last executing test programs: 8m7.315477318s ago: executing program 32 (id=15): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, 0x0, 0x0) 7m23.956099535s ago: executing program 33 (id=54): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) r1 = memfd_create(&(0x7f0000000000)='\xab\xb2e\x02\x00\x00\x00\xd4\xaa\x98\x98z\xa2\x00\x00\x00\x00\x00\x00\x03A\x0e\x91nC\t\x90\xde)\xe8\x17\xdb\x18\x8a\xf1\xf7\x97N\\\x8a_\xeb\xfa\xd6D\x8aee\xc3C\xa5;?\xee\xa58\xda8;\xd0Lw\\df\t/\x17-r]\'\xf1@Lx\xd3d<\xa3\xab\xc8\xa9h\xea\xe3\x13\xb5q\x8e\rd\x8d\xf6\xd0\xc5RG\x17\a\x00\x00\x00\xe8\x00\x00\x00\xb9\xa60\xd1\x93\xa5\xb91\x96O\xde\xccHY\xa4\x0f\xc6\x15\x0f\xbae;\xa3\xd2\xe2\xf6\x8fRO\x06\xcd?\x0f\xe8\x89#y&\xce\xff#\xe2\xd9\x04X\x19\xb6|\t\xb4\xa1\x15a\x00\xf0\x87\x12sk\xc5V\xad*t1\xc5\x01\x7fg@s2\xab\x1a\x1d\x1f\a\xdc)\xafe\x1cv\x11M\a\x97\xaf\xfck\xdd\x19oj.\xbeJyo\x00H\xa5Xh5S\xc4U\xc2\xefW[\xbb6\x92\xb8\xcb\xfd\xb3\xd5\xd5*\x80\f\xcf\xda\xdb\xde{\x99\xe1\xfd\x90\xd0\r\xfc\xc5\x92\xe4\x82\x91j\xdd7\'\x18\x9c\xe3~\x91\xcd`d\x99\xdc\x9c@\xbfP\xd1\xe6\x10\xdf++\xdd[0\xbb\b\xaaX\x03\xba\xbb', 0x7) fallocate(r1, 0x3, 0x7fffffffffffdffe, 0x2) 7m11.625105867s ago: executing program 1 (id=82): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, r4, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7m7.156484793s ago: executing program 1 (id=83): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)) 7m4.502959711s ago: executing program 1 (id=87): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) 7m1.598513895s ago: executing program 1 (id=89): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200814, &(0x7f0000000080)=ANY=[], 0x1, 0x262, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unshare(0x24060400) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 7m0.523928684s ago: executing program 1 (id=93): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a, 0x2010, 0xffffffffffffffff, 0x3000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) 6m58.242297658s ago: executing program 1 (id=97): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) 6m42.408867036s ago: executing program 34 (id=97): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) 6m33.733846965s ago: executing program 0 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x10000000003, 0x2, {0x0, 0x1}, {0x3, 0xf0}, 0x1, 0xfe}, {0x2, 0x1, {0x2, 0xf0, 0x3}, {0x1, 0xff}, 0x0, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 6m32.532353645s ago: executing program 0 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr'], 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 6m29.00711167s ago: executing program 0 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 6m26.536545115s ago: executing program 0 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x14}}], 0x39, 0x2, 0x0) 6m21.048132886s ago: executing program 0 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) shutdown(r0, 0x0) 6m20.370419277s ago: executing program 0 (id=124): syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prctl$PR_MCE_KILL(0x23, 0xa, 0x7fffffffeffe) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x4008af14, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffdab, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 6m3.737105881s ago: executing program 35 (id=124): syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prctl$PR_MCE_KILL(0x23, 0xa, 0x7fffffffeffe) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x4008af14, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffdab, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 5m16.019996939s ago: executing program 4 (id=152): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000040041000000000000000002", @ANYRES32=0x0, @ANYBLOB='9\x00\x00\x00\x00%'], 0x38, 0x4048800}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m14.760146674s ago: executing program 4 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) write(r3, &(0x7f0000000480)="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", 0x131) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5m12.057129806s ago: executing program 4 (id=154): socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x8f, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x81, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xeb, {[@generic={0x8, 0xa, "09df168a00000000"}]}}, {"9b9aa28ff1a13494fc11a583c7de15c90426f4e94a6bc3cad39539ca37a2645a86a14d705599946678927fbef649b3068aded3d8c8a18d318f37b2a521575822aa9e31dde006acd85aaf3a98a0"}}}}}}, 0x0) 5m8.625852035s ago: executing program 4 (id=155): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r3, 0x3, 0xffffffffffffffff, r1) 4m56.361973496s ago: executing program 4 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, 0x0, 0xfe) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 4m43.890888111s ago: executing program 4 (id=167): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r3, 0x3, 0xffffffffffffffff, r1) 4m28.650147395s ago: executing program 36 (id=167): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r3, 0x3, 0xffffffffffffffff, r1) 3m23.204078078s ago: executing program 6 (id=238): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x18, 0x80805, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1a, 0x0, 0x0) 3m21.460868607s ago: executing program 6 (id=239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0x8000a}, 0x1c, 0x0}}], 0x1, 0x200880c0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 3m20.45965354s ago: executing program 6 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3m17.89705674s ago: executing program 6 (id=247): openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0xa0040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 3m17.411712597s ago: executing program 6 (id=248): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) socket(0x2, 0x3, 0xff) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) 3m4.170749604s ago: executing program 6 (id=254): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, 0x0, 0x4004001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0xe5f17fd, 0x7, 0x8000, 0x8, 0x1}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) 2m44.554614677s ago: executing program 37 (id=254): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, 0x0, 0x4004001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0xe5f17fd, 0x7, 0x8000, 0x8, 0x1}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) 1m35.315986456s ago: executing program 8 (id=318): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000800110300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) 1m31.296854444s ago: executing program 8 (id=323): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c8d000000000000000000000000000000000000000000000000000000000000000000000000e9ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00", 0x2000, &(0x7f0000000740)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x48c86100, 0x0, 0x0, 0x6, 0x57, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x6, 0xcbff, 0x0, {0x5, 0x6, 0x200000003, 0x6c, 0x7, 0x40000000000d, 0x3, 0xfffff2df, 0x101, 0x4000, 0xfffffffe, 0xee00, 0xffffffffffffffff, 0x10004, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 1m22.462009048s ago: executing program 8 (id=334): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40), 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40000000}}], 0x38, 0x4048800}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m20.998145595s ago: executing program 8 (id=336): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000004) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 1m20.063739805s ago: executing program 8 (id=339): socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000020b40481ed00000000000109022400010000800209040000010300030009210000000122070009058103"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x8f, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x81, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xeb, {[@generic={0x8, 0xa, "09df168a00000000"}]}}, {"9b9aa28ff1a13494fc11a583c7de15c90426f4e94a6bc3cad39539ca37a2645a86a14d705599946678927fbef649b3068aded3d8c8a18d318f37b2a521575822aa9e31dde006acd85aaf3a98a0"}}}}}}, 0x0) 1m18.738339625s ago: executing program 8 (id=342): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) socket(0x2, 0x3, 0xff) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) 1m17.28713862s ago: executing program 38 (id=342): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) socket(0x2, 0x3, 0xff) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) 31.778438136s ago: executing program 3 (id=374): ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0xc0000000, 0x107, "4023d00299447c4e5c7819d5a80ccc8f7eb7a5df0a00103b5b90f93c3a2472d4", 0xb0a, 0x23cb9dec, 0x3, 0x6, 0x6e2899f14850473f}) 31.278627049s ago: executing program 3 (id=375): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0x4, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0xffff}}}}]}, 0x78}}, 0x0) 30.720927393s ago: executing program 3 (id=376): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 30.047584769s ago: executing program 3 (id=377): r0 = syz_open_dev$I2C(0x0, 0x0, 0x149000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 28.093924176s ago: executing program 3 (id=382): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwrite64(r0, &(0x7f0000000400), 0x0, 0x9a) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x4, 0x4, 0x4, {0x1, @pix={0x2, 0x0, 0x34325842, 0x0, 0xad, 0x40002, 0x8, 0xdfc, 0x1, 0x4, 0x2, 0x2}}, 0x9}) 27.333828453s ago: executing program 3 (id=383): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40), 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40000000}}], 0x38, 0x4048800}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 23.771141251s ago: executing program 39 (id=383): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40), 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40000000}}], 0x38, 0x4048800}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19.958109355s ago: executing program 2 (id=392): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe5}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 16.161886099s ago: executing program 9 (id=396): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000480), 0x3, 0x8800) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x800000a}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x44054) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r4) creat(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11) 15.466195711s ago: executing program 2 (id=397): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x2000000000000000, 0x80000004000000, 0xffffffffffffffff], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14.730322719s ago: executing program 9 (id=398): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 14.160141198s ago: executing program 2 (id=399): socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000020b40481ed0000000000010902240001000080020904000001030003000921000000012207000905810300"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x8f, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x81, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xeb, {[@generic={0x8, 0xa, "09df168a00000000"}]}}, {"9b9aa28ff1a13494fc11a583c7de15c90426f4e94a6bc3cad39539ca37a2645a86a14d705599946678927fbef649b3068aded3d8c8a18d318f37b2a521575822aa9e31dde006acd85aaf3a98a0"}}}}}}, 0x0) 13.858968094s ago: executing program 9 (id=400): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x80000000) 12.229741412s ago: executing program 9 (id=401): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 12.037743859s ago: executing program 7 (id=402): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 11.859567297s ago: executing program 2 (id=403): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffffff8, 0x4) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) 11.317506578s ago: executing program 7 (id=404): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r4], 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) 11.117878494s ago: executing program 2 (id=405): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = io_uring_setup(0x7da, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 9.509395633s ago: executing program 5 (id=18): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') read$FUSE(r1, 0x0, 0x0) 8.88546628s ago: executing program 5 (id=406): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7, 0x6, [0x7, 0x2, 0x0, 0x0, 0x7fe, 0x8]}, 0x14) 7.886489513s ago: executing program 9 (id=407): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x2000000000000000, 0x80000004000000, 0xffffffffffffffff], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.390068252s ago: executing program 7 (id=408): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 5.890723216s ago: executing program 9 (id=409): socket(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x2000000, 0xe, 0x0, 0x0) 5.890430992s ago: executing program 7 (id=410): openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0xa0040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0) 842.964399ms ago: executing program 40 (id=409): socket(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x2000000, 0xe, 0x0, 0x0) 813.203733ms ago: executing program 7 (id=412): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 764.819779ms ago: executing program 5 (id=413): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000) 684.377832ms ago: executing program 2 (id=414): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)={0x28f6c81d26a0207, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x1, &(0x7f0000000100)={0x8, "c21c0900000000000000270000fbffff7f00000000000000000000000400"}}) 156.840896ms ago: executing program 7 (id=415): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000021c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0xff4, 0x2102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000002e50c000004000018110000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94) openat$cgroup_root(0xffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000040)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10}, 0x94) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r8 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) gettid() 0s ago: executing program 5 (id=416): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) kernel console output (not intermixed with test programs): ve_1) entered disabled state [ 352.928272][ T35] bridge_slave_0: left allmulticast mode [ 352.953237][ T35] bridge_slave_0: left promiscuous mode [ 352.975442][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.505860][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.529242][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.554179][ T35] bond0 (unregistering): Released all slaves [ 353.897328][ T6641] chnl_net:caif_netlink_parms(): no params data found [ 354.025041][ T5070] Bluetooth: hci0: command tx timeout [ 354.086512][ T6674] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 355.719651][ T35] hsr_slave_0: left promiscuous mode [ 355.737639][ T35] hsr_slave_1: left promiscuous mode [ 355.782618][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.802747][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.826425][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.845057][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.908218][ T35] veth1_macvtap: left promiscuous mode [ 355.923573][ T35] veth0_macvtap: left promiscuous mode [ 355.944205][ T35] veth1_vlan: left promiscuous mode [ 355.970329][ T35] veth0_vlan: left promiscuous mode [ 356.085143][ T5070] Bluetooth: hci0: command tx timeout [ 357.005365][ T35] team0 (unregistering): Port device team_slave_1 removed [ 357.046459][ T35] team0 (unregistering): Port device team_slave_0 removed [ 357.753799][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.763342][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.772249][ T6641] bridge_slave_0: entered allmulticast mode [ 357.782144][ T6641] bridge_slave_0: entered promiscuous mode [ 357.801322][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.810750][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.820406][ T6641] bridge_slave_1: entered allmulticast mode [ 357.830920][ T6641] bridge_slave_1: entered promiscuous mode [ 358.003871][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.032899][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.162445][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.346341][ T6641] team0: Port device team_slave_0 added [ 358.388540][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.413806][ T6641] team0: Port device team_slave_1 added [ 358.603186][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.613208][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.644095][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.657033][ T6557] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 358.692342][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.699956][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.749263][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.758759][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.792145][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.804695][ T5070] Bluetooth: hci1: command 0x0406 tx timeout [ 358.816222][ T6688] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 358.840045][ T6557] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 358.882823][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.890354][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.961624][ T6557] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 359.038726][ T6557] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 359.321750][ T6641] hsr_slave_0: entered promiscuous mode [ 359.330707][ T6641] hsr_slave_1: entered promiscuous mode [ 359.340589][ T6641] debugfs: 'hsr0' already exists in 'hsr' [ 359.347214][ T6641] Cannot create hsr debugfs directory [ 359.380886][ T35] bridge_slave_1: left allmulticast mode [ 359.392163][ T35] bridge_slave_1: left promiscuous mode [ 359.400340][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.410982][ T35] bridge_slave_0: left allmulticast mode [ 359.417036][ T35] bridge_slave_0: left promiscuous mode [ 359.423401][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.503409][ T6688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 359.534947][ T6688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.548990][ T6688] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 359.569949][ T6688] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 359.580351][ T6688] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 359.591914][ T6688] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 359.621641][ T6688] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 359.633632][ T6688] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 359.640756][ T6688] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 359.641744][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.665580][ T6688] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 359.675571][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.684077][ T6688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 359.691114][ T6688] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 359.706611][ T35] bond0 (unregistering): Released all slaves [ 359.712833][ T6688] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 359.977907][ T6550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.048865][ T35] hsr_slave_0: left promiscuous mode [ 360.067777][ T35] hsr_slave_1: left promiscuous mode [ 360.083925][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.099117][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.401568][ T35] team0 (unregistering): Port device team_slave_1 removed [ 360.466613][ T35] team0 (unregistering): Port device team_slave_0 removed [ 360.865287][ T6550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.886254][ T5070] Bluetooth: hci1: command 0x0406 tx timeout [ 360.956813][ T6550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.067268][ T6550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.605237][ T5070] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.612127][ T5070] Bluetooth: hci5: command 0x0c1a tx timeout [ 361.688726][ T5070] Bluetooth: hci6: command 0x0c1a tx timeout [ 361.765365][ T5070] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.193778][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.342088][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.436109][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.608087][ T6641] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 362.660350][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.667875][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.699305][ T6641] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 362.743813][ T6641] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 362.870655][ T6641] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 362.924006][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.931698][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.484779][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.685459][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.692113][ T5070] Bluetooth: hci5: command 0x0c1a tx timeout [ 363.742411][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.764700][ T5070] Bluetooth: hci6: command 0x0c1a tx timeout [ 363.845008][ T5070] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.024959][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.032452][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.192701][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.200336][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.532693][ T6500] veth0_vlan: entered promiscuous mode [ 364.779150][ T6500] veth1_vlan: entered promiscuous mode [ 365.185091][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.242220][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.596545][ T6500] veth0_macvtap: entered promiscuous mode [ 365.742586][ T6641] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.768244][ T5070] Bluetooth: hci5: command 0x0c1a tx timeout [ 365.774847][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.810123][ T6500] veth1_macvtap: entered promiscuous mode [ 365.850779][ T5782] Bluetooth: hci6: command 0x0c1a tx timeout [ 365.928285][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.973094][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.980706][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.206555][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.214073][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.898349][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.001207][ T6641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.546660][ T5070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.567526][ T5070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.577503][ T5070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.599277][ T5070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.614947][ T5070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.195959][ T6557] veth0_vlan: entered promiscuous mode [ 368.604672][ T6557] veth1_vlan: entered promiscuous mode [ 369.606539][ T6641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.689470][ T5782] Bluetooth: hci2: command tx timeout [ 370.232416][ T6557] veth0_macvtap: entered promiscuous mode [ 370.278770][ T6768] chnl_net:caif_netlink_parms(): no params data found [ 371.030593][ T6557] veth1_macvtap: entered promiscuous mode [ 371.765064][ T5782] Bluetooth: hci2: command tx timeout [ 371.893531][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.984123][ T6550] veth0_vlan: entered promiscuous mode [ 372.693798][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.819724][ T6220] bridge_slave_1: left allmulticast mode [ 372.838231][ T6220] bridge_slave_1: left promiscuous mode [ 372.851273][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.874933][ T6220] bridge_slave_0: left allmulticast mode [ 372.880780][ T6220] bridge_slave_0: left promiscuous mode [ 372.887615][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.370503][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.409513][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.441440][ T6220] bond0 (unregistering): Released all slaves [ 373.564284][ T6225] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.582452][ T6225] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.596736][ T6550] veth1_vlan: entered promiscuous mode [ 373.784524][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.803379][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.856607][ T5782] Bluetooth: hci2: command tx timeout [ 373.951449][ T6768] bridge_slave_0: entered allmulticast mode [ 374.872409][ T6768] bridge_slave_0: entered promiscuous mode [ 374.886824][ T6225] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.915130][ T6220] hsr_slave_0: left promiscuous mode [ 374.923311][ T6220] hsr_slave_1: left promiscuous mode [ 374.956405][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.986942][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.011629][ T6220] veth1_macvtap: left promiscuous mode [ 375.017725][ T6220] veth0_macvtap: left promiscuous mode [ 375.023548][ T6220] veth1_vlan: left promiscuous mode [ 375.030854][ T6220] veth0_vlan: left promiscuous mode [ 375.913418][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 375.928649][ T5782] Bluetooth: hci2: command tx timeout [ 375.980367][ T6220] team0 (unregistering): Port device team_slave_0 removed [ 376.514736][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.539958][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.560395][ T6768] bridge_slave_1: entered allmulticast mode [ 376.603785][ T6768] bridge_slave_1: entered promiscuous mode [ 376.632815][ T6225] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.806886][ T6641] veth0_vlan: entered promiscuous mode [ 376.834763][ T5831] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 376.867602][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.893285][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.005052][ T5831] usb 5-1: device descriptor read/64, error -71 [ 377.143538][ T6768] team0: Port device team_slave_0 added [ 377.164172][ T6768] team0: Port device team_slave_1 added [ 377.172331][ T6641] veth1_vlan: entered promiscuous mode [ 377.264635][ T5831] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 377.283840][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.291909][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.319503][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.376305][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.383818][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.410854][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.414853][ T5831] usb 5-1: device descriptor read/64, error -71 [ 377.470902][ T6550] veth0_macvtap: entered promiscuous mode [ 377.558332][ T5831] usb usb5-port1: attempt power cycle [ 377.595737][ T6550] veth1_macvtap: entered promiscuous mode [ 377.691151][ T6768] hsr_slave_0: entered promiscuous mode [ 377.702768][ T6768] hsr_slave_1: entered promiscuous mode [ 377.882556][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.926221][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 377.966655][ T5831] usb 5-1: device descriptor read/8, error -71 [ 378.039937][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.174855][ T6641] veth0_macvtap: entered promiscuous mode [ 378.203580][ T6220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.213180][ T6220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.223510][ T5831] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 378.232054][ T6220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.309058][ T5831] usb 5-1: device descriptor read/8, error -71 [ 378.349223][ T6220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.384410][ T6641] veth1_macvtap: entered promiscuous mode [ 378.426437][ T5831] usb usb5-port1: unable to enumerate USB device [ 378.763898][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.900218][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.082228][ T6225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.117967][ T6225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.151522][ T6225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.195268][ T6225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.248161][ T6768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.322263][ T2377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.337317][ T6768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.369152][ T2377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.402159][ T6768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.460604][ T6768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.716277][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.806905][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.121123][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.592881][ T6874] loop8: detected capacity change from 0 to 32768 [ 382.650398][ T6874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.156 (6874) [ 382.700569][ T6874] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.710944][ T6874] BTRFS info (device loop8): using crc32c checksum algorithm [ 382.926432][ T6874] BTRFS info (device loop8): setting nodatasum [ 382.932924][ T6874] BTRFS info (device loop8): setting nodatacow [ 382.939359][ T6874] BTRFS info (device loop8): turning on async discard [ 382.946518][ T6874] BTRFS info (device loop8): enabling free space tree [ 382.954518][ T6874] BTRFS info (device loop8): enabling auto defrag [ 382.961171][ T6874] BTRFS info (device loop8): max_inline set to 0 [ 383.108268][ T6768] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.430762][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.438386][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.522624][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.530473][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.146218][ T6557] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 387.681940][ T5070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.716863][ T5070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.728475][ T5070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.746423][ T5070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.770466][ T5070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.540280][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.558995][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.854809][ T5070] Bluetooth: hci3: command