last executing test programs: 8m51.187411534s ago: executing program 32 (id=30): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 8m14.036722785s ago: executing program 33 (id=115): unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 8m4.299002061s ago: executing program 34 (id=107): socket$packet(0x11, 0x2, 0x300) socket(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) socket(0x10, 0x3, 0x0) 7m36.001389673s ago: executing program 35 (id=183): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) unshare(0x6060600) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000004c0)={@any, 0x75a, 0x1, 0xf, 0x1, 0xfc00, "9e9e26a54fdc2e049278aa023bb69d3b7fa78ffc59af16812586e6307639cb60038a4cfcf463176c135a6193161979b618f67a1a047908573f4b38ee646b7959513d48a6131e2003f29a9cd8374600966c6064b857ec054c01f2a52d8b639871a2e76a7d4d335dc9e7dc7885dc3ca26d4d69dbb64aaa1fd00fd315adf0e814e7"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00009908ffff0000009df356b027ce55b1f5e007e9361b6f6f9d0d00"/44], 0x50) r6 = dup2(0xffffffffffffffff, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fchdir(r1) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 6m41.609328525s ago: executing program 36 (id=273): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) mkdir(&(0x7f0000000340)='./file0\x00', 0x40) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6m34.503675326s ago: executing program 37 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000002d632592731137ee0000000016000008000074000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x2000402) lseek(r6, 0x0, 0x3) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x40}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=@ipv6_getaddr={0x2c, 0x16, 0x921, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x20000000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000400)) socket$inet6(0xa, 0x80002, 0x0) 6m30.395593631s ago: executing program 38 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc810) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0xfea7) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) copy_file_range(r3, &(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x81, 0x10000000000000) 6m15.899900891s ago: executing program 39 (id=302): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x111001, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000027b000/0x4000)=nil, 0x4000}}) 6m9.053445927s ago: executing program 9 (id=184): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x200013, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x23b) r6 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) pwrite64(r6, 0x0, 0x0, 0xfecf) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6m7.852759494s ago: executing program 9 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 6m6.400142083s ago: executing program 9 (id=315): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582"], 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x53bd, 0x8, 0x493, 0xcb42, 0x5, 0x383d, 0xfff, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x2, 0x324c, 0x1, 0xfc35}}, &(0x7f0000000180)=0xb0) 6m3.056574605s ago: executing program 9 (id=319): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x16, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x6c, 0x4, 0x24, 0x5, 0x48, 0x4, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x46, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m2.525471336s ago: executing program 9 (id=323): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x81) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1}) 5m47.275990424s ago: executing program 40 (id=323): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x81) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1}) 5m17.950995487s ago: executing program 1 (id=410): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0xa8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x16, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x6c, 0x4, 0x24, 0x5, 0x48, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x46, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m10.966290417s ago: executing program 1 (id=423): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="200000005f00010441a3840a928e595fa5"], 0x20}], 0x1}, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582"], 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x53bd, 0x8, 0x493, 0xcb42, 0x5, 0x383d, 0xfff, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x2, 0x324c, 0x1, 0xfc35}}, &(0x7f0000000180)=0xb0) 5m6.330294212s ago: executing program 1 (id=431): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="200000005f00010441a3840a928e595fa5"], 0x20}], 0x1}, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582"], 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x53bd, 0x8, 0x493, 0xcb42, 0x5, 0x383d, 0xfff, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x2, 0x324c, 0x1, 0xfc35}}, &(0x7f0000000180)=0xb0) 5m2.473483373s ago: executing program 1 (id=437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) recvmmsg(r5, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x2101}, {{0x0, 0x0, &(0x7f0000000500)}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}], 0x4, 0x20, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x4, &(0x7f0000000340)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/42, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000e00)={0x4, 0x0, [{0x10000, 0x90, &(0x7f0000000ec0)=""/144}, {0xd000, 0x0, 0x0}, {0x2000, 0x6, &(0x7f0000000d00)=""/6}, {0xeeee0000, 0x90, &(0x7f0000000d40)=""/144}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af04, &(0x7f0000000200)) 4m58.426671359s ago: executing program 1 (id=446): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) open(0x0, 0x14d27e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000280)={[{@barrier}, {@stripe={'stripe', 0x3d, 0x2}}], [{@obj_role={'obj_role', 0x3d, ':(^,#$]`'}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x80) pwrite64(r3, &(0x7f0000000140), 0x0, 0x8000c61) pwrite64(r3, 0x0, 0x0, 0x7) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 4m56.720782466s ago: executing program 6 (id=450): shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x9, &(0x7f0000000240)=[{0x5, 0x4, 0x6, 0x200}, {0x3, 0x8, 0x5, 0x8}, {0x0, 0x0, 0x9, 0x80}, {0x9, 0xd6, 0x8, 0x2}, {0x1, 0x0, 0x5, 0x8001}, {0x7fea, 0xf7, 0x4, 0x8001}, {0xc9ce, 0x4, 0x1, 0x8}, {0x9, 0x10, 0x1, 0x3}, {0x8, 0x4, 0x3, 0xb}]}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x42802000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, &(0x7f00000005c0)={0x8000, 0xc2cf, 0x1, 0x4, 0xd, "00e4fdab790000fb00"}) 4m54.496299489s ago: executing program 1 (id=454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x2101}, {{0x0, 0x0, &(0x7f0000000500)}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}], 0x4, 0x20, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/42, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000180)=""/87, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af04, &(0x7f0000000200)) 4m50.342785195s ago: executing program 6 (id=459): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x8000) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10480, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x10b000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 4m48.517363378s ago: executing program 6 (id=462): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r5, 0x80, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) tgkill(0x0, r2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) 4m46.108816185s ago: executing program 6 (id=464): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xa0, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m43.081680219s ago: executing program 6 (id=469): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0x0, 0x761a, 0x0, 0x9, 0x0, 0x10, 0x1, 0x3, 0x1}) 4m39.137881107s ago: executing program 41 (id=454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x2101}, {{0x0, 0x0, &(0x7f0000000500)}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}], 0x4, 0x20, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/42, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000180)=""/87, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af04, &(0x7f0000000200)) 4m37.701100598s ago: executing program 0 (id=476): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="93bffc", 0x3}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000001a80)="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", 0x7f9e, 0x20000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m36.397105682s ago: executing program 0 (id=478): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) 4m34.921750623s ago: executing program 0 (id=480): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000500", @ANYRES32, @ANYBLOB="00000000000000efff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004) 4m33.404336889s ago: executing program 0 (id=482): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="200000005f00010441a3840a928e595fa5"], 0x20}], 0x1}, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582"], 0x0) 4m31.449962365s ago: executing program 6 (id=485): shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x9, &(0x7f0000000240)=[{0x5, 0x4, 0x6, 0x200}, {0x3, 0x8, 0x5, 0x8}, {0x0, 0x0, 0x9, 0x80}, {0x9, 0xd6, 0x8, 0x2}, {0x1, 0x0, 0x5, 0x8001}, {0x7fea, 0xf7, 0x4, 0x8001}, {0xc9ce, 0x4, 0x1, 0x8}, {0x9, 0x10, 0x1, 0x3}, {0x8, 0x4, 0x3, 0xb}]}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x42802000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = dup(0xffffffffffffffff) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000005c0)={0x8000, 0xc2cf, 0x1, 0x4, 0xd, "00e4fdab790000fb00"}) 4m28.866139837s ago: executing program 0 (id=487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x2101}, {{0x0, 0x0, &(0x7f0000000500)}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}], 0x4, 0x20, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/42, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e00)={0x4, 0x0, [{0x10000, 0x90, &(0x7f0000000ec0)=""/144}, {0xd000, 0x0, 0x0}, {0x2000, 0x6, &(0x7f0000000d00)=""/6}, {0xeeee0000, 0x90, &(0x7f0000000d40)=""/144}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af04, &(0x7f0000000200)) 4m26.260976908s ago: executing program 0 (id=490): syz_open_procfs(0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x1f8) 4m14.006105252s ago: executing program 42 (id=485): shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x9, &(0x7f0000000240)=[{0x5, 0x4, 0x6, 0x200}, {0x3, 0x8, 0x5, 0x8}, {0x0, 0x0, 0x9, 0x80}, {0x9, 0xd6, 0x8, 0x2}, {0x1, 0x0, 0x5, 0x8001}, {0x7fea, 0xf7, 0x4, 0x8001}, {0xc9ce, 0x4, 0x1, 0x8}, {0x9, 0x10, 0x1, 0x3}, {0x8, 0x4, 0x3, 0xb}]}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x42802000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = dup(0xffffffffffffffff) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000005c0)={0x8000, 0xc2cf, 0x1, 0x4, 0xd, "00e4fdab790000fb00"}) 4m10.777334001s ago: executing program 43 (id=490): syz_open_procfs(0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x1f8) 1m54.569289979s ago: executing program 7 (id=759): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) socket$unix(0x1, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) ppoll(&(0x7f0000000280)=[{r7, 0xc000}], 0x1, &(0x7f00000002c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 1m52.83253958s ago: executing program 7 (id=765): io_uring_setup(0x1de0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='selinux_audited\x00', r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@mmap={0x7, 0x9, 0x4, 0x0, 0x3fffc, {0x77359400}, {0x5, 0x0, 0x81, 0x6, 0x7f, 0x8, "14f31d90"}, 0x101, 0x1, {}, 0xade}) ioprio_set$pid(0x0, 0x0, 0x2007) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#.yz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[]) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x5, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) r5 = socket$nl_route(0x10, 0x3, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{0x77359400}, {0x0, 0x2710}}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1], 0x64}}, 0x40014) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x4, 0x8000000, 0x2}) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) 1m50.969405203s ago: executing program 7 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) 1m50.920768704s ago: executing program 5 (id=768): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/75, 0x4b) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4102, 0x1006) 1m48.005831635s ago: executing program 7 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000800)=[{0x0}], 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r5, &(0x7f0000000040), 0x373) lseek(r4, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m46.895848263s ago: executing program 5 (id=772): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fallocate(0xffffffffffffffff, 0x1, 0xffc, 0x1) gettid() setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 1m44.697347862s ago: executing program 7 (id=775): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000003000006000000000000000000b70800000083820ef76cadcbb6a4b5110000007b8af8ff00000000b7080000000039007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYRESOCT=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m42.500741086s ago: executing program 5 (id=776): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7400000000010102000000000000000002000007240001801400018008000100e000000108000200e00000010c0002800500010001000000240002801400018008000100e0040002080002007f0000010c000280050001000000000008000740000000300d1c9b80"], 0x74}}, 0x4028000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) 1m42.158410628s ago: executing program 7 (id=777): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x1, 0x803, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x1f8) 1m41.822860335s ago: executing program 5 (id=778): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040080) sendfile(r1, r0, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000580)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}]}]}, @NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) 1m40.599969956s ago: executing program 5 (id=783): fanotify_mark(0xffffffffffffffff, 0x409, 0x40001012, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x3, r5, 0x0, &(0x7f0000fb3000/0xf000)=nil, 0xf000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r5}) 1m38.203116354s ago: executing program 5 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) sync() sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="a5ace7149f4de00408d44f89e644356865ae456116057842b985827dfd0579fa82958e6ed12d9743b03f601c828ddf32a6be95c405416d1068e74356057bb74cfc98dd27135eb9ac9eaa11dc349702bc1e1ec1", 0x53, 0x4000000, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_ifreq(r1, 0x8911, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1m25.481200527s ago: executing program 44 (id=777): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x1, 0x803, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x1f8) 1m22.215404766s ago: executing program 45 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) sync() sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="a5ace7149f4de00408d44f89e644356865ae456116057842b985827dfd0579fa82958e6ed12d9743b03f601c828ddf32a6be95c405416d1068e74356057bb74cfc98dd27135eb9ac9eaa11dc349702bc1e1ec1", 0x53, 0x4000000, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_ifreq(r1, 0x8911, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 14.279657175s ago: executing program 3 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 13.272288935s ago: executing program 3 (id=939): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="61636c2c6669785f6572726f72733d61736b2c6e6f7265636f766572792c6669785f6572726f72733d6e6f2c7265636f766572795f706173735f6c6173743d636865636b5f657874656e74732c6e6f7265636f766572792c6572726f723d726f2c7265636f6e5274727563745f616c6c6f632c6e6f5f646174615f696f2c6673636f6e746578743d726f6f742c66736d616769633d3078303030303030303030303030383030302c61707072616973652c7375626a5f747990653d6e6f5f646174615f696f2c00b59ba3dc7bbd64cf1ca62d58cc2ee65dcef11e384bed58db423f661ac475e1edf48e9715f125f1ab862760524e2cbb0fe6fe3b33a703651061eedf21fdc6596e7a6f9c3e1c6eea624ea9ea9ea6fc8c85d320099b2b71a44825e990ecbace067e4aefba3e86efc5d412526bb782a0aaa29181c7a5f02806ba48a400000000"], 0x1, 0x5945, &(0x7f0000005cc0)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtn3tv39BXwqFi88hE2CgOZYDQJqSQIBJTgggsFWGhpKeofaCG1aLSoglUiJfJjE1ZQitWltpBa3EX/cAuRlECWslxna6bv6em503duT09PSMLnU8ncvqdvf8+5556+fb+ne6YDAAAAbwv7bt5+4ILj/umpz4y8ccM//3DzjaG3PF5ejRv0p8tr3qoWcjB1V5aOL7Pj4q+u+/ZvBi//h5/c3/OtN/euP3HDL//xqMsf/vi5e+762mOv9z3455eK4sbxdOrEevJKEkL1R/u/9Nm9Tx87VpaEEMpJ/64QFidLHlucZEKs/mMIYX0mXvTAG2dsGFveeFv3pPJFme2M97e3ajrOdh64+rTw4t+vvelny7733a7dL++a2CSpNoynEBZe2vj4rhDC/PT/mDjalsYHp8s1IYSehsedk9Oe33/hqbPGlie12P6VOevHp8t56bK3IE68f3lmvZTZLrsedWWWPQX1zVZeO9rdrsiCzPrEyejLRV3bkrx2xvLF6fIH6fLUGcYvx/9JKCWhUm/+pmRijISG45aEZHz7an29VD+2Id3/zHqSWS9l1stdmf0arzftvXKSTC6P22XK4+m4kpaf2OTc3+jCnPJ3pMtq+kR9M66H7I2a3ik36vs1LrZr/zRtORhKDeegZuX1A58ejLHdGR0dHe1Nlkx5zGgT8b69a29fUV73+L7+nHYk9ydp/GS8zpnG3/nTxQs++p1br1qaF//SUhq/1Fb8X533zKsX3/rNr+bGvzPGL7cV//RHel4574mbl+f2z/7YP5W24g+/9OQdy46+bHdu+++O8attxV+955nuvgOPPJrb/qHYP/Pbiv/C+z7w6/uee+jl3Pghxu9pK/66PVs/1z1w4JTc+I/G/ultb/y8tvvs5wcGfjuYF//ZGL+vrfj37rrrvfcsuu3c3OO7JvZPf1vxzz/54ZsWHHjohLxzZ3J3p145Ad6ejkqvsW5J19vNM2erIV/4ymCldh24IP3fF77UuYoyF59j9SzsXHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGHfMaf/1g//7w/2vVNL17vTGC6XaMpbPCyGZH0LYvmN4246NW64Y/PiVV23bMrxpcHjH4MiWHduuHTzzbwa3jWzdNHzt2L1D7zqj9rglIaktkxOm1N09Ojpa6p9cFuv7dyfvfnHFOf/ndyEMHfOLgUpu+1fetfmeo5v8zEhWj75/81UX/OKsb6T71Z+2q79Ju0ZHR0dDTrt+f9Gf7vnC/t+cEsLQX0zXridf+LsfT2rQeMFEnFSpO9Qa1J30NG1HvdVpe2J/VTZs3DQyNH3/jj2+nLMf//66l/+44ZrP/6nWv9Xc/Wixf+evHt1U+vLa8//fl6+vFRS166067kX9Hfciti/2XzXt74Xpfi3M2a9Kzn7d/LNHn/vRcbe+visMVV5bNrXuov3qSgdAV/KOluqNNfQkiyeVV9Pt4xGPj1u5Y/PWlduv3fmujZuHrxi5YmTLe1aduersobPOPmvl+J6v7PD+x/r/ssX9PzjjadEnd/0g/mxtPBW1q6g/xtpV3B+NLcp7/vVc+NkvvueuJy6oFRSN87h1/XySLnvGjvOq0DDepvZVs/0q6ocQwmCzfnj19XPDsf9j401F56HGI9P4MyNZPfr08j9845yvL/3bWsFBOc83NqjN83y91RPtGe+vano8Rg/R/u0O5XS/epu2a9XTT3Tdvu93n6q3b968cM3wjh3bVtV+LkhbuiA5vmm7sqVxv5aN/yyHtFtCfZg2Ga9jukKtfdnzZ9w826u96X29yZKm+5UV79u79vYV5XWP78vr6eT+Wo3zQ19tmbwzZ8tNmQeW6w1uVv+h+vwrGh8DH/z6gx9+8PtnThkfp9d+Fu1XkrNf33vu3i9+6/P/8fud268P/t0z/X/4nx9bUSs4XM4r9Van7Ukazyunh1D0/FsWmu9H7vOv1Hx/ip5/2Xomtm8ebzCz3hvKbT1fT3+k55Xznrh5ee7zdX+rz9frJ62VC56vh8r4yT6/ksrkdszd82vSQElWj/7klqN2PXbDmuNqBUXjur51s3F9Rgv5R85+/fji5weuHPwP/71z541v/80Dl/xyePWnawXtH/fYls4c92rav9Wc/q23Ouadjf377suv3LS+Vn7oXv+my4L8J55Ktl+78xPDmzaNbNve2n61+noa68n2cruvp/HstqRgv0pT9mvubrTSX60+39L2l7Mx2n2+9YakrdeFnT9dvOCj37n1qv4pj0orurSUxi+1Ff9X5z3z6sW3fvOrufHvjPErbcUffunJO5Ydfdnu3Ph3J2n8alvxV+95prvvwCOP5sYfiu2f31b8F973gV/f99xDL+fGDzF+b3v9/9rus58fGPhtbvxnk7SesWukEB5444wNtfUkdKXPt9iOrkntCtn1JLNeyqyXG9dLtbnWegXlJJlcHrdLy09saEsz/5ZTHq/CqktryzfjesjemL78UFNqOPc3Ky+6TgUAONLF9//jNWh8/38kvVDKn2mACbPNw5bmxI152MR8zrxJ9y9N48fHx3nAgXeHobHljYO1C/2Zvo8Qnw/Zec5YzyknTY7R7jxn0fz78sx6bFdtvrzSkIempuY1ldDC/PvUeqaff8/sfvH8+OAtU5o12DBvlT1+XemMWbPPO2TaWxmLkDc+svNi8fMcAwvDmvH6Whwf2c/RxOOQ/RxNrOe4zImz3c/RzHZ8xGZPMz7Gm1z8/sbU4xem6d+J49c8Wvb4zeB4V8e2n+v3Zzswb9j0lHbw5g3n9v0w85I58dMn2KE+bxjL435UWpxP/HBOeafmE+PpIrZr/zRtORjMJwJHqpj/x9eIsfx/7AL8/2a2K7oOzV41xni5nxOa8g5vTVHeMfVzej1tvY6v27P1c90DB07Jvc55tNXP/WydtNZT8Lmfon5ckVkv7MecCZqifC9bT1G/Zz+X0Rv62ur3e3fd9d57Ft12bm6/r6m9kBb3+xcnrfUV9PthkC80jy9feFvkC3M9f/aW5SPpB5/mKh/515zymeYjPVNu1Pdr3GGXj3Qd3HYBAIePmP/X3z9L8///FTdIryOK8tZTM+sxXm7emnN9kpe3/ku6vCazfW/6GxUzvW4+/+SHb1pw4KETcvOWu1vNQ//TpLX+wjx0dnlzbh6xpjOfF8/NI+p51uzyxNz21/PE2eXpufHrefrs8ujc/qnn0bObB8iNX58HONzz3IL5ukxlcbXV+bojNo9Of312rvLoC3PKZ5pH9065Ud+vcfJoAIC3Vsz/42VczP+fyGw32/fZc/OCDl23Z/8eSD3+swcrr5zrvG+u89a5zuvnel6ilheXwuGaF8/1vNDczpO97fPitFJ5MQAAh7KY/89P1/Pz/9nlJ83yt65J+Yn8vGn8Iyw/P2Lft86Jf+jMf8n/54VwYyz3vnhz8n8AgCNbzP/jrz3Gv//3X9L17N+tl6fnxJeny9OnGz8t5+mdn2cLPgfw1n4+fv7E9uYBAAB4K3SNZ0pTf8/+I+ky+3v2eb+Xf3HO9q2qpJfHl+3YNjJyyVVb1w/vGLlky5XrR7ZfcvW2jTt2jGypbTfbvDE3b0nzxq5QSfuj+XbZvG1R+vcQFuX8PYTs9jHs8eM3pv49hGy18wv+jsDE8WutvXnHrzTN9s3GR97xzov/bznbR/Xjf/nHTr9kw/ZLNm7ZuGPj8KaNO0cmbzeWtfbM4HszY7fM6PtSMz+mKM38+zs7047SlHZ0pf2R9/3sSaYdi9OWLM77/oOcdj/1377wyZNH/3RfCEPHlN85q/5LVo/+54tG/mXHvl9sHWt/adr217dM21X0faXZ7eP+VDZduX3HaRuuvGrL+ty2z0SczyjV1+doPiN9+pdbnJ9Yl1M+088plKfcODS1PD8BAMAk8f3/eD0b3z/8fHoBFctbz9Nn9/5xbp4+1Fqenv1esqI8Pbt93N9W8/TqLPP0bP1FeXqz7Zvl6Xl5d178f83ZfqZaHyez+5xH7ji5tLVxkv0+g6Jxkt1+puMkmeU4ydZfNE6abd9snOQd97z4H8rZPk/r42F2n8vJHQ93tjYe/jqzXjQestvPdDyUZjkesvUXjYdm2zcbD3nHNy/+BTnbt2ry+BgbGOPjYuSSq6/c9omG7eb6+y/GvDir9s3t93+0q/X2z+3nvua+/XP7ubK5b//sPleW2/5nZzcT1nr75/b7Xdp10OZr0w+bFX3+rGged+3UHRg303nceVNuHJrM48JbJ+b/8e2emP/fli47/TZQJ6+TRhdN3D5435Pme8yaxu/Q95gVXccc9q/nqaLX8133Tt7e6zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkaW7snR8ue/m7QcuOO6fnvrMyBs3/PMPN9/4V9d9+zeDl//DT+7v+dabe9efuOGX/3jU5Q9//Nw9d33tsdf7HvzzS4WB+8d/Vk5NV6shJK8kIVR/tP9Ln9379LFjZUkIoZz07wphcbLkscVJJsLQH0MI6+vtnHznA2+csWFseeNt3ZPKF2WCZPcr9JZjexrbGcI1hXvEYaiajrOdB64+Lbz492tv+tmy7323a/fLuyY2SaoN4ymEhZc2Pr4rhDA//T8mjral8cHpck0IoafhcecUtOukFtu/Mmf9+HQ5L132FsSJ9y/PrJcy22XXo67MsqegvtnKa0e72xVZkFnPnoxmK6+dsXxxuvxBujx1hvHL8X8SSkmo1Ju/KZkYI6HhuCUhGT+W1fp6qX5sQ7r/mfUks17KrJe7Mvs1Xm860MpJMrk8bpcpj6fjSlp+YuO5uokLc8rfkS6r6RP1zbgesjdqeqfcqO/XuNiu/dO05WAoNZyDmpXXD3x6MHrTst5kyZTHjDYR79u79vYV5XWP7+vPaUdyf5LGT9qKv/Onixd89Du3XrU0L/6lpTR+qa34vzrvmVcvvvWbX82Nf2eMX24r/umP9Lxy3hM3L8/tn/2xfyptxR9+6ck7lh192e7c9t8d41dbjj8vTMRfveeZ7r4Djzya2/6h2D/z22r/C+/7wK/ve+6hl3Pjhxi/p6346/Zs/Vz3wIFTcuM/Gvunt73x89rus58fGPjtYF78Z2P8vrbi37vrrvfes+i2c3OP75rYP/1txT//5IdvWnDgoRPyzp3J3Z165QR4ezoqvca6JV1vyDP7ZpJnzlZDvvCVwUrtmm9B+r+vkxVljNWzcA7jAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZPr59Wd+5KL3f2htJQkhydlmtIl4X3ne6tWDbdQ7/NKTdyw7+rLdjWVL24gDAAAAFIt5eKleUg1Lw9XJ/HB80+3jHMHxcS2ZXJ6dQ4hxsnME7cYpdShOuUNxKh2K09WhOPM6FKe7Q3GqBXGqobU486eJUxkbFS22p2fa9rQep7dDcRZ0KE5fh+Is7FCcRR2K0z9tnNbH4eIOxVnSoThHdSjO0R2Kc0yH4vxFh+Ic26E42TnlmY7DvnTL4/LijN8oF8apJOX6Hc3m049N6zlhlvX0FtTTV/R63GI981us56TM40ozrKfaYj1/Oct6khbr+etZ1lMqqCeO22uy7Yv1xLUWx/+1HYqzs0NxrutQnOs7FOdTHYrz6Q7FuWGWcQBaFfP/iXyvP3RX/jb0pGec7CxAzHeXjf+c+nqXd0KK8d6ZKZ9XFC+bqGfiLZtp+7ITCJl4yzPlXZPiVer5yDTxqo3xVmTuLNzf7IRCpn2nZsq7i+JlJxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYA79/PozP3LR+z+0NiRh7F9To03E+8rzVq8ebKPevWtvX1Fe9/i+xrLuShuBAAAAgEIxD++ql1RDd2VV6E7mTdqums4DVNP1cn9tObAwrBlbJoOl8fWeZPG0j6ukj1u5Y/PWlduv3fmujZuHrxi5YmTLe1aduersobPOPmvlho2bRoZqP0PoLogXQhiffth+7c5PDG/aNLJte60w2/6l6eOWputJ+riBd4ehseWNafuXFNRXmlLf3N0oPnoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/Z9fuQuS8yjiAn3dmdma6bcxKv6ah2Qz5KFGLJnErqZbuC4KFNglZCjJbXUuwCRY3TWiTEuvYBmxrgiK0BEIkF0ZisbV40w9bxH4QqNRowI1B2qK90Aul1UpaciEpI9mdMzszO5NZx9K06e93Me/MOc85z3vmYuH/7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+vqerIRGV0bHwwCSHpUlPrIM5l82la7qPvV5/d/sPC8KmVzWOFXB8bAQAAAD3FHD7QGCmGQi4bsuGK6U9LQ9NEmM39AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR89UdWSiMjo2fmESQtKlptZBnMvm07TcR9/X3378c68MD/+9eazUxz4AAABAbzGHZxojxVAKy8JAckVLXXw2sKhtfXtd3GfxPOvanx10q1s2z7qr5ln3iR51G+rXXQEAAAA+/GL+zzVGhkIht6Br/u+V62Pdkra6bP3az28FAAAAgP9PzP+FxkgpFHKlRl6fb95f2lYX1/f6v31cv6LL+l7/z19fv/o/PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8eExVRyYqo2Pj2SSEpEtNrYM4l82nabmPvmueG/znTUceWNo8Vsj1sREAAADQU8zhs9G7GAq5wTAQLpzO/cM3HHzyy08+PRJCmIn5+XzYtWnHjjvXzLzGutVHjwz84KU3vzOnbvXM6zk7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8J6Zqo5MVEbHxi9IQki61NQ6iHPZfJqW++j72he+9NdHTzzzRvNYqY99AAAAgN5iDp/N/sVQCvmQD5dNf2rO+mdk2tZ3e2YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnD/u+tY939w0Obn5Tm+88cabxptz/ZcJAAB4ry0JSaj9jy7feK7vGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CCYqo5MVEbHxotJCEmXmloHcS6bT9NyH33TZ48VFpx67oXmsVIf+wAAAAC9xRw+m/2LoRQGwkC4dPpTp2cC0/l/6H28SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOADZao6MlEZHRtfkISQdKmpdRDnsvk0LffR95HdBz5/eOH3b2weK+T62AgAAADoKebwfGOkGAq5T4ZCuLL+ebJ1QZKtXzs/F5hdt71l2eC811Vb1mXnvW5P28ly9dPMrCvG/YZmro115bnryk3rSqHRvtyyLuxrWbWgx30GAAAAOIdi/i80RoZCIVdoyrk/a6kfknMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6mqiMTldGx8SQJIelSU+sgzmXzaVruo+89v/v4RV/7+d6dzWOlPvYBAAAAeos5fDb7F0MpLA4fC4unc38Yaq2Pdf+qnD788L//tjKEVZcdH861b/vj+OY3r13/fPtLCJnW6kwIC+v9ki79fvuHh+9eXjv9aAirLs1eOadfOHu/1i3T2lOVzet3bA/be3w5AAAAcJ6I+X+gMTIUCrk7uub/mLx75P+G6QC+8O7dv7yk/lpP5G0rMkP1fpku/b64/PG/rFj7jzfP5P+z9fvMga2HL2lpODPSJklro1t3bjh+zaFMPPVM/2xb//i9fOXbb/xny66HTs/0L4ZifXxRrlP/ua9tLkhrk5n94+ve3V9t7Z/rcv4Hfv/CiV8v2vvOmf5vLxls9L/qLOc/e//Bmx/cd+2BIxta+4cQyp36v/XOjeHyP91+f/v5B9s2bv7mm1/bJGnt6NKTh9YeLF3X2j9p6x+//1+ceGTfTx/63tOxf/ytyMpl8+2faev/8p6Ld79438ZFrf0zXc7//C2vDG8rf/eP7ee/rWXXXNe7mHv+x65+4tZXN6X3tk8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX6aqIxOV0bHxTBJC0qWm1kGcy+bTtNxH39dvOvbWLXt/8qPmsVIf+wAAAAC9xRw+m/2LoRTyIR8Gp3P/U5XN63e8dHx7GJqZTerX3OS2u3Z8asu2nXfcdo7uHAAAAJivmP9zjZGhUMgtDwP1/D+6deeG49ccysT8n4n5f8vtk5tXhUbdy3su3v3ifRsXNZ4ThDD9s4DimbrPztbdcP2xoZN//saKjnVrZuuOLj15aO3B0nWxLjTXrQ6N5xOPXf3Era9uSu9t3F9z3ae/vm2y/ngi7jt484P7rj1wZEPjHPXrYH3fWDeZ2T++7t391ViXrV+L9XMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHNNVUcmKqNj4yEbQtKlptZBnMvm07TcR991y391/0WnnlncPFbI9bERAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsJ+/YVIVcVxAD9nZrcdd3Z1V4O2onW1orCHpCCiXioqQkOEngwJS/MhCoKIwh5aQyOxopcg60WigmoLoSA3SbRYo3/SSw8VFFgPgUgL5SJBf9iZc8fZu3ObulpQfj4wnDln7v3O755z5s4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/yl9PSON9tD2B2bWnHfTx4/dffzRW969b+slj7z2/djGGz7a0//yialNyzZ/deOSjfvuWTW564WDPw++/duRrsEPN5sVqVsLIR6LIdTem3728alPzpkdiyGEahwaD2E4Lj44HHMJK38JIWxq1Tn3xbeOX7l5tt26s2/O+KJcSP66Qr2a1dM0NLde/l9qaZ9tmXnosvDN9eu2fbb0zTd6J46Onzwk1tr2UwgLN7Sf3xtCWJAes7LdNpKdnNq1IYT+tvOu7lLXhX+x/ssL+uen9qzU1rvkZK8vz/UruePy/UxvCL+uSfMRctf6Tyiqo+xx3Qzk+vmb0akqqjMbH07tO6ld8Tfzq9kjhkoMPa3y740n90hoW7cYYmMta61+pbW2IV1/rh9z/UquX+3NXVfjfdNGq8Y4dzw7Ljee3Y570viy9nt1B7cVjJ+b2lr6oJ7I+iH/pKk+70nruhqyuqb/pJZ/Q6XtHtRpvLXwaTHqaaweF8875/cOstem1j15cXX9+4eGCuqIe2LKj93zh8K8/C2fDg/c8fqOB0eK8jdUUn6lVP3frj784+07Xny+MP+ZLL9aKv+K/f3HVn+wfXmH+VnYyJ/O5qenVP6dRz58aunZd010WutG/u4sv1Yq/7rJw32DM/sPFK7vymx+FpTK//ram7979Yu9RwvzQ5bfXyp//eT9T/eNzlxamH+g+VGoN3Zoif3z08RVX46O/jBWlP95Nv+DHfJj1/xXxndd89KinasK9+fabH6GStV/60X7tg3M7L2g6N4Zd5+ub06AM9OS9BvridQv+z/zVLX9X3hurKf5DTSQHoOn841yYvaDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPduBYAAAAAECYv3VvEBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEwBAAD//1xaLq4=") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 12.571796021s ago: executing program 8 (id=942): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x5, "1fa417cab8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.556567869s ago: executing program 3 (id=943): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r6, 0x0, 0x41000004, 0x0) tgkill(r6, r2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 9.532076669s ago: executing program 4 (id=948): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d40)="6605df83423c20b6208dbd4396dbf06433b95e078b56f9abc40e2c893efff93eb66d06289fbb83eecf9778bf63a03448ef9e2f0b19204f5db67452f5218287899eec41be9269e10bc64da36de55480e73a5b6521f058ce296d928bff935625227d0bd099c3fc6f95ab570a2d67b4ea68280e951965ba80b8e5e1dfa5e555086b23168fc70142d730af", 0x89}, {&(0x7f0000002a00)="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", 0x3c0}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 9.266882379s ago: executing program 4 (id=950): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000efff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004) 8.985212467s ago: executing program 2 (id=951): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xa0, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) connect$pppl2tp(r3, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.413169595s ago: executing program 8 (id=952): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008000"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) 7.986346458s ago: executing program 4 (id=953): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.139302258s ago: executing program 4 (id=954): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b40)={0x24, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "a6da8073886e01180382f89fe8838abdb9db602f809578879b32"}}, 0x0, 0x0}, 0x0) 7.105186545s ago: executing program 8 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 6.836889507s ago: executing program 8 (id=956): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="61636c2c6669785f6572726f72733d61736b2c6e6f7265636f766572792c6669785f6572726f72733d6e6f2c7265636f766572795f706173735f6c6173743d636865636b5f657874656e74732c6e6f7265636f766572792c6572726f723d726f2c7265636f6e5274727563745f616c6c6f632c6e6f5f646174615f696f2c6673636f6e746578743d726f6f742c66736d616769633d3078303030303030303030303030383030302c61707072616973652c7375626a5f747990653d6e6f5f646174615f696f2c00b59ba3dc7bbd64cf1ca62d58cc2ee65dcef11e384bed58db423f661ac475e1edf48e9715f125f1ab862760524e2cbb0fe6fe3b33a703651061eedf21fdc6596e7a6f9c3e1c6eea624ea9ea9ea6fc8c85d320099b2b71a44825e990ecbace067e4aefba3e86efc5d412526bb782a0aaa29181c7a5f02806ba48a400000000"], 0x1, 0x5945, &(0x7f0000005cc0)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtn3tv39BXwqFi88hE2CgOZYDQJqSQIBJTgggsFWGhpKeofaCG1aLSoglUiJfJjE1ZQitWltpBa3EX/cAuRlECWslxna6bv6em503duT09PSMLnU8ncvqdvf8+5556+fb+ne6YDAAAAbwv7bt5+4ILj/umpz4y8ccM//3DzjaG3PF5ejRv0p8tr3qoWcjB1V5aOL7Pj4q+u+/ZvBi//h5/c3/OtN/euP3HDL//xqMsf/vi5e+762mOv9z3455eK4sbxdOrEevJKEkL1R/u/9Nm9Tx87VpaEEMpJ/64QFidLHlucZEKs/mMIYX0mXvTAG2dsGFveeFv3pPJFme2M97e3ajrOdh64+rTw4t+vvelny7733a7dL++a2CSpNoynEBZe2vj4rhDC/PT/mDjalsYHp8s1IYSehsedk9Oe33/hqbPGlie12P6VOevHp8t56bK3IE68f3lmvZTZLrsedWWWPQX1zVZeO9rdrsiCzPrEyejLRV3bkrx2xvLF6fIH6fLUGcYvx/9JKCWhUm/+pmRijISG45aEZHz7an29VD+2Id3/zHqSWS9l1stdmf0arzftvXKSTC6P22XK4+m4kpaf2OTc3+jCnPJ3pMtq+kR9M66H7I2a3ik36vs1LrZr/zRtORhKDeegZuX1A58ejLHdGR0dHe1Nlkx5zGgT8b69a29fUV73+L7+nHYk9ydp/GS8zpnG3/nTxQs++p1br1qaF//SUhq/1Fb8X533zKsX3/rNr+bGvzPGL7cV//RHel4574mbl+f2z/7YP5W24g+/9OQdy46+bHdu+++O8attxV+955nuvgOPPJrb/qHYP/Pbiv/C+z7w6/uee+jl3Pghxu9pK/66PVs/1z1w4JTc+I/G/ultb/y8tvvs5wcGfjuYF//ZGL+vrfj37rrrvfcsuu3c3OO7JvZPf1vxzz/54ZsWHHjohLxzZ3J3p145Ad6ejkqvsW5J19vNM2erIV/4ymCldh24IP3fF77UuYoyF59j9SzsXHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGHfMaf/1g//7w/2vVNL17vTGC6XaMpbPCyGZH0LYvmN4246NW64Y/PiVV23bMrxpcHjH4MiWHduuHTzzbwa3jWzdNHzt2L1D7zqj9rglIaktkxOm1N09Ojpa6p9cFuv7dyfvfnHFOf/ndyEMHfOLgUpu+1fetfmeo5v8zEhWj75/81UX/OKsb6T71Z+2q79Ju0ZHR0dDTrt+f9Gf7vnC/t+cEsLQX0zXridf+LsfT2rQeMFEnFSpO9Qa1J30NG1HvdVpe2J/VTZs3DQyNH3/jj2+nLMf//66l/+44ZrP/6nWv9Xc/Wixf+evHt1U+vLa8//fl6+vFRS166067kX9Hfciti/2XzXt74Xpfi3M2a9Kzn7d/LNHn/vRcbe+visMVV5bNrXuov3qSgdAV/KOluqNNfQkiyeVV9Pt4xGPj1u5Y/PWlduv3fmujZuHrxi5YmTLe1aduersobPOPmvl+J6v7PD+x/r/ssX9PzjjadEnd/0g/mxtPBW1q6g/xtpV3B+NLcp7/vVc+NkvvueuJy6oFRSN87h1/XySLnvGjvOq0DDepvZVs/0q6ocQwmCzfnj19XPDsf9j401F56HGI9P4MyNZPfr08j9845yvL/3bWsFBOc83NqjN83y91RPtGe+vano8Rg/R/u0O5XS/epu2a9XTT3Tdvu93n6q3b968cM3wjh3bVtV+LkhbuiA5vmm7sqVxv5aN/yyHtFtCfZg2Ga9jukKtfdnzZ9w826u96X29yZKm+5UV79u79vYV5XWP78vr6eT+Wo3zQ19tmbwzZ8tNmQeW6w1uVv+h+vwrGh8DH/z6gx9+8PtnThkfp9d+Fu1XkrNf33vu3i9+6/P/8fud268P/t0z/X/4nx9bUSs4XM4r9Van7Ukazyunh1D0/FsWmu9H7vOv1Hx/ip5/2Xomtm8ebzCz3hvKbT1fT3+k55Xznrh5ee7zdX+rz9frJ62VC56vh8r4yT6/ksrkdszd82vSQElWj/7klqN2PXbDmuNqBUXjur51s3F9Rgv5R85+/fji5weuHPwP/71z541v/80Dl/xyePWnawXtH/fYls4c92rav9Wc/q23Ouadjf377suv3LS+Vn7oXv+my4L8J55Ktl+78xPDmzaNbNve2n61+noa68n2cruvp/HstqRgv0pT9mvubrTSX60+39L2l7Mx2n2+9YakrdeFnT9dvOCj37n1qv4pj0orurSUxi+1Ff9X5z3z6sW3fvOrufHvjPErbcUffunJO5Ydfdnu3Ph3J2n8alvxV+95prvvwCOP5sYfiu2f31b8F973gV/f99xDL+fGDzF+b3v9/9rus58fGPhtbvxnk7SesWukEB5444wNtfUkdKXPt9iOrkntCtn1JLNeyqyXG9dLtbnWegXlJJlcHrdLy09saEsz/5ZTHq/CqktryzfjesjemL78UFNqOPc3Ky+6TgUAONLF9//jNWh8/38kvVDKn2mACbPNw5bmxI152MR8zrxJ9y9N48fHx3nAgXeHobHljYO1C/2Zvo8Qnw/Zec5YzyknTY7R7jxn0fz78sx6bFdtvrzSkIempuY1ldDC/PvUeqaff8/sfvH8+OAtU5o12DBvlT1+XemMWbPPO2TaWxmLkDc+svNi8fMcAwvDmvH6Whwf2c/RxOOQ/RxNrOe4zImz3c/RzHZ8xGZPMz7Gm1z8/sbU4xem6d+J49c8Wvb4zeB4V8e2n+v3Zzswb9j0lHbw5g3n9v0w85I58dMn2KE+bxjL435UWpxP/HBOeafmE+PpIrZr/zRtORjMJwJHqpj/x9eIsfx/7AL8/2a2K7oOzV41xni5nxOa8g5vTVHeMfVzej1tvY6v27P1c90DB07Jvc55tNXP/WydtNZT8Lmfon5ckVkv7MecCZqifC9bT1G/Zz+X0Rv62ur3e3fd9d57Ft12bm6/r6m9kBb3+xcnrfUV9PthkC80jy9feFvkC3M9f/aW5SPpB5/mKh/515zymeYjPVNu1Pdr3GGXj3Qd3HYBAIePmP/X3z9L8///FTdIryOK8tZTM+sxXm7emnN9kpe3/ku6vCazfW/6GxUzvW4+/+SHb1pw4KETcvOWu1vNQ//TpLX+wjx0dnlzbh6xpjOfF8/NI+p51uzyxNz21/PE2eXpufHrefrs8ujc/qnn0bObB8iNX58HONzz3IL5ukxlcbXV+bojNo9Of312rvLoC3PKZ5pH9065Ud+vcfJoAIC3Vsz/42VczP+fyGw32/fZc/OCDl23Z/8eSD3+swcrr5zrvG+u89a5zuvnel6ilheXwuGaF8/1vNDczpO97fPitFJ5MQAAh7KY/89P1/Pz/9nlJ83yt65J+Yn8vGn8Iyw/P2Lft86Jf+jMf8n/54VwYyz3vnhz8n8AgCNbzP/jrz3Gv//3X9L17N+tl6fnxJeny9OnGz8t5+mdn2cLPgfw1n4+fv7E9uYBAAB4K3SNZ0pTf8/+I+ky+3v2eb+Xf3HO9q2qpJfHl+3YNjJyyVVb1w/vGLlky5XrR7ZfcvW2jTt2jGypbTfbvDE3b0nzxq5QSfuj+XbZvG1R+vcQFuX8PYTs9jHs8eM3pv49hGy18wv+jsDE8WutvXnHrzTN9s3GR97xzov/bznbR/Xjf/nHTr9kw/ZLNm7ZuGPj8KaNO0cmbzeWtfbM4HszY7fM6PtSMz+mKM38+zs7047SlHZ0pf2R9/3sSaYdi9OWLM77/oOcdj/1377wyZNH/3RfCEPHlN85q/5LVo/+54tG/mXHvl9sHWt/adr217dM21X0faXZ7eP+VDZduX3HaRuuvGrL+ty2z0SczyjV1+doPiN9+pdbnJ9Yl1M+088plKfcODS1PD8BAMAk8f3/eD0b3z/8fHoBFctbz9Nn9/5xbp4+1Fqenv1esqI8Pbt93N9W8/TqLPP0bP1FeXqz7Zvl6Xl5d178f83ZfqZaHyez+5xH7ji5tLVxkv0+g6Jxkt1+puMkmeU4ydZfNE6abd9snOQd97z4H8rZPk/r42F2n8vJHQ93tjYe/jqzXjQestvPdDyUZjkesvUXjYdm2zcbD3nHNy/+BTnbt2ry+BgbGOPjYuSSq6/c9omG7eb6+y/GvDir9s3t93+0q/X2z+3nvua+/XP7ubK5b//sPleW2/5nZzcT1nr75/b7Xdp10OZr0w+bFX3+rGged+3UHRg303nceVNuHJrM48JbJ+b/8e2emP/fli47/TZQJ6+TRhdN3D5435Pme8yaxu/Q95gVXccc9q/nqaLX8133Tt7e6zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkaW7snR8ue/m7QcuOO6fnvrMyBs3/PMPN9/4V9d9+zeDl//DT+7v+dabe9efuOGX/3jU5Q9//Nw9d33tsdf7HvzzS4WB+8d/Vk5NV6shJK8kIVR/tP9Ln9379LFjZUkIoZz07wphcbLkscVJJsLQH0MI6+vtnHznA2+csWFseeNt3ZPKF2WCZPcr9JZjexrbGcI1hXvEYaiajrOdB64+Lbz492tv+tmy7323a/fLuyY2SaoN4ymEhZc2Pr4rhDA//T8mjral8cHpck0IoafhcecUtOukFtu/Mmf9+HQ5L132FsSJ9y/PrJcy22XXo67MsqegvtnKa0e72xVZkFnPnoxmK6+dsXxxuvxBujx1hvHL8X8SSkmo1Ju/KZkYI6HhuCUhGT+W1fp6qX5sQ7r/mfUks17KrJe7Mvs1Xm860MpJMrk8bpcpj6fjSlp+YuO5uokLc8rfkS6r6RP1zbgesjdqeqfcqO/XuNiu/dO05WAoNZyDmpXXD3x6MHrTst5kyZTHjDYR79u79vYV5XWP7+vPaUdyf5LGT9qKv/Onixd89Du3XrU0L/6lpTR+qa34vzrvmVcvvvWbX82Nf2eMX24r/umP9Lxy3hM3L8/tn/2xfyptxR9+6ck7lh192e7c9t8d41dbjj8vTMRfveeZ7r4Djzya2/6h2D/z22r/C+/7wK/ve+6hl3Pjhxi/p6346/Zs/Vz3wIFTcuM/Gvunt73x89rus58fGPjtYF78Z2P8vrbi37vrrvfes+i2c3OP75rYP/1txT//5IdvWnDgoRPyzp3J3Z165QR4ezoqvca6JV1vyDP7ZpJnzlZDvvCVwUrtmm9B+r+vkxVljNWzcA7jAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZPr59Wd+5KL3f2htJQkhydlmtIl4X3ne6tWDbdQ7/NKTdyw7+rLdjWVL24gDAAAAFIt5eKleUg1Lw9XJ/HB80+3jHMHxcS2ZXJ6dQ4hxsnME7cYpdShOuUNxKh2K09WhOPM6FKe7Q3GqBXGqobU486eJUxkbFS22p2fa9rQep7dDcRZ0KE5fh+Is7FCcRR2K0z9tnNbH4eIOxVnSoThHdSjO0R2Kc0yH4vxFh+Ic26E42TnlmY7DvnTL4/LijN8oF8apJOX6Hc3m049N6zlhlvX0FtTTV/R63GI981us56TM40ozrKfaYj1/Oct6khbr+etZ1lMqqCeO22uy7Yv1xLUWx/+1HYqzs0NxrutQnOs7FOdTHYrz6Q7FuWGWcQBaFfP/iXyvP3RX/jb0pGec7CxAzHeXjf+c+nqXd0KK8d6ZKZ9XFC+bqGfiLZtp+7ITCJl4yzPlXZPiVer5yDTxqo3xVmTuLNzf7IRCpn2nZsq7i+JlJxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYA79/PozP3LR+z+0NiRh7F9To03E+8rzVq8ebKPevWtvX1Fe9/i+xrLuShuBAAAAgEIxD++ql1RDd2VV6E7mTdqums4DVNP1cn9tObAwrBlbJoOl8fWeZPG0j6ukj1u5Y/PWlduv3fmujZuHrxi5YmTLe1aduersobPOPmvlho2bRoZqP0PoLogXQhiffth+7c5PDG/aNLJte60w2/6l6eOWputJ+riBd4ehseWNafuXFNRXmlLf3N0oPnoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/Z9fuQuS8yjiAn3dmdma6bcxKv6ah2Qz5KFGLJnErqZbuC4KFNglZCjJbXUuwCRY3TWiTEuvYBmxrgiK0BEIkF0ZisbV40w9bxH4QqNRowI1B2qK90Aul1UpaciEpI9mdMzszO5NZx9K06e93Me/MOc85z3vmYuH/7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+vqerIRGV0bHwwCSHpUlPrIM5l82la7qPvV5/d/sPC8KmVzWOFXB8bAQAAAD3FHD7QGCmGQi4bsuGK6U9LQ9NEmM39AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR89UdWSiMjo2fmESQtKlptZBnMvm07TcR9/X3378c68MD/+9eazUxz4AAABAbzGHZxojxVAKy8JAckVLXXw2sKhtfXtd3GfxPOvanx10q1s2z7qr5ln3iR51G+rXXQEAAAA+/GL+zzVGhkIht6Br/u+V62Pdkra6bP3az28FAAAAgP9PzP+FxkgpFHKlRl6fb95f2lYX1/f6v31cv6LL+l7/z19fv/o/PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8eExVRyYqo2Pj2SSEpEtNrYM4l82nabmPvmueG/znTUceWNo8Vsj1sREAAADQU8zhs9G7GAq5wTAQLpzO/cM3HHzyy08+PRJCmIn5+XzYtWnHjjvXzLzGutVHjwz84KU3vzOnbvXM6zk7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8J6Zqo5MVEbHxi9IQki61NQ6iHPZfJqW++j72he+9NdHTzzzRvNYqY99AAAAgN5iDp/N/sVQCvmQD5dNf2rO+mdk2tZ3e2YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnD/u+tY939w0Obn5Tm+88cabxptz/ZcJAAB4ry0JSaj9jy7feK7vGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CCYqo5MVEbHxotJCEmXmloHcS6bT9NyH33TZ48VFpx67oXmsVIf+wAAAAC9xRw+m/2LoRQGwkC4dPpTp2cC0/l/6H28SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOADZao6MlEZHRtfkISQdKmpdRDnsvk0LffR95HdBz5/eOH3b2weK+T62AgAAADoKebwfGOkGAq5T4ZCuLL+ebJ1QZKtXzs/F5hdt71l2eC811Vb1mXnvW5P28ly9dPMrCvG/YZmro115bnryk3rSqHRvtyyLuxrWbWgx30GAAAAOIdi/i80RoZCIVdoyrk/a6kfknMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6mqiMTldGx8SQJIelSU+sgzmXzaVruo+89v/v4RV/7+d6dzWOlPvYBAAAAeos5fDb7F0MpLA4fC4unc38Yaq2Pdf+qnD788L//tjKEVZcdH861b/vj+OY3r13/fPtLCJnW6kwIC+v9ki79fvuHh+9eXjv9aAirLs1eOadfOHu/1i3T2lOVzet3bA/be3w5AAAAcJ6I+X+gMTIUCrk7uub/mLx75P+G6QC+8O7dv7yk/lpP5G0rMkP1fpku/b64/PG/rFj7jzfP5P+z9fvMga2HL2lpODPSJklro1t3bjh+zaFMPPVM/2xb//i9fOXbb/xny66HTs/0L4ZifXxRrlP/ua9tLkhrk5n94+ve3V9t7Z/rcv4Hfv/CiV8v2vvOmf5vLxls9L/qLOc/e//Bmx/cd+2BIxta+4cQyp36v/XOjeHyP91+f/v5B9s2bv7mm1/bJGnt6NKTh9YeLF3X2j9p6x+//1+ceGTfTx/63tOxf/ytyMpl8+2faev/8p6Ld79438ZFrf0zXc7//C2vDG8rf/eP7ee/rWXXXNe7mHv+x65+4tZXN6X3tk8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX6aqIxOV0bHxTBJC0qWm1kGcy+bTtNxH39dvOvbWLXt/8qPmsVIf+wAAAAC9xRw+m/2LoRTyIR8Gp3P/U5XN63e8dHx7GJqZTerX3OS2u3Z8asu2nXfcdo7uHAAAAJivmP9zjZGhUMgtDwP1/D+6deeG49ccysT8n4n5f8vtk5tXhUbdy3su3v3ifRsXNZ4ThDD9s4DimbrPztbdcP2xoZN//saKjnVrZuuOLj15aO3B0nWxLjTXrQ6N5xOPXf3Era9uSu9t3F9z3ae/vm2y/ngi7jt484P7rj1wZEPjHPXrYH3fWDeZ2T++7t391ViXrV+L9XMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHNNVUcmKqNj4yEbQtKlptZBnMvm07TcR991y391/0WnnlncPFbI9bERAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsJ+/YVIVcVxAD9nZrcdd3Z1V4O2onW1orCHpCCiXioqQkOEngwJS/MhCoKIwh5aQyOxopcg60WigmoLoSA3SbRYo3/SSw8VFFgPgUgL5SJBf9iZc8fZu3ObulpQfj4wnDln7v3O755z5s4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/yl9PSON9tD2B2bWnHfTx4/dffzRW969b+slj7z2/djGGz7a0//yialNyzZ/deOSjfvuWTW564WDPw++/duRrsEPN5sVqVsLIR6LIdTem3728alPzpkdiyGEahwaD2E4Lj44HHMJK38JIWxq1Tn3xbeOX7l5tt26s2/O+KJcSP66Qr2a1dM0NLde/l9qaZ9tmXnosvDN9eu2fbb0zTd6J46Onzwk1tr2UwgLN7Sf3xtCWJAes7LdNpKdnNq1IYT+tvOu7lLXhX+x/ssL+uen9qzU1rvkZK8vz/UruePy/UxvCL+uSfMRctf6Tyiqo+xx3Qzk+vmb0akqqjMbH07tO6ld8Tfzq9kjhkoMPa3y740n90hoW7cYYmMta61+pbW2IV1/rh9z/UquX+3NXVfjfdNGq8Y4dzw7Ljee3Y570viy9nt1B7cVjJ+b2lr6oJ7I+iH/pKk+70nruhqyuqb/pJZ/Q6XtHtRpvLXwaTHqaaweF8875/cOstem1j15cXX9+4eGCuqIe2LKj93zh8K8/C2fDg/c8fqOB0eK8jdUUn6lVP3frj784+07Xny+MP+ZLL9aKv+K/f3HVn+wfXmH+VnYyJ/O5qenVP6dRz58aunZd010WutG/u4sv1Yq/7rJw32DM/sPFK7vymx+FpTK//ram7979Yu9RwvzQ5bfXyp//eT9T/eNzlxamH+g+VGoN3Zoif3z08RVX46O/jBWlP95Nv+DHfJj1/xXxndd89KinasK9+fabH6GStV/60X7tg3M7L2g6N4Zd5+ub06AM9OS9BvridQv+z/zVLX9X3hurKf5DTSQHoOn841yYvaDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPduBYAAAAAECYv3VvEBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEwBAAD//1xaLq4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(r0, 0x0, 0x0) 6.753793676s ago: executing program 2 (id=957): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.868864583s ago: executing program 3 (id=958): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.695018153s ago: executing program 8 (id=959): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xb8, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x6c, 0x60, 0x16, 0x5, 0x14, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x48, 0x4, 0x24, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) connect$pppl2tp(r4, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a00)={0x134, r0, 0x710, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_BEACON_TAIL={0xe9, 0xf, [@link_id={0x65, 0x12}, @mesh_id={0x72, 0x6}, @random={0x6, 0xb1, "815c7069163a277d7c855f23f36852dc433537566ba1fd84ba98b5accf9b78dfa94123e92b60b5bc54f90bfd45b94ed32c0041f7c90464eb1e059516b1c49321e1f0b61dad4b0396e6b4fca5afcc720b84e0d283717c89608c8799e15218f4679a2b3573812363444a07e76b458c19050126f8bffb21963acfecbf747f60c08cd7a576a512ab74e4e1f707087433f1dc15569bd46441ac3529ce411f39e47dd86a633011e244b8618ffd036b223722e15d"}, @mesh_chsw={0x76, 0x6, {0x4, 0x3, 0x38, 0x7}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x8d, 0x40}}, @supported_rates, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1f, 0x7f, [@tim={0x5, 0x3, {0x5, 0x4f, 0x6}}, @peer_mgmt={0x75, 0x14, {0x0, 0x0, @void, @void, @val="ea1bf5bad34e3f478506fc51f8598860"}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8e409b4cb1b8e705}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.577605636s ago: executing program 2 (id=960): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.565219486s ago: executing program 4 (id=961): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffd) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.420695005s ago: executing program 2 (id=962): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0xb, 0xcc, 0xe8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x300, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x6, r0}, 0x38) 1.143033389s ago: executing program 2 (id=963): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 560.894991ms ago: executing program 3 (id=964): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 560.472394ms ago: executing program 8 (id=965): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) 489.725529ms ago: executing program 4 (id=966): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_clone(0x4090a780, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6=@mcast2, @in=@multicast2, 0x4e20, 0xb2a8, 0x4e22, 0x81, 0xa, 0x80, 0x80, 0x33}, {0x6, 0x5, 0x7, 0x30, 0x81, 0x3, 0xb2, 0x100000001}, {0x9bcb, 0x9, 0x6de7, 0x4}, 0x68cb, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3503, 0x6, 0x3, 0x9, 0x1, 0x7f, 0x7}}, 0xe8) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000080)={0x20, 0x1, 0xaf, {0xaf, 0x34, "b5ec466e8378fc5c80943c0a1ff0880a0879875469094d69efc83fa17fd4e865e67d83c35b486507ecdf90d757b29f63915bab40b55f3f8c70194c2b489afca5c17d13ac25bd58359c6350da21076fd59844a1734ea3e76c5914591bbcaf830c80f41ffab71a3b93c3bf0aaed7990441820c8e88ff390748c2db152715f063b51f12e9416c9ed8acbff1a867be09d4de4ccf7681e8ebc621dcec9fc5b641fa421fc2d303e322f27fcd88e13897"}}, &(0x7f0000000200)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "28467e230251d14eb86f34f6011b17d651a0114228ddcf1b146aac940f8ef0b121cc850f941150699beca4c0009ef79b7ad7404ef31fe2ff346bd5bc5cbec154eb77dd3f7a1a8ab95c16f1f7c2e7128794a38316a3e2d25e7c30452beb257e77c3ff61d5f0b9297fa51e0fd08216ebfe4c9e2f1ca3e5173d8c8f53847d98b76b2de78db5ac5a3b820344f045d9453c1fc69b072a3f293f5ed9b68b766e51c59c2e37eab33d82dfb0d28e2b01e59b234a10a2a976332f3198371890"}}, &(0x7f0000000180)={0x0, 0x22, 0xe, {[@global=@item_4={0x3, 0x1, 0xa, "269afe1d"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x2, 0x1, 0x4, "a40e"}, @global=@item_4={0x3, 0x1, 0x8, "68d078ed"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfa, 0x9, 0x1, {0x22, 0xdde}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000540)={0x40, 0xe, 0xf6, "cf5e17ca9d9e68ba3b7dc8a3d7f0618342d892ee004f8130398e80b22065654e79977f09d59b11488dcfce16f5584d9257e2e9d39d26d800c6d1ae24eeb6093119a9ab81852d191e9a21173ebf7df900f20ee2caf8d16f2e2c6f1d0f54ef58534fc4c3e27bb7f6b060fab60e4908ec3db4266e3b5fe1507f0e9edb3e2adb4c52cf6f99ed2fcdb08b27312af3624782f087bceca15ada7829e68b8f3548a2c6b342bfd8df5e19053dae0bd218230062742dd79009d27bb322685548d9c48addd9ec78d055090085a529dc07c070d23a4624da5fd2f96c3ce5da519bd695ee30c9677181fefd2250ff43599d21ea1c166288932933a676"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x37}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0x5a, "fc8d7cc07f4cee676f8e716e37c38a8e46d0794552a7f0a766e26b2e9eb4cbedee46e77a88c3d1e23969319b89ffd75e7d4adfa51e943c094e4382ecb33b50079c3cf64709640fe16c7026a5b7fd1a44555f9cbe23690f0d3668"}, 0x0}) 395.942236ms ago: executing program 3 (id=967): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x3}}, 0xe8) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000104000000000000002180aa6d00", @ANYRES32=r3, @ANYBLOB="00000000020000003400128009000100626f6e6400000000240002800800030004000400050006"], 0x54}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 2 (id=968): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) kernel console output (not intermixed with test programs): e number: 89 but max is 0 [ 363.179657][ T5968] usb 4-1: config 0 has no interface number 0 [ 363.188766][ T5968] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.504772][ T5968] usb 4-1: string descriptor 0 read error: -71 [ 367.541499][ T5968] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 367.611465][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.666755][ T5968] usb 4-1: config 0 descriptor?? [ 367.699287][ T5968] usb 4-1: can't set config #0, error -71 [ 367.752571][ T8327] team0: Port device team_slave_0 added [ 367.807095][ T8327] team0: Port device team_slave_1 added [ 367.817552][ T5968] usb 4-1: USB disconnect, device number 5 [ 368.498059][ T8499] loop8: detected capacity change from 0 to 4096 [ 368.521138][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.537750][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.565078][ T8499] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 368.589254][ T8499] ntfs3(loop8): Failed to load $MFTMirr (-22). [ 368.754625][ T8327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.660631][ T8502] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 369.824667][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.190201][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 370.267025][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.390942][ T8327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.049183][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.8.514'. [ 371.144250][ T8327] hsr_slave_0: entered promiscuous mode [ 371.178308][ T8327] hsr_slave_1: entered promiscuous mode [ 371.209510][ T8327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.230521][ T8327] Cannot create hsr debugfs directory [ 371.313064][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.416991][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.429817][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.439302][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.448724][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 371.456146][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.706310][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.716619][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.726231][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.779613][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.856860][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 371.865274][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.929910][ T6093] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.148605][ T5897] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 373.078432][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 373.094561][ T5897] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 373.134910][ T5897] usb 3-1: config 0 has no interface number 0 [ 373.214879][ T5897] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.256565][ T5897] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 373.299710][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.316042][ T5897] usb 3-1: Product: syz [ 373.371045][ T5897] usb 3-1: Manufacturer: syz [ 373.392712][ T5897] usb 3-1: SerialNumber: syz [ 373.416251][ T5897] usb 3-1: config 0 descriptor?? [ 373.437323][ T5897] hub 3-1:0.89: bad descriptor, ignoring hub [ 373.464148][ T5897] hub 3-1:0.89: probe with driver hub failed with error -5 [ 373.489953][ T5897] option 3-1:0.89: GSM modem (1-port) converter detected [ 373.528628][ T5853] Bluetooth: hci3: command tx timeout [ 373.594595][ T6093] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.790177][ T5896] usb 3-1: USB disconnect, device number 3 [ 374.042078][ T5853] Bluetooth: hci6: command tx timeout [ 374.778730][ T5896] option 3-1:0.89: device disconnected [ 375.140048][ T6093] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.588765][ T5853] Bluetooth: hci3: command tx timeout [ 375.878717][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 376.058670][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 376.067222][ T6093] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.077765][ T5853] Bluetooth: hci6: command tx timeout [ 376.084429][ T5852] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 376.108481][ T5852] usb 3-1: config 0 has no interface number 0 [ 376.125534][ T5852] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.179179][ T5852] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 376.188292][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.247976][ T5852] usb 3-1: Product: syz [ 376.257906][ T5852] usb 3-1: Manufacturer: syz [ 376.278116][ T5852] usb 3-1: SerialNumber: syz [ 376.339511][ T5852] usb 3-1: config 0 descriptor?? [ 376.369354][ T5852] hub 3-1:0.89: bad descriptor, ignoring hub [ 376.375440][ T5852] hub 3-1:0.89: probe with driver hub failed with error -5 [ 376.411195][ T5852] option 3-1:0.89: GSM modem (1-port) converter detected [ 376.729035][ T5897] usb 3-1: USB disconnect, device number 4 [ 376.755848][ T5897] option 3-1:0.89: device disconnected [ 376.888791][ T5852] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 377.048817][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 377.062726][ T5852] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 377.097334][ T5852] usb 4-1: config 0 has no interface number 0 [ 377.113303][ T5852] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 377.151688][ T5852] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 377.168707][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.176816][ T5852] usb 4-1: Product: syz [ 377.191935][ T5852] usb 4-1: Manufacturer: syz [ 377.196558][ T5852] usb 4-1: SerialNumber: syz [ 377.289523][ T5852] usb 4-1: config 0 descriptor?? [ 377.307057][ T5852] hub 4-1:0.89: bad descriptor, ignoring hub [ 377.359731][ T5852] hub 4-1:0.89: probe with driver hub failed with error -5 [ 377.419056][ T5852] option 4-1:0.89: GSM modem (1-port) converter detected [ 377.522416][ T6093] gretap0: left allmulticast mode [ 377.527499][ T6093] gretap0: left promiscuous mode [ 377.578422][ T6093] bridge0: port 3(gretap0) entered disabled state [ 377.604052][ T6093] bridge_slave_1: left allmulticast mode [ 377.617987][ T6093] bridge_slave_1: left promiscuous mode [ 377.626332][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.640936][ T5929] usb 4-1: USB disconnect, device number 6 [ 377.641544][ T6093] bridge_slave_0: left allmulticast mode [ 377.652645][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.8.526'. [ 377.661931][ T6093] bridge_slave_0: left promiscuous mode [ 377.667772][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.676622][ T5853] Bluetooth: hci3: command tx timeout [ 377.684246][ T5929] option 4-1:0.89: device disconnected [ 378.098821][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.107719][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.148816][ T5853] Bluetooth: hci6: command tx timeout [ 379.273044][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.300673][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.320435][ T6093] bond0 (unregistering): Released all slaves [ 379.748594][ T5853] Bluetooth: hci3: command tx timeout [ 380.234182][ T5853] Bluetooth: hci6: command tx timeout [ 380.401206][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 380.477211][ T8534] chnl_net:caif_netlink_parms(): no params data found [ 381.350312][ T8673] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 381.725511][ T6093] hsr_slave_0: left promiscuous mode [ 382.218441][ T6093] hsr_slave_1: left promiscuous mode [ 382.278584][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.310359][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.329083][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.336517][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.368601][ T6093] veth1_macvtap: left promiscuous mode [ 382.374509][ T6093] veth0_macvtap: left promiscuous mode [ 382.388835][ T6093] veth1_vlan: left promiscuous mode [ 382.399422][ T6093] veth0_vlan: left promiscuous mode [ 382.678110][ T5968] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 382.860984][ T5968] usb 9-1: Using ep0 maxpacket: 32 [ 382.879379][ T5968] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 382.887564][ T5968] usb 9-1: config 0 has no interface number 0 [ 382.903820][ T5968] usb 9-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.948174][ T5968] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 382.967111][ T5968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.975499][ T5968] usb 9-1: Product: syz [ 382.980131][ T5968] usb 9-1: Manufacturer: syz [ 382.984745][ T5968] usb 9-1: SerialNumber: syz [ 383.019165][ T5968] usb 9-1: config 0 descriptor?? [ 383.032622][ T5968] hub 9-1:0.89: bad descriptor, ignoring hub [ 383.039154][ T5968] hub 9-1:0.89: probe with driver hub failed with error -5 [ 383.082616][ T5968] option 9-1:0.89: GSM modem (1-port) converter detected [ 383.204183][ T30] audit: type=1804 audit(6037145594.915:84): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.538" name="/newroot/39/file0" dev="tmpfs" ino=243 res=1 errno=0 [ 383.448181][ T5929] usb 9-1: USB disconnect, device number 6 [ 383.456194][ T5929] option 9-1:0.89: device disconnected [ 384.656492][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 385.069795][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 385.080772][ T969] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 385.403025][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 385.440639][ T969] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 385.459971][ T969] usb 4-1: config 0 has no interface number 0 [ 385.538488][ T969] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 385.659148][ T969] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 385.697529][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.706378][ T969] usb 4-1: Product: syz [ 385.721161][ T969] usb 4-1: Manufacturer: syz [ 385.730043][ T969] usb 4-1: SerialNumber: syz [ 385.791307][ T969] usb 4-1: config 0 descriptor?? [ 385.965379][ T969] hub 4-1:0.89: bad descriptor, ignoring hub [ 386.016108][ T969] hub 4-1:0.89: probe with driver hub failed with error -5 [ 386.039109][ T969] option 4-1:0.89: GSM modem (1-port) converter detected [ 386.618922][ T969] usb 4-1: USB disconnect, device number 7 [ 386.636129][ T969] option 4-1:0.89: device disconnected [ 386.765134][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.828385][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.844997][ T8524] bridge_slave_0: entered allmulticast mode [ 386.924423][ T8524] bridge_slave_0: entered promiscuous mode [ 387.072545][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.152533][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.170457][ T8524] bridge_slave_1: entered allmulticast mode [ 387.187731][ T8524] bridge_slave_1: entered promiscuous mode [ 387.213695][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.247267][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.269708][ T8534] bridge_slave_0: entered allmulticast mode [ 387.321078][ T8534] bridge_slave_0: entered promiscuous mode [ 387.359571][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.378248][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.403756][ T8534] bridge_slave_1: entered allmulticast mode [ 387.426224][ T8534] bridge_slave_1: entered promiscuous mode [ 387.674333][ T8327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.948612][ T5968] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 388.049183][ T8327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.095209][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.117889][ T5968] usb 9-1: Using ep0 maxpacket: 32 [ 388.124998][ T5968] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 388.127776][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.153619][ T5968] usb 9-1: config 0 has no interface number 0 [ 388.174121][ T5968] usb 9-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 388.211158][ T5968] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 388.219768][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.258480][ T8327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.268844][ T5968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.297788][ T5968] usb 9-1: Product: syz [ 388.316755][ T5968] usb 9-1: Manufacturer: syz [ 388.326130][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.348412][ T5968] usb 9-1: SerialNumber: syz [ 388.358305][ T5968] usb 9-1: config 0 descriptor?? [ 388.367087][ T5968] hub 9-1:0.89: bad descriptor, ignoring hub [ 388.373349][ T5968] hub 9-1:0.89: probe with driver hub failed with error -5 [ 388.383278][ T5968] option 9-1:0.89: GSM modem (1-port) converter detected [ 388.457811][ T8327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.492344][ T8755] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 388.583077][ T8534] team0: Port device team_slave_0 added [ 388.621762][ T8534] team0: Port device team_slave_1 added [ 388.666392][ T8524] team0: Port device team_slave_0 added [ 388.717581][ T5904] usb 9-1: USB disconnect, device number 7 [ 388.733950][ T8524] team0: Port device team_slave_1 added [ 388.744703][ T5904] option 9-1:0.89: device disconnected [ 388.818844][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.825831][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.926710][ T8534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.971011][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.977999][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.066110][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.120548][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.156759][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.239158][ T8534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.350477][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.357485][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.567954][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.809802][ T8524] hsr_slave_0: entered promiscuous mode [ 390.816293][ T8524] hsr_slave_1: entered promiscuous mode [ 390.839017][ T8524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.867437][ T8524] Cannot create hsr debugfs directory [ 390.958444][ T5953] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 390.980080][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.054094][ T8534] hsr_slave_0: entered promiscuous mode [ 391.080650][ T8534] hsr_slave_1: entered promiscuous mode [ 391.086852][ T8534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.113462][ T8534] Cannot create hsr debugfs directory [ 391.125195][ T5953] usb 9-1: Using ep0 maxpacket: 32 [ 391.154780][ T5953] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.175632][ T5953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 391.200992][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.236694][ T5953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 391.261826][ T5953] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 391.302557][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.371440][ T5953] usb 9-1: config 0 descriptor?? [ 391.377189][ T8777] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 391.380316][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.400273][ T5953] hub 9-1:0.0: USB hub found [ 391.472703][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.548470][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 391.554146][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.702628][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 391.713826][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.730581][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.762957][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 391.810508][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 391.825469][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.832683][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.840922][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 391.861316][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.910016][ T5896] usb 4-1: config 0 descriptor?? [ 391.919123][ T8787] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 391.949747][ T5896] hub 4-1:0.0: USB hub found [ 391.998474][ T5953] hub 9-1:0.0: 1 port detected [ 392.019453][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.026638][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.037108][ T5953] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 392.051925][ T5953] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 392.083994][ T5953] usbhid 9-1:0.0: can't add hid device: -71 [ 392.095718][ T5953] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 392.152914][ T5896] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 392.261683][ T5953] usb 9-1: USB disconnect, device number 8 [ 392.717176][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 392.765880][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.899556][ T5896] usb 4-1: USB disconnect, device number 8 [ 393.694697][ T8809] loop8: detected capacity change from 0 to 256 [ 393.851338][ T80] gretap0: left allmulticast mode [ 393.851485][ T8809] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 393.856506][ T80] gretap0: left promiscuous mode [ 393.918795][ T80] bridge0: port 3(gretap0) entered disabled state [ 393.941001][ T8809] exfat filesystem being mounted at /74/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 394.056057][ T80] bridge_slave_1: left allmulticast mode [ 394.085813][ T80] bridge_slave_1: left promiscuous mode [ 394.143567][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.383657][ T80] bridge_slave_0: left allmulticast mode [ 394.422512][ T80] bridge_slave_0: left promiscuous mode [ 394.496518][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.691171][ T8816] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 394.898475][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 395.078653][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 395.097274][ T5929] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 395.128505][ T5929] usb 4-1: config 0 has no interface number 0 [ 395.134708][ T5929] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.191706][ T5929] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 395.210894][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.228714][ T5929] usb 4-1: Product: syz [ 395.233114][ T5929] usb 4-1: Manufacturer: syz [ 395.237764][ T5929] usb 4-1: SerialNumber: syz [ 395.271906][ T5929] usb 4-1: config 0 descriptor?? [ 395.300429][ T5929] hub 4-1:0.89: bad descriptor, ignoring hub [ 395.311107][ T5929] hub 4-1:0.89: probe with driver hub failed with error -5 [ 395.350502][ T5929] option 4-1:0.89: GSM modem (1-port) converter detected [ 395.921667][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.942551][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.962184][ T80] bond0 (unregistering): Released all slaves [ 396.209136][ T5953] usb 4-1: USB disconnect, device number 9 [ 396.240449][ T5953] option 4-1:0.89: device disconnected [ 398.331075][ T80] hsr_slave_0: left promiscuous mode [ 398.398472][ T80] hsr_slave_1: left promiscuous mode [ 398.405356][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.433110][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.452626][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.467646][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.523114][ T80] veth1_macvtap: left promiscuous mode [ 398.538831][ T80] veth0_macvtap: left promiscuous mode [ 398.544731][ T80] veth1_vlan: left promiscuous mode [ 398.564989][ T80] veth0_vlan: left promiscuous mode [ 398.688493][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 398.859831][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 398.866875][ T5929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.904287][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.925432][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.978074][ T5929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.019881][ T5929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.039155][ T8880] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 399.076973][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.356202][ T5929] usb 3-1: usb_control_msg returned -71 [ 399.381306][ T5929] usbtmc 3-1:16.0: can't read capabilities [ 399.433892][ T5929] usb 3-1: USB disconnect, device number 5 [ 400.197294][ T80] team0 (unregistering): Port device team_slave_1 removed [ 400.423682][ T80] team0 (unregistering): Port device team_slave_0 removed [ 401.962336][ T8919] loop8: detected capacity change from 0 to 256 [ 402.052697][ T8919] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 402.089412][ T8919] exfat filesystem being mounted at /79/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 402.420950][ T8924] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 403.242532][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.253890][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.262173][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.304693][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.312721][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 403.320821][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.621517][ T8951] libceph: resolve '0.0' (ret=-3): failed [ 403.787920][ T8534] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 404.147684][ T8534] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 404.548657][ T8534] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.760836][ T8534] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.071425][ T8972] libceph: resolve '0.0' (ret=-3): failed [ 405.095218][ T8969] netdevsim netdevsim2: Direct firmware load for . [ 405.095218][ T8969] failed with error -2 [ 405.106805][ T8969] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 405.106805][ T8969] [ 405.267373][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.468606][ T5853] Bluetooth: hci4: command tx timeout [ 405.606954][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.830920][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.838043][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.886912][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.894208][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.368085][ T8524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.476628][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 407.488716][ T5953] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 