ 3164.512890][T16941] Bluetooth: hci1: command tx timeout [ 3164.544681][T16478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3164.575572][T32298] loop0: detected capacity change from 0 to 512 [ 3164.670881][T16478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3164.687437][T32134] veth0_macvtap: entered promiscuous mode [ 3164.934820][T32134] veth1_macvtap: entered promiscuous mode [ 3165.065648][T32271] chnl_net:caif_netlink_parms(): no params data found [ 3165.180829][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3165.229541][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3165.513525][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3165.576168][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3165.600817][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3165.647588][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3165.680279][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3165.710721][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3165.740264][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3165.780817][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3165.800554][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3165.813830][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3165.858961][T32134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3166.275903][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3166.297700][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3166.310550][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3166.321370][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3166.335263][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3166.350137][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3166.359999][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3166.390139][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3166.410289][T32134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3166.421192][T32134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3166.462838][T32134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3166.515910][T32271] bridge0: port 1(bridge_slave_0) entered blocking state [ 3166.531165][T32271] bridge0: port 1(bridge_slave_0) entered disabled state [ 3166.550656][T32271] bridge_slave_0: entered allmulticast mode [ 3166.566717][T32271] bridge_slave_0: entered promiscuous mode [ 3166.600200][T32271] bridge0: port 2(bridge_slave_1) entered blocking state [ 3166.615189][T32271] bridge0: port 2(bridge_slave_1) entered disabled state [ 3166.630631][T32271] bridge_slave_1: entered allmulticast mode [ 3166.652106][T32271] bridge_slave_1: entered promiscuous mode [ 3166.804581][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3166.960942][T32134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3166.969959][T32134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3167.008371][T32134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3167.017780][T32134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3167.102369][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3167.134799][T32271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3167.167661][T32271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3167.274322][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3167.525356][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3167.651189][T32271] team0: Port device team_slave_0 added [ 3167.697524][T32271] team0: Port device team_slave_1 added [ 3168.044624][T32271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3168.078541][T32271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3168.134791][T32271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3168.239661][T32271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3168.260190][T32271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3168.356432][T32271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3168.773444][T32271] hsr_slave_0: entered promiscuous mode [ 3168.813238][T32271] hsr_slave_1: entered promiscuous mode [ 3168.850748][T32271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3168.858390][T32271] Cannot create hsr debugfs directory [ 3169.337573][T13699] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3169.356956][T13699] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3169.368237][T13699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3169.419684][ T81] bridge_slave_1: left allmulticast mode [ 3169.426337][T13699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3169.452711][T13699] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3169.463992][T13699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3169.514984][ T81] bridge_slave_1: left promiscuous mode [ 3169.568248][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 3169.587098][ T81] bridge_slave_0: left allmulticast mode [ 3169.595498][ T81] bridge_slave_0: left promiscuous mode [ 3169.602467][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 3170.912188][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3170.952061][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3170.971224][ T81] bond0 (unregistering): Released all slaves [ 3171.203139][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3171.310321][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3171.499724][T13699] Bluetooth: hci3: command tx timeout [ 3172.556115][ T81] hsr_slave_0: left promiscuous mode [ 3172.571874][ T81] hsr_slave_1: left promiscuous mode [ 3172.596040][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3172.603806][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3172.615984][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3172.636537][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3172.715856][ T81] veth1_macvtap: left promiscuous mode [ 3172.740366][ T81] veth0_macvtap: left promiscuous mode [ 3172.746359][ T81] veth1_vlan: left promiscuous mode [ 3172.751937][ T81] veth0_vlan: left promiscuous mode [ 3173.316282][ T29] audit: type=1800 audit(1719379547.050:1559): pid=32368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4361" name="bus" dev="sda1" ino=2433 res=0 errno=0 [ 3173.580918][T13699] Bluetooth: hci3: command tx timeout [ 3174.464874][T16941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3174.481649][T16941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3174.506589][T16941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3174.519518][T16941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3174.537504][T16941] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3174.545313][T16941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3174.870279][ T81] team0 (unregistering): Port device team_slave_1 removed [ 3174.980702][ T81] team0 (unregistering): Port device team_slave_0 removed [ 3175.651991][T13699] Bluetooth: hci3: command tx timeout [ 3176.390395][T11933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3176.398280][T11933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3176.630796][T16941] Bluetooth: hci7: command tx timeout [ 3176.794733][ T29] audit: type=1800 audit(1719379550.530:1560): pid=32379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4364" name="bus" dev="sda1" ino=2437 res=0 errno=0 [ 3177.744553][T16941] Bluetooth: hci3: command tx timeout [ 3178.691173][T16941] Bluetooth: hci7: command tx timeout [ 3178.918909][T32347] chnl_net:caif_netlink_parms(): no params data found [ 3179.003623][T32271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3179.067604][T32271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3179.301243][T32271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3179.366112][ T29] audit: type=1400 audit(1719379553.100:1561): avc: denied { write } for pid=32407 comm="syz.2.4367" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3179.403952][T32271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3179.794846][T32372] chnl_net:caif_netlink_parms(): no params data found [ 3179.869602][T32347] bridge0: port 1(bridge_slave_0) entered blocking state [ 3179.887914][T32347] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.906173][T32347] bridge_slave_0: entered allmulticast mode [ 3179.927100][T32347] bridge_slave_0: entered promiscuous mode [ 3179.947630][T32347] bridge0: port 2(bridge_slave_1) entered blocking state [ 3179.976664][T32347] bridge0: port 2(bridge_slave_1) entered disabled state [ 3179.988091][T32347] bridge_slave_1: entered allmulticast mode [ 3180.010769][T32347] bridge_slave_1: entered promiscuous mode [ 3180.356998][T32347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3180.518491][T32347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3180.771199][T32418] netlink: 'syz.2.4368': attribute type 64 has an invalid length. [ 3180.781687][T16941] Bluetooth: hci7: command tx timeout [ 3180.840740][T32347] team0: Port device team_slave_0 added [ 3180.992612][T32347] team0: Port device team_slave_1 added [ 3181.379451][T32372] bridge0: port 1(bridge_slave_0) entered blocking state [ 3181.430752][T32372] bridge0: port 1(bridge_slave_0) entered disabled state [ 3181.450535][T32372] bridge_slave_0: entered allmulticast mode [ 3181.479344][T32372] bridge_slave_0: entered promiscuous mode [ 3181.521172][T32372] bridge0: port 2(bridge_slave_1) entered blocking state [ 3181.538631][T32372] bridge0: port 2(bridge_slave_1) entered disabled state [ 3181.568344][T32372] bridge_slave_1: entered allmulticast mode [ 3181.607053][T32372] bridge_slave_1: entered promiscuous mode [ 3181.628585][T32347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3181.637794][T32347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3181.748084][T32347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3182.137814][T32347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3182.196448][T32347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3182.248234][T32347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3182.403928][T32372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3182.664305][T32372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3182.850457][T16941] Bluetooth: hci7: command tx timeout [ 3183.028376][T32347] hsr_slave_0: entered promiscuous mode [ 3183.043956][T32347] hsr_slave_1: entered promiscuous mode [ 3183.203303][T32372] team0: Port device team_slave_0 added [ 3183.301247][T32372] team0: Port device team_slave_1 added [ 3183.380515][T32271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3183.555542][T32372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3183.574326][T32372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3183.640712][T32372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3183.784095][T32372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3183.804207][T32372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3183.848969][T32372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3184.198623][T32372] hsr_slave_0: entered promiscuous mode [ 3184.252614][T32372] hsr_slave_1: entered promiscuous mode [ 3184.280705][T32372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3184.288358][T32372] Cannot create hsr debugfs directory [ 3184.415185][T32271] 8021q: adding VLAN 0 to HW filter on device team0 [ 3184.788022][T27518] bridge0: port 1(bridge_slave_0) entered blocking state [ 3184.795338][T27518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3184.928928][T27518] bridge0: port 2(bridge_slave_1) entered blocking state [ 3184.936286][T27518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3187.379482][T32347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3187.462716][T32347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3187.644158][T32372] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3187.658686][T32484] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4373'. [ 3187.832150][T32347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3187.952011][T32347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3188.298720][T32372] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3188.471228][T32271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3188.759580][ T29] audit: type=1800 audit(1719379562.490:1562): pid=32493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4374" name="bus" dev="sda1" ino=2439 res=0 errno=0 [ 3188.807063][T32372] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3189.213127][T32372] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3189.235276][T16941] Bluetooth: hci6: SCO packet for unknown connection handle 1955 [ 3189.630771][T32347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3189.749799][T16941] Bluetooth: hci5: command 0x0406 tx timeout [ 3189.975777][T32347] 8021q: adding VLAN 0 to HW filter on device team0 [ 3190.037689][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 3190.045030][ T9510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3190.174475][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 3190.181759][ T9510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3190.356376][T32372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3190.463689][T32372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3190.533122][T32372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3190.605332][T32372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3190.714437][T32271] veth0_vlan: entered promiscuous mode [ 3190.799668][T32271] veth1_vlan: entered promiscuous mode [ 3190.972090][T32347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3191.015596][T32347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3191.150164][ T29] audit: type=1800 audit(1719379564.880:1563): pid=32523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4377" name="bus" dev="sda1" ino=2439 res=0 errno=0 [ 3191.471586][T32271] veth0_macvtap: entered promiscuous mode [ 3191.553213][T32271] veth1_macvtap: entered promiscuous mode [ 3191.752722][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.775651][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.822088][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.860147][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.892012][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.916082][T27736] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3191.935519][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.960174][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.971553][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.990172][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3192.009526][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3192.053316][T32271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3192.125005][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3192.142803][T27736] usb 3-1: Using ep0 maxpacket: 16 [ 3192.172992][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3192.184357][T27736] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 8 [ 3192.200159][T27736] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3192.220744][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3192.241538][T27736] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3192.248967][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3192.280186][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3192.281681][T27736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3192.310176][T27736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3192.314117][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3192.318227][T27736] usb 3-1: Product: э [ 3192.368511][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3192.369579][T27736] usb 3-1: Manufacturer: Т [ 3192.400129][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3192.420236][T32271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3192.420444][T27736] usb 3-1: SerialNumber: Ѝ [ 3192.445458][T32271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3192.469855][T32271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3192.471498][T32536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3192.506508][T32536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3192.568285][T32271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3192.608968][T32271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3192.630226][T32271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3192.639022][T32271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3192.790974][T32372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3193.052443][T27736] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 3193.084796][ T29] audit: type=1800 audit(1719379566.710:1564): pid=32536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4378" name="file1" dev="sda1" ino=2438 res=0 errno=0 [ 3193.153673][T32347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3193.210525][T27736] usb 3-1: USB disconnect, device number 56 [ 3193.303823][T27736] usblp0: removed [ 3193.507118][T32372] 8021q: adding VLAN 0 to HW filter on device team0 [ 3193.604256][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 3193.611604][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3193.769236][T26488] bridge0: port 2(bridge_slave_1) entered blocking state [ 3193.776576][T26488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3193.886941][T11933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3193.950761][T11933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3194.025686][T32347] veth0_vlan: entered promiscuous mode [ 3194.167284][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3194.213152][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3194.251872][T32347] veth1_vlan: entered promiscuous mode [ 3194.311081][T15710] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3194.492879][T15710] usb 3-1: device descriptor read/64, error -71 [ 3194.584602][T32347] veth0_macvtap: entered promiscuous mode [ 3194.830302][T15710] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 3194.992895][T15710] usb 3-1: device descriptor read/64, error -71 [ 3195.111940][T32347] veth1_macvtap: entered promiscuous mode [ 3195.133106][T15710] usb usb3-port1: attempt power cycle [ 3195.620362][T15710] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3195.672776][T15710] usb 3-1: device descriptor read/8, error -71 [ 3195.733928][ T1090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3195.977385][T15710] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 3196.043288][T15710] usb 3-1: device descriptor read/8, error -71 [ 3196.181193][T15710] usb usb3-port1: unable to enumerate USB device [ 3196.208944][ T1090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3196.286699][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3196.308541][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3196.331749][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3196.380254][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3196.399526][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3196.430423][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3196.487953][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3196.521548][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3196.544718][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3196.558822][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3196.579988][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3196.596431][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3196.656977][T32347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3196.877948][ T1090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3197.013291][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3197.047310][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3197.074888][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3197.090937][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3197.113080][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3197.136978][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3197.147895][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3197.166333][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3197.177380][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3197.190510][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3197.229577][T32347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3197.252719][T32347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3197.283284][T32347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3197.313862][T32347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3197.325402][T32347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3197.335780][T32347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3197.345139][T32347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3197.369434][T32372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3197.452677][ T1090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3198.021426][T32372] veth0_vlan: entered promiscuous mode [ 3198.055789][T29460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3198.088062][T29460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3198.610478][T32372] veth1_vlan: entered promiscuous mode [ 3198.698411][ T1090] bridge_slave_1: left allmulticast mode [ 3198.717887][ T1090] bridge_slave_1: left promiscuous mode [ 3198.731750][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 3198.773090][ T1090] bridge_slave_0: left allmulticast mode [ 3198.796268][ T1090] bridge_slave_0: left promiscuous mode [ 3198.815004][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 3199.132584][T16941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3199.148334][T16941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3199.159077][T16941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3199.190648][T16941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3199.207523][T16941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3199.217769][T16941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3201.014334][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3201.039878][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3201.066391][ T1090] bond0 (unregistering): Released all slaves [ 3201.132907][T29460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3201.163148][T29460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3201.332479][T16941] Bluetooth: hci1: command tx timeout [ 3202.680384][ T1090] hsr_slave_0: left promiscuous mode [ 3202.730995][ T1090] hsr_slave_1: left promiscuous mode [ 3202.766765][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3202.787211][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3202.811730][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3202.830782][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3202.899890][ T1090] veth1_macvtap: left promiscuous mode [ 3202.916342][ T1090] veth0_macvtap: left promiscuous mode [ 3202.931600][ T1090] veth1_vlan: left promiscuous mode [ 3202.940344][ T1090] veth0_vlan: left promiscuous mode [ 3203.410318][T16941] Bluetooth: hci1: command tx timeout [ 3204.638593][T32633] netlink: 'syz.2.4386': attribute type 1 has an invalid length. [ 3204.646568][T32633] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4386'. [ 3205.405566][T13699] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3205.419873][T13699] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3205.430397][T13699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3205.457242][T13699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3205.489767][T13699] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3205.500335][T32136] Bluetooth: hci1: command tx timeout [ 3205.506737][T13699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3205.762405][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 3205.846213][ T29] audit: type=1400 audit(1719379579.570:1565): avc: denied { mount } for pid=32632 comm="syz.2.4386" name="/" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3205.915953][ T29] audit: type=1400 audit(1719379579.570:1566): avc: denied { read } for pid=32632 comm="syz.2.4386" name="/" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3206.042305][ T29] audit: type=1400 audit(1719379579.570:1567): avc: denied { open } for pid=32632 comm="syz.2.4386" path="/root/syzkaller.HX8k0P/13/file0" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3206.157457][ T29] audit: type=1400 audit(1719379579.580:1568): avc: denied { ioctl } for pid=32632 comm="syz.2.4386" path="/root/syzkaller.HX8k0P/13/file0" dev="configfs" ino=94 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3206.314268][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 3207.576622][T16941] Bluetooth: hci1: command tx timeout [ 3207.576867][T13699] Bluetooth: hci3: command tx timeout [ 3208.120216][ T29] audit: type=1400 audit(1719379581.830:1569): avc: denied { unmount } for pid=32134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3208.138554][T32372] veth0_macvtap: entered promiscuous mode [ 3208.403457][T32372] veth1_macvtap: entered promiscuous mode [ 3208.920527][T27736] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 3209.006245][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3209.051579][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.062379][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3209.073307][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.084185][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3209.097237][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.110340][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3209.130441][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.143898][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3209.154558][T27736] usb 3-1: Using ep0 maxpacket: 16 [ 3209.160866][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.165364][T27736] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 8 [ 3209.187447][T27736] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3209.202603][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3209.221852][T27736] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3209.250472][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.298511][T32372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3209.352134][T27736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3209.376037][T27736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3209.406757][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3209.418373][T27736] usb 3-1: Product: э [ 3209.445593][T27736] usb 3-1: Manufacturer: Т [ 3209.470228][T27736] usb 3-1: SerialNumber: Ѝ [ 