tx timeout [ 391.005693][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.090503][ T1140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.581270][ T1140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.924689][ T5070] Bluetooth: hci3: command tx timeout [ 391.961087][ T1140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.093651][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.198726][ T1140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.215239][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.766095][ T6221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.835062][ T6221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.004771][ T5070] Bluetooth: hci3: command tx timeout [ 395.171581][ T1140] bridge_slave_1: left allmulticast mode [ 395.214953][ T1140] bridge_slave_1: left promiscuous mode [ 395.286649][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.376695][ T1140] bridge_slave_0: left allmulticast mode [ 395.382547][ T1140] bridge_slave_0: left promiscuous mode [ 395.417623][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.444102][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.7.108'. [ 396.089234][ T5070] Bluetooth: hci3: command tx timeout [ 396.356439][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.409786][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.434836][ T1140] bond0 (unregistering): Released all slaves [ 397.035410][ T1140] hsr_slave_0: left promiscuous mode [ 397.081996][ T1140] hsr_slave_1: left promiscuous mode [ 397.728606][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.766216][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.747234][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.784839][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.555064][ T1140] veth1_macvtap: left promiscuous mode [ 401.560815][ T1140] veth0_macvtap: left promiscuous mode [ 402.087635][ T1140] veth1_vlan: left promiscuous mode [ 402.093200][ T1140] veth0_vlan: left promiscuous mode [ 402.944545][ T5883] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 403.137507][ T5883] usb 9-1: Using ep0 maxpacket: 16 [ 403.160525][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.194556][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.230205][ T5883] usb 9-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 403.264495][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.317080][ T5883] usb 9-1: config 0 descriptor?? [ 403.677722][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 403.766630][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 403.811168][ T5883] wacom 0003:056A:0084.0003: unbalanced delimiter at end of report description [ 403.852011][ T5883] wacom 0003:056A:0084.0003: parse failed [ 403.887391][ T5883] wacom 0003:056A:0084.0003: probe with driver wacom failed with error -22 [ 403.995798][ T5883] usb 9-1: USB disconnect, device number 2 [ 405.319925][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 405.419920][ T6768] veth0_vlan: entered promiscuous mode [ 405.467648][ T6967] loop8: detected capacity change from 0 to 2048 [ 405.529565][ T6768] veth1_vlan: entered promiscuous mode [ 405.744599][ T6967] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 405.856082][ T6967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.184890][ T6973] loop7: detected capacity change from 0 to 40427 [ 407.236674][ T6973] F2FS-fs (loop7): build fault injection rate: 771 [ 407.283552][ T6973] F2FS-fs (loop7): invalid crc value [ 407.650149][ T6973] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 407.688964][ T6973] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 408.449648][ T6768] veth0_macvtap: entered promiscuous mode [ 408.589312][ T6768] veth1_macvtap: entered promiscuous mode [ 408.882388][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.080103][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.226871][ T6220] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.270160][ T6220] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.357411][ T6982] loop8: detected capacity change from 0 to 64 [ 409.482817][ T6220] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.591135][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.850193][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.893048][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.930804][ T6913] bridge_slave_0: entered allmulticast mode [ 409.966141][ T6913] bridge_slave_0: entered promiscuous mode [ 410.038718][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.067236][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.105039][ T6913] bridge_slave_1: entered allmulticast mode [ 410.174915][ T6913] bridge_slave_1: entered promiscuous mode [ 410.285300][ T6985] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 411.886219][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.990855][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.587647][ T6913] team0: Port device team_slave_0 added [ 412.660464][ T6913] team0: Port device team_slave_1 added [ 413.035680][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.074747][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.210850][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.321000][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.367751][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.584532][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.734942][ T6994] loop7: detected capacity change from 0 to 2048 [ 413.849094][ T6994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.172341][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.7.171'. [ 416.783327][ T6913] hsr_slave_0: entered promiscuous mode [ 416.897983][ T6913] hsr_slave_1: entered promiscuous mode [ 416.936865][ T6913] debugfs: 'hsr0' already exists in 'hsr' [ 416.942757][ T6913] Cannot create hsr debugfs directory [ 417.576303][ T7013] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 420.898166][ T6913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.009158][ T6913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.138084][ T6913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.301151][ T6913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 421.760161][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.793585][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.805743][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.835778][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.874046][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.614783][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 422.784887][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 422.798438][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 422.839067][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.869008][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.908052][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.939101][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.002783][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.014203][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.235100][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.243247][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.346274][ T10] usb 9-1: GET_CAPABILITIES returned 2f [ 423.352175][ T10] usbtmc 9-1:16.0: can't read capabilities [ 423.582255][ T1096] usb 9-1: USB disconnect, device number 3 [ 423.782931][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.818578][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.924663][ T5070] Bluetooth: hci4: command tx timeout [ 423.974751][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.983007][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.132171][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.354225][ T7058] loop7: detected capacity change from 0 to 2048 [ 424.367282][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.397796][ T7058] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.609010][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.016197][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.235666][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.7.183'. [ 425.606608][ T2377] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.614179][ T2377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.005921][ T2377] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.013480][ T2377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.023553][ T5070] Bluetooth: hci4: command tx timeout [ 426.425868][ T7043] chnl_net:caif_netlink_parms(): no params data found [ 427.409685][ T7077] loop6: detected capacity change from 0 to 1024 [ 427.416862][ T1096] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 427.502312][ T7077] ext4: Unknown parameter 'smackfsdef' [ 427.607682][ T1096] usb 9-1: device descriptor read/64, error -71 [ 428.093520][ T5070] Bluetooth: hci4: command tx timeout [ 428.451542][ T1096] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 428.587923][ T7090] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 429.445753][ T1096] usb 9-1: device descriptor read/64, error -71 [ 429.588796][ T13] bridge_slave_1: left allmulticast mode [ 429.637988][ T13] bridge_slave_1: left promiscuous mode [ 429.656012][ T1096] usb usb9-port1: attempt power cycle [ 429.716988][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.800852][ T13] bridge_slave_0: left allmulticast mode [ 429.857329][ T13] bridge_slave_0: left promiscuous mode [ 429.906840][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.086574][ T1096] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 430.170574][ T5782] Bluetooth: hci4: command tx timeout [ 430.686297][ T1096] usb 9-1: device descriptor read/8, error -71 [ 431.599020][ T7101] loop6: detected capacity change from 0 to 4096 [ 431.644784][ T7101] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 431.702676][ T7101] ntfs3(loop6): ino=3, mi_enum_attr [ 432.430383][ T7101] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 432.766458][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.956072][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.072955][ T13] bond0 (unregistering): Released all slaves [ 433.572873][ T6913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.676673][ T6913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.431737][ T7108] loop6: detected capacity change from 0 to 4096 [ 434.495891][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.540356][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.564544][ T7108] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 434.605064][ T7043] bridge_slave_0: entered allmulticast mode [ 434.633348][ T7043] bridge_slave_0: entered promiscuous mode [ 435.193955][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.234964][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.242667][ T7043] bridge_slave_1: entered allmulticast mode [ 435.314964][ T7043] bridge_slave_1: entered promiscuous mode [ 436.359189][ T13] hsr_slave_0: left promiscuous mode [ 436.457485][ T13] hsr_slave_1: left promiscuous mode [ 436.597815][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.195'. [ 436.814122][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.879400][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.027854][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.094439][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.391615][ T13] veth1_macvtap: left promiscuous mode [ 437.479073][ T13] veth0_macvtap: left promiscuous mode [ 437.514362][ T13] veth1_vlan: left promiscuous mode [ 437.615806][ T13] veth0_vlan: left promiscuous mode [ 437.986697][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 438.201230][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 438.295532][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.397162][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.476578][ T9] usb 9-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 438.512985][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.583837][ T9] usb 9-1: config 0 descriptor?? [ 438.685603][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 438.869890][ T9] usb 9-1: USB disconnect, device number 8 [ 438.945692][ T13] pimreg (unregistering): left allmulticast mode [ 439.806658][ T13] team0 (unregistering): Port device team_slave_1 removed [ 439.960676][ T13] team0 (unregistering): Port device team_slave_0 removed [ 440.709365][ T5883] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 443.791759][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.453518][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.496944][ T5883] usb 9-1: unable to read config index 0 descriptor/all [ 444.504540][ T5883] usb 9-1: can't read configurations, error -71 [ 445.045987][ T7043] team0: Port device team_slave_0 added [ 445.123390][ T7043] team0: Port device team_slave_1 added [ 445.306687][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.321322][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.384618][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.445500][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.452621][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.577843][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.641574][ T7170] loop6: detected capacity change from 0 to 512 [ 445.649858][ T7171] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 445.712200][ T7170] EXT4-fs: Ignoring removed oldalloc option [ 445.955454][ T7170] EXT4-fs (loop6): 1 truncate cleaned up [ 446.067409][ T7170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.740327][ T7043] hsr_slave_0: entered promiscuous mode [ 447.846531][ T7043] hsr_slave_1: entered promiscuous mode [ 447.908253][ T7043] debugfs: 'hsr0' already exists in 'hsr' [ 447.944712][ T7043] Cannot create hsr debugfs directory [ 448.117113][ T5070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.136473][ T5070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.150063][ T5070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.159883][ T7179] loop8: detected capacity change from 0 to 4096 [ 448.206608][ T5070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.219866][ T5070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.255538][ T7179] NILFS: invalid option "cp=1": read-only option is not specified [ 449.729898][ T6768] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.873204][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.884847][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.334450][ T5782] Bluetooth: hci1: command tx timeout [ 450.340946][ T7201] kAFS: unable to lookup cell 'syz1' [ 450.381664][ T7201] loop6: detected capacity change from 0 to 512 [ 450.508643][ T7201] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.208: invalid indirect mapped block 256 (level 2) [ 450.569635][ T7193] loop7: detected capacity change from 0 to 32768 [ 450.587867][ T7193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.206 (7193) [ 450.606236][ T7201] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.614450][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 450.630628][ C1] EXT4-fs (loop6): initial error at time 1771176606: ext4_free_branches:1023: inode 11 [ 450.640670][ C1] EXT4-fs (loop6): last error at time 1771176606: ext4_free_branches:1023: inode 11 [ 450.680494][ T7201] EXT4-fs (loop6): 2 truncates cleaned up [ 450.700800][ T7193] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 