407.508510][ T5853] Bluetooth: hci4: command tx timeout [ 407.618171][ T8524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.631175][ T8524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.718440][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 407.761270][ T5953] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 407.777659][ T5953] usb 4-1: config 0 has no interface number 0 [ 407.787946][ T8524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.811190][ T5953] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.901753][ T5953] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 408.123813][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.144222][ T5953] usb 4-1: Product: syz [ 408.189700][ T5953] usb 4-1: Manufacturer: syz [ 408.235279][ T5953] usb 4-1: SerialNumber: syz [ 408.259039][ T5953] usb 4-1: config 0 descriptor?? [ 408.310420][ T5953] hub 4-1:0.89: bad descriptor, ignoring hub [ 408.316480][ T5953] hub 4-1:0.89: probe with driver hub failed with error -5 [ 408.372079][ T5953] option 4-1:0.89: GSM modem (1-port) converter detected [ 408.388100][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.409449][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.431284][ T8944] bridge_slave_0: entered allmulticast mode [ 408.459657][ T8944] bridge_slave_0: entered promiscuous mode [ 408.546078][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.561424][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.575075][ T8944] bridge_slave_1: entered allmulticast mode [ 408.587408][ T8944] bridge_slave_1: entered promiscuous mode [ 408.614688][ T5953] usb 4-1: USB disconnect, device number 10 [ 408.637284][ T5953] option 4-1:0.89: device disconnected [ 408.766225][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.829087][ T80] bridge_slave_1: left allmulticast mode [ 408.834776][ T80] bridge_slave_1: left promiscuous mode [ 408.851231][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.890451][ T80] bridge_slave_0: left allmulticast mode [ 408.896171][ T80] bridge_slave_0: left promiscuous mode [ 408.929124][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.177733][ T9026] libceph: resolve '0.0' (ret=-3): failed [ 409.589005][ T5853] Bluetooth: hci4: command tx timeout [ 409.701219][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.712523][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.723621][ T80] bond0 (unregistering): Released all slaves [ 409.736639][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.808147][ T8944] team0: Port device team_slave_0 added [ 409.985619][ T80] hsr_slave_0: left promiscuous mode [ 410.009586][ T80] hsr_slave_1: left promiscuous mode [ 410.016689][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.028902][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.359158][ T969] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 410.538474][ T969] usb 9-1: Using ep0 maxpacket: 32 [ 410.584057][ T969] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 410.626967][ T969] usb 9-1: config 0 has no interface number 0 [ 410.634962][ T969] usb 9-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.651639][ T969] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 410.679869][ T969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.687926][ T969] usb 9-1: Product: syz [ 410.701696][ T969] usb 9-1: Manufacturer: syz [ 410.706338][ T969] usb 9-1: SerialNumber: syz [ 410.738182][ T969] usb 9-1: config 0 descriptor?? [ 410.762210][ T969] hub 9-1:0.89: bad descriptor, ignoring hub [ 410.768269][ T969] hub 9-1:0.89: probe with driver hub failed with error -5 [ 410.777966][ T969] option 9-1:0.89: GSM modem (1-port) converter detected [ 410.905262][ T80] team0 (unregistering): Port device team_slave_1 removed [ 411.022696][ T80] team0 (unregistering): Port device team_slave_0 removed [ 411.122019][ T969] usb 9-1: USB disconnect, device number 9 [ 411.135012][ T969] option 9-1:0.89: device disconnected [ 411.668497][ T5853] Bluetooth: hci4: command tx timeout [ 412.661655][ T8944] team0: Port device team_slave_1 added [ 412.848904][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.868986][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.927225][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.009047][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.016063][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.134434][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.470142][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.828961][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.325731][ T8944] hsr_slave_0: entered promiscuous mode [ 414.413761][ T8944] hsr_slave_1: entered promiscuous mode [ 414.443150][ T8944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.218416][ T8944] Cannot create hsr debugfs directory [ 415.338534][ T969] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 415.447818][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.516614][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.523883][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.536127][ T969] usb 9-1: Using ep0 maxpacket: 32 [ 415.561890][ T969] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 415.589272][ T969] usb 9-1: config 0 has no interface number 0 [ 415.595511][ T969] usb 9-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.647072][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.654355][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.656204][ T969] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 415.701327][ T969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.731772][ T969] usb 9-1: Product: syz [ 415.736024][ T969] usb 9-1: Manufacturer: syz [ 415.759344][ T969] usb 9-1: SerialNumber: syz [ 415.801828][ T969] usb 9-1: config 0 descriptor?? [ 415.827127][ T969] hub 9-1:0.89: bad descriptor, ignoring hub [ 415.871747][ T969] hub 9-1:0.89: probe with driver hub failed with error -5 [ 415.895968][ T969] option 9-1:0.89: GSM modem (1-port) converter detected [ 415.983815][ T8534] veth0_vlan: entered promiscuous mode [ 416.092583][ T8534] veth1_vlan: entered promiscuous mode [ 416.172926][ T969] usb 9-1: USB disconnect, device number 10 [ 416.269986][ T9097] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 416.585537][ T969] option 9-1:0.89: device disconnected [ 416.998028][ T8534] veth0_macvtap: entered promiscuous mode [ 417.027766][ T8534] veth1_macvtap: entered promiscuous mode [ 417.140875][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.221993][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.242459][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.312683][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.362476][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.396749][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.435393][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.477692][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.544792][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.555061][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.565825][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.578412][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.596383][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.710652][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.377793][ T8534] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.439450][ T8534] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.458494][ T8534] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.473453][ T8534] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.534773][ T26] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 418.701422][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.719566][ T26] usb 9-1: Using ep0 maxpacket: 32 [ 418.752879][ T26] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.812387][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 418.881033][ T8944] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.912106][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 418.936788][ T26] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.981736][ T8944] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.998672][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.039982][ T26] usb 9-1: config 0 descriptor?? [ 419.077434][ T9114] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 419.092726][ T8944] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.113664][ T26] hub 9-1:0.0: USB hub found [ 419.130279][ T8944] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.360506][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.368608][ T26] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 419.392746][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.580123][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.638537][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.752387][ T26] usbhid 9-1:0.0: can't add hid device: -71 [ 419.756629][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.796071][ T26] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 419.854754][ T26] usb 9-1: USB disconnect, device number 11 [ 419.944488][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.022321][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.029667][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.724773][ T8524] veth0_vlan: entered promiscuous mode [ 420.784161][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.791357][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.883204][ T8944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.903735][ T8944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.072434][ T9153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.245728][ T8524] veth1_vlan: entered promiscuous mode [ 421.740133][ T8524] veth0_macvtap: entered promiscuous mode [ 422.071899][ T8524] veth1_macvtap: entered promiscuous mode [ 422.344094][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.633246][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.846609][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.884534][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.948687][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.979518][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.021699][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.272850][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.300008][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.326740][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.353752][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.364842][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.376213][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.386973][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.398253][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.409002][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.434009][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.485162][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.527389][ T8524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.551667][ T8524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.568049][ T8524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.584487][ T8524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.842056][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.082294][ T6560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.259013][ T6560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.417803][ T6560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.440013][ T6560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.478277][ T8944] veth0_vlan: entered promiscuous mode [ 429.612828][ T8944] veth1_vlan: entered promiscuous mode [ 430.720741][ T8944] veth0_macvtap: entered promiscuous mode [ 430.731771][ T8944] veth1_macvtap: entered promiscuous mode [ 430.751472][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.793517][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.838756][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.890168][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.937941][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.968777][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.026368][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.068566][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.094691][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.106794][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.147971][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.274325][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.382192][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.402299][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.415020][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.424408][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 431.433500][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.824228][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.196494][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.241525][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.308851][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.348529][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.368568][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.388450][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.411800][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.437228][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.447866][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.459510][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.472768][ T8944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.482609][ T8944] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.491603][ T8944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.508744][ T8944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.208019][ T9268] loop3: detected capacity change from 0 to 32768 [ 433.211310][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.278679][ T9268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.627 (9268) [ 433.310718][ T9268] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 433.321643][ T9268] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 433.330315][ T9268] BTRFS info (device loop3): using free-space-tree [ 433.511085][ T5852] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 433.514386][ T5849] Bluetooth: hci0: command tx timeout [ 433.678906][ T5852] usb 8-1: Using ep0 maxpacket: 32 [ 433.695146][ T5852] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 433.714371][ T5852] usb 8-1: config 0 has no interface number 0 [ 433.725114][ T5852] usb 8-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.746880][ T5852] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 433.764446][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.771383][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.799115][ T5852] usb 8-1: Product: syz [ 433.803518][ T5852] usb 8-1: Manufacturer: syz [ 433.866710][ T5852] usb 8-1: SerialNumber: syz [ 433.975854][ T5852] usb 8-1: config 0 descriptor?? [ 434.060253][ T5852] hub 8-1:0.89: bad descriptor, ignoring hub [ 434.066381][ T5852] hub 8-1:0.89: probe with driver hub failed with error -5 [ 434.122650][ T5852] option 8-1:0.89: GSM modem (1-port) converter detected [ 434.715663][ T30] audit: type=1800 audit(6037145646.075:85): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.627" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 434.769635][ T5852] usb 8-1: USB disconnect, device number 2 [ 434.849205][ T5852] option 8-1:0.89: device disconnected [ 434.930660][ T30] audit: type=1800 audit(6037145646.635:86): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.627" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 434.980060][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.588562][ T5849] Bluetooth: hci0: command tx timeout [ 436.200682][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.218643][ T5898] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 436.354819][ T9312] loop7: detected capacity change from 0 to 4096 [ 436.398477][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 436.415167][ T5898] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 436.424683][ T9312] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 436.451109][ T9312] ntfs3(loop7): Failed to load $MFTMirr (-22). [ 436.487652][ T7442] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.498894][ T5898] usb 3-1: config 0 has no interface number 0 [ 436.505258][ T5898] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.606201][ T5898] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 436.628584][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.636977][ T5898] usb 3-1: Product: syz [ 436.642383][ T5898] usb 3-1: Manufacturer: syz [ 436.643591][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.647025][ T5898] usb 3-1: SerialNumber: syz [ 436.785547][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.791775][ T5898] usb 3-1: config 0 descriptor?? [ 436.895045][ T5898] hub 3-1:0.89: bad descriptor, ignoring hub [ 436.912246][ T5898] hub 3-1:0.89: probe with driver hub failed with error -5 [ 436.992410][ T5898] option 3-1:0.89: GSM modem (1-port) converter detected [ 437.128769][ T6560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.187478][ T5898] usb 3-1: USB disconnect, device number 6 [ 437.234714][ T6560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.248915][ T5898] option 3-1:0.89: device disconnected [ 437.532606][ T9251] chnl_net:caif_netlink_parms(): no params data found [ 437.669788][ T5849] Bluetooth: hci0: command tx timeout [ 438.705670][ T13] bridge_slave_1: left allmulticast mode [ 438.782312][ T13] bridge_slave_1: left promiscuous mode [ 438.788211][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.898188][ T13] bridge_slave_0: left allmulticast mode [ 438.914743][ T13] bridge_slave_0: left promiscuous mode [ 438.946983][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.407478][ T5843] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 439.596198][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.603594][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.660006][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 439.758802][ T5849] Bluetooth: hci0: command tx timeout [ 439.826108][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.900234][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 440.915159][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 440.962744][ T5843] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 441.004763][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.069833][ T5843] usb 6-1: config 0 descriptor?? [ 441.091164][ T9343] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 441.106835][ T5843] hub 6-1:0.0: USB hub found [ 441.368571][ T5843] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 441.406484][ T5843] usbhid 6-1:0.0: can't add hid device: -71 [ 441.414624][ T5843] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 441.473702][ T5843] usb 6-1: USB disconnect, device number 5 [ 442.447174][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.463406][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.481184][ T13] bond0 (unregistering): Released all slaves [ 443.097379][ T9370] loop8: detected capacity change from 0 to 256 [ 443.340263][ T9370] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 443.435431][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.463042][ T9370] exfat filesystem being mounted at /99/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 443.970697][ T9382] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 444.028668][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.320115][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.348645][ T9251] bridge_slave_0: entered allmulticast mode [ 444.356063][ T9251] bridge_slave_0: entered promiscuous mode [ 444.446070][ T9388] libceph: resolve '0.0' (ret=-3): failed [ 444.799429][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.828730][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.856803][ T9251] bridge_slave_1: entered allmulticast mode [ 445.126043][ T9251] bridge_slave_1: entered promiscuous mode [ 446.201308][ T9383] netdevsim netdevsim2: Direct firmware load for . [ 446.201308][ T9383] failed with error -2 [ 446.239570][ T9383] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 446.239570][ T9383] [ 448.578675][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.609028][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.317296][ T9423] netlink: 277 bytes leftover after parsing attributes in process `syz.8.654'. [ 449.713777][ T13] hsr_slave_0: left promiscuous mode [ 449.832194][ T13] hsr_slave_1: left promiscuous mode [ 449.859479][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.897552][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.946098][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.062508][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.298687][ T13] veth1_macvtap: left promiscuous mode [ 450.328663][ T13] veth0_macvtap: left promiscuous mode [ 450.334438][ T13] veth1_vlan: left promiscuous mode [ 450.367980][ T13] veth0_vlan: left promiscuous mode [ 453.198224][ T13] team0 (unregistering): Port device team_slave_1 removed [ 453.365414][ T13] team0 (unregistering): Port device team_slave_0 removed [ 454.680838][ T9251] team0: Port device team_slave_0 added [ 454.690281][ T9421] bridge0: port 3(gretap0) entered blocking state [ 454.696861][ T9421] bridge0: port 3(gretap0) entered disabled state [ 454.704732][ T9421] gretap0: entered allmulticast mode [ 454.711859][ T9421] gretap0: entered promiscuous mode [ 454.717661][ T9421] bridge0: port 3(gretap0) entered blocking state [ 454.724253][ T9421] bridge0: port 3(gretap0) entered forwarding state [ 454.800984][ T9251] team0: Port device team_slave_1 added [ 454.915509][ T9435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.949581][ T9435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 455.110670][ T9435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.158280][ T9435] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 455.168696][ T9443] loop8: detected capacity change from 0 to 256 [ 455.216278][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.503921][ T9435] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 455.691602][ T9435] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 455.841668][ T9443] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 455.896933][ T9443] exfat filesystem being mounted at /104/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 455.940227][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.028460][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.067951][ T9435] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 456.212093][ T9435] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 456.293659][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.308543][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.338448][ T9452] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 456.381922][ T9435] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 456.428490][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.575550][ T9435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 456.668983][ T9435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 456.978491][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 457.142994][ T9435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 457.193489][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 457.326264][ T9435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 457.326570][ T9251] hsr_slave_0: entered promiscuous mode [ 457.398909][ T9435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 457.559802][ T9251] hsr_slave_1: entered promiscuous mode [ 457.566520][ T9251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.588928][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 457.618489][ T9251] Cannot create hsr debugfs directory [ 457.798393][ T9464] loop3: detected capacity change from 0 to 32768 [ 457.807026][ T9464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.666 (9464) [ 457.843779][ T9435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 457.888588][ T9464] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 457.900000][ T9464] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 457.909184][ T9464] BTRFS info (device loop3): using free-space-tree [ 458.158577][ T5849] Bluetooth: hci6: command 0x0c1a tx timeout [ 458.208527][ T5968] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 458.408568][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 458.436811][ T5968] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 458.471042][ T5968] usb 3-1: config 0 has no interface number 0 [ 458.477283][ T5968] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 458.516023][ T30] audit: type=1800 audit(6037145670.225:87): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.666" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 458.592707][ T5968] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 458.639333][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 458.648996][ T30] audit: type=1800 audit(6037145670.335:88): pid=9483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.666" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 458.688687][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.778531][ T5968] usb 3-1: Product: syz [ 458.782835][ T5968] usb 3-1: Manufacturer: syz [ 458.807357][ T9486] loop5: detected capacity change from 0 to 1024 [ 458.858812][ T5968] usb 3-1: SerialNumber: syz [ 458.883992][ T5968] usb 3-1: config 0 descriptor?? [ 458.910291][ T5968] hub 3-1:0.89: bad descriptor, ignoring hub [ 458.920967][ T5968] hub 3-1:0.89: probe with driver hub failed with error -5 [ 458.937355][ T5968] option 3-1:0.89: GSM modem (1-port) converter detected [ 459.028517][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 459.036136][ T9486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.268740][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 459.316997][ T30] audit: type=1804 audit(6037145671.025:89): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.667" name="/newroot/5/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 459.357762][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 459.372169][ T9486] 9pnet_fd: Insufficient options for proto=fd [ 459.407480][ T5896] usb 3-1: USB disconnect, device number 7 [ 459.416952][ T5896] option 3-1:0.89: device disconnected [ 459.678846][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 459.772417][ T7442] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 459.942693][ T8944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.238527][ T5849] Bluetooth: hci6: command 0x0c1a tx timeout [ 460.442409][ T9512] netlink: 277 bytes leftover after parsing attributes in process `syz.5.669'. [ 460.718744][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 460.962360][ T9517] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.668'. [ 461.249307][ T9251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 461.505211][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.571354][ T9251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 462.601540][ T5849] Bluetooth: hci6: command 0x0c1a tx timeout [ 462.799410][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 463.305310][ T9251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.608668][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.616236][ T9251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.777693][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 465.930596][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.044507][ T9251] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.649548][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.656765][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.773736][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.781098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.814929][ T9557] 9pnet_fd: Insufficient options for proto=fd [ 467.348058][ T9562] loop5: detected capacity change from 0 to 1024 [ 467.389759][ T9562] EXT4-fs: Ignoring removed orlov option [ 467.407502][ T9562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.576996][ T9562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.580912][ T8944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.232431][ T9576] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.687'. [ 470.446476][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.487870][ T9596] netdevsim netdevsim5: Direct firmware load for . [ 471.487870][ T9596] failed with error -2 [ 471.503421][ T9596] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 471.503421][ T9596] [ 471.876274][ T9598] libceph: resolve '0.0' (ret=-3): failed [ 473.235045][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.695'. [ 474.088714][ T9251] veth0_vlan: entered promiscuous mode [ 474.139414][ T9251] veth1_vlan: entered promiscuous mode [ 474.246215][ T9251] veth0_macvtap: entered promiscuous mode [ 474.251547][ T9617] loop5: detected capacity change from 0 to 1024 [ 474.263419][ T9251] veth1_macvtap: entered promiscuous mode [ 474.327157][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.327193][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.327230][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.327251][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.327269][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.327288][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.327306][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.327325][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.327348][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.327366][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.341900][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.347839][ T9617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.359525][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.359556][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.359573][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.359596][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.359613][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.359632][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.359649][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.359668][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.359685][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.359704][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.360685][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.386029][ T9251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.386135][ T9251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.386172][ T9251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.386208][ T9251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.457812][ T9625] 9pnet_fd: Insufficient options for proto=fd [ 474.714421][ T8944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.147991][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.148023][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.191026][ T7039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.191060][ T7039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.197134][ T9627] loop7: detected capacity change from 0 to 1024 [ 475.371795][ T9640] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.702'. [ 475.453691][ T9627] EXT4-fs: Ignoring removed orlov option [ 475.453779][ T9627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.641173][ T9627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.643822][ T9608] tty tty25: ldisc open failed (-12), clearing slot 24 [ 477.904477][ T8534] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.102470][ T9660] random: crng reseeded on system resumption [ 479.907318][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'. [ 481.715286][ T9691] libceph: resolve '0.0' (ret=-3): failed [ 481.715789][ T9688] netdevsim netdevsim5: Direct firmware load for . [ 481.715789][ T9688] failed with error -2 [ 481.882099][ T9688] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 481.882099][ T9688] [ 482.535734][ T9694] 9pnet_fd: Insufficient options for proto=fd [ 484.503376][ T9711] loop5: detected capacity change from 0 to 1024 [ 484.543405][ T9711] EXT4-fs: Ignoring removed orlov option [ 484.608566][ T9711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 484.910596][ T9711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.107278][ T8944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.509260][ T9732] libceph: resolve '0.0' (ret=-3): failed [ 488.146772][ T9731] netdevsim netdevsim2: Direct firmware load for . [ 488.146772][ T9731] failed with error -2 [ 488.193199][ T9731] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 488.193199][ T9731] [ 488.821728][ T9752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.099202][ T9751] random: crng reseeded on system resumption [ 491.597152][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 492.429767][ T9774] loop4: detected capacity change from 0 to 1024 [ 492.517991][ T9774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.576104][ T30] audit: type=1804 audit(6037145704.285:90): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.729" name="/newroot/6/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 492.797773][ T9785] 9pnet_fd: Insufficient options for proto=fd [ 492.865393][ T9786] libceph: resolve '0.0' (ret=-3): failed [ 493.635757][ T9251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.812256][ T9792] loop3: detected capacity change from 0 to 1024 [ 493.852612][ T9792] EXT4-fs: Ignoring removed orlov option [ 493.872164][ T9792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.239492][ T9802] loop8: detected capacity change from 0 to 32768 [ 494.245980][ T9792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.251459][ T9802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.736 (9802) [ 494.533595][ T9802] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.543889][ T9802] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 494.553508][ T9802] BTRFS info (device loop8): using free-space-tree [ 495.265638][ T9815] loop4: detected capacity change from 0 to 128 [ 495.407961][ T7442] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.652032][ T9815] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.770883][ T9815] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 496.574115][ T9844] loop3: detected capacity change from 0 to 256 [ 496.749532][ T9844] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 496.802694][ T9844] exfat filesystem being mounted at /86/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 497.155604][ T30] audit: type=1800 audit(6037145708.855:91): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.736" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 497.237415][ T9851] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 497.930302][ T30] audit: type=1800 audit(6037145709.635:92): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.736" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 498.791207][ T5968] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 498.939088][ T7052] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 498.979083][ T5968] usb 4-1: Using ep0 maxpacket: 32 [ 498.989650][ T5968] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 498.997787][ T5968] usb 4-1: config 0 has no interface number 0 [ 499.023557][ T5968] usb 4-1: config 0 interface 89 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.453661][ T5968] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 499.464565][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.486361][ T5968] usb 4-1: Product: syz [ 499.550315][ T5968] usb 4-1: Manufacturer: syz [ 499.601848][ T5968] usb 4-1: SerialNumber: syz [ 499.755611][ T5968] usb 4-1: config 0 descriptor?? [ 499.881934][ T5968] hub 4-1:0.89: bad descriptor, ignoring hub [ 499.980560][ T5968] hub 4-1:0.89: probe with driver hub failed with error -5 [ 500.095664][ T5968] option 4-1:0.89: GSM modem (1-port) converter detected [ 500.328835][ T5968] usb 4-1: USB disconnect, device number 11 [ 500.374519][ T5968] option 4-1:0.89: device disconnected [ 500.953704][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.969539][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.038550][ T5898] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 502.235067][ T5898] usb 8-1: Using ep0 maxpacket: 32 [ 502.355245][ T5898] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 502.364341][ T5898] usb 8-1: config 0 has no interface number 0 [ 502.373298][ T5898] usb 8-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.401338][ T5898] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 502.465066][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.587427][ T5898] usb 8-1: Product: syz [ 502.617953][ T5898] usb 8-1: Manufacturer: syz [ 502.625582][ T5898] usb 8-1: SerialNumber: syz [ 502.640833][ T5898] usb 8-1: config 0 descriptor?? [ 502.647824][ T5898] hub 8-1:0.89: bad descriptor, ignoring hub [ 502.684520][ T5898] hub 8-1:0.89: probe with driver hub failed with error -5 [ 502.695100][ T5898] option 8-1:0.89: GSM modem (1-port) converter detected [ 502.828008][ T9891] loop8: detected capacity change from 0 to 128 [ 503.061366][ T5897] usb 8-1: USB disconnect, device number 3 [ 503.096724][ T5897] option 8-1:0.89: device disconnected [ 503.531288][ T9897] libceph: resolve '0.0' (ret=-3): failed [ 504.932252][ T9908] loop7: detected capacity change from 0 to 1024 [ 505.010970][ T9908] EXT4-fs: Ignoring removed orlov option [ 505.058057][ T9908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.220913][ T9251] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.924573][ T9908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.149117][ T5953] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 507.160905][ T8534] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.148869][ T9963] netdevsim netdevsim3: Direct firmware load for . [ 509.148869][ T9963] failed with error -2 [ 509.160632][ T9963] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 509.160632][ T9963] [ 509.929670][ T9967] libceph: resolve '0.0' (ret=-3): failed [ 510.806784][ T9975] loop5: detected capacity change from 0 to 256 [ 512.953110][ T9975] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 513.018615][ T9986] ubi31: attaching mtd0 [ 513.026669][ T9986] ubi31: scanning is finished [ 513.470088][ T9982] tc_dump_action: action bad kind [ 513.499798][ T9975] exfat filesystem being mounted at /25/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 513.873926][ T9986] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 514.010934][ T9992] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 515.012496][T10000] loop5: detected capacity change from 0 to 1024 [ 515.044369][T10000] EXT4-fs: Ignoring removed orlov option [ 515.082955][T10000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.553331][T10007] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 516.876100][T10000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.652684][ T5897] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 518.963853][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.051312][ T8944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.088632][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 519.096098][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.189468][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.226435][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.264047][ T5897] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.356194][ T5897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.392871][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.676664][ T5897] usb 5-1: usb_control_msg returned -71 [ 519.689186][ T5897] usbtmc 5-1:16.0: can't read capabilities [ 519.759665][ T5897] usb 5-1: USB disconnect, device number 4 [ 520.042843][T10039] loop5: detected capacity change from 0 to 1024 [ 520.291439][T10039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.445650][ T30] audit: type=1804 audit(6037145732.155:93): pid=10039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.778" name="/newroot/28/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 520.576733][T10048] 9pnet_fd: Insufficient options for proto=fd [ 521.028242][ T8944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.013708][T10067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.545047][T10070] loop8: detected capacity change from 0 to 256 [ 524.930874][T10070] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 525.217699][T10070] exfat filesystem being mounted at /121/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 526.091559][T10091] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 528.598258][T10105] loop3: detected capacity change from 0 to 32768 [ 528.607631][T10105] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.790 (10105) [ 528.643147][T10105] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 528.653478][T10105] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 528.662074][T10105] BTRFS info (device loop3): using free-space-tree [ 531.488871][ T7442] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.525244][T10144] netdevsim netdevsim8: Direct firmware load for . [ 532.525244][T10144] failed with error -2 [ 532.536812][T10144] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 532.536812][T10144] [ 534.360300][T10142] libceph: resolve '0.0' (ret=-3): failed [ 537.208563][ T5897] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 537.493568][T10179] loop3: detected capacity change from 0 to 1024 [ 537.546872][ T5897] usb 9-1: device descriptor read/64, error -71 [ 537.562048][T10179] EXT4-fs: Ignoring removed orlov option [ 538.848146][T10179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.008672][ T5897] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 539.165064][ T5897] usb 9-1: device descriptor read/64, error -71 [ 539.269852][T10179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.284801][ T5897] usb usb9-port1: attempt power cycle [ 539.379130][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 539.391948][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.402633][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.420597][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.435004][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 539.478619][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 539.807250][ T5897] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 540.556018][ T5897] usb 9-1: device descriptor read/8, error -71 [ 540.626674][ T7442] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.959376][ T5849] Bluetooth: hci3: command tx timeout [ 544.018768][ T5849] Bluetooth: hci3: command tx timeout [ 545.749821][ T5897] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 545.997225][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 546.010919][ T5897] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 546.038574][ T5897] usb 3-1: config 0 has no interface number 0 [ 546.068660][ T5849] Bluetooth: hci3: command tx timeout [ 546.078590][ T5897] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.125358][ T5897] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 546.158675][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.187641][ T5897] usb 3-1: Product: syz [ 546.234122][ T5897] usb 3-1: Manufacturer: syz [ 546.242134][ T5897] usb 3-1: SerialNumber: syz [ 547.224779][ T5897] usb 3-1: config 0 descriptor?? [ 547.245398][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.189855][T10248] ubi31: attaching mtd0 [ 548.207987][T10248] ubi31: scanning is finished [ 548.208518][ T5849] Bluetooth: hci3: command tx timeout [ 548.822683][ T5897] usb 3-1: can't set config #0, error -71 [ 548.870190][ T5897] usb 3-1: USB disconnect, device number 8 [ 548.914757][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 548.930994][T10249] tc_dump_action: action bad kind [ 548.933057][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.967182][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.982860][T10248] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 549.301037][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 549.344125][ T5853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 549.391512][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 549.931311][T10264] loop8: detected capacity change from 0 to 1024 [ 549.947997][T10264] EXT4-fs: Ignoring removed orlov option [ 549.970653][T10264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.051695][T10264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.101746][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.118913][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.343844][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.591560][ T5849] Bluetooth: hci6: command tx timeout [ 552.243305][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.895521][T10191] chnl_net:caif_netlink_parms(): no params data found [ 553.728616][ T5849] Bluetooth: hci6: command tx timeout [ 553.833960][ T36] bridge_slave_1: left allmulticast mode [ 553.868690][ T36] bridge_slave_1: left promiscuous mode [ 553.908793][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.978108][ T36] bridge_slave_0: left allmulticast mode [ 554.009981][ T36] bridge_slave_0: left promiscuous mode [ 554.042366][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.748456][ T5849] Bluetooth: hci6: command tx timeout [ 556.905563][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.926021][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.942915][ T36] bond0 (unregistering): Released all slaves [ 557.833403][ T5853] Bluetooth: hci6: command tx timeout [ 561.877134][ T36] hsr_slave_0: left promiscuous mode [ 561.889531][ T36] hsr_slave_1: left promiscuous mode [ 561.895720][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.997012][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.069407][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.076920][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.507943][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.514575][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.168649][ T36] veth1_macvtap: left promiscuous mode [ 563.191018][ T36] veth0_macvtap: left promiscuous mode [ 563.197057][ T36] veth1_vlan: left promiscuous mode [ 563.203022][ T36] veth0_vlan: left promiscuous mode [ 566.430749][ T5852] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 566.623585][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 566.683405][ T5852] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 566.692759][ T5852] usb 3-1: config 0 has no interface number 0 [ 566.699135][ T5852] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 566.746813][ T5852] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 566.756293][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.792852][ T5852] usb 3-1: Product: syz [ 566.798022][ T5852] usb 3-1: Manufacturer: syz [ 566.806800][ T5852] usb 3-1: SerialNumber: syz [ 566.815315][ T5852] usb 3-1: config 0 descriptor?? [ 566.823136][ T5852] hub 3-1:0.89: bad descriptor, ignoring hub [ 566.830223][ T5852] hub 3-1:0.89: probe with driver hub failed with error -5 [ 566.853326][ T5852] option 3-1:0.89: GSM modem (1-port) converter detected [ 567.139829][ T36] team0 (unregistering): Port device team_slave_1 removed [ 567.225345][ T969] usb 3-1: USB disconnect, device number 9 [ 567.235281][ T969] option 3-1:0.89: device disconnected [ 567.317660][ T36] team0 (unregistering): Port device team_slave_0 removed [ 569.093325][T10401] XFS (nullb0): Invalid superblock magic number [ 570.170678][T10191] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.178045][T10191] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.193236][T10191] bridge_slave_0: entered allmulticast mode [ 570.205170][T10191] bridge_slave_0: entered promiscuous mode [ 570.218157][T10191] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.244293][T10191] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.252346][T10191] bridge_slave_1: entered allmulticast mode [ 570.259350][T10191] bridge_slave_1: entered promiscuous mode [ 570.405379][T10251] chnl_net:caif_netlink_parms(): no params data found [ 570.962560][T10425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.655202][T10191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.079254][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 572.272152][T10433] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 572.858526][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 572.885598][ T5896] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 572.953208][ T5896] usb 5-1: config 0 has no interface number 0 [ 573.071975][T10191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.180158][ T5896] usb 5-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.297224][ T5896] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 573.318450][ T5968] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 573.371760][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.451521][ T5896] usb 5-1: Product: syz [ 573.467494][ T5896] usb 5-1: Manufacturer: syz [ 573.510709][ T5896] usb 5-1: SerialNumber: syz [ 573.539291][ T5896] usb 5-1: config 0 descriptor?? [ 573.543358][T10191] team0: Port device team_slave_0 added [ 573.558720][ T5968] usb 4-1: Using ep0 maxpacket: 32 [ 573.577355][ T5968] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 573.610517][ T5896] hub 5-1:0.89: bad descriptor, ignoring hub [ 573.614097][T10191] team0: Port device team_slave_1 added [ 573.626971][ T5896] hub 5-1:0.89: probe with driver hub failed with error -5 [ 573.639256][ T5968] usb 4-1: config 0 has no interface number 0 [ 573.645392][ T5968] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.671916][ T5896] option 5-1:0.89: GSM modem (1-port) converter detected [ 573.712898][ T5968] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 573.738597][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.746888][ T5968] usb 4-1: Product: syz [ 573.766213][ T5968] usb 4-1: Manufacturer: syz [ 573.796376][ T5968] usb 4-1: SerialNumber: syz [ 573.830722][ T5968] usb 4-1: config 0 descriptor?? [ 573.853497][ T5968] hub 4-1:0.89: bad descriptor, ignoring hub [ 573.879904][ T5968] hub 4-1:0.89: probe with driver hub failed with error -5 [ 573.920256][ T5968] option 4-1:0.89: GSM modem (1-port) converter detected [ 574.024584][ T969] usb 5-1: USB disconnect, device number 5 [ 574.034602][ T969] option 5-1:0.89: device disconnected [ 574.130887][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.138128][T10251] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.168828][T10251] bridge_slave_0: entered allmulticast mode [ 574.179648][T10251] bridge_slave_0: entered promiscuous mode [ 574.199742][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.206926][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.226791][ T5897] usb 4-1: USB disconnect, device number 13 [ 574.235485][ T5897] option 4-1:0.89: device disconnected [ 574.250144][T10251] bridge_slave_1: entered allmulticast mode [ 574.257282][T10251] bridge_slave_1: entered promiscuous mode [ 574.271396][T10191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.280352][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.348510][T10191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.132235][T10191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.148562][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.208518][T10191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.317113][T10191] hsr_slave_0: entered promiscuous mode [ 575.334890][T10191] hsr_slave_1: entered promiscuous mode [ 575.346457][T10191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.370178][T10191] Cannot create hsr debugfs directory [ 575.455871][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.589648][ T5898] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 575.865157][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.126265][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 576.160138][ T5898] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 576.202802][ T5898] usb 3-1: config 0 has no interface number 0 [ 576.240550][ T5898] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 576.338971][ T5898] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 576.398533][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.424339][ T5898] usb 3-1: Product: syz [ 576.641690][T10251] team0: Port device team_slave_0 added [ 576.691928][ T5898] usb 3-1: Manufacturer: syz [ 576.696615][ T5898] usb 3-1: SerialNumber: syz [ 576.712017][T10251] team0: Port device team_slave_1 added [ 576.719392][ T5898] usb 3-1: config 0 descriptor?? [ 576.738278][ T5898] hub 3-1:0.89: bad descriptor, ignoring hub [ 576.746609][ T5898] hub 3-1:0.89: probe with driver hub failed with error -5 [ 576.766716][ T5898] option 3-1:0.89: GSM modem (1-port) converter detected [ 577.425835][ T5898] usb 3-1: USB disconnect, device number 10 [ 577.491508][ T5898] option 3-1:0.89: device disconnected [ 578.485139][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.128285][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.155232][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.195234][T10504] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 579.204586][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.225802][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.276132][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.308733][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.821402][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.163992][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.269495][T10251] hsr_slave_0: entered promiscuous mode [ 580.279557][T10251] hsr_slave_1: entered promiscuous mode [ 580.288182][T10251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.306947][T10251] Cannot create hsr debugfs directory [ 580.441296][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.296720][T10550] x_tables: unsorted underflow at hook 1 [ 583.574175][ T36] bridge_slave_1: left allmulticast mode [ 583.621124][ T36] bridge_slave_1: left promiscuous mode [ 583.627112][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.669795][ T36] bridge_slave_0: left allmulticast mode [ 583.675930][ T36] bridge_slave_0: left promiscuous mode [ 583.688788][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.820693][ T5898] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 584.988926][ T5898] usb 9-1: Using ep0 maxpacket: 32 [ 585.000222][ T5898] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 585.008652][ T5898] usb 9-1: config 0 has no interface number 0 [ 585.014875][ T5898] usb 9-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 585.030959][ T5898] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 585.044019][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.052184][ T5898] usb 9-1: Product: syz [ 585.056667][ T5898] usb 9-1: Manufacturer: syz [ 585.099609][ T5898] usb 9-1: SerialNumber: syz [ 585.107256][ T5898] usb 9-1: config 0 descriptor?? [ 585.134170][ T5898] hub 9-1:0.89: bad descriptor, ignoring hub [ 585.141198][ T5898] hub 9-1:0.89: probe with driver hub failed with error -5 [ 585.150288][ T5898] option 9-1:0.89: GSM modem (1-port) converter detected [ 585.295679][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.430375][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.443727][ T36] bond0 (unregistering): Released all slaves [ 585.599216][ T5897] usb 9-1: USB disconnect, device number 16 [ 585.664977][ T5897] option 9-1:0.89: device disconnected [ 586.525893][T10593] libceph: resolve '0.0' (ret=-3): failed [ 587.517135][ T36] hsr_slave_0: left promiscuous mode [ 587.543085][ T36] hsr_slave_1: left promiscuous mode [ 587.550180][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.568133][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.577773][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.606810][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.840949][ T36] veth1_macvtap: left promiscuous mode [ 588.758474][ T36] veth0_macvtap: left promiscuous mode [ 588.764222][ T36] veth1_vlan: left promiscuous mode [ 588.791785][ T36] veth0_vlan: left promiscuous mode [ 588.849232][T10608] x_tables: unsorted underflow at hook 1 [ 588.932188][T10609] loop4: detected capacity change from 0 to 128 [ 589.263190][T10609] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.333298][T10609] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 589.880881][T10603] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 590.415843][ T9251] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.084025][T10623] loop4: detected capacity change from 0 to 64 [ 591.341135][ T36] team0 (unregistering): Port device team_slave_1 removed [ 591.551672][ T36] team0 (unregistering): Port device team_slave_0 removed [ 593.587118][T10640] x_tables: unsorted underflow at hook 1 [ 594.696520][T10656] libceph: resolve '0.0' (ret=-3): failed [ 595.232278][T10659] x_tables: unsorted underflow at hook 1 [ 595.477188][T10667] netlink: 'syz.8.898': attribute type 1 has an invalid length. [ 595.566135][T10667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.618745][T10198] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 595.798513][T10198] usb 3-1: Using ep0 maxpacket: 32 [ 595.818279][T10198] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 595.842839][T10198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.890522][T10198] usb 3-1: config 0 descriptor?? [ 595.916367][T10198] gspca_main: sunplus-2.14.0 probing 041e:400b [ 595.946475][T10251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.989037][T10680] x_tables: unsorted underflow at hook 1 [ 596.007230][T10251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 596.045698][T10251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 596.074479][T10251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 596.088617][ T969] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 596.248496][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 596.294815][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.326923][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.354211][ T969] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 596.365200][T10191] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 596.376349][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.394055][ T969] usb 4-1: config 0 descriptor?? [ 596.432523][T10191] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 596.469512][T10191] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 596.519972][T10191] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 596.629491][T10198] gspca_sunplus: reg_w_riv err -110 [ 596.635093][T10198] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 596.753396][T10251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.866569][ T969] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 596.967287][T10251] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.037729][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.8.903'. [ 597.043053][ T5945] usb 3-1: USB disconnect, device number 11 [ 597.073890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.081110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.101828][ T969] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 597.195780][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.203330][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.302788][ T969] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 597.705915][ T969] ft260 0003:0403:6030.0003: failed to retrieve status: -71 [ 597.752164][ T969] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71 [ 597.929317][ T969] usb 4-1: USB disconnect, device number 14 [ 598.262514][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.277836][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.288168][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.299497][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.317559][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 598.326282][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.590095][T10722] loop8: detected capacity change from 0 to 1024 [ 598.694958][T10722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.864772][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.885029][ T30] audit: type=1804 audit(6037145810.595:94): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.910" name="/newroot/153/bus/bus" dev="loop8" ino=18 res=1 errno=0 [ 598.940308][T10728] 9pnet_fd: Insufficient options for proto=fd [ 599.489714][T10251] veth0_vlan: entered promiscuous mode [ 599.538862][T10251] veth1_vlan: entered promiscuous mode [ 599.611869][T10743] loop4: detected capacity change from 0 to 512 [ 599.705633][ T7052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.747272][T10714] chnl_net:caif_netlink_parms(): no params data found [ 599.809541][T10743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 599.858813][T10743] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.069466][ T9251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 600.397752][ T3538] bridge_slave_1: left allmulticast mode [ 600.404208][ T5849] Bluetooth: hci3: command tx timeout [ 600.413584][ T3538] bridge_slave_1: left promiscuous mode [ 600.432673][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.512374][ T3538] bridge_slave_0: left allmulticast mode [ 600.518127][ T3538] bridge_slave_0: left promiscuous mode [ 600.542426][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.880679][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.892990][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.915193][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.932105][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.940943][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 600.952069][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.571047][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.638915][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.666214][ T3538] bond0 (unregistering): Released all slaves [ 601.695022][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.714954][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.729035][T10714] bridge_slave_0: entered allmulticast mode [ 601.739463][T10714] bridge_slave_0: entered promiscuous mode [ 601.748956][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.756226][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.764435][T10714] bridge_slave_1: entered allmulticast mode [ 601.772189][T10714] bridge_slave_1: entered promiscuous mode [ 601.806547][T10775] x_tables: unsorted underflow at hook 1 [ 602.185645][ T969] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 602.294441][ T3538] hsr_slave_0: left promiscuous mode [ 602.313949][ T3538] hsr_slave_1: left promiscuous mode [ 602.325968][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.341682][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.351884][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.381402][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.417150][ T969] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 602.452261][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.464475][ T969] usb 4-1: config 0 descriptor?? [ 602.479586][ T5853] Bluetooth: hci3: command tx timeout [ 602.597878][ T30] audit: type=1326 audit(6037145814.285:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 602.813867][ T30] audit: type=1326 audit(6037145814.285:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.201302][ T5853] Bluetooth: hci4: command tx timeout [ 603.238549][ T30] audit: type=1326 audit(6037145814.285:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.332201][ T30] audit: type=1326 audit(6037145814.285:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.388498][ T30] audit: type=1326 audit(6037145814.285:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.460527][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 603.468768][ T969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 603.494453][ T969] usb 4-1: USB disconnect, device number 15 [ 603.515971][ T30] audit: type=1326 audit(6037145814.285:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.574855][T10790] x_tables: unsorted underflow at hook 1 [ 603.634994][ T30] audit: type=1326 audit(6037145814.295:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.682032][ T30] audit: type=1326 audit(6037145814.295:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.740099][ T30] audit: type=1326 audit(6037145814.295:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.2.