last executing test programs: 3m26.706851539s ago: executing program 3 (id=200): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7b5b, 0x1000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgget(0x2, 0x300) 3m24.10653269s ago: executing program 3 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000092}, 0x80) 3m24.015926121s ago: executing program 3 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000680001040000000000000000020000000000000008"], 0x28}}, 0x0) 3m23.858610755s ago: executing program 3 (id=217): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x101, 0x2, 0x2}) 3m23.162686562s ago: executing program 3 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x608, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 3m21.972414199s ago: executing program 2 (id=226): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 3m21.898428861s ago: executing program 2 (id=227): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0}, 0x38) 3m21.813774313s ago: executing program 2 (id=228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="0000000001000000", 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m21.704351185s ago: executing program 2 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 3m21.560339599s ago: executing program 2 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'essiv(echainiv(ccm_base(lrw-twofish-avx,md4)),sha1-ni)\x00'}, 0x0, 0x40}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m20.346465727s ago: executing program 2 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000010403000000000000000000000000040a0002007acc0008020000000500010003"], 0x28}}, 0x0) 3m20.075454203s ago: executing program 32 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000010403000000000000000000000000040a0002007acc0008020000000500010003"], 0x28}}, 0x0) 3m20.051084994s ago: executing program 3 (id=239): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020600) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 3m19.845928389s ago: executing program 33 (id=239): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020600) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 3m4.578625934s ago: executing program 0 (id=318): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="938d62fa8fa9f7"], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 3m4.534103735s ago: executing program 0 (id=319): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xfd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 3m2.131606341s ago: executing program 0 (id=332): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000100)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@resgid}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x84fed0) r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x129042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x107000) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) 3m1.350119889s ago: executing program 0 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m1.127403514s ago: executing program 0 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e24, 0x0, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @empty, 0x4f1}}}, 0x108) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x5a}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYRESOCT], 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) 2m59.714612927s ago: executing program 0 (id=361): r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x1002, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x30000000}]) 2m59.363625266s ago: executing program 34 (id=361): r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x1002, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x30000000}]) 1m13.413875511s ago: executing program 4 (id=794): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) 1m13.101246378s ago: executing program 4 (id=796): r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x80}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ed}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newroute={0x24, 0x18, 0xffffffffffffffff, 0x80, 0xfffffffd, {0xa, 0x0, 0x34, 0x0, 0xff, 0x2, 0xfe, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x318}]}, 0x24}}, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/108) semctl$SEM_STAT(r0, 0xb, 0x12, &(0x7f0000000080)=""/207) 1m12.300225057s ago: executing program 4 (id=804): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 1m12.126147131s ago: executing program 4 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) 1m11.971630565s ago: executing program 4 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f00000001c0)='./file0\x00') symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) 1m11.834627848s ago: executing program 4 (id=808): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc36ff70c271acf61ee46e26a03f28d69b6984f1566f8723ce521f13befd4587ee75f16112448319c529a78dab79c6cae7238c0", 0x93) 1m11.585411583s ago: executing program 35 (id=808): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc36ff70c271acf61ee46e26a03f28d69b6984f1566f8723ce521f13befd4587ee75f16112448319c529a78dab79c6cae7238c0", 0x93) 1m10.162229267s ago: executing program 7 (id=815): r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x80}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ed}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newroute={0x24, 0x18, 0xffffffffffffffff, 0x80, 0xfffffffd, {0xa, 0x0, 0x34, 0x0, 0xff, 0x2, 0xfe, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x318}]}, 0x24}}, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/108) semctl$SEM_STAT(r0, 0xb, 0x12, &(0x7f0000000080)=""/207) 1m6.182174079s ago: executing program 7 (id=823): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) close(0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xd, 0x200}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r3]) 1m3.946810581s ago: executing program 7 (id=827): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 1m3.829387694s ago: executing program 7 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) 1m3.59808832s ago: executing program 7 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1m2.942714524s ago: executing program 7 (id=835): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x2d, 0x1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) r3 = getpid() syz_pidfd_open(r3, 0x0) unshare(0x2c020400) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x75) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) bind$inet(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1m2.69791311s ago: executing program 36 (id=835): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x2d, 0x1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) r3 = getpid() syz_pidfd_open(r3, 0x0) unshare(0x2c020400) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x75) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) bind$inet(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 9.408696921s ago: executing program 8 (id=1012): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) write$char_usb(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 7.563328044s ago: executing program 5 (id=1029): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0xee96, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, 'E r', 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, "8108f9", 0xfffb, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) 7.152857963s ago: executing program 5 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x0, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x2, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x240488d0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.820795381s ago: executing program 1 (id=1033): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000540)={0x7, 0x7, 0x4, 0x4, 0xfff}) 6.738321723s ago: executing program 5 (id=1034): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) 6.695219284s ago: executing program 1 (id=1036): syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x12a) lseek(r0, 0x3, 0x3) 6.286302123s ago: executing program 8 (id=1038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003dc0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 6.278478694s ago: executing program 1 (id=1039): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = io_uring_setup(0x12ec, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.976864511s ago: executing program 1 (id=1040): r0 = socket$inet(0x2, 0x3, 0x3) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa0100ff}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14}}], 0x18}, 0x2404c890) 5.784966315s ago: executing program 8 (id=1041): socket$inet6(0xa, 0x3, 0xff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 4.72628516s ago: executing program 1 (id=1042): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c686561720a000000743d6e6f6e652c75737271756f74612c642174613d77726974656261636b2c6469725f726573765f6c6576656c3d30303030303030303030303030010000003030302c696e6f646536342c00"], 0x0, 0x472e, &(0x7f00000047c0)="$eJzs22+IHGfhB/BnNvf75S5NrvcnbZKmfzaJ4CHl2PRVtX0Rz6qNps0fbaupcu5d1svp3u15t6cFg9QgiIKgBEHFP1SF0je1IAb6phah4B+kVSgVResbkUIVfGHQBnqyuzO5ndm9zuY2qdh+PtDuzTPzPDO7351n5plnU4jVT8+vFOdXiuXFYm324yu3FT9dq64uVELhdfLf3j+9uRo5XUabQyH4SlxJR9/1ng/cf1sIvz3+5fetra2thYaR0NXBtr8v/OPMbPtropCp02i3e2stv1t97JWf/N9rbZHnZAhhZ8dxNWwJIXzopyFsDSGMxmVj8Wvji7Q9hBCFEB7/5d9/MNjPIbQ598BLLxw/e2T/2aknn3ju4tyxDTeMQvhWdc+tcwsvH9hyx4tvu0K7BwCA1/TeE0fvO1Y6GJ6OwvD5gc779V3xa3J/fM9bPnbvowPr69fozZbXMVQAAADIWB//j0SvdpmvS2bWkinBpx46ed8z0fp6A9v/bYfvPXrXu0sH4/nfqGP97XHR3965pTmHmp33zc7/jmbqd5//Xd/Po196/meL/7/540+OL9nvSIgKk6nlQmFyMoTjU63l3dG2QrW20vjSri6e2vx+3yjS+Wdn79cn9HvNfyxTPW/+f89HPvPjoYF+3sF4yH5rG8vFzq8yXaTz37gv/+Hno57yH8/Uy8v/7md3XPj51s7y3uPL7pHLkc6/dSLub9+g2OoAGvl/bSA//52Z9vPy/87U+cdPbuL3P41+ZiRqHOtgqgd4NS7f4CdMZKTzbwWROvfiD3Kj8//fmfyvy7Sfl/89tb/++s99XP836v8npvpp880jnX8riGJqi/Xzf7SQf/5fn2k/L/9fnf7D8x/t61rdmX/j+Cdc/3uSzj++EKc7z+Yn2Wv/vyvTfl7+u8cffGQ+U3Znl/uBrPcPxcc5HIXxtl+dnm9cwobX56ubQ5rG6qX8Nt+M0vm3PrXUqTPcemme/yP5/f/uTPt5+T+y9yt3nunr97/d+/+S/r8n6fyHmmWXk/8rmfz3ZNrPy/97Z/7yxwevcP/fWD4k/56k89/WsX79+U+hp/HfDZn6ec9/9o8989if+hj/J8eX7Dd5/pM8h5iIWs9/6C6d/zUbbtfr9X9vpl7e+f/1f7747IF++v9o0BOAPqTz394q7DIA7DX/GzPt5+X/2fu/8OHfb2L817zjG0zybxv/b22VH9P/9ySd/45WYeofQz3c/H/z+h915v6vTP43ZdrPy//i4cmBL17h63/j+Ce6PMqmUzr/4Q23a+T/mx6u/zdn6uXl/7l9P3r51r7u/0MoGetvWjr/azfcrnn+D+bnf0umXl7+3/zqL556uI/jf2sfdcnm37rWp06n+N681/F/MdN+Xv7fn7hw7sBVGP/d7vrfk3T+rVnzy8k/O/7fl2k/L/9vH/3u8sBVeP5zt/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2ZSx+HQlRYTK1XChMToYwHi/vDtuimfKp6ZlqbfaTKyHsjMuLYSyaq9ZmytXp+cXaqcp0uVqtzYZwXbx+ZxiMVqq1+vRCeen6S20NRacr5eX6TKVcDyHsistvDDuStmbm6wvlpea2SZ1rovKnVmv18uTqSmU57LlUvj0pn1uurS7dcKmtawu15aXT5cXpU/PL7yiVSqWw99Ixj0aVh+qVxXrraFtrG3WSuiNR25tprr6pbX+fqA2EEKrN8pvb6lRrs+VqW51b2vZXX15dnC3XK9PV2lyyv2Jb3bb31ly9L143EUZT7y+pm3Uofr3r8IkPnjhysGN9MUrnvbi6UCnt6P6dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCN6+k73v6NEMJAa6kQQjiU/BHF/6Wce+ClF46fPbL/7NSTTzx3ce5Yt20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFnft5iSKM4wD8ztqmgaXSRchjYIiI3iQs6BeRVK6RHbt0DuqUkEFRYBjRsSAIgrpFBUGnoPIviDp47FRd6tDBIIKK0dlcdoxNN51153lA3ncY550vjIzzvp9hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHGc2znfHreXd29Z+OnsDaE12bc5hDAcLfa/7GsJXSGEb1+nzoRl2rKuqvHfjs+Mps8a/ekdGH10Yzhaff3lY8vn7QxRYaBie1dUKAwMrH78ZnW3//lkfxRCIetCyMTcyNOzxRBCS9aFsIb+fmP99Wn2Unx/37Su9dAoej/ea4+vfzHrQshEx57PPcXkGW/l2v57PayvC6WL/ZX/+2s9gtfxiE4Denfq6vuCi5p7r5L5f/ynELWYD25cHRX92rO66ZNHP7xY03poZNMzE8eyrgEAAFhf52vk/2HbYv/BlSh0daZz/+9V+X931fjL5/9L7u+4OTJVVwixPbU2GW8P7q9nzOZ3uu/anTdF6z1NYevKD5H/55v8P9/k//lWX/7PRif/zzf5P7HXlfl/MB/Miye39s6/zLoIMiP/BwCA/Dl8YmyiNDgUT/7bfram8/qepC0lefrD25N9jyvWjeSHG9uR42MHDw0OJdc9vSC49P2HwsLeH8n7HtVt2XjVexe1vv/Q/Wxu9npr+jdK//j+Rrm+8nl9/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgN7tzbMIgGARg9L+kyQZZI5kikCZRcA9nsHQAR7F2BuewcgEtRLSwtZH3mjv44DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL5P/iv+r3fqIt2miNRn9Xffn+tSLmNoqna8bz0Orz5O+xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJkdOJABAAAAEOZvnUf7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCnAAAA//8jlsiQ") setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 4.515362735s ago: executing program 9 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000900f0000000000000000e4", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100"], 0x80}}, 