450.747009][ T7201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.783976][ T7193] BTRFS info (device loop7): using sha256 checksum algorithm [ 451.177542][ T6768] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.216466][ T7193] BTRFS info (device loop7): enabling ssd optimizations [ 451.269722][ T7193] BTRFS info (device loop7): turning on async discard [ 451.305181][ T7193] BTRFS info (device loop7): enabling free space tree [ 451.360994][ T7043] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 451.448648][ T7043] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 451.630535][ T6641] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 451.732658][ T7043] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 451.994619][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 452.203631][ T7043] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 452.214765][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 452.236082][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.257760][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.390084][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 452.406259][ T5782] Bluetooth: hci1: command tx timeout [ 452.929276][ T9] usb 7-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 452.954541][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.974186][ T9] usb 7-1: config 0 descriptor?? [ 453.359435][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 454.605033][ T5782] Bluetooth: hci1: command tx timeout [ 455.287125][ T1096] usb 7-1: USB disconnect, device number 2 [ 455.865067][ T6220] bridge_slave_1: left allmulticast mode [ 455.966265][ T6220] bridge_slave_1: left promiscuous mode [ 456.005534][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.162688][ T6220] bridge_slave_0: left allmulticast mode [ 456.214466][ T6220] bridge_slave_0: left promiscuous mode [ 456.236102][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.745271][ T5782] Bluetooth: hci1: command tx timeout [ 459.076447][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.496136][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.647140][ T6220] bond0 (unregistering): Released all slaves [ 468.841495][ T6220] hsr_slave_0: left promiscuous mode [ 468.871423][ T7273] loop8: detected capacity change from 0 to 128 [ 468.886008][ T6220] hsr_slave_1: left promiscuous mode [ 468.908045][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.977901][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.016713][ T7273] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.084967][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 469.121004][ T7273] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 469.386770][ T7275] loop6: detected capacity change from 0 to 4096 [ 469.881865][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 469.897633][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.908815][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.896033][ T9] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 470.924456][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.417196][ T9] usb 8-1: config 0 descriptor?? [ 471.563800][ T6557] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.582122][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 471.724469][ T29] audit: type=1800 audit(1771176627.383:2): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.222" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 472.234684][ T5402] usb 8-1: USB disconnect, device number 2 [ 472.795009][ T5402] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 472.859774][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 472.979956][ T5402] usb 8-1: config 0 has an invalid interface number: 11 but max is 0 [ 472.981069][ T6220] team0 (unregistering): Port device team_slave_0 removed [ 472.994656][ T5402] usb 8-1: config 0 has no interface number 0 [ 473.024587][ T5402] usb 8-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 473.050577][ T5402] usb 8-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 473.082924][ T5402] usb 8-1: config 0 interface 11 has no altsetting 0 [ 473.097113][ T5402] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 473.127605][ T5402] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.181903][ T5402] usb 8-1: config 0 descriptor?? [ 473.197977][ T7284] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 473.215174][ T7284] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 473.251160][ T5402] keyspan 8-1:0.11: Keyspan 2 port adapter converter detected [ 473.290441][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 81 [ 473.312144][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 82 [ 473.322731][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 1 [ 473.332222][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 2 [ 473.343335][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 85 [ 473.358374][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 5 [ 473.402081][ T5402] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 473.462340][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 83 [ 473.480356][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 84 [ 473.536765][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 3 [ 473.556711][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 4 [ 473.570508][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 86 [ 473.641273][ T5402] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 6 [ 473.698440][ T5402] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 473.808467][ T5402] usb 8-1: USB disconnect, device number 3 [ 473.885630][ T5402] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 473.951939][ T5402] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 474.110802][ T5402] keyspan 8-1:0.11: device disconnected [ 474.550454][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.933309][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.965363][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.973035][ T7189] bridge_slave_0: entered allmulticast mode [ 475.037751][ T7189] bridge_slave_0: entered promiscuous mode [ 475.185836][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.193377][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.243736][ T7189] bridge_slave_1: entered allmulticast mode [ 475.277759][ T7189] bridge_slave_1: entered promiscuous mode [ 476.555603][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.639958][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.819793][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.824846][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.832606][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.293025][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.300807][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.962969][ T7189] team0: Port device team_slave_0 added [ 480.326829][ T5782] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 480.356795][ T7189] team0: Port device team_slave_1 added [ 481.409428][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.465212][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.605868][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.665019][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.672503][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.715345][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 481.834772][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.936614][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 482.357291][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 482.496463][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 482.657459][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.873585][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.218760][ T5070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 483.229427][ T5070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 483.246864][ T5070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 483.247334][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.259955][ T5070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 483.275271][ T5070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 483.322630][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.383921][ T9] usb 8-1: Product: syz [ 483.414743][ T9] usb 8-1: Manufacturer: syz [ 483.445817][ T9] usb 8-1: SerialNumber: syz [ 483.604678][ T1096] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 483.699709][ T7189] hsr_slave_0: entered promiscuous mode [ 483.776588][ T7189] hsr_slave_1: entered promiscuous mode [ 483.799490][ T1096] usb 7-1: Using ep0 maxpacket: 32 [ 483.829959][ T7189] debugfs: 'hsr0' already exists in 'hsr' [ 483.876890][ T7189] Cannot create hsr debugfs directory [ 483.877261][ T1096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 483.916337][ T1096] usb 7-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 483.981858][ T1096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.037890][ T1096] usb 7-1: config 0 descriptor?? [ 484.336014][ T1096] usbhid 7-1:0.0: can't add hid device: -71 [ 484.356087][ T1096] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 484.373232][ T9] usb 8-1: USB disconnect, device number 4 [ 484.420146][ T1096] usb 7-1: USB disconnect, device number 3 [ 484.687741][ T6959] udevd[6959]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.446832][ T5070] Bluetooth: hci3: command tx timeout [ 487.524731][ T5070] Bluetooth: hci3: command tx timeout [ 489.503722][ T7371] syzkaller0: entered promiscuous mode [ 489.578933][ T7371] syzkaller0: entered allmulticast mode [ 489.604441][ T5070] Bluetooth: hci3: command tx timeout [ 490.996728][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 491.244702][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 491.316217][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 491.431482][ T9] usb 9-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 491.574087][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.704618][ T5781] Bluetooth: hci3: command tx timeout [ 491.787023][ T9] usb 9-1: config 0 descriptor?? [ 495.966559][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 498.542462][ T5778] Bluetooth: hci3: command 0x0405 tx timeout [ 500.730587][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 500.760075][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 500.885744][ T9] usb 9-1: USB disconnect, device number 11 [ 501.193665][ T13] bridge_slave_1: left allmulticast mode [ 501.264663][ T13] bridge_slave_1: left promiscuous mode [ 501.271521][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.746659][ T7423] 9p: Bad value for 'rfdno' [ 502.796156][ T13] bridge_slave_0: left allmulticast mode [ 503.814677][ T13] bridge_slave_0: left promiscuous mode [ 503.821381][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.344628][ T10] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 504.477015][ T7431] loop7: detected capacity change from 0 to 2048 [ 504.535762][ T7431] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.943317][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.006703][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.055419][ T13] bond0 (unregistering): Released all slaves [ 505.097767][ T7333] chnl_net:caif_netlink_parms(): no params data found [ 505.191691][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.210641][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.228170][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 505.248484][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.263233][ T7433] netlink: 20 bytes leftover after parsing attributes in process `syz.7.253'. [ 505.578467][ T10] usb 9-1: usb_control_msg returned -32 [ 505.600893][ T10] usbtmc 9-1:16.0: can't read capabilities [ 505.872848][ T13] hsr_slave_0: left promiscuous mode [ 505.932232][ T13] hsr_slave_1: left promiscuous mode [ 505.957710][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.018527][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.032507][ T13] team0 (unregistering): Port device team_slave_1 removed [ 507.068462][ T13] team0 (unregistering): Port device team_slave_0 removed [ 507.220670][ T1096] usb 9-1: USB disconnect, device number 12 [ 509.488308][ T7189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.312104][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.324596][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.208309][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.223426][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.245393][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.264186][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.325207][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.545332][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.258'. [ 514.384861][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.414040][ T5778] Bluetooth: hci4: command tx timeout [ 514.482871][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.560468][ T7333] bridge_slave_0: entered allmulticast mode [ 514.816388][ T7333] bridge_slave_0: entered promiscuous mode [ 515.589689][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.601060][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.621716][ T7333] bridge_slave_1: entered allmulticast mode [ 516.492070][ T5778] Bluetooth: hci4: command tx timeout [ 516.587333][ T7333] bridge_slave_1: entered promiscuous mode [ 517.697784][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.706737][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.335209][ T5778] Bluetooth: hci4: command tx timeout [ 522.044841][ T5782] Bluetooth: hci4: command 0x0419 tx timeout [ 523.996484][ T7333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.238186][ T7333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.773771][ T7333] team0: Port device team_slave_0 added [ 524.841822][ T7333] team0: Port device team_slave_1 added [ 525.030580][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.064821][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.142853][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.157755][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.179481][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.195827][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.196173][ T7333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.219448][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 525.331409][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.353263][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.380901][ T7333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.481222][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 525.685186][ T5778] Bluetooth: hci4: command 0x0419 tx timeout [ 526.086209][ T6222] bridge_slave_1: left allmulticast mode [ 526.109474][ T6222] bridge_slave_1: left promiscuous mode [ 526.120470][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.149077][ T6222] bridge_slave_0: left allmulticast mode [ 526.159909][ T6222] bridge_slave_0: left promiscuous mode [ 526.214525][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.713803][ T6222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.763881][ T6222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.796376][ T6222] bond0 (unregistering): Released all slaves [ 527.242418][ T7333] hsr_slave_0: entered promiscuous mode [ 527.278928][ T7333] hsr_slave_1: entered