3209.470995][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.485464][T32653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3209.510006][T32653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3209.540241][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3209.592550][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.622404][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3209.624902][ T29] audit: type=1800 audit(1719379583.360:1570): pid=32654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4388" name="bus" dev="sda1" ino=2442 res=0 errno=0 [ 3209.660236][T13699] Bluetooth: hci3: command tx timeout [ 3209.684044][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.709181][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3209.720390][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.733572][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3209.744270][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.759052][T32372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3209.769963][T32372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3209.816771][T32372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3209.989957][T32610] chnl_net:caif_netlink_parms(): no params data found [ 3209.997781][ T29] audit: type=1800 audit(1719379583.730:1571): pid=32653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4389" name="file1" dev="sda1" ino=2444 res=0 errno=0 [ 3210.031043][T27736] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 3210.083038][T27736] usb 3-1: USB disconnect, device number 61 [ 3210.116756][T27736] usblp0: removed [ 3210.166660][T32372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3210.206439][T32372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3210.229592][T32372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3210.239730][T32372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3210.797673][ T1090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3210.859444][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3210.866002][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 3210.942578][T13699] Bluetooth: hci6: SCO packet for unknown connection handle 1955 [ 3211.465181][ T1090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.587823][T32638] chnl_net:caif_netlink_parms(): no params data found [ 3211.731320][T13699] Bluetooth: hci3: command tx timeout [ 3212.096088][ T1090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3212.141503][T27736] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3212.360463][T27736] usb 3-1: device descriptor read/64, error -71 [ 3212.389843][T32610] bridge0: port 1(bridge_slave_0) entered blocking state [ 3212.420464][T32610] bridge0: port 1(bridge_slave_0) entered disabled state [ 3212.444244][T32610] bridge_slave_0: entered allmulticast mode [ 3212.481431][T32610] bridge_slave_0: entered promiscuous mode [ 3212.509868][T32610] bridge0: port 2(bridge_slave_1) entered blocking state [ 3212.535987][T32610] bridge0: port 2(bridge_slave_1) entered disabled state [ 3212.550547][T32610] bridge_slave_1: entered allmulticast mode [ 3212.596155][T32610] bridge_slave_1: entered promiscuous mode [ 3212.690462][T27736] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3212.894655][ T1090] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3212.910500][T27736] usb 3-1: device descriptor read/64, error -71 [ 3213.057300][T27736] usb usb3-port1: attempt power cycle [ 3213.359101][T32610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3213.510408][T27736] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 3213.515500][T32610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3213.589331][T27736] usb 3-1: device descriptor read/8, error -71 [ 3213.670915][T23647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3213.707275][T23647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3213.810250][T13699] Bluetooth: hci3: command tx timeout [ 3213.864750][T32638] bridge0: port 1(bridge_slave_0) entered blocking state [ 3213.872656][T27736] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3213.915026][T32638] bridge0: port 1(bridge_slave_0) entered disabled state [ 3213.941350][T27736] usb 3-1: device descriptor read/8, error -71 [ 3213.971889][T32638] bridge_slave_0: entered allmulticast mode [ 3214.006528][T32638] bridge_slave_0: entered promiscuous mode [ 3214.041271][T32638] bridge0: port 2(bridge_slave_1) entered blocking state [ 3214.061563][T32638] bridge0: port 2(bridge_slave_1) entered disabled state [ 3214.086447][T32638] bridge_slave_1: entered allmulticast mode [ 3214.098671][T32638] bridge_slave_1: entered promiscuous mode [ 3214.113129][T27736] usb usb3-port1: unable to enumerate USB device [ 3214.622806][T32704] ubi0: attaching mtd0 [ 3214.642283][T29460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3214.657163][T29460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3214.674291][T32704] ubi0: scanning is finished [ 3214.678973][T32704] ubi0: empty MTD device detected [ 3214.735896][T32610] team0: Port device team_slave_0 added [ 3214.779024][T32610] team0: Port device team_slave_1 added [ 3214.833043][T32638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3214.885846][T32638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3215.397188][T32638] team0: Port device team_slave_0 added [ 3215.405152][T32704] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 3215.462588][T32610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3215.470411][T32704] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 3215.477680][T32704] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 3215.488922][T32610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3215.540104][T32610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3215.590714][T32704] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 3215.614755][T32704] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 3215.629885][T32638] team0: Port device team_slave_1 added [ 3215.649331][ T1090] bridge_slave_1: left allmulticast mode [ 3215.660136][ T1090] bridge_slave_1: left promiscuous mode [ 3215.670640][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 3215.679462][T32704] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 3215.702601][ T1090] bridge_slave_0: left allmulticast mode [ 3215.718513][ T1090] bridge_slave_0: left promiscuous mode [ 3215.732637][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 3215.741365][T32704] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 596468871 [ 3215.820443][T32704] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 3215.858146][T32712] ubi0: background thread "ubi_bgt0d" started, PID 32712 [ 3216.030570][T15710] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3216.220456][T15710] usb 1-1: Using ep0 maxpacket: 16 [ 3216.235336][T15710] usb 1-1: config 0 has an invalid interface number: 255 but max is 2 [ 3216.254394][T15710] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 3216.290644][T15710] usb 1-1: config 0 has an invalid interface number: 132 but max is 2 [ 3216.298905][T15710] usb 1-1: config 0 has an invalid interface number: 251 but max is 2 [ 3216.339070][T15710] usb 1-1: config 0 has an invalid interface number: 194 but max is 2 [ 3216.367922][T15710] usb 1-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 3216.400629][T15710] usb 1-1: config 0 has no interface number 0 [ 3216.420328][T15710] usb 1-1: config 0 has no interface number 1 [ 3216.430571][T15710] usb 1-1: config 0 has no interface number 2 [ 3216.446974][T15710] usb 1-1: config 0 has no interface number 3 [ 3216.476568][T15710] usb 1-1: config 0 interface 255 altsetting 2 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 3216.519198][T15710] usb 1-1: config 0 interface 255 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3216.550562][T15710] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 3216.580549][T15710] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 3216.600204][T15710] usb 1-1: config 0 interface 255 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 3216.640396][T15710] usb 1-1: config 0 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 3216.670400][T15710] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 3216.700755][T15710] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 3216.740006][T15710] usb 1-1: config 0 interface 132 altsetting 93 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 3216.790186][T15710] usb 1-1: config 0 interface 132 altsetting 93 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3216.831989][T15710] usb 1-1: config 0 interface 251 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 3216.848963][T15710] usb 1-1: config 0 interface 251 altsetting 116 has a duplicate endpoint with address 0xD, skipping [ 3216.879335][T15710] usb 1-1: config 0 interface 251 altsetting 116 has a duplicate endpoint with address 0xC, skipping [ 3216.899547][T15710] usb 1-1: config 0 interface 251 altsetting 116 