0x4044) readv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3d}}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, 0x0, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.975430447s ago: executing program 9 (id=1044): creat(&(0x7f0000000000)='./file0\x00', 0x60) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) llistxattr(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) getpid() 3.970521377s ago: executing program 5 (id=1045): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000400)={"a0453822", 0x80, 0x6, 0x1, 0xc0, 0x8, "3377f877c734c40400", "0000d61d", 'vd\b\x00', "04ffffbf", ["c3fffdffe663ec0100", "0080000000000100001000", "000000000000000000c40800", "00010000000000000400"]}) 3.931585238s ago: executing program 8 (id=1046): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000540)={0x7, 0x7, 0x4, 0x4, 0xfff}) 3.797643341s ago: executing program 5 (id=1047): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) lseek(r0, 0x289e0cb5, 0x0) 3.797542831s ago: executing program 9 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x38000) 3.796887351s ago: executing program 8 (id=1049): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) 2.422343604s ago: executing program 9 (id=1051): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003dc0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2.422210533s ago: executing program 6 (id=1052): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.294298206s ago: executing program 6 (id=1053): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 2.183825109s ago: executing program 6 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) readv(r3, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r3, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3d}}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, 0x0, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.866305426s ago: executing program 6 (id=1055): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000680), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r3, 0x2) mknodat$null(r3, 0x0, 0xc000, 0x103) socket$inet6(0xa, 0x3, 0xff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) 1.865269296s ago: executing program 9 (id=1065): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.756757079s ago: executing program 1 (id=1056): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) 1.755775889s ago: executing program 9 (id=1067): io_uring_setup(0x6d1a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 252.977114ms ago: executing program 6 (id=1057): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) accept$inet(r0, 0x0, 0x0) 70.398008ms ago: executing program 6 (id=1058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 70.202558ms ago: executing program 8 (id=1059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) 0s ago: executing program 5 (id=1060): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000540)={0x7, 0x7, 0x4, 0x4, 0xfff}) kernel console output (not intermixed with test programs): link tx timeout [ 187.424325][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.433161][ T147] Bluetooth: hci2: link tx timeout [ 187.438261][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.446746][ T147] Bluetooth: hci2: link tx timeout [ 187.451876][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.460094][ T147] Bluetooth: hci2: link tx timeout [ 187.465275][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.482393][ T147] Bluetooth: hci2: link tx timeout [ 187.487562][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.495631][ T147] Bluetooth: hci2: link tx timeout [ 187.500738][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.508753][ T147] Bluetooth: hci2: link tx timeout [ 187.514009][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.524621][ T147] Bluetooth: hci2: link tx timeout [ 187.529726][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.544359][ T147] Bluetooth: hci2: link tx timeout [ 187.549468][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.557778][ T147] Bluetooth: hci2: link tx timeout [ 187.562951][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.571074][ T147] Bluetooth: hci2: link tx timeout [ 187.576231][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.584347][ T147] Bluetooth: hci2: link tx timeout [ 187.589443][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.602645][ T147] Bluetooth: hci2: link tx timeout [ 187.607789][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.616072][ T147] Bluetooth: hci2: link tx timeout [ 187.621211][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.629717][ T147] Bluetooth: hci2: link tx timeout [ 187.634946][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.646323][ T147] Bluetooth: hci2: link tx timeout [ 187.651450][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.659375][ T147] Bluetooth: hci2: link tx timeout [ 187.664530][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.682705][ T147] Bluetooth: hci2: link tx timeout [ 187.687880][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.695982][ T147] Bluetooth: hci2: link tx timeout [ 187.701119][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.709300][ T147] Bluetooth: hci2: link tx timeout [ 187.714446][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.722680][ T147] Bluetooth: hci2: link tx timeout [ 187.727800][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.735866][ T147] Bluetooth: hci2: link tx timeout [ 187.741525][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.750567][ T147] Bluetooth: hci2: link tx timeout [ 187.755791][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.764263][ T147] Bluetooth: hci2: link tx timeout [ 187.769406][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.780205][ T147] Bluetooth: hci2: link tx timeout [ 187.785431][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.798998][ T147] Bluetooth: hci2: link tx timeout [ 187.804203][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.812251][ T147] Bluetooth: hci2: link tx timeout [ 187.817378][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.825352][ T147] Bluetooth: hci2: link tx timeout [ 187.830471][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.838385][ T147] Bluetooth: hci2: link tx timeout [ 187.844428][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.852587][ T147] Bluetooth: hci2: link tx timeout [ 187.857702][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.867703][ T147] Bluetooth: hci2: link tx timeout [ 187.872869][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.881099][ T147] Bluetooth: hci2: link tx timeout [ 187.886315][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.894534][ T147] Bluetooth: hci2: link tx timeout [ 187.899665][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.911420][ T147] Bluetooth: hci2: link tx timeout [ 187.916618][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.924832][ T147] Bluetooth: hci2: link tx timeout [ 187.929990][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.943279][ T147] Bluetooth: hci2: link tx timeout [ 187.949037][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.958906][ T147] Bluetooth: hci2: link tx timeout [ 187.964145][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.972909][ T147] Bluetooth: hci2: link tx timeout [ 187.978073][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.986215][ T147] Bluetooth: hci2: link tx timeout [ 187.991343][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.002664][ T147] Bluetooth: hci2: link tx timeout [ 188.007810][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.018730][ T147] Bluetooth: hci2: link tx timeout [ 188.023884][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.031763][ T147] Bluetooth: hci2: link tx timeout [ 188.036909][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.044912][ T147] Bluetooth: hci2: link tx timeout [ 188.050563][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.058677][ T147] Bluetooth: hci2: link tx timeout [ 188.063901][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.072182][ T147] Bluetooth: hci2: link tx timeout [ 188.077299][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.085483][ T147] Bluetooth: hci2: link tx timeout [ 188.090597][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.134651][ T147] Bluetooth: hci2: link tx timeout [ 188.139781][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.147951][ T147] Bluetooth: hci2: link tx timeout [ 188.153618][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.167098][ T147] Bluetooth: hci2: link tx timeout [ 188.172275][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.180123][ T147] Bluetooth: hci2: link tx timeout [ 188.185267][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.198483][ T7422] loop4: detected capacity change from 0 to 32768 [ 188.205198][ T147] Bluetooth: hci2: link tx timeout [ 188.210287][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.218206][ T147] Bluetooth: hci2: link tx timeout [ 188.223343][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.241373][ T147] Bluetooth: hci2: link tx timeout [ 188.246580][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.266729][ T147] Bluetooth: hci2: link tx timeout [ 188.272063][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.280107][ T147] Bluetooth: hci2: link tx timeout [ 188.285338][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.293336][ T147] Bluetooth: hci2: link tx timeout [ 188.298454][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.306424][ T147] Bluetooth: hci2: link tx timeout [ 188.311523][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.319514][ T147] Bluetooth: hci2: link tx timeout [ 188.324884][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.332928][ T147] Bluetooth: hci2: link tx timeout [ 188.338039][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.361741][ T147] Bluetooth: hci2: link tx timeout [ 188.366930][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.374927][ T147] Bluetooth: hci2: link tx timeout [ 188.380041][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.388007][ T147] Bluetooth: hci2: link tx timeout [ 188.393165][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.405089][ T147] Bluetooth: hci2: link tx timeout [ 188.410201][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.418446][ T147] Bluetooth: hci2: link tx timeout [ 188.423601][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.431708][ T147] Bluetooth: hci2: link tx timeout [ 188.436895][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.455355][ T147] Bluetooth: hci2: link tx timeout [ 188.461020][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.473369][ T147] Bluetooth: hci2: link tx timeout [ 188.478475][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.487710][ T147] Bluetooth: hci2: link tx timeout [ 188.492881][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.501064][ T147] Bluetooth: hci2: link tx timeout [ 188.506282][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.514370][ T147] Bluetooth: hci2: link tx timeout [ 188.519509][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.527564][ T147] Bluetooth: hci2: link tx timeout [ 188.532709][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.540941][ T145] net_ratelimit: 73 callbacks suppressed [ 188.551941][ T147] Bluetooth: hci2: link tx timeout [ 188.557144][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.569294][ T147] Bluetooth: hci2: link tx timeout [ 188.574461][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.582558][ T147] Bluetooth: hci2: link tx timeout [ 188.587658][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.605711][ T147] Bluetooth: hci2: link tx timeout [ 188.610864][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.620230][ T147] Bluetooth: hci2: link tx timeout [ 188.625447][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.712770][ T147] Bluetooth: hci2: link tx timeout [ 188.717895][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.730213][ T147] Bluetooth: hci2: link tx timeout [ 188.735382][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.743354][ T147] Bluetooth: hci2: link tx timeout [ 188.748484][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.756433][ T147] Bluetooth: hci2: link tx timeout [ 188.761553][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.770477][ T147] Bluetooth: hci2: link tx timeout [ 