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0fd8b8d169 code=0x7ffc0000 [ 603.906679][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 604.000747][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 604.248593][T10198] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 604.410466][T10198] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 604.419811][T10198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.451616][T10198] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 604.499669][T10198] usb 4-1: config 1 has no interface number 1 [ 604.523270][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.542568][T10198] usb 4-1: string descriptor 0 read error: -22 [ 604.550016][T10198] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.559053][ T5853] Bluetooth: hci3: command tx timeout [ 604.581189][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.595484][T10198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.681967][T10198] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.698825][T10198] usb 4-1: MIDIStreaming interface descriptor not found [ 605.040480][ T5896] usb 4-1: USB disconnect, device number 16 [ 605.041512][T10714] team0: Port device team_slave_0 added [ 605.339741][ T5853] Bluetooth: hci4: command tx timeout [ 606.096638][T10714] team0: Port device team_slave_1 added [ 606.384572][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.624696][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.684706][ T5853] Bluetooth: hci3: command tx timeout [ 606.892698][T10799] udevd[10799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.239192][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.382087][ T5853] Bluetooth: hci4: command tx timeout [ 607.421998][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.447478][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.633896][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.877889][T10714] hsr_slave_0: entered promiscuous mode [ 607.903561][T10714] hsr_slave_1: entered promiscuous mode [ 607.923825][T10714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.950566][T10714] Cannot create hsr debugfs directory [ 608.069958][T10836] syz.2.937 (10836) used greatest stack depth: 18096 bytes left [ 608.661544][T10765] chnl_net:caif_netlink_parms(): no params data found [ 608.668962][ T5968] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 608.892267][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.915403][ T5968] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 608.936138][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.957644][ T5968] usb 3-1: config 0 descriptor?? [ 608.963921][T10842] loop3: detected capacity change from 0 to 32768 [ 609.217898][T10842] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 609.247351][T10842] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 609.278129][T10842] bcachefs (loop3): Version upgrade required: [ 609.278129][T10842] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 609.278129][T10842] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 609.278129][T10842] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 609.376751][T10842] bcachefs (loop3): error validating btree node at btree alloc level 0/0 [ 609.376801][T10842] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 609.376909][T10842] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 609.418749][ T5896] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 609.419558][ T5968] usbhid 3-1:0.0: can't add hid device: -71 [ 609.419730][ T5968] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.428632][ T5853] Bluetooth: hci4: command tx timeout [ 609.432239][T10842] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 609.432239][T10842] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 609.489113][ T5968] usb 3-1: USB disconnect, device number 12 [ 609.525460][T10842] bcachefs (loop3): accounting_read... done [ 609.554584][T10842] bcachefs (loop3): alloc_read... done [ 609.562968][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.572010][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.578639][T10842] bcachefs (loop3): stripes_read... done [ 609.579837][T10765] bridge_slave_0: entered allmulticast mode [ 609.584800][T10842] bcachefs (loop3): snapshots_read... done [ 609.593149][T10765] bridge_slave_0: entered promiscuous mode [ 609.608533][ T5896] usb 9-1: Using ep0 maxpacket: 16 [ 609.615260][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.633491][ T5896] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 609.636375][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.645353][T10842] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 609.654740][T10842] bcachefs (loop3): done starting filesystem [ 609.669647][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.687130][T10765] bridge_slave_1: entered allmulticast mode [ 609.695344][T10765] bridge_slave_1: entered promiscuous mode [ 609.704625][ T5896] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 609.736575][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.768544][ T5896] usb 9-1: Product: syz [ 609.788801][ T5896] usb 9-1: Manufacturer: syz [ 609.810375][ T5896] usb 9-1: SerialNumber: syz [ 609.832752][T10765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.838152][ T5896] usb 9-1: config 0 descriptor?? [ 609.872197][ T5896] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 609.882550][T10765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.891349][ T5896] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 609.977771][ T7442] bcachefs (loop3): shutting down [ 609.998080][ T3538] bridge_slave_1: left allmulticast mode [ 610.024903][ T3538] bridge_slave_1: left promiscuous mode [ 610.037104][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.139967][ T3538] bridge_slave_0: left allmulticast mode [ 610.145720][ T3538] bridge_slave_0: left promiscuous mode [ 610.172791][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.211678][ T7442] bcachefs (loop3): shutdown complete [ 610.588215][ T5896] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 610.599171][ T5896] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 611.377313][ T5896] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 611.402833][ T5896] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 612.449881][ T5896] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 612.470204][ T5896] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 612.711419][ T5896] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 612.749972][ T5896] usb 9-1: USB disconnect, device number 17 [ 613.597394][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.635917][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.922464][ T3538] bond0 (unregistering): Released all slaves [ 614.408220][T10765] team0: Port device team_slave_0 added [ 614.442054][T10765] team0: Port device team_slave_1 added [ 614.508944][T10714] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 614.602136][T10714] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 614.778560][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 614.787618][T10714] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 614.889806][T10714] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 614.932564][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.991673][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.021950][ T5852] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 615.050043][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.064243][ T3538] hsr_slave_0: left promiscuous mode [ 615.071825][ T5852] usb 5-1: config 0 descriptor?? [ 615.106288][ T3538] hsr_slave_1: left promiscuous mode [ 615.112919][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.137635][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.202955][ T5968] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 615.369299][ T5968] usb 3-1: Using ep0 maxpacket: 8 [ 615.396383][ T5968] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 615.408566][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.427872][ T5968] usb 3-1: Product: syz [ 615.437557][ T5968] usb 3-1: Manufacturer: syz [ 615.488446][ T5968] usb 3-1: SerialNumber: syz [ 615.526806][ T5968] usb 3-1: config 0 descriptor?? [ 615.533209][ T3538] veth1_vlan: left promiscuous mode [ 615.544792][ T5968] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 615.548845][ T3538] veth0_vlan: left promiscuous mode [ 616.488304][T10893] loop8: detected capacity change from 0 to 32768 [ 616.879348][T10893] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 616.908189][T10893] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 616.916636][T10893] bcachefs (loop8): Version upgrade required: [ 616.916636][T10893] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 616.916636][T10893] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 616.916636][T10893] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 617.060956][ T5852] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input10 [ 617.103824][T10893] bcachefs (loop8): error validating btree node at btree alloc level 0/0 [ 617.103856][T10893] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 617.103885][T10893] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 617.174821][ T5852] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input11 [ 617.231541][ T5852] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input12 [ 617.255262][T10893] bcachefs (loop8): btree_node_read_work: rewriting btree node at due to error [ 617.255262][T10893] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 617.281622][ T5852] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input13 [ 617.302471][ T5968] gspca_sonixj: reg_w err -71 [ 617.315672][ T5852] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 617.333882][ T5968] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 617.373994][T10893] bcachefs (loop8): accounting_read... done [ 617.386133][T10893] bcachefs (loop8): alloc_read... done [ 617.393806][ T5968] usb 3-1: USB disconnect, device number 13 [ 617.406242][ T5852] usb 5-1: USB disconnect, device number 6 [ 617.414015][T10893] bcachefs (loop8): stripes_read... done [ 617.419923][T10893] bcachefs (loop8): snapshots_read... done [ 617.435099][T10893] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean [ 617.575852][T10893] bcachefs (loop8): done starting filesystem [ 617.844602][ T7052] bcachefs (loop8): shutting down [ 617.962487][ T7052] bcachefs (loop8): shutdown complete [ 618.177463][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.961'. [ 618.192481][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.961'. [ 618.309955][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 618.362173][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 618.488756][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 618.512875][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 618.521524][ T10] usb 3-1: config 0 has no interface number 0 [ 618.528003][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 618.541104][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 618.552732][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.561289][ T10] usb 3-1: Product: syz [ 618.596489][ T10] usb 3-1: Manufacturer: syz [ 618.601585][ T10] usb 3-1: SerialNumber: syz [ 618.624247][ T10] usb 3-1: config 0 descriptor?? [ 618.634293][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 619.516713][ T10] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 619.528245][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 619.535955][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 619.584837][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 619.599885][ T10] usb 3-1: USB disconnect, device number 14 [ 620.593573][T10765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.605179][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.660777][T10765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.681510][T10765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.688797][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.715572][T10765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.760626][T10765] hsr_slave_0: entered promiscuous mode [ 620.767153][T10765] hsr_slave_1: entered promiscuous mode [ 620.789976][T10765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.806360][T10765] Cannot create hsr debugfs directory [ 620.835100][T10916] bond0: entered promiscuous mode [ 620.854513][T10916] bond_slave_0: entered promiscuous mode [ 620.888913][T10916] bond_slave_1: entered promiscuous mode [ 620.930738][T10916] bridge0: entered promiscuous mode [ 621.276753][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 621.365848][T10932] netlink: 'syz.3.967': attribute type 10 has an invalid length. [ 621.394767][T10932] bridge0: port 3(gretap0) entered disabled state [ 621.401511][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.408964][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.468168][T10932] bridge0: port 3(gretap0) entered blocking state [ 621.477272][T10932] bridge0: port 3(gretap0) entered forwarding state [ 621.484211][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.491481][T10932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.498975][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.506152][T10932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.720908][ T5852] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 622.213094][T10932] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 622.289372][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 622.326158][ T747] [ 622.329272][ T747] ============================= [ 622.334261][ T747] WARNING: suspicious RCU usage [ 622.339482][ T747] 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 Not tainted [ 622.346750][ T747] ----------------------------- [ 622.351985][ T747] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 622.361670][ T747] [ 622.361670][ T747] other info that might help us debug this: [ 622.361670][ T747] [ 622.372544][ T747] [ 622.372544][ T747] rcu_scheduler_active = 2, debug_locks = 1 [ 622.381660][ T747] 3 locks held by kworker/u8:5/747: [ 622.386908][ T747] #0: ffff888032d25148 ((wq_completion)bond0#17){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 622.398548][ T747] #1: ffffc90003437c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 622.411662][ T747] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 622.421535][ T747] [ 622.421535][ T747] stack backtrace: [ 622.427468][ T747] CPU: 1 UID: 0 PID: 747 Comm: kworker/u8:5 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 622.427503][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 622.427521][ T747] Workqueue: bond0 bond_mii_monitor [ 622.427557][ T747] Call Trace: [ 622.427566][ T747] [ 622.427575][ T747] dump_stack_lvl+0x241/0x360 [ 622.427619][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.427645][ T747] ? __pfx__printk+0x10/0x10 [ 622.427678][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.427730][ T747] lockdep_rcu_suspicious+0x226/0x340 [ 622.427765][ T747] dev_activate+0xf8/0x1240 [ 622.427804][ T747] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 622.427843][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.427882][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 622.427924][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.427963][ T747] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 622.427996][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 622.428032][ T747] ? __pfx_dev_activate+0x10/0x10 [ 622.428059][ T747] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 622.428093][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 622.428129][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.428168][ T747] ? rfc2863_policy+0x10e/0x3f0 [ 622.428219][ T747] linkwatch_do_dev+0xfb/0x170 [ 622.428259][ T747] ethtool_op_get_link+0x15/0x60 [ 622.428297][ T747] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 622.428334][ T747] bond_check_dev_link+0x1ed/0x4a0 [ 622.428364][ T747] ? __pfx_bond_check_dev_link+0x10/0x10 [ 622.428393][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.428434][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.428474][ T747] bond_mii_monitor+0x49a/0x3170 [ 622.428511][ T747] ? __lock_acquire+0x1397/0x2100 [ 622.428554][ T747] ? bond_mii_monitor+0x174/0x3170 [ 622.428583][ T747] ? do_raw_spin_unlock+0x13c/0x8b0 [ 622.428632][ T747] ? __pfx_bond_mii_monitor+0x10/0x10 [ 622.428663][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.428708][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 622.428745][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.428781][ T747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 622.428820][ T747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 622.428868][ T747] ? process_scheduled_works+0x9c6/0x18e0 [ 622.428904][ T747] process_scheduled_works+0xac0/0x18e0 [ 622.428965][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 622.429007][ T747] ? assign_work+0x364/0x3d0 [ 622.429043][ T747] worker_thread+0x870/0xd30 [ 622.429092][ T747] ? __kthread_parkme+0x169/0x1d0 [ 622.429136][ T747] ? __pfx_worker_thread+0x10/0x10 [ 622.429167][ T747] kthread+0x7ab/0x920 [ 622.429204][ T747] ? __pfx_kthread+0x10/0x10 [ 622.429243][ T747] ? __pfx_worker_thread+0x10/0x10 [ 622.429277][ T747] ? __pfx_kthread+0x10/0x10 [ 622.429314][ T747] ? __pfx_kthread+0x10/0x10 [ 622.429356][ T747] ? __pfx_kthread+0x10/0x10 [ 622.429392][ T747] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.429423][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.429462][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 622.429502][ T747] ? __pfx_kthread+0x10/0x10 [ 622.429543][ T747] ret_from_fork+0x4d/0x80 [ 622.429584][ T747] ? __pfx_kthread+0x10/0x10 [ 622.429629][ T747] ret_from_fork_asm+0x1a/0x30 [ 622.429681][ T747] [ 622.786307][ T747] [ 622.789078][ T747] ============================= [ 622.793956][ T747] WARNING: suspicious RCU usage [ 622.799069][ T747] 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 Not tainted [ 622.802333][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 622.806176][ T747] ----------------------------- [ 622.815338][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 622.820134][ T747] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 622.820159][ T747] [ 622.820159][ T747] other info that might help us debug this: [ 622.820159][ T747] [ 622.848664][ T747] [ 622.848664][ T747] rcu_scheduler_active = 2, debug_locks = 1 [ 622.856843][ T747] 3 locks held by kworker/u8:5/747: [ 622.862246][ T747] #0: ffff888032d25148 ((wq_completion)bond0#17){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 622.873772][ T747] #1: ffffc90003437c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 622.888091][ T747] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 622.898753][ T747] [ 622.898753][ T747] stack backtrace: [ 622.904749][ T747] CPU: 0 UID: 0 PID: 747 Comm: kworker/u8:5 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 622.904778][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 622.904796][ T747] Workqueue: bond0 bond_mii_monitor [ 622.904828][ T747] Call Trace: [ 622.904835][ T747] [ 622.904844][ T747] dump_stack_lvl+0x241/0x360 [ 622.904871][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.904899][ T747] ? __pfx__printk+0x10/0x10 [ 622.904935][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.904984][ T747] lockdep_rcu_suspicious+0x226/0x340 [ 622.905007][ T747] transition_one_qdisc+0x8e/0x1c0 [ 622.905039][ T747] dev_activate+0x838/0x1240 [ 622.905071][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.905113][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.905147][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 622.905176][ T747] ? __pfx_dev_activate+0x10/0x10 [ 622.905204][ T747] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 622.905236][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 622.905270][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.905300][ T747] ? rfc2863_policy+0x10e/0x3f0 [ 622.905341][ T747] linkwatch_do_dev+0xfb/0x170 [ 622.905387][ T747] ethtool_op_get_link+0x15/0x60 [ 622.905421][ T747] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 622.905446][ T747] bond_check_dev_link+0x1ed/0x4a0 [ 622.905468][ T747] ? __pfx_bond_check_dev_link+0x10/0x10 [ 622.905495][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.905542][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.905586][ T747] bond_mii_monitor+0x49a/0x3170 [ 622.905622][ T747] ? __lock_acquire+0x1397/0x2100 [ 622.905662][ T747] ? bond_mii_monitor+0x174/0x3170 [ 622.905694][ T747] ? do_raw_spin_unlock+0x13c/0x8b0 [ 622.905737][ T747] ? __pfx_bond_mii_monitor+0x10/0x10 [ 622.905769][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.905817][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 622.905854][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.905891][ T747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 622.905929][ T747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 622.905969][ T747] ? process_scheduled_works+0x9c6/0x18e0 [ 622.906004][ T747] process_scheduled_works+0xac0/0x18e0 [ 622.906070][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 622.906105][ T747] ? assign_work+0x364/0x3d0 [ 622.906134][ T747] worker_thread+0x870/0xd30 [ 622.906186][ T747] ? __kthread_parkme+0x169/0x1d0 [ 622.906230][ T747] ? __pfx_worker_thread+0x10/0x10 [ 622.906263][ T747] kthread+0x7ab/0x920 [ 622.906295][ T747] ? __pfx_kthread+0x10/0x10 [ 622.906337][ T747] ? __pfx_worker_thread+0x10/0x10 [ 622.906377][ T747] ? __pfx_kthread+0x10/0x10 [ 622.906406][ T747] ? __pfx_kthread+0x10/0x10 [ 622.906439][ T747] ? __pfx_kthread+0x10/0x10 [ 622.906476][ T747] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.906508][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.906543][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 622.906572][ T747] ? __pfx_kthread+0x10/0x10 [ 622.906608][ T747] ret_from_fork+0x4d/0x80 [ 622.906648][ T747] ? __pfx_kthread+0x10/0x10 [ 622.906689][ T747] ret_from_fork_asm+0x1a/0x30 [ 622.906740][ T747] [ 623.219741][ T747] [ 623.222272][ T747] ============================= [ 623.227161][ T747] WARNING: suspicious RCU usage [ 623.232253][ T747] 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 Not tainted [ 623.239465][ T747] ----------------------------- [ 623.244327][ T747] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage! [ 623.253584][ T747] [ 623.253584][ T747] other info that might help us debug this: [ 623.253584][ T747] [ 623.264387][ T747] [ 623.264387][ T747] rcu_scheduler_active = 2, debug_locks = 1 [ 623.265072][T10936] sctp: failed to load transform for md5: -2 [ 623.272923][ T747] 3 locks held by kworker/u8:5/747: [ 623.284358][ T747] #0: ffff888032d25148 ((wq_completion)bond0#17){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 623.296197][ T747] #1: ffffc90003437c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 623.309696][ T747] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 623.319642][ T747] [ 623.319642][ T747] stack backtrace: [ 623.325568][ T747] CPU: 1 UID: 0 PID: 747 Comm: kworker/u8:5 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 623.325598][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 623.325615][ T747] Workqueue: bond0 bond_mii_monitor [ 623.325650][ T747] Call Trace: [ 623.325658][ T747] [ 623.325668][ T747] dump_stack_lvl+0x241/0x360 [ 623.325708][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.325733][ T747] ? __pfx__printk+0x10/0x10 [ 623.325762][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.325809][ T747] lockdep_rcu_suspicious+0x226/0x340 [ 623.325837][ T747] dev_activate+0x925/0x1240 [ 623.325871][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.325908][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.325943][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 623.325980][ T747] ? __pfx_dev_activate+0x10/0x10 [ 623.326005][ T747] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 623.326034][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 623.326066][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.326099][ T747] ? rfc2863_policy+0x10e/0x3f0 [ 623.326145][ T747] linkwatch_do_dev+0xfb/0x170 [ 623.326182][ T747] ethtool_op_get_link+0x15/0x60 [ 623.326217][ T747] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 623.326245][ T747] bond_check_dev_link+0x1ed/0x4a0 [ 623.326271][ T747] ? __pfx_bond_check_dev_link+0x10/0x10 [ 623.326299][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.326339][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.326377][ T747] bond_mii_monitor+0x49a/0x3170 [ 623.326410][ T747] ? __lock_acquire+0x1397/0x2100 [ 623.326451][ T747] ? bond_mii_monitor+0x174/0x3170 [ 623.326478][ T747] ? do_raw_spin_unlock+0x13c/0x8b0 [ 623.326516][ T747] ? __pfx_bond_mii_monitor+0x10/0x10 [ 623.326543][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.326586][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 623.326620][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.326654][ T747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 623.326693][ T747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 623.326739][ T747] ? process_scheduled_works+0x9c6/0x18e0 [ 623.326772][ T747] process_scheduled_works+0xac0/0x18e0 [ 623.326828][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 623.326866][ T747] ? assign_work+0x364/0x3d0 [ 623.326899][ T747] worker_thread+0x870/0xd30 [ 623.326944][ T747] ? __kthread_parkme+0x169/0x1d0 [ 623.326984][ T747] ? __pfx_worker_thread+0x10/0x10 [ 623.327015][ T747] kthread+0x7ab/0x920 [ 623.327051][ T747] ? __pfx_kthread+0x10/0x10 [ 623.327087][ T747] ? __pfx_worker_thread+0x10/0x10 [ 623.327117][ T747] ? __pfx_kthread+0x10/0x10 [ 623.327150][ T747] ? __pfx_kthread+0x10/0x10 [ 623.327187][ T747] ? __pfx_kthread+0x10/0x10 [ 623.327220][ T747] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.327248][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.327283][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 623.327319][ T747] ? __pfx_kthread+0x10/0x10 [ 623.327354][ T747] ret_from_fork+0x4d/0x80 [ 623.327391][ T747] ? __pfx_kthread+0x10/0x10 [ 623.327426][ T747] ret_from_fork_asm+0x1a/0x30 [ 623.327471][ T747] [ 623.666962][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.677964][ T747] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 623.678363][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.697759][ T5852] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 623.707377][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.714798][ T747] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 747, name: kworker/u8:5 [ 623.724990][ T747] preempt_count: 0, expected: 0 [ 623.729501][ T5852] usb 5-1: config 0 descriptor?? [ 623.730111][ T747] RCU nest depth: 1, expected: 0 [ 623.740276][ T747] 3 locks held by kworker/u8:5/747: [ 623.746448][ T747] #0: ffff888032d25148 ((wq_completion)bond0#17){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 623.758105][ T747] #1: ffffc90003437c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 623.771360][ T747] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 623.781822][ T747] CPU: 0 UID: 0 PID: 747 Comm: kworker/u8:5 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 623.781857][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 623.781875][ T747] Workqueue: bond0 bond_mii_monitor [ 623.781912][ T747] Call Trace: [ 623.781923][ T747] [ 623.781937][ T747] dump_stack_lvl+0x241/0x360 [ 623.781977][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.782008][ T747] ? __pfx__printk+0x10/0x10 [ 623.782048][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.782098][ T747] __might_resched+0x5d4/0x780 [ 623.782135][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.782179][ T747] ? preempt_schedule_notrace+0xf6/0x140 [ 623.782221][ T747] ? __pfx___might_resched+0x10/0x10 [ 623.782258][ T747] ? __pfx___schedule+0x10/0x10 [ 623.782298][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.782343][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 623.782407][ T747] down_read+0x8e/0xa40 [ 623.782432][ T747] ? dump_stack_lvl+0x2f9/0x360 [ 623.782476][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.782519][ T747] ? preempt_schedule_notrace+0x100/0x140 [ 623.782561][ T747] ? __pfx_down_read+0x10/0x10 [ 623.782588][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.782617][ T747] ? __pfx__printk+0x10/0x10 [ 623.782652][ T747] ? dev_get_flags+0x147/0x1d0 [ 623.782712][ T747] wext_netdev_notifier_call+0x1f/0x120 [ 623.782753][ T747] notifier_call_chain+0x1a7/0x3f0 [ 623.782810][ T747] netdev_state_change+0x11f/0x1a0 [ 623.782855][ T747] ? __pfx_netdev_state_change+0x10/0x10 [ 623.782898][ T747] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 623.782938][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 623.782980][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.783025][ T747] ? rfc2863_policy+0x10e/0x3f0 [ 623.783079][ T747] linkwatch_do_dev+0x112/0x170 [ 623.783118][ T747] ethtool_op_get_link+0x15/0x60 [ 623.783156][ T747] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 623.783187][ T747] bond_check_dev_link+0x1ed/0x4a0 [ 623.783217][ T747] ? __pfx_bond_check_dev_link+0x10/0x10 [ 623.783247][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.783293][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.783336][ T747] bond_mii_monitor+0x49a/0x3170 [ 623.783376][ T747] ? __lock_acquire+0x1397/0x2100 [ 623.783422][ T747] ? bond_mii_monitor+0x174/0x3170 [ 623.783453][ T747] ? do_raw_spin_unlock+0x13c/0x8b0 [ 623.783504][ T747] ? __pfx_bond_mii_monitor+0x10/0x10 [ 623.783536][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.783585][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 623.783625][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.783663][ T747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 623.783706][ T747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 623.783759][ T747] ? process_scheduled_works+0x9c6/0x18e0 [ 623.783796][ T747] process_scheduled_works+0xac0/0x18e0 [ 623.783860][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 623.783906][ T747] ? assign_work+0x364/0x3d0 [ 623.783945][ T747] worker_thread+0x870/0xd30 [ 623.783998][ T747] ? __kthread_parkme+0x169/0x1d0 [ 623.784043][ T747] ? __pfx_worker_thread+0x10/0x10 [ 623.784079][ T747] kthread+0x7ab/0x920 [ 623.784119][ T747] ? __pfx_kthread+0x10/0x10 [ 623.784161][ T747] ? __pfx_worker_thread+0x10/0x10 [ 623.784196][ T747] ? __pfx_kthread+0x10/0x10 [ 623.784233][ T747] ? __pfx_kthread+0x10/0x10 [ 623.784276][ T747] ? __pfx_kthread+0x10/0x10 [ 623.784312][ T747] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.784345][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.784383][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 623.784423][ T747] ? __pfx_kthread+0x10/0x10 [ 623.784472][ T747] ret_from_fork+0x4d/0x80 [ 623.784512][ T747] ? __pfx_kthread+0x10/0x10 [ 623.784552][ T747] ret_from_fork_asm+0x1a/0x30 [ 623.784606][ T747] [ 623.784714][ T747] [ 624.153383][ T747] ============================= [ 624.158228][ T747] [ BUG: Invalid wait context ] [ 624.163078][ T747] 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 Tainted: G W [ 624.171658][ T747] ----------------------------- [ 624.176524][ T747] kworker/u8:5/747 is trying to lock: [ 624.181895][ T747] ffffffff8fec9910 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 624.191433][ T747] other info that might help us debug this: [ 624.197315][ T747] context-{5:5} [ 624.200766][ T747] 3 locks held by kworker/u8:5/747: [ 624.205952][ T747] #0: ffff888032d25148 ((wq_completion)bond0#17){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 624.217269][ T747] #1: ffffc90003437c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 624.230284][ T747] #2: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 624.239987][ T747] stack backtrace: [ 624.243791][ T747] CPU: 0 UID: 0 PID: 747 Comm: kworker/u8:5 Tainted: G W 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 624.243823][ T747] Tainted: [W]=WARN [ 624.243831][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 624.243848][ T747] Workqueue: bond0 bond_mii_monitor [ 624.243879][ T747] Call Trace: [ 624.243890][ T747] [ 624.243902][ T747] dump_stack_lvl+0x241/0x360 [ 624.243933][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.243956][ T747] ? __pfx__printk+0x10/0x10 [ 624.243975][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.244025][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.244065][ T747] __lock_acquire+0x15a8/0x2100 [ 624.244115][ T747] lock_acquire+0x1ed/0x550 [ 624.244147][ T747] ? wext_netdev_notifier_call+0x1f/0x120 [ 624.244182][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 624.244215][ T747] ? preempt_schedule_notrace+0xf6/0x140 [ 624.244253][ T747] ? __pfx___might_resched+0x10/0x10 [ 624.244287][ T747] ? __pfx___schedule+0x10/0x10 [ 624.244318][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.244352][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 624.244394][ T747] down_read+0xb1/0xa40 [ 624.244413][ T747] ? wext_netdev_notifier_call+0x1f/0x120 [ 624.244437][ T747] ? dump_stack_lvl+0x2f9/0x360 [ 624.244463][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.244497][ T747] ? preempt_schedule_notrace+0x100/0x140 [ 624.244529][ T747] ? __pfx_down_read+0x10/0x10 [ 624.244548][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.244572][ T747] ? __pfx__printk+0x10/0x10 [ 624.244595][ T747] ? dev_get_flags+0x147/0x1d0 [ 624.244646][ T747] wext_netdev_notifier_call+0x1f/0x120 [ 624.244674][ T747] notifier_call_chain+0x1a7/0x3f0 [ 624.244719][ T747] netdev_state_change+0x11f/0x1a0 [ 624.244756][ T747] ? __pfx_netdev_state_change+0x10/0x10 [ 624.244788][ T747] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 624.244821][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.244854][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.244888][ T747] ? rfc2863_policy+0x10e/0x3f0 [ 624.244932][ T747] linkwatch_do_dev+0x112/0x170 [ 624.244968][ T747] ethtool_op_get_link+0x15/0x60 [ 624.245007][ T747] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 624.245036][ T747] bond_check_dev_link+0x1ed/0x4a0 [ 624.245061][ T747] ? __pfx_bond_check_dev_link+0x10/0x10 [ 624.245086][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.245125][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.245162][ T747] bond_mii_monitor+0x49a/0x3170 [ 624.245192][ T747] ? __lock_acquire+0x1397/0x2100 [ 624.245227][ T747] ? bond_mii_monitor+0x174/0x3170 [ 624.245252][ T747] ? do_raw_spin_unlock+0x13c/0x8b0 [ 624.245289][ T747] ? __pfx_bond_mii_monitor+0x10/0x10 [ 624.245317][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.245355][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 624.245388][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.245425][ T747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 624.245462][ T747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 624.245501][ T747] ? process_scheduled_works+0x9c6/0x18e0 [ 624.245536][ T747] process_scheduled_works+0xac0/0x18e0 [ 624.245581][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.245618][ T747] ? assign_work+0x364/0x3d0 [ 624.245647][ T747] worker_thread+0x870/0xd30 [ 624.245687][ T747] ? __kthread_parkme+0x169/0x1d0 [ 624.245728][ T747] ? __pfx_worker_thread+0x10/0x10 [ 624.245757][ T747] kthread+0x7ab/0x920 [ 624.245793][ T747] ? __pfx_kthread+0x10/0x10 [ 624.245830][ T747] ? __pfx_worker_thread+0x10/0x10 [ 624.245862][ T747] ? __pfx_kthread+0x10/0x10 [ 624.245894][ T747] ? __pfx_kthread+0x10/0x10 [ 624.245929][ T747] ? __pfx_kthread+0x10/0x10 [ 624.245964][ T747] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.245993][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.246027][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 624.246066][ T747] ? __pfx_kthread+0x10/0x10 [ 624.246103][ T747] ret_from_fork+0x4d/0x80 [ 624.246141][ T747] ? __pfx_kthread+0x10/0x10 [ 624.246177][ T747] ret_from_fork_asm+0x1a/0x30 [ 624.246213][ T747] [ 624.647337][ T5852] usbhid 5-1:0.0: can't add hid device: -71 [ 624.653498][ T5852] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 624.659800][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.666941][ T5852] usb 5-1: USB disconnect, device number 7 [ 624.667491][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.691829][ T747] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 624.703333][ T747] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 747, name: kworker/u8:5 [ 624.713166][ T747] preempt_count: 0, expected: 0 [ 624.718270][ T747] RCU nest depth: 1, expected: 0 [ 624.723375][ T747] INFO: lockdep is turned off. [ 624.728503][ T747] CPU: 1 UID: 0 PID: 747 Comm: kworker/u8:5 Tainted: G W 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 624.728538][ T747] Tainted: [W]=WARN [ 624.728547][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 624.728564][ T747] Workqueue: bond0 bond_mii_monitor [ 624.728601][ T747] Call Trace: [ 624.728610][ T747] [ 624.728620][ T747] dump_stack_lvl+0x241/0x360 [ 624.728654][ T747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.728681][ T747] ? __pfx__printk+0x10/0x10 [ 624.728713][ T747] __might_resched+0x5d4/0x780 [ 624.728746][ T747] ? __asan_memset+0x23/0x50 [ 624.728773][ T747] ? __pfx___might_resched+0x10/0x10 [ 624.728802][ T747] ? br_get_link_ksettings+0x36d/0x420 [ 624.728833][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.728880][ T747] ? rcu_is_watching+0x15/0xb0 [ 624.728915][ T747] __mutex_lock+0x126/0x1010 [ 624.728959][ T747] ? lock_release+0xbf/0xa30 [ 624.729004][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 624.729038][ T747] ? rcu_is_watching+0x15/0xb0 [ 624.729067][ T747] ? tee_netdev_event+0x86/0x460 [ 624.729113][ T747] ? __pfx_lock_release+0x10/0x10 [ 624.729150][ T747] ? __pfx___mutex_lock+0x10/0x10 [ 624.729188][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.729242][ T747] ? do_raw_spin_lock+0x14f/0x370 [ 624.729283][ T747] ? net_generic+0x1f/0x240 [ 624.729319][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.729367][ T747] tee_netdev_event+0x86/0x460 [ 624.729404][ T747] ? nft_offload_netdev_event+0x27d/0x360 [ 624.729433][ T747] notifier_call_chain+0x1a7/0x3f0 [ 624.729480][ T747] netdev_state_change+0x11f/0x1a0 [ 624.729519][ T747] ? __pfx_netdev_state_change+0x10/0x10 [ 624.729554][ T747] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 624.729592][ T747] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.729627][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.729666][ T747] ? rfc2863_policy+0x10e/0x3f0 [ 624.729715][ T747] linkwatch_do_dev+0x112/0x170 [ 624.729757][ T747] ethtool_op_get_link+0x15/0x60 [ 624.729795][ T747] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 624.729828][ T747] bond_check_dev_link+0x1ed/0x4a0 [ 624.729858][ T747] ? __pfx_bond_check_dev_link+0x10/0x10 [ 624.729887][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.729930][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.729969][ T747] bond_mii_monitor+0x49a/0x3170 [ 624.729999][ T747] ? __lock_acquire+0x1397/0x2100 [ 624.730037][ T747] ? bond_mii_monitor+0x174/0x3170 [ 624.730063][ T747] ? do_raw_spin_unlock+0x13c/0x8b0 [ 624.730101][ T747] ? __pfx_bond_mii_monitor+0x10/0x10 [ 624.730130][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.730172][ T747] ? __pfx_lock_acquire+0x10/0x10 [ 624.730208][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.730254][ T747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 624.730292][ T747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 624.730336][ T747] ? process_scheduled_works+0x9c6/0x18e0 [ 624.730375][ T747] process_scheduled_works+0xac0/0x18e0 [ 624.730420][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.730455][ T747] ? assign_work+0x364/0x3d0 [ 624.730486][ T747] worker_thread+0x870/0xd30 [ 624.730526][ T747] ? __kthread_parkme+0x169/0x1d0 [ 624.730568][ T747] ? __pfx_worker_thread+0x10/0x10 [ 624.730600][ T747] kthread+0x7ab/0x920 [ 624.730638][ T747] ? __pfx_kthread+0x10/0x10 [ 624.730676][ T747] ? __pfx_worker_thread+0x10/0x10 [ 624.730707][ T747] ? __pfx_kthread+0x10/0x10 [ 624.730743][ T747] ? __pfx_kthread+0x10/0x10 [ 624.730782][ T747] ? __pfx_kthread+0x10/0x10 [ 624.730816][ T747] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.730846][ T747] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.730882][ T747] ? lockdep_hardirqs_on+0x99/0x150 [ 624.730920][ T747] ? __pfx_kthread+0x10/0x10 [ 624.730956][ T747] ret_from_fork+0x4d/0x80 [ 624.730994][ T747] ? __pfx_kthread+0x10/0x10 [ 624.731032][ T747] ret_from_fork_asm+0x1a/0x30 [ 624.731072][ T747] [ 625.175949][T10939] team0: entered promiscuous mode [ 625.181202][T10939] team_slave_0: entered promiscuous mode [ 625.187292][T10939] team_slave_1: entered promiscuous mode [ 625.198152][T10939] team0: left promiscuous mode [ 625.202986][T10939] team_slave_0: left promiscuous mode [ 625.208735][T10939] team_slave_1: left promiscuous mode [ 625.296066][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.342163][T10714] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.373581][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.380757][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.406118][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.413539][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.524895][T10765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.580292][T10765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 625.603436][T10765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 625.625339][T10765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 625.670985][T10714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.757082][T10765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.792052][T10765] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.814547][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.821734][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.835719][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.842862][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.963623][T10714] veth0_vlan: entered promiscuous mode [ 625.980724][T10714] veth1_vlan: entered promiscuous mode [ 626.024161][T10714] veth0_macvtap: entered promiscuous mode [ 626.041335][T10714] veth1_macvtap: entered promiscuous mode [ 626.077681][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.098487][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.112198][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.123107][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.136376][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.146912][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.158272][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.169664][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.182178][T10714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.204314][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.216104][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.227932][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.240371][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.250502][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.262305][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.272525][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.283521][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.294798][T10714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.305603][T10714] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.314802][T10714] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.324387][T10714] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.333291][T10714] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.376344][T10714] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 626.386851][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.421410][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.435344][T10714] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 626.442310][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.475063][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.483540][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.512598][T10765] veth0_vlan: entered promiscuous mode [ 626.532913][T10765] veth1_vlan: entered promiscuous mode [ 626.583182][T10765] veth0_macvtap: entered promiscuous mode [ 626.597017][T10765] veth1_macvtap: entered promiscuous mode [ 626.632393][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.648440][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.661742][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.675352][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.687465][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.698727][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.711478][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.723777][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.734629][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.745761][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.757202][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.776048][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.808461][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.828727][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.843795][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.853817][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.865577][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.877203][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.888129][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.898087][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.908674][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.920388][T10765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.960257][T10765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.969825][T10765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.984725][T10765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.994781][T10765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.037403][T10765] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 627.083572][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.094027][T10765] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 627.110328][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.147051][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.156464][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50