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 3216.932639][T15710] usb 1-1: config 0 interface 194 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 3216.953933][T15710] usb 1-1: config 0 interface 194 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 3217.020457][T15710] usb 1-1: config 0 interface 255 has no altsetting 0 [ 3217.070166][T15710] usb 1-1: config 0 interface 132 has no altsetting 0 [ 3217.080547][T15710] usb 1-1: config 0 interface 251 has no altsetting 0 [ 3217.099931][T15710] usb 1-1: config 0 interface 194 has no altsetting 0 [ 3217.132501][T15710] usb 1-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 3217.152225][T15710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.172478][T15710] usb 1-1: Product: ᰉ [ 3217.176719][T15710] usb 1-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 3217.229411][T15710] usb 1-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止 [ 3217.263566][T15710] usb 1-1: config 0 descriptor?? [ 3217.702656][ T29] audit: type=1800 audit(1719379591.440:1572): pid=32721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4362" name="file1" dev="sda1" ino=2446 res=0 errno=0 [ 3217.908715][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3217.930664][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3217.980688][ T1090] bond0 (unregistering): Released all slaves [ 3218.049456][T32610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3218.068751][T32610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3218.123156][T32610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3218.579517][T15710] usb 1-1: USB disconnect, device number 60 [ 3218.680805][T32638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3218.687825][T32638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3218.752324][T32638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3218.820408][T32638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3218.833022][T32638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3218.890024][T32638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3219.313599][T32733] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4398'. [ 3219.344604][T13699] Bluetooth: hci7: SCO packet for unknown connection handle 1955 [ 3219.699203][T32610] hsr_slave_0: entered promiscuous mode [ 3219.766667][T32610] hsr_slave_1: entered promiscuous mode [ 3219.804032][T32610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3219.893558][T32610] Cannot create hsr debugfs directory [ 3220.187220][T32740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4401'. [ 3220.207980][T32740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4401'. [ 3220.247372][T32740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4401'. [ 3220.320286][ T1090] hsr_slave_0: left promiscuous mode [ 3220.339799][ T1090] hsr_slave_1: left promiscuous mode [ 3220.346511][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3220.370515][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3220.391577][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3220.407556][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3220.484652][ T1090] veth1_macvtap: left promiscuous mode [ 3220.508557][ T1090] veth0_macvtap: left promiscuous mode [ 3220.514792][ T1090] veth1_vlan: left promiscuous mode [ 3220.523177][ T1090] veth0_vlan: left promiscuous mode [ 3222.090272][T21520] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3222.252933][T21520] usb 1-1: device descriptor read/64, error -71 [ 3222.380582][T32752] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 2016 (only 8 groups) [ 3222.520504][T21520] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3222.685444][T21520] usb 1-1: device descriptor read/64, error -71 [ 3222.694850][ T29] audit: type=1804 audit(1719379596.430:1573): pid=32752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.4404" name="/root/syzkaller.Ru5ZKw/21/file1" dev="sda1" ino=2445 res=1 errno=0 [ 3222.814217][T21520] usb usb1-port1: attempt power cycle [ 3223.270341][T21520] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3223.352125][T21520] usb 1-1: device descriptor read/8, error -71 [ 3223.373127][T32756] Invalid ELF section header overflow [ 3223.418098][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 3223.615111][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 3223.630277][T21520] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3223.705286][T21520] usb 1-1: device descriptor read/8, error -71 [ 3223.838379][T21520] usb usb1-port1: unable to enumerate USB device [ 3224.810187][ T29] audit: type=1400 audit(1719379598.530:1574): avc: denied { accept } for pid=32757 comm="syz.1.4406" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3226.241902][T32638] hsr_slave_0: entered promiscuous mode [ 3226.270708][T32638] hsr_slave_1: entered promiscuous mode [ 3226.390332][T32758] mkiss: ax0: crc mode is auto. [ 3227.022235][T16941] Bluetooth: hci7: command 0x0406 tx timeout [ 3228.492480][ T312] pim6reg: entered allmulticast mode [ 3228.651019][ T29] audit: type=1400 audit(1719379602.390:1575): avc: denied { ioctl } for pid=316 comm="syz.0.4415" path="socket:[176109]" dev="sockfs" ino=176109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 3228.738797][ T29] audit: type=1400 audit(1719379602.470:1576): avc: denied { create } for pid=316 comm="syz.0.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 3228.809275][ T29] audit: type=1800 audit(1719379602.500:1577): pid=317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4415" name="file1" dev="sda1" ino=2444 res=0 errno=0 [ 3228.870468][ T29] audit: type=1400 audit(1719379602.510:1578): avc: denied { ioctl } for pid=316 comm="syz.0.4415" path="socket:[176120]" dev="sockfs" ino=176120 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3229.231954][ T321] Invalid ELF section header overflow [ 3229.353301][T32610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3229.477281][T32610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3229.503951][T32610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3229.556115][T32610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3230.222468][ T29] audit: type=1800 audit(1719379603.960:1579): pid=327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4418" name="file1" dev="sda1" ino=2446 res=0 errno=0 [ 3230.242317][T32610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3230.257738][ T324] loop0: detected capacity change from 512 to 64 [ 3230.382184][T16941] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3230.401926][T16941] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3230.414062][T16941] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3230.456089][T16941] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3230.465949][T16941] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 3230.480901][T16941] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3230.712552][T32610] 8021q: adding VLAN 0 to HW filter on device team0 [ 3230.871675][T32638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3231.106536][T32638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3231.135428][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 3231.142711][T14257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3231.239491][T32638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3231.441229][T27736] bridge0: port 2(bridge_slave_1) entered blocking state [ 3231.448600][T27736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3231.491392][T32638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3232.310667][T13699] Bluetooth: hci5: SCO packet for unknown connection handle 1955 [ 3232.532122][T13699] Bluetooth: hci8: command tx timeout [ 3232.801398][ T329] chnl_net:caif_netlink_parms(): no params data found [ 3233.227729][T32638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3233.534800][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 3233.569051][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 3233.580484][ T329] bridge_slave_0: entered allmulticast mode [ 3233.588929][ T329] bridge_slave_0: entered promiscuous mode [ 3233.675615][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 3233.685698][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 3233.700658][ T329] bridge_slave_1: entered allmulticast mode [ 3233.724516][ T329] bridge_slave_1: entered promiscuous mode [ 3233.891633][T32638] 8021q: adding VLAN 0 to HW filter on device team0 [ 3233.891648][T21520] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3233.936892][ T329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3233.989567][T32610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3234.032645][ T329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3234.081005][T32556] bridge0: port 1(bridge_slave_0) entered blocking state [ 3234.088268][T32556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3234.115575][T21520] usb 