188.775614][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.783800][ T147] Bluetooth: hci2: link tx timeout [ 188.788917][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.797057][ T147] Bluetooth: hci2: link tx timeout [ 188.802390][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.815366][ T147] Bluetooth: hci2: link tx timeout [ 188.820485][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.828469][ T147] Bluetooth: hci2: link tx timeout [ 188.833640][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.841564][ T147] Bluetooth: hci2: link tx timeout [ 188.846706][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.857834][ T147] Bluetooth: hci2: link tx timeout [ 188.863038][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.872228][ T147] Bluetooth: hci2: link tx timeout [ 188.877345][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.885550][ T147] Bluetooth: hci2: link tx timeout [ 188.890655][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.898876][ T147] Bluetooth: hci2: link tx timeout [ 188.904040][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.923122][ T147] Bluetooth: hci2: link tx timeout [ 188.928265][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.939226][ T147] Bluetooth: hci2: link tx timeout [ 188.944416][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.953586][ T147] Bluetooth: hci2: link tx timeout [ 188.958707][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.966934][ T147] Bluetooth: hci2: link tx timeout [ 188.972535][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.982511][ T147] Bluetooth: hci2: link tx timeout [ 188.987622][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.996002][ T147] Bluetooth: hci2: link tx timeout [ 189.001115][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.011107][ T147] Bluetooth: hci2: link tx timeout [ 189.016277][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.033410][ T147] Bluetooth: hci2: link tx timeout [ 189.038655][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.046765][ T147] Bluetooth: hci2: link tx timeout [ 189.051882][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.060021][ T147] Bluetooth: hci2: link tx timeout [ 189.065270][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.074273][ T147] Bluetooth: hci2: link tx timeout [ 189.079388][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.092587][ T147] Bluetooth: hci2: link tx timeout [ 189.097716][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.110180][ T147] Bluetooth: hci2: link tx timeout [ 189.115361][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.132440][ T147] Bluetooth: hci2: link tx timeout [ 189.137605][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.145690][ T147] Bluetooth: hci2: link tx timeout [ 189.150793][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.158827][ T147] Bluetooth: hci2: link tx timeout [ 189.164001][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.172700][ T147] Bluetooth: hci2: link tx timeout [ 189.178429][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.186976][ T147] Bluetooth: hci2: link tx timeout [ 189.192088][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.202084][ T147] Bluetooth: hci2: link tx timeout [ 189.207547][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.215830][ T147] Bluetooth: hci2: link tx timeout [ 189.220937][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.231248][ T147] Bluetooth: hci2: link tx timeout [ 189.236697][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.244893][ T147] Bluetooth: hci2: link tx timeout [ 189.250040][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.258199][ T147] Bluetooth: hci2: link tx timeout [ 189.263374][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.275449][ T147] Bluetooth: hci2: link tx timeout [ 189.281159][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.289217][ T147] Bluetooth: hci2: link tx timeout [ 189.294382][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.303822][ T147] Bluetooth: hci2: link tx timeout [ 189.308980][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.323428][ T147] Bluetooth: hci2: link tx timeout [ 189.328612][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.340961][ T147] Bluetooth: hci2: link tx timeout [ 189.346152][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.354376][ T147] Bluetooth: hci2: link tx timeout [ 189.359495][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.367848][ T147] Bluetooth: hci2: link tx timeout [ 189.372996][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.382350][ T147] Bluetooth: hci2: link tx timeout [ 189.387461][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.395486][ T147] Bluetooth: hci2: link tx timeout [ 189.400581][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.409767][ T147] Bluetooth: hci2: link tx timeout [ 189.414938][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.423510][ T147] Bluetooth: hci2: link tx timeout [ 189.428624][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.441739][ T147] Bluetooth: hci2: link tx timeout [ 189.446976][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.455600][ T147] Bluetooth: hci2: link tx timeout [ 189.460706][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.474401][ T147] Bluetooth: hci2: link tx timeout [ 189.479587][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.488995][ T147] Bluetooth: hci2: link tx timeout [ 189.494238][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.502226][ T147] Bluetooth: hci2: link tx timeout [ 189.507336][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.515300][ T147] Bluetooth: hci2: link tx timeout [ 189.520400][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.528564][ T147] Bluetooth: hci2: link tx timeout [ 189.533708][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.541642][ T147] Bluetooth: hci2: link tx timeout [ 189.546811][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.559526][ T6818] Bluetooth: hci2: command 0x0406 tx timeout [ 189.571204][ T147] Bluetooth: hci2: link tx timeout [ 189.576391][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.585041][ T147] Bluetooth: hci2: link tx timeout [ 189.590149][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.598280][ T147] Bluetooth: hci2: link tx timeout [ 189.603539][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.611498][ T147] Bluetooth: hci2: link tx timeout [ 189.616646][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.626781][ T147] Bluetooth: hci2: link tx timeout [ 189.631892][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.640174][ T147] Bluetooth: hci2: link tx timeout [ 189.645406][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.653578][ T147] Bluetooth: hci2: link tx timeout [ 189.658673][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.666943][ T147] Bluetooth: hci2: link tx timeout [ 189.672048][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.680368][ T147] Bluetooth: hci2: link tx timeout [ 189.686045][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.694332][ T147] Bluetooth: hci2: link tx timeout [ 189.699462][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.707658][ T147] Bluetooth: hci2: link tx timeout [ 189.712823][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.722701][ T147] Bluetooth: hci2: link tx timeout [ 189.727822][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.736405][ T147] Bluetooth: hci2: link tx timeout [ 189.741534][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.749530][ T147] Bluetooth: hci2: link tx timeout [ 189.754708][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.771406][ T147] Bluetooth: hci2: link tx timeout [ 189.776620][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.785312][ T147] Bluetooth: hci2: link tx timeout [ 189.790957][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.802411][ T147] Bluetooth: hci2: link tx timeout [ 189.807527][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.823209][ T147] Bluetooth: hci2: link tx timeout [ 189.828344][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.836433][ T147] Bluetooth: hci2: link tx timeout [ 189.841540][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.862127][ T147] Bluetooth: hci2: link tx timeout [ 189.867330][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.875569][ T147] Bluetooth: hci2: link tx timeout [ 189.880766][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.888925][ T147] Bluetooth: hci2: link tx timeout [ 189.894639][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.902946][ T147] Bluetooth: hci2: link tx timeout [ 189.908051][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.916204][ T147] Bluetooth: hci2: link tx timeout [ 189.921479][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.932443][ T147] Bluetooth: hci2: link tx timeout [ 189.937683][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.945863][ T147] Bluetooth: hci2: link tx timeout [ 189.950969][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.959091][ T147] Bluetooth: hci2: link tx timeout [ 189.964422][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.972638][ T147] Bluetooth: hci2: link tx timeout [ 189.977773][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.987469][ T147] Bluetooth: hci2: link tx timeout [ 189.993212][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.002312][ T147] Bluetooth: hci2: link tx timeout [ 190.007425][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.015392][ T147] Bluetooth: hci2: link tx timeout [ 190.020513][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.028963][ T147] Bluetooth: hci2: link tx timeout [ 190.034132][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.042086][ T147] Bluetooth: hci2: link tx timeout [ 190.047252][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.055228][ T147] Bluetooth: hci2: link tx timeout [ 190.060421][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.070792][ T147] Bluetooth: hci2: link tx timeout [ 190.075999][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.083972][ T147] Bluetooth: hci2: link tx timeout [ 190.089091][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.098137][ T147] Bluetooth: hci2: link tx timeout [ 190.103338][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.111875][ T147] Bluetooth: hci2: link tx timeout [ 190.117034][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.124981][ T147] Bluetooth: hci2: link tx timeout [ 190.130088][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.140106][ T147] Bluetooth: hci2: link tx timeout [ 190.145303][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.154452][ T147] Bluetooth: hci2: link tx timeout [ 190.159569][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.169643][ T147] Bluetooth: hci2: link tx timeout [ 190.174818][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.183099][ T147] Bluetooth: hci2: link tx timeout [ 190.188202][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.196413][ T147] Bluetooth: hci2: link tx timeout [ 190.202120][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.214959][ T147] Bluetooth: hci2: link tx timeout [ 190.220073][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.239624][ T147] Bluetooth: hci2: link tx timeout [ 190.244880][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.258744][ T147] Bluetooth: hci2: link tx timeout [ 190.264100][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.271993][ T147] Bluetooth: hci2: link tx timeout [ 190.277209][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.285183][ T147] Bluetooth: hci2: link tx timeout [ 190.290309][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.298235][ T147] Bluetooth: hci2: link tx timeout [ 190.303978][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.311890][ T147] Bluetooth: hci2: link tx timeout [ 190.317087][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.332425][ T147] Bluetooth: hci2: link tx timeout [ 190.337566][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.345513][ T147] Bluetooth: hci2: link tx timeout [ 190.350640][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.358630][ T147] Bluetooth: hci2: link tx timeout [ 190.363801][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.375111][ T147] Bluetooth: hci2: link tx timeout [ 