promiscuous mode [ 527.285014][ T5778] Bluetooth: hci1: command tx timeout [ 527.313650][ T7333] debugfs: 'hsr0' already exists in 'hsr' [ 527.320218][ T7333] Cannot create hsr debugfs directory [ 527.525548][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.535384][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.663651][ T7532] netlink: 'syz.7.269': attribute type 2 has an invalid length. [ 527.672143][ T7532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.269'. [ 527.693430][ T7532] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 527.800262][ T6222] hsr_slave_0: left promiscuous mode [ 527.832848][ T6222] hsr_slave_1: left promiscuous mode [ 527.856713][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.896746][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.356379][ T6222] team0 (unregistering): Port device team_slave_1 removed [ 528.418352][ T6222] team0 (unregistering): Port device team_slave_0 removed [ 529.374945][ T5778] Bluetooth: hci1: command tx timeout [ 531.444626][ T5778] Bluetooth: hci1: command tx timeout [ 531.479255][ T6222] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.806848][ T6222] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.875488][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.882960][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.924928][ T7445] bridge_slave_0: entered allmulticast mode [ 531.947564][ T7445] bridge_slave_0: entered promiscuous mode [ 531.997886][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.027319][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.054827][ T7445] bridge_slave_1: entered allmulticast mode [ 532.094996][ T7445] bridge_slave_1: entered promiscuous mode [ 532.437203][ T6222] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.560160][ T5782] Bluetooth: hci1: command tx timeout [ 535.605034][ T5782] Bluetooth: hci1: command 0x0405 tx timeout [ 535.782600][ T6222] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.912495][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.012518][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 536.160025][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.743830][ T7445] team0: Port device team_slave_0 added [ 536.807252][ T7445] team0: Port device team_slave_1 added [ 536.995378][ T7582] random: crng reseeded on system resumption [ 537.366218][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.373505][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.426215][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.489595][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.504509][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.578507][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.006430][ T6222] bridge_slave_1: left allmulticast mode [ 538.012266][ T6222] bridge_slave_1: left promiscuous mode [ 538.021037][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.040724][ T6222] bridge_slave_0: left allmulticast mode [ 538.046946][ T6222] bridge_slave_0: left promiscuous mode [ 538.053916][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.571786][ T6222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.593091][ T6222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.623338][ T6222] bond0 (unregistering): Released all slaves [ 538.685664][ T7445] hsr_slave_0: entered promiscuous mode [ 538.699469][ T7445] hsr_slave_1: entered promiscuous mode [ 538.722123][ T7445] debugfs: 'hsr0' already exists in 'hsr' [ 538.754735][ T7445] Cannot create hsr debugfs directory [ 538.837826][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.846661][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.872156][ T7514] bridge_slave_0: entered allmulticast mode [ 538.897800][ T7514] bridge_slave_0: entered promiscuous mode [ 539.663918][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.671753][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.681099][ T7514] bridge_slave_1: entered allmulticast mode [ 539.719887][ T7514] bridge_slave_1: entered promiscuous mode [ 540.627036][ T6222] hsr_slave_0: left promiscuous mode [ 540.643778][ T6222] hsr_slave_1: left promiscuous mode [ 540.680353][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.693228][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.708658][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.720997][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.781178][ T6222] veth1_macvtap: left promiscuous mode [ 540.792550][ T6222] veth0_macvtap: left promiscuous mode [ 540.813910][ T6222] veth1_vlan: left promiscuous mode [ 540.839767][ T6222] veth0_vlan: left promiscuous mode [ 541.991780][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.004146][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.013245][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.031516][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.043349][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.193885][ T6222] team0 (unregistering): Port device team_slave_1 removed [ 542.255359][ T6222] team0 (unregistering): Port device team_slave_0 removed [ 542.339026][ T7612] netlink: 140 bytes leftover after parsing attributes in process `syz.8.281'. [ 542.364790][ T7612] netlink: 36 bytes leftover after parsing attributes in process `syz.8.281'. [ 542.959947][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.018371][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.412400][ T7514] team0: Port device team_slave_0 added [ 543.468750][ T7514] team0: Port device team_slave_1 added [ 543.839807][ T29] audit: type=1326 audit(1771176699.473:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 543.926485][ T29] audit: type=1326 audit(1771176699.513:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 544.044722][ T29] audit: type=1326 audit(1771176699.553:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3815c84e code=0x7ffc0000 [ 544.101033][ T5782] Bluetooth: hci2: command tx timeout [ 544.124715][ T29] audit: type=1326 audit(1771176699.553:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3815c84e code=0x7ffc0000 [ 544.156744][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.164030][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.191209][ T29] audit: type=1326 audit(1771176699.553:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 544.213928][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.242962][ T29] audit: type=1326 audit(1771176699.553:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 544.278101][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.295035][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.321907][ T29] audit: type=1326 audit(1771176699.603:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 544.374111][ T29] audit: type=1326 audit(1771176699.603:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 544.398838][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.418338][ T29] audit: type=1326 audit(1771176699.603:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 544.519762][ T29] audit: type=1326 audit(1771176699.643:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2d3819bf79 code=0x7ffc0000 [ 545.110229][ T7514] hsr_slave_0: entered promiscuous mode [ 545.121440][ T7514] hsr_slave_1: entered promiscuous mode [ 545.723209][ T7445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 545.804140][ T7445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 546.060353][ T7445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.464438][ T5782] Bluetooth: hci2: command tx timeout [ 549.754637][ T5778] Bluetooth: hci2: command 0x040f tx timeout [ 551.769133][ T5778] Bluetooth: hci2: command 0x040f tx timeout [ 551.910972][ T7445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 552.552584][ T7609] chnl_net:caif_netlink_parms(): no params data found [ 552.862112][ T7633] loop7: detected capacity change from 0 to 2048 [ 552.962298][ T7633] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 553.059521][ T7633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.899538][ T5782] Bluetooth: hci2: command 0x040f tx timeout [ 555.924569][ T5782] Bluetooth: hci2: command 0x040f tx timeout [ 557.556094][ T81] bridge_slave_1: left allmulticast mode [ 557.561949][ T81] bridge_slave_1: left promiscuous mode [ 557.571188][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.583485][ T81] bridge_slave_0: left allmulticast mode [ 557.589624][ T81] bridge_slave_0: left promiscuous mode [ 557.605848][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.634778][ T5883] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 557.834579][ T5883] usb 9-1: Using ep0 maxpacket: 32 [ 557.870516][ T5883] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.909314][ T5883] usb 9-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 557.941744][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.959181][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.991869][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.016992][ T81] bond0 (unregistering): Released all slaves [ 558.065926][ T5883] usb 9-1: config 0 descriptor?? [ 558.091224][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.143964][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.159110][ T5883] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 558.198113][ T7609] bridge_slave_0: entered allmulticast mode [ 558.239396][ T7609] bridge_slave_0: entered promiscuous mode [ 558.362991][ T5883] usb 9-1: USB disconnect, device number 13 [ 558.407170][ T81] hsr_slave_0: left promiscuous mode [ 558.447445][ T81] hsr_slave_1: left promiscuous mode [ 558.479175][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.506278][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.986643][ T81] team0 (unregistering): Port device team_slave_1 removed [ 559.028216][ T81] team0 (unregistering): Port device team_slave_0 removed [ 559.286283][ T7653] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 559.388313][ T7655] kAFS: No cell specified [ 560.117573][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.125384][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.133333][ T7609] bridge_slave_1: entered allmulticast mode [ 560.143559][ T7609] bridge_slave_1: entered promiscuous mode [ 560.329231][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.420838][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.114134][ T7609] team0: Port device team_slave_0 added [ 561.181468][ T7609] team0: Port device team_slave_1 added [ 561.684946][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.692563][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.725347][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.755680][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.763382][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.834929][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.478608][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.625428][ T7609] hsr_slave_0: entered promiscuous mode [ 562.647558][ T7609] hsr_slave_1: entered promiscuous mode [ 562.666311][ T7609] debugfs: 'hsr0' already exists in 'hsr' [ 562.672282][ T7609] Cannot create hsr debugfs directory [ 562.952904][ T7514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 563.111467][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.153849][ T7514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 563.341905][ T7514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 563.393143][ T7514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 563.642915][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.650500][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.828689][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.836195][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.847100][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.985917][ T5831] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 568.004658][ T7609] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 568.079116][ T7609] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 568.126037][ T7609] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 568.164673][ T5831] usb 9-1: Using ep0 maxpacket: 32 [ 568.196070][ T5831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.214440][ T5831] usb 9-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 568.223570][ T7609] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 568.223937][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.298221][ T5831] usb 9-1: config 0 descriptor?? [ 568.331696][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.398407][ T5831] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 568.483500][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.491090][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.613454][ T6781] usb 9-1: USB disconnect, device number 14 [ 568.771176][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.778795][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.536047][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 569.545754][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 569.555955][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 569.573163][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.595042][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.324574][ T7695] kAFS: No cell specified [ 571.657636][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.687002][ T5782] Bluetooth: hci3: command tx timeout [ 572.807391][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.837388][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.137439][ T7609] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.764561][ T5782] Bluetooth: hci3: command 0x041b tx timeout [ 574.581897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.589469][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.728394][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.787354][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.794831][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.833834][ T7687] chnl_net:caif_netlink_parms(): no params data found [ 575.560719][ T35] bridge_slave_1: left allmulticast mode [ 575.575821][ T35] bridge_slave_1: left promiscuous mode [ 575.594021][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.635915][ T35] bridge_slave_0: left allmulticast mode [ 575.641791][ T35] bridge_slave_0: left promiscuous mode [ 575.666983][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.860043][ T5778] Bluetooth: hci3: command 0x041b tx timeout [ 576.362262][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.545210][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.580394][ T35] bond0 (unregistering): Released all slaves [ 577.077437][ T35] hsr_slave_0: left promiscuous mode [ 577.127972][ T35] hsr_slave_1: left promiscuous mode [ 577.150129][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.172327][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.987543][ T5778] Bluetooth: hci3: command 0x041b tx timeout [ 578.816096][ T35] team0 (unregistering): Port device team_slave_1 removed [ 578.978026][ T7741] kAFS: No cell specified [ 579.028010][ T35] team0 (unregistering): Port device team_slave_0 removed [ 580.004592][ T5782] Bluetooth: hci3: command 0x041b tx timeout [ 580.460445][ T7514] veth0_vlan: entered promiscuous mode [ 580.824864][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.855297][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.876144][ T7687] bridge_slave_0: entered allmulticast mode [ 580.898598][ T7687] bridge_slave_0: entered promiscuous mode [ 580.932410][ T7514] veth1_vlan: entered promiscuous mode [ 580.999110][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.035632][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.043312][ T7687] bridge_slave_1: entered allmulticast mode [ 581.113226][ T7687] bridge_slave_1: entered promiscuous mode [ 581.339662][ T7687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.455916][ T7687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.740441][ T7687] team0: Port device team_slave_0 added [ 581.842420][ T7687] team0: Port device team_slave_1 added [ 582.446362][ T5782] Bluetooth: hci3: command 0x041b tx timeout [ 582.483419][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.016617][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.023734][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.176637][ T7687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.259500][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.328865][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.376511][ T7687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.507128][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.7.315'. [ 585.115506][ T7687] hsr_slave_0: entered promiscuous mode [ 585.146202][ T7687] hsr_slave_1: entered promiscuous mode [ 585.183935][ T7687] debugfs: 'hsr0' already exists in 'hsr' [ 585.215211][ T7687] Cannot create hsr debugfs directory [ 585.816077][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.830164][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.859435][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.895818][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.928061][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.801353][ T7609] veth0_vlan: entered promiscuous mode [ 587.960854][ T7609] veth1_vlan: entered promiscuous mode [ 588.014539][ T5782] Bluetooth: hci4: command tx timeout [ 588.867307][ T7774] loop8: detected capacity change from 0 to 2048 [ 588.924434][ T7774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 589.351124][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.8.316'. [ 589.715851][ T7687] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 589.806429][ T7609] veth0_macvtap: entered promiscuous mode [ 590.899236][ T5782] Bluetooth: hci4: command tx timeout [ 593.066200][ T5782] Bluetooth: hci4: command tx timeout [ 593.141060][ T7687] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 593.191107][ T7687] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 593.261314][ T7687] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 593.375615][ T7609] veth1_macvtap: entered promiscuous mode [ 593.997769][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 594.272800][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.641649][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.740195][ T2377] bridge_slave_1: left allmulticast mode [ 594.774398][ T2377] bridge_slave_1: left promiscuous mode [ 594.780911][ T2377] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.833249][ T2377] bridge_slave_0: left allmulticast mode [ 594.857679][ T2377] bridge_slave_0: left promiscuous mode [ 594.864382][ T2377] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.138222][ T5782] Bluetooth: hci4: command tx timeout [ 595.505871][ T2377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.560424][ T2377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.619938][ T2377] bond0 (unregistering): Released all slaves [ 595.768119][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.828668][ T6225] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.906562][ T6225] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.027264][ T2377] hsr_slave_0: left promiscuous mode [ 596.047234][ T2377] hsr_slave_1: left promiscuous mode [ 596.081643][ T2377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.106769][ T2377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.130904][ T2377] veth1_vlan: left promiscuous mode [ 596.136586][ T5883] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 596.150819][ T2377] veth0_vlan: left promiscuous mode [ 596.327997][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 596.342783][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.375940][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.388104][ T5883] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 596.418014][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.439488][ T5883] usb 8-1: config 0 descriptor?? [ 596.710704][ T5883] usbhid 8-1:0.0: can't add hid device: -71 [ 596.718054][ T5883] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 596.740284][ T5883] usb 8-1: USB disconnect, device number 5 [ 597.001343][ T7796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.008820][ T7796] IPv6: NLM_F_CREATE should be set when creating new route [ 597.016432][ T7796] IPv6: NLM_F_CREATE should be set when creating new route [ 597.023875][ T7796] IPv6: NLM_F_CREATE should be set when creating new route [ 597.186237][ T2377] team0 (unregistering): Port device team_slave_1 removed [ 597.242295][ T2377] team0 (unregistering): Port device team_slave_0 removed [ 597.808637][ T6225] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.856179][ T7803] loop7: detected capacity change from 0 to 2048 [ 597.898765][ T7803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.330583][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.7.324'. [ 599.265699][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.284944][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.303481][ T7769] bridge_slave_0: entered allmulticast mode [ 599.335563][ T7769] bridge_slave_0: entered promiscuous mode [ 599.379692][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.405306][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.464569][ T7769] bridge_slave_1: entered allmulticast mode [ 599.512395][ T7769] bridge_slave_1: entered promiscuous mode [ 599.913245][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.012670][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.361998][ T7769] team0: Port device team_slave_0 added [ 600.401346][ T7769] team0: Port device team_slave_1 added [ 600.638411][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.674678][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.752202][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.842957][ T7687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.939118][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.966698][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.050274][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.329880][ T7687] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.607030][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.614679][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.720253][ T7769] hsr_slave_0: entered promiscuous mode [ 601.768495][ T7769] hsr_slave_1: entered promiscuous mode [ 601.932549][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.940143][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.081100][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 603.113288][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 603.126086][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 603.151005][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 603.169093][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 603.535849][ T5883] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 603.725554][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 603.789179][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.834670][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.871642][ T5883] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 603.891946][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.955666][ T5883] usb 8-1: config 0 descriptor?? [ 604.283541][ T5883] usbhid 8-1:0.0: can't add hid device: -71 [ 604.296070][ T5883] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 604.375639][ T5883] usb 8-1: USB disconnect, device number 6 [ 605.204579][ T5782] Bluetooth: hci1: command tx timeout [ 606.242491][ T1140] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.460994][ T1140] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.493336][ T7687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.602878][ T7832] chnl_net:caif_netlink_parms(): no params data found [ 606.701356][ T7769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 606.791172][ T1140] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.012164][ T1140] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.108397][ T7769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 607.285402][ T5782] Bluetooth: hci1: command tx timeout [ 607.304477][ T7769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 607.386290][ T7769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 608.215987][ T1140] bridge_slave_1: left allmulticast mode [ 608.221825][ T1140] bridge_slave_1: left promiscuous mode [ 608.265619][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.332075][ T1140] bridge_slave_0: left allmulticast mode [ 608.345134][ T1140] bridge_slave_0: left promiscuous mode [ 608.351768][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.181238][ T7899] kvm: pic: non byte write [ 609.232509][ T7899] kvm: pic: non byte write [ 609.238772][ T7899] kvm: pic: non byte write [ 609.243433][ T7899] kvm: pic: non byte write [ 609.249493][ T7899] kvm: pic: non byte write [ 609.264138][ T7899] kvm: pic: non byte write [ 609.283235][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.314632][ T7899] kvm: pic: non byte write [ 609.319344][ T7899] kvm: pic: non byte write [ 609.324004][ T7899] kvm: pic: non byte write [ 609.331609][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.331744][ T7899] kvm: pic: non byte write [ 609.365078][ T5782] Bluetooth: hci1: command tx timeout [ 609.366466][ T1140] bond0 (unregistering): Released all slaves [ 609.716946][ T1140] hsr_slave_0: left promiscuous mode [ 609.758282][ T1140] hsr_slave_1: left promiscuous mode [ 609.772866][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.794946][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.827329][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.842265][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.907587][ T1140] veth1_macvtap: left promiscuous mode [ 609.913311][ T1140] veth0_macvtap: left promiscuous mode [ 609.970004][ T1140] veth1_vlan: left promiscuous mode [ 609.991556][ T1140] veth0_vlan: left promiscuous mode [ 611.187831][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 611.266585][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 611.444921][ T5782] Bluetooth: hci1: command tx timeout [ 611.953583][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.971707][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.999836][ T7832] bridge_slave_0: entered allmulticast mode [ 612.010758][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 612.020241][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 612.020640][ T7832] bridge_slave_0: entered promiscuous mode [ 612.040109][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 612.069706][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 612.079898][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 612.229421][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.241232][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.264774][ T7832] bridge_slave_1: entered allmulticast mode [ 612.275884][ T7832] bridge_slave_1: entered promiscuous mode [ 612.659902][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.681968][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.965832][ T1140] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.138637][ T1140] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.162388][ T7832] team0: Port device team_slave_0 added [ 613.232018][ T7832] team0: Port device team_slave_1 added [ 613.327009][ T7687] veth0_vlan: entered promiscuous mode [ 613.411257][ T1140] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.453824][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.462921][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.499518][ T7832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.516157][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.523442][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.550227][ T7832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.622176][ T1140] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.772834][ T7687] veth1_vlan: entered promiscuous mode [ 614.165623][ T5778] Bluetooth: hci2: command tx timeout [ 614.309579][ T7832] hsr_slave_0: entered promiscuous mode [ 614.343296][ T7832] hsr_slave_1: entered promiscuous mode [ 614.391554][ T7832] debugfs: 'hsr0' already exists in 'hsr' [ 614.404594][ T7832] Cannot create hsr debugfs directory [ 614.521233][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.939233][ T1140] bridge_slave_1: left allmulticast mode [ 614.964542][ T1140] bridge_slave_1: left promiscuous mode [ 614.971010][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.069829][ T1140] bridge_slave_0: left allmulticast mode [ 615.090977][ T1140] bridge_slave_0: left promiscuous mode [ 615.118237][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.254386][ T794] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 615.414423][ T794] usb 8-1: Using ep0 maxpacket: 32 [ 615.467936][ T794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.496052][ T794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.524486][ T794] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 615.533764][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.558330][ T794] usb 8-1: config 0 descriptor?? [ 615.681792][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.700638][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.719548][ T1140] bond0 (unregistering): Released all slaves [ 615.842582][ T794] usbhid 8-1:0.0: can't add hid device: -71 [ 615.877116][ T794] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 615.916688][ T794] usb 8-1: USB disconnect, device number 7 [ 615.929353][ T7921] chnl_net:caif_netlink_parms(): no params data found [ 616.089792][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.233837][ T7687] veth0_macvtap: entered promiscuous mode [ 616.247443][ T5778] Bluetooth: hci2: command tx timeout [ 616.526734][ T2377] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.534333][ T2377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.656721][ T2377] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.664312][ T2377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.692098][ T7687] veth1_macvtap: entered promiscuous mode [ 616.767960][ T1140] hsr_slave_0: left promiscuous mode [ 616.792538][ T1140] hsr_slave_1: left promiscuous mode [ 616.816660][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.844547][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.867224][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.904565][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.951525][ T1140] veth1_macvtap: left promiscuous mode [ 616.972206][ T1140] veth0_macvtap: left promiscuous mode [ 616.978228][ T1140] veth1_vlan: left promiscuous mode [ 616.983720][ T1140] veth0_vlan: left promiscuous mode [ 