1-1: Using ep0 maxpacket: 16 [ 3234.154650][T21520] usb 1-1: config 0 has an invalid interface number: 255 but max is 2 [ 3234.190402][T21520] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 3234.220439][T21520] usb 1-1: config 0 has an invalid interface number: 132 but max is 2 [ 3234.255411][T21520] usb 1-1: config 0 has an invalid interface number: 251 but max is 2 [ 3234.287599][T21520] usb 1-1: config 0 has an invalid interface number: 194 but max is 2 [ 3234.304238][T27518] bridge0: port 2(bridge_slave_1) entered blocking state [ 3234.311729][T27518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3234.316674][T21520] usb 1-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 3234.351736][T21520] usb 1-1: config 0 has no interface number 0 [ 3234.365674][T21520] usb 1-1: config 0 has no interface number 1 [ 3234.380786][T21520] usb 1-1: config 0 has no interface number 2 [ 3234.416658][T21520] usb 1-1: config 0 has no interface number 3 [ 3234.449349][T21520] usb 1-1: config 0 interface 255 altsetting 2 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 3234.468846][T21520] usb 1-1: config 0 interface 255 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3234.498903][T21520] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 3234.516042][ T329] team0: Port device team_slave_0 added [ 3234.545906][T21520] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 3234.592449][T21520] usb 1-1: config 0 interface 255 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 3234.610389][T13699] Bluetooth: hci8: command tx timeout [ 3234.629125][ T329] team0: Port device team_slave_1 added [ 3234.663026][T21520] usb 1-1: config 0 interface 255 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 3234.710195][T21520] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 3234.761086][T21520] usb 1-1: config 0 interface 255 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 3234.800257][T21520] usb 1-1: config 0 interface 132 altsetting 93 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 3234.834666][T21520] usb 1-1: config 0 interface 132 altsetting 93 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3234.890213][T21520] usb 1-1: config 0 interface 251 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 3234.919313][T21520] usb 1-1: config 0 interface 251 altsetting 116 has a duplicate endpoint with address 0xD, skipping [ 3234.963891][ T329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3234.971621][T21520] usb 1-1: config 0 interface 251 altsetting 116 has a duplicate endpoint with address 0xC, skipping [ 3234.983387][ T329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3235.010211][T21520] usb 1-1: config 0 interface 251 altsetting 116 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 3235.025844][T13699] Bluetooth: hci5: SCO packet for unknown connection handle 1955 [ 3235.025890][T21520] usb 1-1: config 0 interface 194 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 3235.049266][ T329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3235.093700][T21520] usb 1-1: config 0 interface 194 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 3235.131958][ T329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3235.138976][ T329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3235.174590][T21520] usb 1-1: config 0 interface 255 has no altsetting 0 [ 3235.193250][T21520] usb 1-1: config 0 interface 132 has no altsetting 0 [ 3235.221622][T21520] usb 1-1: config 0 interface 251 has no altsetting 0 [ 3235.228473][T21520] usb 1-1: config 0 interface 194 has no altsetting 0 [ 3235.258744][ T329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3235.284467][T21520] usb 1-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 3235.310249][T21520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3235.318492][T21520] usb 1-1: Product: ᰉ [ 3235.363210][T21520] usb 1-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 3235.405249][T21520] usb 1-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ [ 3235.465863][T21520] usb 1-1: config 0 descriptor?? [ 3235.548782][ T329] hsr_slave_0: entered promiscuous mode [ 3235.586274][ T329] hsr_slave_1: entered promiscuous mode [ 3235.593428][ T329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3235.606668][ T329] Cannot create hsr debugfs directory [ 3235.872895][ T29] audit: type=1800 audit(1719379609.600:1580): pid=373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4422" name="file1" dev="sda1" ino=2448 res=0 errno=0 [ 3236.097717][T21520] usb 1-1: USB disconnect, device number 65 [ 3236.582475][ T405] pim6reg: entered allmulticast mode [ 3236.668534][ T410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4426'. [ 3236.690625][T13699] Bluetooth: hci8: command tx timeout [ 3236.707823][ T410] bridge0: entered promiscuous mode [ 3236.800750][T13699] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 3236.911604][ T329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.266065][ T329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.337951][T32610] veth0_vlan: entered promiscuous mode [ 3237.506380][ T329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.599471][T32610] veth1_vlan: entered promiscuous mode [ 3237.743914][ T329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.823645][T32638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3237.986248][T32610] veth0_macvtap: entered promiscuous mode [ 3238.038349][T32610] veth1_macvtap: entered promiscuous mode [ 3238.253636][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3238.299230][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.326871][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3238.350499][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.380456][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3238.400306][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.422459][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3238.454131][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.479840][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3238.500282][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.518984][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3238.531411][T13699] Bluetooth: hci4: command 0x0406 tx timeout [ 3238.547423][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.582034][T32610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3238.741346][T32638] veth0_vlan: entered promiscuous mode [ 3238.770617][T16941] Bluetooth: hci8: command tx timeout [ 3238.891294][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3238.911413][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.930739][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3238.970166][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3238.982630][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3239.012821][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3239.023027][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3239.038664][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3239.049058][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3239.060229][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3239.072508][T32610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3239.083157][T32610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3239.105895][T32610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3239.159719][T32610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3239.170931][T32610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3239.179949][T32610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3239.200233][T32610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3239.261003][ T329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3239.290721][ T329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3239.397717][ T329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3239.429132][T32638] veth1_vlan: entered promiscuous mode [ 3239.576004][ T329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3240.027367][T32638] veth0_macvtap: entered promiscuous mode [ 3240.095284][T32638] veth1_macvtap: entered promiscuous mode [ 