190.380231][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.390659][ T147] Bluetooth: hci2: link tx timeout [ 190.395829][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.406433][ T147] Bluetooth: hci2: link tx timeout [ 190.411574][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.419864][ T147] Bluetooth: hci2: link tx timeout [ 190.425044][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.436479][ T147] Bluetooth: hci2: link tx timeout [ 190.441623][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.450190][ T147] Bluetooth: hci2: link tx timeout [ 190.455438][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.463424][ T147] Bluetooth: hci2: link tx timeout [ 190.468553][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.485647][ T147] Bluetooth: hci2: link tx timeout [ 190.490793][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.498825][ T147] Bluetooth: hci2: link tx timeout [ 190.504005][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.512714][ T147] Bluetooth: hci2: link tx timeout [ 190.517852][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.526255][ T147] Bluetooth: hci2: link tx timeout [ 190.531372][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.539569][ T147] Bluetooth: hci2: link tx timeout [ 190.544798][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.553108][ T147] Bluetooth: hci2: link tx timeout [ 190.558233][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.566403][ T147] Bluetooth: hci2: link tx timeout [ 190.571534][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.580730][ T147] Bluetooth: hci2: link tx timeout [ 190.585902][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.604117][ T147] Bluetooth: hci2: link tx timeout [ 190.609746][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.617680][ T147] Bluetooth: hci2: link tx timeout [ 190.622835][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.630718][ T147] Bluetooth: hci2: link tx timeout [ 190.635859][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.643820][ T147] Bluetooth: hci2: link tx timeout [ 190.648961][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.656871][ T147] Bluetooth: hci2: link tx timeout [ 190.661985][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.669924][ T147] Bluetooth: hci2: link tx timeout [ 190.675075][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.684115][ T147] Bluetooth: hci2: link tx timeout [ 190.689238][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.699138][ T147] Bluetooth: hci2: link tx timeout [ 190.704321][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.713051][ T147] Bluetooth: hci2: link tx timeout [ 190.718196][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.732529][ T147] Bluetooth: hci2: link tx timeout [ 190.737691][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.745900][ T147] Bluetooth: hci2: link tx timeout [ 190.751047][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.759168][ T147] Bluetooth: hci2: link tx timeout [ 190.764436][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.772449][ T147] Bluetooth: hci2: link tx timeout [ 190.777571][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.790415][ T147] Bluetooth: hci2: link tx timeout [ 190.795599][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.813696][ T147] Bluetooth: hci2: link tx timeout [ 190.818846][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.826780][ T147] Bluetooth: hci2: link tx timeout [ 190.831899][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.839824][ T147] Bluetooth: hci2: link tx timeout [ 190.844975][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.854005][ T147] Bluetooth: hci2: link tx timeout [ 190.859131][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.867041][ T147] Bluetooth: hci2: link tx timeout [ 190.872181][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.880074][ T147] Bluetooth: hci2: link tx timeout [ 190.885488][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.895439][ T147] Bluetooth: hci2: link tx timeout [ 190.900588][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.909830][ T147] Bluetooth: hci2: link tx timeout [ 190.915505][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.923740][ T147] Bluetooth: hci2: link tx timeout [ 190.928874][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.937029][ T147] Bluetooth: hci2: link tx timeout [ 190.942219][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.950408][ T147] Bluetooth: hci2: link tx timeout [ 190.955566][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.966148][ T147] Bluetooth: hci2: link tx timeout [ 190.971300][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.979518][ T147] Bluetooth: hci2: link tx timeout [ 190.984719][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.992837][ T147] Bluetooth: hci2: link tx timeout [ 190.997961][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.006049][ T147] Bluetooth: hci2: link tx timeout [ 191.011170][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.021306][ T147] Bluetooth: hci2: link tx timeout [ 191.026514][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.034695][ T147] Bluetooth: hci2: link tx timeout [ 191.039808][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.048400][ T147] Bluetooth: hci2: link tx timeout [ 191.053721][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.067262][ T147] Bluetooth: hci2: link tx timeout [ 191.072474][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.080486][ T147] Bluetooth: hci2: link tx timeout [ 191.085738][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.093734][ T147] Bluetooth: hci2: link tx timeout [ 191.098883][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.106821][ T147] Bluetooth: hci2: link tx timeout [ 191.111966][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.122421][ T147] Bluetooth: hci2: link tx timeout [ 191.127604][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.135580][ T147] Bluetooth: hci2: link tx timeout [ 191.140763][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.148740][ T147] Bluetooth: hci2: link tx timeout [ 191.153929][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.166150][ T147] Bluetooth: hci2: link tx timeout [ 191.171314][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.179538][ T147] Bluetooth: hci2: link tx timeout [ 191.184704][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.192808][ T147] Bluetooth: hci2: link tx timeout [ 191.197925][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.206057][ T147] Bluetooth: hci2: link tx timeout [ 191.211232][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.219417][ T147] Bluetooth: hci2: link tx timeout [ 191.225127][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.233413][ T147] Bluetooth: hci2: link tx timeout [ 191.238653][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.248049][ T147] Bluetooth: hci2: link tx timeout [ 191.253240][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.261563][ T147] Bluetooth: hci2: link tx timeout [ 191.266750][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.274859][ T147] Bluetooth: hci2: link tx timeout [ 191.280004][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.288247][ T147] Bluetooth: hci2: link tx timeout [ 191.293472][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.301746][ T147] Bluetooth: hci2: link tx timeout [ 191.306933][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.316246][ T147] Bluetooth: hci2: link tx timeout [ 191.321387][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.330233][ T147] Bluetooth: hci2: link tx timeout [ 191.335459][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.343681][ T147] Bluetooth: hci2: link tx timeout [ 191.348821][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.365725][ T147] Bluetooth: hci2: link tx timeout [ 191.370879][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.381010][ T147] Bluetooth: hci2: link tx timeout [ 191.386202][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.394165][ T147] Bluetooth: hci2: link tx timeout [ 191.399295][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.408325][ T147] Bluetooth: hci2: link tx timeout [ 191.413514][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.427843][ T147] Bluetooth: hci2: link tx timeout [ 191.433030][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.442037][ T147] Bluetooth: hci2: link tx timeout [ 191.447365][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.455505][ T147] Bluetooth: hci2: link tx timeout [ 191.460639][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.490661][ T147] Bluetooth: hci2: link tx timeout [ 191.496083][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.504486][ T147] Bluetooth: hci2: link tx timeout [ 191.509614][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.517578][ T147] Bluetooth: hci2: link tx timeout [ 191.522823][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.537187][ T147] Bluetooth: hci2: link tx timeout [ 191.542448][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.552474][ T147] Bluetooth: hci2: link tx timeout [ 191.557639][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.565961][ T147] Bluetooth: hci2: link tx timeout [ 191.571102][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.582448][ T147] Bluetooth: hci2: link tx timeout [ 191.587595][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.596618][ T147] Bluetooth: hci2: link tx timeout [ 191.601783][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.610070][ T147] Bluetooth: hci2: link tx timeout [ 191.615250][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.623610][ T147] Bluetooth: hci2: link tx timeout [ 191.628759][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.640037][ T147] Bluetooth: hci2: link tx timeout [ 191.645232][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.653263][ T147] Bluetooth: hci2: link tx timeout [ 191.658379][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.667785][ T147] Bluetooth: hci2: link tx timeout [ 191.673135][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.681275][ T147] Bluetooth: hci2: link tx timeout [ 191.686954][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.695214][ T147] Bluetooth: hci2: link tx timeout [ 191.700357][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.710844][ T147] Bluetooth: hci2: link tx timeout [ 191.716435][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.871891][ T7448] netlink: 128 bytes leftover after parsing attributes in process `syz.1.688'. [ 191.948521][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.645768][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.693'. [ 192.791844][ T7446] loop7: detected capacity change from 0 to 32768 [ 192.852657][ T7446] (syz.7.698,7446,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 192.852657][ T7446] " or missing value [ 192.968286][ T7446] (syz.7.698,7446,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 193.288335][ T7446] loop7: detected capacity change from 0 to 64 [ 193.521480][ T147] Bluetooth: hci2: link tx timeout [ 193.526870][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.545305][ T147] Bluetooth: hci2: link tx timeout [ 193.550429][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.559244][ T147] Bluetooth: hci2: link tx timeout [ 193.564938][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.574072][ T147] Bluetooth: hci2: link tx timeout [ 193.579768][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.588077][ T147] Bluetooth: hci2: link tx timeout [ 193.593265][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.601533][ T147] Bluetooth: hci2: link tx timeout [ 193.606733][ C0] net_ratelimit: 44 callbacks suppressed [ 193.615273][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.623845][ T147] Bluetooth: hci2: link tx timeout [ 193.628996][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.637225][ T147] Bluetooth: hci2: link tx timeout [ 193.642393][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.659035][ T147] Bluetooth: hci2: link tx timeout [ 193.664301][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.675011][ T147] Bluetooth: hci2: link tx timeout [ 193.680718][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.688839][ T147] Bluetooth: hci2: link tx timeout [ 193.694064][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.702669][ T147] Bluetooth: hci2: link tx timeout [ 193.707818][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.716744][ T147] Bluetooth: hci2: link tx timeout [ 193.721984][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.732847][ T147] Bluetooth: hci2: link tx timeout [ 193.738020][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.751707][ T147] Bluetooth: hci2: link tx timeout [ 193.757012][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.774549][ T147] Bluetooth: hci2: link tx timeout [ 193.779738][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.788310][ T147] Bluetooth: hci2: link tx timeout [ 193.793500][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.801433][ T147] Bluetooth: hci2: link tx timeout [ 193.806631][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.822883][ T147] Bluetooth: hci2: link tx timeout [ 193.828105][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.837268][ T147] Bluetooth: hci2: link tx timeout [ 193.842571][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.856429][ T147] Bluetooth: hci2: link tx timeout [ 193.861593][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.869769][ T147] Bluetooth: hci2: link tx timeout [ 193.874977][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.883261][ T147] Bluetooth: hci2: link tx timeout [ 193.888905][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.897174][ T147] Bluetooth: hci2: link tx timeout [ 193.902359][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.910675][ T147] Bluetooth: hci2: link tx timeout [ 193.915869][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.927407][ T147] Bluetooth: hci2: link tx timeout [ 193.932612][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.940922][ T147] Bluetooth: hci2: link tx timeout [ 193.946144][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.954410][ T147] Bluetooth: hci2: link tx timeout [ 193.959546][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.967758][ T147] Bluetooth: hci2: link tx timeout [ 193.972925][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.988609][ T147] Bluetooth: hci2: link tx timeout [ 193.993836][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.011967][ T147] Bluetooth: hci2: link tx timeout [ 194.017401][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.030637][ T147] Bluetooth: hci2: link tx timeout [ 194.036158][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.045249][ T147] Bluetooth: hci2: link tx timeout [ 194.050387][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.058581][ T147] Bluetooth: hci2: link tx timeout [ 194.063882][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.072230][ T147] Bluetooth: hci2: link tx timeout [ 194.077377][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.085610][ T147] Bluetooth: hci2: link tx timeout [ 194.091312][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.102444][ T147] Bluetooth: hci2: link tx timeout [ 194.107631][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.115642][ T147] Bluetooth: hci2: link tx timeout [ 194.120772][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.128794][ T147] Bluetooth: hci2: link tx timeout [ 194.134100][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.142064][ T147] Bluetooth: hci2: link tx timeout [ 194.147237][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.155248][ T147] Bluetooth: hci2: link tx timeout [ 194.160419][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.168519][ T147] Bluetooth: hci2: link tx timeout [ 194.173708][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.184266][ T147] Bluetooth: hci2: link tx timeout [ 194.189420][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.198526][ T147] Bluetooth: hci2: link tx timeout [ 194.203731][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.211941][ T147] Bluetooth: hci2: link tx timeout [ 194.217148][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.230404][ T147] Bluetooth: hci2: link tx timeout [ 194.235620][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.247701][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.254200][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.265764][ T147] Bluetooth: hci2: link tx timeout [ 194.270952][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.280867][ T147] Bluetooth: hci2: link tx timeout [ 194.286162][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.297806][ T147] Bluetooth: hci2: link tx timeout [ 194.303016][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.318913][ T147] Bluetooth: hci2: link tx timeout [ 194.324156][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.433939][ T147] Bluetooth: hci2: link tx timeout [ 194.439101][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.450146][ T147] Bluetooth: hci2: link tx timeout [ 194.455395][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.472432][ T147] Bluetooth: hci2: link tx timeout [ 194.477596][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.485767][ T147] Bluetooth: hci2: link tx timeout [ 194.490936][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.499428][ T147] Bluetooth: hci2: link tx timeout [ 194.504616][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.512565][ T147] Bluetooth: hci2: link tx timeout [ 194.517719][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.527642][ T147] Bluetooth: hci2: link tx timeout [ 194.533054][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.545986][ T147] Bluetooth: hci2: link tx timeout [ 194.551121][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.562584][ T147] Bluetooth: hci2: link tx timeout [ 194.567718][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.578538][ T147] Bluetooth: hci2: link tx timeout [ 194.583718][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.592406][ T147] Bluetooth: hci2: link tx timeout [ 194.597545][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.606110][ T147] Bluetooth: hci2: link tx timeout [ 194.611214][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.619237][ T147] Bluetooth: hci2: link tx timeout [ 194.624397][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.635905][ T147] Bluetooth: hci2: link tx timeout [ 194.641034][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.649200][ T147] Bluetooth: hci2: link tx timeout [ 194.654358][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.662665][ T147] Bluetooth: hci2: link tx timeout [ 194.667773][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.675957][ T147] Bluetooth: hci2: link tx timeout [ 194.681061][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.692034][ T147] Bluetooth: hci2: link tx timeout [ 194.697217][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.705783][ T147] Bluetooth: hci2: link tx timeout [ 194.710897][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.718835][ T147] Bluetooth: hci2: link tx timeout [ 194.724185][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.732227][ T147] Bluetooth: hci2: link tx timeout [ 194.737334][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.752408][ T147] Bluetooth: hci2: link tx timeout [ 194.757530][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.765512][ T147] Bluetooth: hci2: link tx timeout [ 194.770610][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.778585][ T147] Bluetooth: hci2: link tx timeout [ 194.783760][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.792118][ T147] Bluetooth: hci2: link tx timeout [ 194.797370][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.809933][ T147] Bluetooth: hci2: link tx timeout [ 194.815238][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.835938][ T147] Bluetooth: hci2: link tx timeout [ 194.841077][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.849623][ T147] Bluetooth: hci2: link tx timeout [ 194.854800][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.863065][ T147] Bluetooth: hci2: link tx timeout [ 194.868199][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.876479][ T147] Bluetooth: hci2: link tx timeout [ 194.881633][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.892580][ T147] Bluetooth: hci2: link tx timeout [ 194.897720][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.905718][ T147] Bluetooth: hci2: link tx timeout [ 194.911382][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.919979][ T147] Bluetooth: hci2: link tx timeout [ 194.925148][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.933161][ T147] Bluetooth: hci2: link tx timeout [ 194.938286][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.946277][ T147] Bluetooth: hci2: link tx timeout [ 194.951442][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.960572][ T147] Bluetooth: hci2: link tx timeout [ 194.965843][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.977481][ T147] Bluetooth: hci2: link tx timeout [ 194.982710][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.990951][ T147] Bluetooth: hci2: link tx timeout [ 194.996145][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.006320][ T147] Bluetooth: hci2: link tx timeout [ 195.012022][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.020563][ T147] Bluetooth: hci2: link tx timeout [ 195.025732][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.033704][ T147] Bluetooth: hci2: link tx timeout [ 195.038852][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.047087][ T147] Bluetooth: hci2: link tx timeout [ 195.052257][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.060362][ T147] Bluetooth: hci2: link tx timeout [ 195.065552][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.074692][ T147] Bluetooth: hci2: link tx timeout [ 195.079998][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.088123][ T147] Bluetooth: hci2: link tx timeout [ 195.093288][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.102423][ T147] Bluetooth: hci2: link tx timeout [ 195.107558][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.119777][ T147] Bluetooth: hci2: link tx timeout [ 195.125002][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.133272][ T147] Bluetooth: hci2: link tx timeout [ 195.138420][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.147677][ T147] Bluetooth: hci2: link tx timeout [ 195.152864][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.160946][ T147] Bluetooth: hci2: link tx timeout [ 195.166215][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.176356][ T147] Bluetooth: hci2: link tx timeout [ 195.181497][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.191930][ T147] Bluetooth: hci2: link tx timeout [ 195.197116][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.206246][ T147] Bluetooth: hci2: link tx timeout [ 195.211384][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.221536][ T147] Bluetooth: hci2: link tx timeout [ 195.226759][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.234830][ T147] Bluetooth: hci2: link tx timeout [ 195.240042][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.248119][ T147] Bluetooth: hci2: link tx timeout [ 195.253298][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.263608][ T147] Bluetooth: hci2: link tx timeout [ 195.268747][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.292517][ T147] Bluetooth: hci2: link tx timeout [ 195.297643][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.308669][ T147] Bluetooth: hci2: link tx timeout [ 195.313881][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.322891][ T147] Bluetooth: hci2: link tx timeout [ 195.327997][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.341024][ T147] Bluetooth: hci2: link tx timeout [ 195.346212][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.359743][ T147] Bluetooth: hci2: link tx timeout [ 195.364960][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.372955][ T147] Bluetooth: hci2: link tx timeout [ 195.378050][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.388728][ T147] Bluetooth: hci2: link tx timeout [ 195.393903][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.412604][ T147] Bluetooth: hci2: link tx timeout [ 195.417761][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.426949][ T147] Bluetooth: hci2: link tx timeout [ 195.432060][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.440326][ T147] Bluetooth: hci2: link tx timeout [ 