618.098616][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 618.152437][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 618.327622][ T5778] Bluetooth: hci2: command tx timeout [ 619.364592][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.372379][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.401475][ T7921] bridge_slave_0: entered allmulticast mode [ 619.412120][ T7921] bridge_slave_0: entered promiscuous mode [ 619.468634][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.495194][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.502959][ T7921] bridge_slave_1: entered allmulticast mode [ 619.661288][ T7921] bridge_slave_1: entered promiscuous mode [ 620.225572][ T7687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.259943][ T7687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.417650][ T5778] Bluetooth: hci2: command tx timeout [ 620.450355][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.504467][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.546890][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.605636][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.746564][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.774697][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.943746][ T7921] team0: Port device team_slave_0 added [ 621.111579][ T7921] team0: Port device team_slave_1 added [ 621.610674][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.634440][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.694661][ T7921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.833641][ T7832] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 621.897140][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.915955][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.974345][ T7921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.076084][ T7832] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 622.394460][ T7832] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 622.465874][ T7832] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 622.926381][ T7921] hsr_slave_0: entered promiscuous mode [ 622.956617][ T7921] hsr_slave_1: entered promiscuous mode [ 622.985694][ T7921] debugfs: 'hsr0' already exists in 'hsr' [ 622.991595][ T7921] Cannot create hsr debugfs directory [ 624.359466][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.610298][ T8049] loop7: detected capacity change from 0 to 2048 [ 624.708667][ T8049] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 624.802349][ T8049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.993953][ T7769] veth0_vlan: entered promiscuous mode [ 626.153559][ T7769] veth1_vlan: entered promiscuous mode [ 626.983063][ T7769] veth0_macvtap: entered promiscuous mode [ 627.052205][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.282585][ T7769] veth1_macvtap: entered promiscuous mode [ 627.565802][ T7921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 627.608337][ T7921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 627.690980][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.749179][ T7921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 627.811714][ T7921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 627.862000][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.904277][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.911739][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.993059][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.000614][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.021269][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.086381][ T6220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.115755][ T6220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.198127][ T6220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.214015][ T6220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.256502][ T6220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.268648][ T6220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.329293][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.339746][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.810752][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.054550][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.218070][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.225899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.335778][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.343223][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.152264][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 631.166363][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 631.180964][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 631.193827][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 631.207870][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 631.350874][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.225664][ T6225] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.284480][ T5778] Bluetooth: hci5: command tx timeout [ 633.352747][ T6225] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.512252][ T6225] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.818978][ T6225] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.047792][ T8107] chnl_net:caif_netlink_parms(): no params data found [ 634.206600][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.213228][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.399315][ T7921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.736034][ T7832] veth0_vlan: entered promiscuous mode [ 635.275668][ T6225] bridge_slave_1: left allmulticast mode [ 635.300954][ T6225] bridge_slave_1: left promiscuous mode [ 635.325589][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.365913][ T5778] Bluetooth: hci5: command tx timeout [ 635.394981][ T6225] bridge_slave_0: left allmulticast mode [ 635.400823][ T6225] bridge_slave_0: left promiscuous mode [ 635.444284][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.584627][ T5831] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 635.756073][ T5831] usb 8-1: Using ep0 maxpacket: 32 [ 635.781036][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.804506][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.825991][ T5831] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 635.847530][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.900819][ T5831] usb 8-1: config 0 descriptor?? [ 636.140779][ T6225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.190750][ T5831] usbhid 8-1:0.0: can't add hid device: -71 [ 636.205753][ T6225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.216453][ T5831] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 636.236657][ T5831] usb 8-1: USB disconnect, device number 8 [ 636.247104][ T6225] bond0 (unregistering): Released all slaves [ 636.316224][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.349014][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.451149][ T7832] veth1_vlan: entered promiscuous mode [ 636.668881][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.676946][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.691949][ T8107] bridge_slave_0: entered allmulticast mode [ 636.703343][ T8107] bridge_slave_0: entered promiscuous mode [ 636.722497][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.744595][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.752709][ T8107] bridge_slave_1: entered allmulticast mode [ 636.762565][ T8107] bridge_slave_1: entered promiscuous mode [ 637.142486][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.166225][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.181589][ T7921] veth0_vlan: entered promiscuous mode [ 637.195003][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.229163][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.269753][ T6225] hsr_slave_0: left promiscuous mode [ 637.288408][ T6225] hsr_slave_1: left promiscuous mode [ 637.307078][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.324693][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.355508][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.363071][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.444880][ T5778] Bluetooth: hci5: command tx timeout [ 637.457663][ T6225] veth1_macvtap: left promiscuous mode [ 637.463365][ T6225] veth0_macvtap: left promiscuous mode [ 637.479235][ T6225] veth1_vlan: left promiscuous mode [ 637.485130][ T6225] veth0_vlan: left promiscuous mode [ 637.911332][ T8180] loop7: detected capacity change from 0 to 2048 [ 637.989468][ T8180] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 638.062423][ T8180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.524560][ T5778] Bluetooth: hci5: command tx timeout [ 640.092814][ T6225] team0 (unregistering): Port device team_slave_1 removed [ 640.160622][ T6225] team0 (unregistering): Port device team_slave_0 removed [ 640.926084][ T8107] team0: Port device team_slave_0 added [ 641.021181][ T8107] team0: Port device team_slave_1 added [ 641.051612][ T7921] veth1_vlan: entered promiscuous mode [ 641.422874][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.449371][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.501688][ T8107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.532438][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.540931][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.571284][ T8107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.853057][ T7832] veth0_macvtap: entered promiscuous mode [ 642.060836][ T7832] veth1_macvtap: entered promiscuous mode [ 642.563837][ T8107] hsr_slave_0: entered promiscuous mode [ 642.594844][ T8107] hsr_slave_1: entered promiscuous mode [ 642.617358][ T8107] debugfs: 'hsr0' already exists in 'hsr' [ 642.636013][ T8107] Cannot create hsr debugfs directory [ 643.156206][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.165585][ T7921] veth0_macvtap: entered promiscuous mode [ 643.409285][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.451384][ T7921] veth1_macvtap: entered promiscuous mode [ 643.891396][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.912448][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.014757][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.137672][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.383215][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.447975][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.868907][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.047089][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.272459][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.374356][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.252197][ T8107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 647.322782][ T8107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 647.400853][ T8107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 647.486642][ T8107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 648.504919][ T7530] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 648.685137][ T7530] usb 8-1: Using ep0 maxpacket: 32 [ 648.717180][ T7530] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.781030][ T7530] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.815107][ T7530] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 648.856042][ T7530] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.931713][ T7530] usb 8-1: config 0 descriptor?? [ 648.935050][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.168602][ T8107] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.250466][ T7530] usbhid 8-1:0.0: can't add hid device: -71 [ 649.288667][ T7530] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 649.325185][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.332651][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.360220][ T7530] usb 8-1: USB disconnect, device number 9 [ 649.481484][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.489053][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.486299][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.540753][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.579758][ T8285] loop7: detected capacity change from 0 to 2048 [ 650.591499][ T8288] sg_write: process 14 (syz.2.367) changed security contexts after opening file descriptor, this is not allowed. [ 650.638444][ T8285] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 650.762090][ T8285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 650.793685][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.844682][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.557063][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.627254][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.717886][ T8304] loop9: detected capacity change from 0 to 40427 [ 653.755700][ T8304] F2FS-fs (loop9): build fault injection rate: 771 [ 653.774355][ T8304] F2FS-fs (loop9): invalid crc value [ 654.072400][ T8304] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 654.109734][ T8304] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 654.326652][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.371144][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.793387][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.914814][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 657.113645][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 657.163840][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.221776][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.284565][ T9] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 657.293832][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.408356][ T9] usb 8-1: config 0 descriptor?? [ 657.736955][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 657.743476][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 657.854718][ T9] usb 8-1: USB disconnect, device number 10 [ 658.073753][ T8107] veth0_vlan: entered promiscuous mode [ 658.173233][ T8107] veth1_vlan: entered promiscuous mode [ 658.621875][ T8107] veth0_macvtap: entered promiscuous mode [ 658.739172][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.7.378'. [ 658.753588][ T8107] veth1_macvtap: entered promiscuous mode [ 658.882684][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.378'. [ 658.993734][ T8354] netlink: 56 bytes leftover after parsing attributes in process `syz.7.378'. [ 659.689636][ T8360] loop2: detected capacity change from 0 to 40427 [ 659.781776][ T8360] F2FS-fs (loop2): build fault injection rate: 771 [ 659.794765][ T8360] F2FS-fs (loop2): invalid crc value [ 660.007594][ T8360] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 660.054754][ T8360] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 660.134881][ T30] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 660.417932][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 660.470275][ T30] usb 8-1: unable to get BOS descriptor or descriptor too short [ 660.540593][ T30] usb 8-1: config 0 has an invalid interface number: 165 but max is 0 [ 660.584453][ T30] usb 8-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 660.618432][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.634048][ T30] usb 8-1: config 0 has no interface number 0 [ 660.649427][ T30] usb 8-1: config 0 interface 165 has no altsetting 0 [ 660.712802][ T30] usb 8-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=ba.a6 [ 