3240.282696][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3240.296429][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.308530][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3240.330016][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.361129][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3240.389509][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.414697][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3240.425805][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.436355][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3240.447462][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.459019][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3240.486444][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.500998][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3240.513901][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.532834][T32638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3240.575823][T23647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3240.630122][T23647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3240.692052][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3240.730170][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.755331][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3240.788759][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.820342][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3240.844078][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.880316][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3240.893559][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.904093][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3240.915252][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.934012][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3240.946094][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3240.956699][T32638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3240.968126][T32638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3241.013664][T32638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3241.121273][T32638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3241.160447][T32638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3241.169234][T32638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3241.205292][T32638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3241.326495][T11933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3241.361288][T11933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3241.592832][ T427] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4430'. [ 3242.613943][T23647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3242.635445][ T329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3242.655921][T23647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3243.119980][T29460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3243.312760][ T329] 8021q: adding VLAN 0 to HW filter on device team0 [ 3243.334414][T23647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3243.369844][T23647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3243.447552][T27518] bridge0: port 1(bridge_slave_0) entered blocking state [ 3243.454790][T27518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3243.804486][T29460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3243.931874][T27518] bridge0: port 2(bridge_slave_1) entered blocking state [ 3243.939137][T27518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3243.980232][ T29] audit: type=1800 audit(1719379617.690:1581): pid=432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4432" name="bus" dev="sda1" ino=2441 res=0 errno=0 [ 3244.059160][T13699] Bluetooth: hci5: command 0x0406 tx timeout [ 3244.224172][T29460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3244.574161][T29460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3245.420487][T29460] bridge_slave_1: left allmulticast mode [ 3245.426211][T29460] bridge_slave_1: left promiscuous mode [ 3245.460490][T29460] bridge0: port 2(bridge_slave_1) entered disabled state [ 3245.501600][T29460] bridge_slave_0: left allmulticast mode [ 3245.507314][T29460] bridge_slave_0: left promiscuous mode [ 3245.568174][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 3246.915494][T13699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3246.942665][T13699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3246.960784][T13699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3246.985760][T13699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3246.994289][T13699] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3247.018078][T13699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3247.278462][T16941] Bluetooth: hci7: SCO packet for unknown connection handle 1955 [ 3247.415225][ T29] audit: type=1800 audit(1719379621.150:1582): pid=456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4435" name="file0" dev="sda1" ino=2446 res=0 errno=0 [ 3247.510166][ T29] audit: type=1326 audit(1719379621.180:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3247.635221][ T29] audit: type=1326 audit(1719379621.180:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3248.340311][ T29] audit: type=1326 audit(1719379622.060:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3248.462466][ T29] audit: type=1326 audit(1719379622.060:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3248.539568][ T29] audit: type=1326 audit(1719379622.060:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3248.567711][ T29] audit: type=1326 audit(1719379622.060:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3248.605380][ T29] audit: type=1326 audit(1719379622.060:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3248.652132][ T29] audit: type=1326 audit(1719379622.060:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d51575ae9 code=0x7fc00000 [ 3248.686568][T13699] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3248.702251][T13699] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3248.747692][T13699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3248.782871][T13699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3248.799071][T13699] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3248.830221][T13699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3249.160566][ T472] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 3249.331172][T16941] Bluetooth: hci1: command tx timeout [ 3249.467076][T29460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3249.520224][T29460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3249.554397][T16941] Bluetooth: hci7: SCO packet for unknown connection handle 0 [ 3249.559735][T29460] bond0 (unregistering): Released all slaves [ 3250.930676][T16941] Bluetooth: hci3: command tx timeout [ 3251.062056][ T329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3251.387611][T29460] hsr_slave_0: left promiscuous mode [ 3251.421852][T16941] Bluetooth: hci1: command tx timeout [ 3251.453962][T29460] hsr_slave_1: left promiscuous mode [ 3251.472373][T29460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3251.479876][T29460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3251.546808][ T492] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4440'. [ 3251.611421][T29460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3251.628810][T29460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3251.766109][T29460] veth1_macvtap: left promiscuous mode [ 3251.788581][T29460] veth0_macvtap: left promiscuous mode [ 3251.806176][T29460] veth1_vlan: left promiscuous mode [ 3251.846008][T29460] veth0_vlan: left promiscuous mode [ 3253.010374][T16941] Bluetooth: hci3: command tx timeout [ 3253.492029][T16941] Bluetooth: hci1: command tx timeout [ 3255.090512][T16941] Bluetooth: hci3: command tx timeout [ 3255.542386][T29460] team0 (unregistering): Port device team_slave_1 removed [ 3255.570734][T16941] Bluetooth: hci1: command tx timeout [ 3255.780680][T29460] team0 (unregistering): Port device team_slave_0 removed [ 3257.203646][T16941] Bluetooth: hci3: command tx timeout [ 3259.274560][ T447] chnl_net:caif_netlink_parms(): no params data found [ 3259.723181][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 3259.740441][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 3259.758152][ T447] bridge_slave_0: entered allmulticast mode [ 3259.790704][ T447] bridge_slave_0: entered promiscuous mode [ 3259.838766][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 3259.870511][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 3259.880569][ T447] bridge_slave_1: entered allmulticast mode [ 3259.913935][ T447] bridge_slave_1: entered promiscuous mode [ 3260.090543][ T466] chnl_net:caif_netlink_parms(): no params data found [ 3260.219675][ T447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3260.422003][ T447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3260.739918][ T329] veth0_vlan: entered promiscuous mode [ 3260.906130][ T447] team0: Port device team_slave_0 added [ 3261.148050][T29460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3261.317558][ T447] team0: Port device team_slave_1 added [ 3261.573164][T29460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3261.695869][ T447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3261.709381][ T447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3261.742754][ T447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3261.764148][ T447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3261.790097][ T447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3261.825806][ T447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3261.916691][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 3261.940509][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 3261.947882][ T466] bridge_slave_0: entered allmulticast mode [ 3261.979447][ T466] bridge_slave_0: entered promiscuous mode [ 3262.091992][T29460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3262.114373][ T329] veth1_vlan: entered promiscuous mode [ 3262.136027][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 3262.153172][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 3262.171479][ T466] bridge_slave_1: entered allmulticast mode [ 3262.193158][ T466] bridge_slave_1: entered promiscuous mode [ 3262.469593][T29460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3262.709158][ T466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3262.845373][ T447] hsr_slave_0: entered promiscuous mode [ 3262.862016][ T447] hsr_slave_1: entered promiscuous mode [ 3262.880725][ T447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3262.888371][ T447] Cannot create hsr debugfs directory [ 3262.944516][ T466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3263.352895][ T466] team0: Port device team_slave_0 added [ 3263.365616][ T466] team0: Port device team_slave_1 added [ 3263.704749][ T329] veth0_macvtap: entered promiscuous mode [ 3263.744038][ T466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3263.774504][ T466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3263.838902][ T466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3263.870921][ T466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3263.878026][ T466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3263.940192][ T466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3264.048856][ T329] veth1_macvtap: entered promiscuous mode [ 3264.142526][T13699] Bluetooth: hci6: command 0x0406 tx timeout [ 3264.514699][ T466] hsr_slave_0: entered promiscuous mode [ 3264.561631][ T466] hsr_slave_1: entered promiscuous mode [ 3264.578306][ T466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3264.590235][ T466] Cannot create hsr debugfs directory [ 3264.673678][T29460] bridge_slave_1: left allmulticast mode [ 3264.680939][T29460] bridge_slave_1: left promiscuous mode [ 3264.690393][T29460] bridge0: port 2(bridge_slave_1) entered disabled state [ 3264.714643][T29460] bridge_slave_0: left allmulticast mode [ 3264.730112][T29460] bridge_slave_0: left promiscuous mode [ 3264.736100][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 3264.952701][T13699] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 3264.980711][T13699] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 3264.994250][T13699] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 3265.011727][T13699] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 3265.020201][T13699] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 3265.040694][T13699] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 3266.253107][T29460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3266.295643][T29460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3266.324228][T29460] bond0 (unregistering): Released all slaves [ 3266.446046][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3266.483862][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.510230][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3266.533461][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.549701][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3266.560802][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.570709][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3266.585770][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.597969][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3266.608847][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.619378][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3266.630453][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.640765][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3266.651736][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.689981][ T329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3266.986382][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3267.018792][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3267.041872][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3267.065440][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3267.075727][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3267.091211][T13699] Bluetooth: hci9: command tx timeout [ 3267.100315][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3267.128252][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3267.139068][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3267.160259][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3267.210316][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3267.230268][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3267.250674][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3267.278334][ T329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3267.289219][ T329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3267.322909][ T329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3267.467972][ T329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3267.484769][ T329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3267.511806][ T329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3267.520714][ T329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3268.080256][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 3268.080280][ T29] audit: type=1400 audit(1719379641.810:1612): avc: denied { sys_chroot } for pid=564 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 3268.128567][ T29] audit: type=1400 audit(1719379641.810:1613): avc: denied { setgid } for pid=564 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 3268.303018][T29460] hsr_slave_0: left promiscuous mode [ 3268.325669][T29460] hsr_slave_1: left promiscuous mode [ 3268.340388][T29460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3268.347897][T29460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3268.371025][T29460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3268.378506][T29460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3268.444816][T29460] veth1_macvtap: left promiscuous mode [ 3268.451861][T29460] veth0_macvtap: left promiscuous mode [ 3268.457651][T29460] veth1_vlan: left promiscuous mode [ 3268.464216][T29460] veth0_vlan: left promiscuous mode [ 3269.180549][T13699] Bluetooth: hci9: command tx timeout [ 3270.035440][T29460] team0 (unregistering): Port device team_slave_1 removed [ 3270.175157][T29460] team0 (unregistering): Port device team_slave_0 removed [ 3271.013036][ T30] INFO: task kworker/u8:7:16479 blocked for more than 143 seconds. [ 3271.021194][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 3271.028985][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3271.039054][ T30] task:kworker/u8:7 state:D stack:23504 pid:16479 tgid:16479 ppid:2 flags:0x00004000 [ 3271.049859][ T30] Workqueue: writeback wb_workfn (flush-7:1) [ 3271.056702][ T30] Call Trace: [ 3271.060399][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 3271.063385][ T30] __schedule+0xf15/0x5d00 [ 3271.082476][ T30] ? __pfx_blk_mq_flush_plug_list.part.0+0x10/0x10 [ 3271.110065][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3271.118047][ T30] ? __pfx___schedule+0x10/0x10 [ 3271.150072][ T30] ? schedule+0x298/0x350 [ 3271.154494][ T30] ? __pfx_lock_release+0x10/0x10 [ 3271.159582][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 3271.200112][ T30] ? __mutex_trylock_common+0x78/0x250 [ 3271.205696][ T30] schedule+0xe7/0x350 [ 3271.209821][ T30] schedule_preempt_disabled+0x13/0x30 [ 3271.230068][ T30] __mutex_lock+0x5b8/0x9c0 [ 3271.234681][ T30] ? exfat_write_inode+0x6c/0x140 [ 3271.239782][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3271.245874][ T30] ? __pfx_lock_release+0x10/0x10 [ 3271.251427][T13699] Bluetooth: hci9: command tx timeout [ 3271.257561][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 3271.263613][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3271.269150][ T30] ? exfat_write_inode+0x6c/0x140 [ 3271.274926][ T30] exfat_write_inode+0x6c/0x140 [ 3271.279870][ T30] __writeback_single_inode+0xb36/0xf90 [ 3271.286263][ T30] ? __pfx___writeback_single_inode+0x10/0x10 [ 3271.295272][ T30] ? _raw_spin_unlock+0x28/0x50 [ 3271.301000][ T30] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 3271.307093][ T30] writeback_sb_inodes+0x611/0x1150 [ 3271.313064][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3271.318354][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 3271.326749][ T30] ? __pfx___up_read+0x10/0x10 [ 3271.332060][ T30] ? move_expired_inodes+0x59e/0x850 [ 3271.337523][ T30] __writeback_inodes_wb+0xff/0x2e0 [