195.445548][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.453720][ T147] Bluetooth: hci2: link tx timeout [ 195.458823][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.467084][ T147] Bluetooth: hci2: link tx timeout [ 195.472242][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.480145][ T147] Bluetooth: hci2: link tx timeout [ 195.485321][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.493606][ T147] Bluetooth: hci2: link tx timeout [ 195.498738][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.506870][ T147] Bluetooth: hci2: link tx timeout [ 195.511972][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.520130][ T147] Bluetooth: hci2: link tx timeout [ 195.525820][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.534955][ T147] Bluetooth: hci2: link tx timeout [ 195.540063][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.552785][ T147] Bluetooth: hci2: link tx timeout [ 195.557953][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.569475][ T147] Bluetooth: hci2: link tx timeout [ 195.574635][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.582577][ T147] Bluetooth: hci2: link tx timeout [ 195.587678][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.599062][ T147] Bluetooth: hci2: link tx timeout [ 195.604409][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.614500][ T147] Bluetooth: hci2: link tx timeout [ 195.619607][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.628813][ T147] Bluetooth: hci2: link tx timeout [ 195.633983][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.642102][ T147] Bluetooth: hci2: link tx timeout [ 195.647273][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.655478][ T147] Bluetooth: hci2: link tx timeout [ 195.660581][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.671606][ T147] Bluetooth: hci2: link tx timeout [ 195.676916][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.685195][ T147] Bluetooth: hci2: link tx timeout [ 195.690311][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.698390][ T147] Bluetooth: hci2: link tx timeout [ 195.703565][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.711728][ T147] Bluetooth: hci2: link tx timeout [ 195.716944][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.725092][ T147] Bluetooth: hci2: link tx timeout [ 195.730769][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.739683][ T147] Bluetooth: hci2: link tx timeout [ 195.744853][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.753046][ T147] Bluetooth: hci2: link tx timeout [ 195.758147][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.767279][ T147] Bluetooth: hci2: link tx timeout [ 195.772449][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.787932][ T147] Bluetooth: hci2: link tx timeout [ 195.793105][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.802405][ T147] Bluetooth: hci2: link tx timeout [ 195.807521][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.817622][ T147] Bluetooth: hci2: link tx timeout [ 195.822931][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.831830][ T147] Bluetooth: hci2: link tx timeout [ 195.837022][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.845167][ T147] Bluetooth: hci2: link tx timeout [ 195.850300][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.860194][ T147] Bluetooth: hci2: link tx timeout [ 195.865418][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.873592][ T147] Bluetooth: hci2: link tx timeout [ 195.878693][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.886846][ T147] Bluetooth: hci2: link tx timeout [ 195.891946][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.912499][ T147] Bluetooth: hci2: link tx timeout [ 195.917625][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.925575][ T147] Bluetooth: hci2: link tx timeout [ 195.930674][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.939650][ T147] Bluetooth: hci2: link tx timeout [ 195.944833][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.952887][ T147] Bluetooth: hci2: link tx timeout [ 195.957985][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.967443][ T147] Bluetooth: hci2: link tx timeout [ 195.973031][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.981017][ T147] Bluetooth: hci2: link tx timeout [ 195.986208][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.994470][ T147] Bluetooth: hci2: link tx timeout [ 195.999569][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.014865][ T147] Bluetooth: hci2: link tx timeout [ 196.020003][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.028026][ T147] Bluetooth: hci2: link tx timeout [ 196.033174][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.044000][ T147] Bluetooth: hci2: link tx timeout [ 196.049122][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.057334][ T147] Bluetooth: hci2: link tx timeout [ 196.062627][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.071023][ T147] Bluetooth: hci2: link tx timeout [ 196.076178][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.084524][ T147] Bluetooth: hci2: link tx timeout [ 196.089631][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.097839][ T147] Bluetooth: hci2: link tx timeout [ 196.103008][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.111471][ T147] Bluetooth: hci2: link tx timeout [ 196.116647][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.132444][ T147] Bluetooth: hci2: link tx timeout [ 196.138157][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.152053][ T147] Bluetooth: hci2: link tx timeout [ 196.157224][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.165551][ T147] Bluetooth: hci2: link tx timeout [ 196.170648][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.178668][ T147] Bluetooth: hci2: link tx timeout [ 196.183819][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.191798][ T147] Bluetooth: hci2: link tx timeout [ 196.196934][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.205212][ T147] Bluetooth: hci2: link tx timeout [ 196.210308][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.218299][ T147] Bluetooth: hci2: link tx timeout [ 196.223477][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.231843][ T147] Bluetooth: hci2: link tx timeout [ 196.237067][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.248735][ T147] Bluetooth: hci2: link tx timeout [ 196.253917][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.261829][ T147] Bluetooth: hci2: link tx timeout [ 196.266987][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.274939][ T147] Bluetooth: hci2: link tx timeout [ 196.280205][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.288178][ T147] Bluetooth: hci2: link tx timeout [ 196.293322][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.303144][ T147] Bluetooth: hci2: link tx timeout [ 196.308266][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.316511][ T147] Bluetooth: hci2: link tx timeout [ 196.321623][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.329711][ T147] Bluetooth: hci2: link tx timeout [ 196.334859][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.344259][ T147] Bluetooth: hci2: link tx timeout [ 196.349363][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.359879][ T147] Bluetooth: hci2: link tx timeout [ 196.365072][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.373501][ T147] Bluetooth: hci2: link tx timeout [ 196.378610][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.386789][ T147] Bluetooth: hci2: link tx timeout [ 196.391889][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.400178][ T147] Bluetooth: hci2: link tx timeout [ 196.405423][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.413374][ T147] Bluetooth: hci2: link tx timeout [ 196.418484][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.426661][ T147] Bluetooth: hci2: link tx timeout [ 196.431761][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.439941][ T147] Bluetooth: hci2: link tx timeout [ 196.445668][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.454518][ T147] Bluetooth: hci2: link tx timeout [ 196.459668][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.470452][ T147] Bluetooth: hci2: link tx timeout [ 196.475642][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.483821][ T147] Bluetooth: hci2: link tx timeout [ 196.488923][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.502804][ T147] Bluetooth: hci2: link tx timeout [ 196.507976][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.516198][ T147] Bluetooth: hci2: link tx timeout [ 196.521327][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.529291][ T147] Bluetooth: hci2: link tx timeout [ 196.534478][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.543740][ T147] Bluetooth: hci2: link tx timeout [ 196.549445][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.557940][ T147] Bluetooth: hci2: link tx timeout [ 196.563232][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.575404][ T147] Bluetooth: hci2: link tx timeout [ 196.580547][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.601146][ T147] Bluetooth: hci2: link tx timeout [ 196.606582][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.615322][ T147] Bluetooth: hci2: link tx timeout [ 196.620493][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.628607][ T147] Bluetooth: hci2: link tx timeout [ 196.633772][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.641917][ T147] Bluetooth: hci2: link tx timeout [ 196.647252][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.656458][ T147] Bluetooth: hci2: link tx timeout [ 196.661581][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.672042][ T147] Bluetooth: hci2: link tx timeout [ 196.677325][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.688048][ T147] Bluetooth: hci2: link tx timeout [ 196.693376][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.701288][ T147] Bluetooth: hci2: link tx timeout [ 196.706479][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.714676][ T147] Bluetooth: hci2: link tx timeout [ 196.719790][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.728126][ T147] Bluetooth: hci2: link tx timeout [ 196.733312][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.741282][ T147] Bluetooth: hci2: link tx timeout [ 196.746436][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.755665][ T147] Bluetooth: hci2: link tx timeout [ 196.760806][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.769071][ T147] Bluetooth: hci2: link tx timeout [ 196.774231][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.782413][ T147] Bluetooth: hci2: link tx timeout [ 196.787551][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.798246][ T147] Bluetooth: hci2: link tx timeout [ 196.803942][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.812215][ T147] Bluetooth: hci2: link tx timeout [ 196.817343][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.825446][ T147] Bluetooth: hci2: link tx timeout [ 196.830566][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.842555][ T147] Bluetooth: hci2: link tx timeout [ 196.847799][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.857005][ T147] Bluetooth: hci2: link tx timeout [ 196.862217][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.871446][ T147] Bluetooth: hci2: link tx timeout [ 196.876650][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.885202][ T147] Bluetooth: hci2: link tx timeout [ 196.890331][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.898444][ T147] Bluetooth: hci2: link tx timeout [ 196.903668][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.912132][ T147] Bluetooth: hci2: link tx timeout [ 196.917311][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.925255][ T147] Bluetooth: hci2: link tx timeout [ 196.930601][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.942264][ T147] Bluetooth: hci2: link tx timeout [ 196.947475][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.955520][ T147] Bluetooth: hci2: link tx timeout [ 196.961209][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.970425][ T147] Bluetooth: hci2: link tx timeout [ 196.975588][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.985262][ T147] Bluetooth: hci2: link tx timeout [ 196.990392][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.003350][ T147] Bluetooth: hci2: link tx timeout [ 