660.741521][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.774349][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.821175][ T30] usb 8-1: Product: syz [ 660.831499][ T30] usb 8-1: Manufacturer: Ỽ彼竭챹䔡⃆㖀顫恍ᰁ [ 660.841779][ T30] usb 8-1: SerialNumber: syz [ 660.865314][ T30] usb 8-1: config 0 descriptor?? [ 661.263481][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.288016][ T8351] netlink: 'syz.7.378': attribute type 16 has an invalid length. [ 661.320540][ T8351] netlink: 64130 bytes leftover after parsing attributes in process `syz.7.378'. [ 661.425672][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.442291][ T1140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.452427][ T1140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.471314][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.588368][ T30] ums-datafab 8-1:0.165: USB Mass Storage device detected [ 662.599574][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.719259][ T30] ums-sddr55 8-1:0.165: USB Mass Storage device detected [ 662.755618][ T1140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.828707][ T1140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.042147][ T30] usb 8-1: USB disconnect, device number 11 [ 663.056835][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.510978][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.152715][ T12] bridge_slave_1: left allmulticast mode [ 664.159186][ T12] bridge_slave_1: left promiscuous mode [ 664.169541][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.192350][ T12] bridge_slave_0: left allmulticast mode [ 664.199121][ T12] bridge_slave_0: left promiscuous mode [ 664.252311][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.244729][ T30] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 665.252275][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.317008][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.361607][ T12] bond0 (unregistering): Released all slaves [ 665.421730][ T30] usb 10-1: Using ep0 maxpacket: 32 [ 665.481391][ T30] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.542746][ T30] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.581129][ T30] usb 10-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 665.646040][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.692736][ T30] usb 10-1: config 0 descriptor?? [ 666.056340][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 666.075615][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 666.087726][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 666.103304][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 666.118201][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 666.180001][ T30] usbhid 10-1:0.0: can't add hid device: -71 [ 666.248527][ T30] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 666.374308][ T30] usb 10-1: USB disconnect, device number 2 [ 666.892232][ T12] hsr_slave_0: left promiscuous mode [ 666.952983][ T12] hsr_slave_1: left promiscuous mode [ 666.984088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.054542][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.088812][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.113777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.005430][ T8419] loop2: detected capacity change from 0 to 40427 [ 668.052244][ T8419] F2FS-fs (loop2): build fault injection rate: 771 [ 668.065708][ T8419] F2FS-fs (loop2): invalid crc value [ 668.116290][ T12] veth1_macvtap: left promiscuous mode [ 668.121997][ T12] veth0_macvtap: left promiscuous mode [ 668.225143][ T12] veth1_vlan: left promiscuous mode [ 668.270197][ T12] veth0_vlan: left promiscuous mode [ 668.350957][ T8419] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 668.370489][ T8419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 668.725607][ T5782] Bluetooth: hci2: command tx timeout [ 670.220704][ T12] team0 (unregistering): Port device team_slave_1 removed [ 670.259467][ T12] team0 (unregistering): Port device team_slave_0 removed [ 670.805421][ T5782] Bluetooth: hci2: command tx timeout [ 672.885071][ T5782] Bluetooth: hci2: command tx timeout [ 673.214871][ T8407] chnl_net:caif_netlink_parms(): no params data found [ 674.774571][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 674.967566][ T5782] Bluetooth: hci2: command tx timeout [ 674.984497][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 675.029514][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.084710][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.144557][ T30] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 675.194299][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.270596][ T30] usb 3-1: config 0 descriptor?? [ 675.662713][ T8480] loop9: detected capacity change from 0 to 40427 [ 675.700235][ T8480] F2FS-fs (loop9): build fault injection rate: 771 [ 675.705673][ T30] usbhid 3-1:0.0: can't add hid device: -71 [ 675.742721][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.750131][ T8480] F2FS-fs (loop9): invalid crc value [ 675.764899][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.777080][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 675.785104][ T8407] bridge_slave_0: entered allmulticast mode [ 675.788260][ T8407] bridge_slave_0: entered promiscuous mode [ 675.849449][ T30] usb 3-1: USB disconnect, device number 2 [ 676.069958][ T8480] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 676.094330][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.101728][ T8480] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 676.117358][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.204769][ T8407] bridge_slave_1: entered allmulticast mode [ 676.214002][ T8407] bridge_slave_1: entered promiscuous mode [ 676.651210][ T8407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.761645][ T8407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.363093][ T8407] team0: Port device team_slave_0 added [ 677.422339][ T8407] team0: Port device team_slave_1 added [ 677.489089][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.542260][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.890941][ T8407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.924495][ T8407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.044746][ T8407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.148057][ T8407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.175181][ T8407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.272470][ T8407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.408338][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.436518][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.711968][ T8407] hsr_slave_0: entered promiscuous mode [ 678.768371][ T8407] hsr_slave_1: entered promiscuous mode [ 678.818908][ T8407] debugfs: 'hsr0' already exists in 'hsr' [ 678.833791][ T8407] Cannot create hsr debugfs directory [ 682.599422][ T48] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.855205][ T48] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.741148][ T48] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.452614][ T48] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.563735][ T8407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 685.688747][ T8407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 685.735943][ T8407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 685.818759][ T8407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 686.325626][ T48] bridge_slave_1: left allmulticast mode [ 686.331459][ T48] bridge_slave_1: left promiscuous mode [ 686.382571][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.396983][ T48] bridge_slave_0: left allmulticast mode [ 686.402985][ T48] bridge_slave_0: left promiscuous mode [ 686.426743][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.815884][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.956284][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.081974][ T48] bond0 (unregistering): Released all slaves [ 688.207043][ T30] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 688.447789][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 688.525499][ T30] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 688.602306][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.746002][ T30] usb 3-1: config 0 descriptor?? [ 689.138660][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 689.305931][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 689.442143][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 689.502922][ T30] usb 3-1: media controller created [ 689.624670][ T1140] ===================================================== [ 689.632037][ T1140] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 689.642226][ T1140] __inet6_bind+0x4ac/0x1830 [ 689.647834][ T1140] inet6_bind+0x11e/0x1a0 [ 689.652313][ T1140] kernel_bind+0xd6/0x130 [ 689.656901][ T1140] rds_tcp_conn_path_connect+0x952/0xff0 [ 689.662681][ T1140] rds_connect_worker+0x353/0x4d0 [ 689.667983][ T1140] process_scheduled_works+0xb21/0x1e30 [ 689.673790][ T1140] worker_thread+0xede/0x1580 [ 689.678840][ T1140] kthread+0x53f/0x600 [ 689.683164][ T1140] ret_from_fork+0x20f/0x910 [ 689.688020][ T1140] ret_from_fork_asm+0x1a/0x30 [ 689.692944][ T1140] [ 689.695392][ T1140] Uninit was stored to memory at: [ 689.700639][ T1140] kernel_bind+0x92/0x130 [ 689.705293][ T1140] rds_tcp_conn_path_connect+0x952/0xff0 [ 689.711171][ T1140] rds_connect_worker+0x353/0x4d0 [ 689.716438][ T1140] process_scheduled_works+0xb21/0x1e30 [ 689.722129][ T1140] worker_thread+0xede/0x1580 [ 689.727016][ T1140] kthread+0x53f/0x600 [ 689.731236][ T1140] ret_from_fork+0x20f/0x910 [ 689.736037][ T1140] ret_from_fork_asm+0x1a/0x30 [ 689.744928][ T1140] [ 689.747343][ T1140] Uninit was stored to memory at: [ 689.752554][ T1140] rds_tcp_conn_path_connect+0xae5/0xff0 [ 689.758449][ T1140] rds_connect_worker+0x353/0x4d0 [ 689.763642][ T1140] process_scheduled_works+0xb21/0x1e30 [ 689.769481][ T1140] worker_thread+0xede/0x1580 [ 689.774495][ T1140] kthread+0x53f/0x600 [ 689.778715][ T1140] ret_from_fork+0x20f/0x910 [ 689.783435][ T1140] ret_from_fork_asm+0x1a/0x30 [ 689.788443][ T1140] [ 689.790838][ T1140] Uninit was created at: [ 689.795533][ T1140] kmem_cache_alloc_noprof+0x37b/0x1270 [ 689.801291][ T1140] rds_tcp_conn_alloc+0x7b/0xbb0 [ 689.806484][ T1140] __rds_conn_create+0x267f/0x34e0 [ 689.811838][ T1140] rds_conn_create_outgoing+0x5d/0x80 [ 689.817483][ T1140] rds_sendmsg+0x2684/0x4d70 [ 689.822240][ T1140] __sys_sendto+0xa77/0xb90 [ 689.827106][ T1140] __x64_sys_sendto+0x130/0x200 [ 689.832139][ T1140] x64_sys_call+0x39a0/0x3ea0 [ 689.837237][ T1140] do_syscall_64+0x134/0xf80 [ 689.844936][ T1140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.851077][ T1140] [ 689.853518][ T1140] CPU: 1 UID: 0 PID: 1140 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.867312][ T1140] Tainted: [L]=SOFTLOCKUP [ 689.871731][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.882568][ T1140] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 689.889135][ T1140] ===================================================== [ 689.896236][ T1140] Disabling lock debugging due to kernel taint [ 690.013957][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 690.201593][ T30] az6027: usb out operation failed. (-71) [ 690.328158][ T30] az6027: usb out operation failed. (-71) [ 690.334048][ T30] stb0899_attach: Driver disabled by Kconfig [ 690.519022][ T30] az6027: no front-end attached [ 690.519022][ T30] [ 690.708432][ T30] az6027: usb out operation failed. (-71) [ 690.737036][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 690.791866][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 690.887781][ T1140] Kernel panic - not syncing: kmsan.panic set ... [ 690.894370][ T1140] CPU: 0 UID: 0 PID: 1140 Comm: kworker/u8:7 Tainted: G B L syzkaller #0 PREEMPT(full) [ 690.905587][ T1140] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 690.911215][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.921401][ T1140] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 690.927780][ T1140] Call Trace: [ 690.931147][ T1140] [ 690.934150][ T1140] __dump_stack+0x26/0x30 [ 690.938634][ T1140] dump_stack_lvl+0x50/0x1c0 [ 690.943370][ T1140] ? dump_stack+0x12/0x25 [ 690.947852][ T1140] dump_stack+0x1e/0x25 [ 690.952155][ T1140] vpanic+0x7b4/0x1430 [ 690.956405][ T1140] panic+0x15d/0x160 [ 690.960516][ T1140] kmsan_report+0x31a/0x320 [ 690.965196][ T1140] ? __msan_warning+0x1b/0x30 [ 690.970031][ T1140] ? __inet6_bind+0x4ac/0x1830 [ 690.974939][ T1140] ? inet6_bind+0x11e/0x1a0 [ 690.979596][ T1140] ? kernel_bind+0xd6/0x130 [ 690.984242][ T1140] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 690.990195][ T1140] ? rds_connect_worker+0x353/0x4d0 [ 690.995596][ T1140] ? process_scheduled_works+0xb21/0x1e30 [ 691.001471][ T1140] ? worker_thread+0xede/0x1580 [ 691.006467][ T1140] ? kthread+0x53f/0x600 [ 691.010868][ T1140] ? ret_from_fork+0x20f/0x910 [ 691.015777][ T1140] ? ret_from_fork_asm+0x1a/0x30 [ 691.020890][ T1140] ? stack_depot_save+0x12/0x20 [ 691.025931][ T1140] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 691.031901][ T1140] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 691.037872][ T1140] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 691.044361][ T1140] ? __msan_memcpy+0x105/0x1c0 [ 691.049264][ T1140] ? kernel_bind+0x92/0x130 [ 691.054001][ T1140] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 691.060037][ T1140] ? rds_connect_worker+0x353/0x4d0 [ 691.065416][ T1140] ? process_scheduled_works+0xb21/0x1e30 [ 691.071313][ T1140] ? worker_thread+0xede/0x1580 [ 691.076454][ T1140] ? kthread+0x53f/0x600 [ 691.080888][ T1140] ? ret_from_fork+0x20f/0x910 [ 691.085808][ T1140] ? ret_from_fork_asm+0x1a/0x30 [ 691.090923][ T1140] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 691.097005][ T1140] ? stack_depot_save_flags+0x610/0x790 [ 691.102740][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 691.108051][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 691.114054][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 691.119335][ T1140] __msan_warning+0x1b/0x30 [ 691.123993][ T1140] __inet6_bind+0x4ac/0x1830 [ 691.128727][ T1140] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 691.134759][ T1140] inet6_bind+0x11e/0x1a0 [ 691.139248][ T1140] ? __pfx_inet6_bind+0x10/0x10 [ 691.144426][ T1140] kernel_bind+0xd6/0x130 [ 691.148910][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 691.154221][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 691.160308][ T1140] rds_tcp_conn_path_connect+0x952/0xff0 [ 691.166103][ T1140] ? try_to_wake_up+0x107e/0x21e0 [ 691.171322][ T1140] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 691.177843][ T1140] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 691.184160][ T1140] rds_connect_worker+0x353/0x4d0 [ 691.189364][ T1140] ? __pfx_rds_connect_worker+0x10/0x10 [ 691.195081][ T1140] process_scheduled_works+0xb21/0x1e30 [ 691.200826][ T1140] worker_thread+0xede/0x1580 [ 691.205689][ T1140] kthread+0x53f/0x600 [ 691.209911][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 691.215167][ T1140] ? __pfx_kthread+0x10/0x10 [ 691.219901][ T1140] ret_from_fork+0x20f/0x910 [ 691.224706][ T1140] ? __switch_to+0x51c/0x750 [ 691.229463][ T1140] ? __pfx_kthread+0x10/0x10 [ 691.234448][ T1140] ret_from_fork_asm+0x1a/0x30 [ 691.239420][ T1140] [ 691.242959][ T1140] Kernel Offset: disabled [ 691.247329][ T1140] Rebooting in 86400 seconds..