197.008491][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.016456][ T147] Bluetooth: hci2: link tx timeout [ 197.021600][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.029610][ T147] Bluetooth: hci2: link tx timeout [ 197.034772][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.042798][ T147] Bluetooth: hci2: link tx timeout [ 197.047924][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.055833][ T147] Bluetooth: hci2: link tx timeout [ 197.061550][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.071778][ T147] Bluetooth: hci2: link tx timeout [ 197.076940][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.086055][ T147] Bluetooth: hci2: link tx timeout [ 197.091215][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.101130][ T147] Bluetooth: hci2: link tx timeout [ 197.106395][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.118562][ T147] Bluetooth: hci2: link tx timeout [ 197.124116][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.133190][ T147] Bluetooth: hci2: link tx timeout [ 197.138418][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.150436][ T147] Bluetooth: hci2: link tx timeout [ 197.155641][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.164199][ T147] Bluetooth: hci2: link tx timeout [ 197.169320][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.177261][ T147] Bluetooth: hci2: link tx timeout [ 197.182473][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.195934][ T147] Bluetooth: hci2: link tx timeout [ 197.201093][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.209351][ T147] Bluetooth: hci2: link tx timeout [ 197.214564][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.222497][ T147] Bluetooth: hci2: link tx timeout [ 197.227616][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.241045][ T147] Bluetooth: hci2: link tx timeout [ 197.246239][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.255750][ T147] Bluetooth: hci2: link tx timeout [ 197.260891][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.269903][ T147] Bluetooth: hci2: link tx timeout [ 197.275071][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.306579][ T147] Bluetooth: hci2: link tx timeout [ 197.311899][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.322041][ T147] Bluetooth: hci2: link tx timeout [ 197.327332][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.335316][ T147] Bluetooth: hci2: link tx timeout [ 197.340449][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.348390][ T147] Bluetooth: hci2: link tx timeout [ 197.353568][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.361456][ T147] Bluetooth: hci2: link tx timeout [ 197.367179][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.376292][ T147] Bluetooth: hci2: link tx timeout [ 197.381469][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.389423][ T147] Bluetooth: hci2: link tx timeout [ 197.394586][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.405466][ T147] Bluetooth: hci2: link tx timeout [ 197.410655][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.418694][ T147] Bluetooth: hci2: link tx timeout [ 197.423865][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.431769][ T147] Bluetooth: hci2: link tx timeout [ 197.436931][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.446873][ T147] Bluetooth: hci2: link tx timeout [ 197.452017][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.462955][ T147] Bluetooth: hci2: link tx timeout [ 197.468608][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.478937][ T147] Bluetooth: hci2: link tx timeout [ 197.484164][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.492239][ T147] Bluetooth: hci2: link tx timeout [ 197.497364][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.505330][ T147] Bluetooth: hci2: link tx timeout [ 197.510457][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.518413][ T147] Bluetooth: hci2: link tx timeout [ 197.523720][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.531693][ T147] Bluetooth: hci2: link tx timeout [ 197.536835][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.544803][ T147] Bluetooth: hci2: link tx timeout [ 197.549926][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.557909][ T147] Bluetooth: hci2: link tx timeout [ 197.563140][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.571769][ T147] Bluetooth: hci2: link tx timeout [ 197.576999][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.585073][ T147] Bluetooth: hci2: link tx timeout [ 197.590214][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.598364][ T147] Bluetooth: hci2: link tx timeout [ 197.603557][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.611662][ T147] Bluetooth: hci2: link tx timeout [ 197.616802][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.631703][ T147] Bluetooth: hci2: link tx timeout [ 197.636885][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.652443][ T147] Bluetooth: hci2: link tx timeout [ 197.657605][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.669231][ T147] Bluetooth: hci2: link tx timeout [ 197.675022][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.683312][ T147] Bluetooth: hci2: link tx timeout [ 197.688440][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.696780][ T147] Bluetooth: hci2: link tx timeout [ 197.701901][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.710353][ T147] Bluetooth: hci2: link tx timeout [ 197.715504][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.723497][ T147] Bluetooth: hci2: link tx timeout [ 197.728617][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.736704][ T147] Bluetooth: hci2: link tx timeout [ 197.741847][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.750063][ T147] Bluetooth: hci2: link tx timeout [ 197.755219][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.763559][ T147] Bluetooth: hci2: link tx timeout [ 197.768696][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.781670][ T147] Bluetooth: hci2: link tx timeout [ 197.786860][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.794784][ T147] Bluetooth: hci2: link tx timeout [ 197.800008][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.807917][ T147] Bluetooth: hci2: link tx timeout [ 197.813044][ T147] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.039531][ T7511] netlink: 128 bytes leftover after parsing attributes in process `syz.5.704'. [ 198.100644][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.121930][ T26] audit: type=1326 audit(1791289753.507:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.6.707" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ff0b199 code=0x7ffc0000 [ 198.349997][ T26] audit: type=1326 audit(1791289753.557:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.6.707" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc16ff0b199 code=0x7ffc0000 [ 198.625782][ T26] audit: type=1326 audit(1791289753.557:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.6.707" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ff0b199 code=0x7ffc0000 [ 198.722280][ C0] net_ratelimit: 55 callbacks suppressed [ 198.836017][ T26] audit: type=1326 audit(1791289753.557:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.6.707" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc16ff0b199 code=0x7ffc0000 [ 199.041276][ T26] audit: type=1326 audit(1791289753.557:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.6.707" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ff0b199 code=0x7ffc0000 [ 199.382879][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.710'. [ 199.447990][ T7551] sg_write: data in/out 1541030359/2 bytes for SCSI command 0x63-- guessing data in; [ 199.447990][ T7551] program syz.5.712 not setting count and/or reply_len properly [ 199.479406][ T26] audit: type=1326 audit(1791289753.557:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.6.707" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc16ff0b199 code=0x7ffc0000 [ 200.573185][ T26] audit: type=1326 audit(1791289753.557:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7514 comm="syz.6.707" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ff0b199 code=0x7ffc0000 [ 202.042288][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.322454][ T4229] usb 6-1: Using ep0 maxpacket: 16 [ 202.455082][ T4229] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.517450][ T4229] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.722500][ T4229] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 202.756510][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.782353][ T4229] usb 6-1: Product: syz [ 202.786535][ T4229] usb 6-1: Manufacturer: syz [ 202.821555][ T4229] usb 6-1: SerialNumber: syz [ 202.842614][ T4229] usb 6-1: config 0 descriptor?? [ 203.142307][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 203.157996][ T4229] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 203.244344][ T4229] imon:send_packet: packet tx failed (-71) [ 203.272288][ T4229] imon 6-1:0.0: panel buttons/knobs setup failed [ 203.354760][ T4229] rc_core: IR keymap rc-imon-pad not found [ 203.365607][ T4229] Registered IR keymap rc-empty [ 203.370574][ T4229] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 203.496660][ T4229] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 203.582364][ T4229] imon:send_packet: packet tx failed (-71) [ 203.620219][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 203.642285][ T4229] imon 6-1:0.0: remote input dev register failed [ 203.670223][ T4229] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 203.762206][ C0] net_ratelimit: 44 callbacks suppressed [ 203.846584][ T4229] imon 6-1:0.0: unable to initialize intf0, err 0 [ 203.885548][ T4229] imon:imon_probe: failed to initialize context! [ 203.937780][ T4229] imon 6-1:0.0: unable to register, err -19 [ 204.020605][ T4229] usb 6-1: USB disconnect, device number 2 [ 204.277042][ T7635] loop1: detected capacity change from 0 to 32768 [ 204.321343][ T7635] (syz.1.728,7635,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 204.321343][ T7635] " or missing value [ 204.406579][ T7635] (syz.1.728,7635,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 204.434974][ T4229] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 204.775713][ T7644] 9pnet_virtio: no channels available for device syz [ 204.783516][ T7635] loop1: detected capacity change from 0 to 64 [ 204.812354][ T4229] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 204.891924][ T4229] usb 6-1: can't read configurations, error -71 [ 207.681412][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.747'. [ 207.854868][ T6818] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 208.122269][ T6818] usb 2-1: Using ep0 maxpacket: 16 [ 208.252531][ T6818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.320267][ T6818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.513966][ T7709] loop7: detected capacity change from 0 to 32768 [ 208.522405][ T6818] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 208.588086][ T6818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.606393][ T7709] (syz.7.750,7709,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 208.606393][ T7709] " or missing value [ 208.661051][ T7737] device batadv_slave_1 entered promiscuous mode [ 208.684842][ T6818] usb 2-1: Product: syz [ 208.689030][ T6818] usb 2-1: Manufacturer: syz [ 208.725686][ T7736] device batadv_slave_1 left promiscuous mode [ 208.733202][ T7709] (syz.7.750,7709,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 208.745049][ T6818] usb 2-1: SerialNumber: syz [ 208.793563][ T6818] usb 2-1: config 0 descriptor?? [ 208.801524][ T6271] net_ratelimit: 51 callbacks suppressed [ 208.924611][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.757'. [ 209.075768][ T6818] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 209.092251][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 209.162359][ T6818] imon:send_packet: packet tx failed (-71) [ 209.202648][ T6818] imon 2-1:0.0: panel buttons/knobs setup failed [ 209.402258][ T6818] rc_core: IR keymap rc-imon-pad not found [ 209.431321][ T6818] Registered IR keymap rc-empty [ 209.456025][ T6818] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 209.499287][ T6818] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 209.555398][ T6818] imon:send_packet: packet tx failed (-71) [ 209.583769][ T6818] imon 2-1:0.0: remote input dev register failed [ 209.601617][ T6818] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 209.737736][ T6818] imon 2-1:0.0: unable to initialize intf0, err 0 [ 209.778760][ T6818] imon:imon_probe: failed to initialize context! [ 209.807028][ T7732] 9pnet_virtio: no channels available for device syz [ 209.869879][ T6818] imon 2-1:0.0: unable to register, err -19 [ 209.922070][ T6818] usb 2-1: USB disconnect, device number 4 [ 210.220160][ T7769] device bridge_slave_1 left promiscuous mode [ 210.293144][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.312218][ T6818] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 210.428661][ T7769] device bridge_slave_0 left promiscuous mode [ 210.514361][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.209508][ T7799] device batadv_slave_1 entered promiscuous mode [ 211.311342][ T7797] device batadv_slave_1 left promiscuous mode [ 212.144642][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.773'. [ 212.460933][ T7805] loop5: detected capacity change from 0 to 32768 [ 212.560734][ T7805] (syz.5.769,7805,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 212.560734][ T7805] " or missing value [ 212.732684][ T7805] (syz.5.769,7805,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 213.312580][ T6818] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 213.354640][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.362022][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.475407][ T7854] device batadv_slave_1 entered promiscuous mode [ 213.500652][ T7858] device bridge_slave_1 left promiscuous mode [ 213.537502][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.569304][ T7858] device bridge_slave_0 left promiscuous mode [ 213.594460][ T6818] usb 8-1: Using ep0 maxpacket: 16 [ 213.601991][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.631154][ T7823] 9pnet_virtio: no channels available for device syz [ 213.728121][ T7853] device batadv_slave_1 left promiscuous mode [ 213.742790][ T6818] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.791971][ T6818] usb 8-1: config 0 interface 0 has no altsetting 0 [ 213.982503][ T6818] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 214.021661][ T155] net_ratelimit: 56 callbacks suppressed [ 214.040959][ T6818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.183902][ T6818] usb 8-1: Product: syz [ 214.219417][ T6818] usb 8-1: Manufacturer: syz [ 214.250687][ T6818] usb 8-1: SerialNumber: syz [ 214.317053][ T6818] usb 8-1: config 0 descriptor?? [ 214.682258][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 215.647859][ T6818] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input12 [ 215.789247][ T6818] imon:send_packet: packet tx failed (-71) [ 215.852259][ T6818] imon 8-1:0.0: panel buttons/knobs setup failed [ 216.002844][ T6818] rc_core: IR keymap rc-imon-pad not found [ 216.008670][ T6818] Registered IR keymap rc-empty [ 216.113289][ T6818] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 216.211677][ T6818] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 216.312374][ T6818] imon:send_packet: packet tx failed (-71) [ 216.392324][ T6818] imon 8-1:0.0: remote input dev register failed [ 216.438544][ T6818] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 216.567188][ T6818] imon 8-1:0.0: unable to initialize intf0, err 0 [ 216.581368][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.791'. [ 216.633918][ T6818] imon:imon_probe: failed to initialize context! [ 216.686692][ T6818] imon 8-1:0.0: unable to register, err -19 [ 216.776235][ T6818] usb 8-1: USB disconnect, device number 3 [ 217.429429][ T7930] device batadv_slave_1 entered promiscuous mode [ 217.503510][ T7929] device batadv_slave_1 left promiscuous mode [ 217.682687][ T6271] Bluetooth: hci0: command 0x0406 tx timeout [ 217.719022][ T6271] Bluetooth: hci3: command 0x0406 tx timeout [ 217.748612][ T7945] 9pnet: Insufficient options for proto=fd [ 217.808245][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.815556][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.036033][ T7949] device bridge_slave_1 left promiscuous mode [ 218.114160][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.171208][ T7949] device bridge_slave_0 left promiscuous mode [ 218.197258][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.042184][ C0] net_ratelimit: 47 callbacks suppressed [ 220.087512][ T7984] loop7: detected capacity change from 0 to 32768 [ 220.148618][ T7984] (syz.7.810,7984,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 220.148618][ T7984] " or missing value [ 220.281156][ T7984] (syz.7.810,7984,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 222.523049][ T7999] sched: RT throttling activated [ 222.561936][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 223.560802][ T6264] Bluetooth: hci4: command 0x0409 tx timeout [ 223.922411][ T8007] device bridge_slave_1 left promiscuous mode [ 223.928616][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.077636][ T8007] device bridge_slave_0 left promiscuous mode [ 224.125208][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.882177][ C0] net_ratelimit: 36 callbacks suppressed [ 224.972038][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.039221][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.101121][ T7988] device bridge_slave_0 entered promiscuous mode [ 225.169724][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.262666][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.270543][ T7988] device bridge_slave_1 entered promiscuous mode [ 225.544435][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.698392][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.922477][ T6271] Bluetooth: hci4: command 0x041b tx timeout [ 225.991454][ T7988] team0: Port device team_slave_0 added [ 226.073538][ T7988] team0: Port device team_slave_1 added [ 226.298927][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.364878][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.539857][ T8074] loop1: detected capacity change from 0 to 128 [ 226.551060][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.595498][ T8074] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 226.629612][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.668094][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.710818][ T8074] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.732482][ T8074] ext2 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.808643][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.139627][ T7988] device hsr_slave_0 entered promiscuous mode [ 227.258650][ T7988] device hsr_slave_1 entered promiscuous mode [ 227.396491][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.425428][ T7988] Cannot create hsr debugfs directory [ 227.823547][ T155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.950445][ T155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.002366][ T6271] Bluetooth: hci4: command 0x040f tx timeout [ 228.070648][ T155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.241530][ T155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.057943][ T7988] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 229.258606][ T7988] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 229.446783][ T7988] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 229.618369][ T7988] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 229.922215][ C0] net_ratelimit: 53 callbacks suppressed [ 229.983179][ T13] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 230.080078][ T8110] chnl_net:caif_netlink_parms(): no params data found [ 230.089083][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 230.211181][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.366217][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.417242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.424801][ T13] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 230.458910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.487395][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.586866][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.714675][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.762498][ T13] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.782886][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.789947][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.828061][ T13] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.870116][ T13] usb 2-1: Product: syz [ 230.898121][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.909922][ T13] usb 2-1: Manufacturer: syz [ 230.938255][ T13] usb 2-1: SerialNumber: syz [ 230.954522][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.990001][ T13] usb 2-1: config 0 descriptor?? [ 231.016491][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.023594][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.035544][ T4226] Bluetooth: hci2: command 0x0409 tx timeout [ 231.218578][ T13] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 231.275454][ T7762] udevd[7762]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.342931][ T4226] usb 2-1: USB disconnect, device number 6 [ 231.362887][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.370726][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.452660][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.521957][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.578223][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.624110][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.740249][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.748636][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.793598][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.820468][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.936858][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.023564][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.078923][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.122232][ T6818] Bluetooth: hci2: command 0x041b tx timeout [ 233.180887][ T155] device hsr_slave_0 left promiscuous mode [ 233.231496][ T155] device hsr_slave_1 left promiscuous mode [ 233.259318][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.278093][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.302926][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.331103][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.351692][ T155] device veth1_vlan left promiscuous mode [ 233.375726][ T155] device veth0_vlan left promiscuous mode [ 234.010393][ T155] team0 (unregistering): Port device team_slave_1 removed [ 234.114416][ T155] team0 (unregistering): Port device team_slave_0 removed [ 234.203443][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.278355][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.638850][ T155] bond0 (unregistering): Released all slaves [ 234.785516][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.862778][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.940279][ T8110] device bridge_slave_0 entered promiscuous mode [ 234.989074][ T8205] netlink: 'syz.1.853': attribute type 4 has an invalid length. [ 235.081052][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.138016][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.222223][ T145] net_ratelimit: 77 callbacks suppressed [ 235.236647][ T8110] device bridge_slave_1 entered promiscuous mode [ 235.280766][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 235.307080][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.356784][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.408347][ T8222] loop1: detected capacity change from 0 to 512 [ 235.470954][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.525376][ T8222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 235.624485][ T8110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.661080][ T8222] EXT4-fs (loop1): 1 truncate cleaned up [ 235.714126][ T8222] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,resuid=0x0000000000000000,bsdgroups,nombcache,nojournal_checksum,dax=never,grpid,,errors=continue. Quota mode: none. [ 235.833812][ T8110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.150696][ T8110] team0: Port device team_slave_0 added [ 236.210117][ T8110] team0: Port device team_slave_1 added [ 236.295285][ T8252] netlink: 'syz.6.863': attribute type 4 has an invalid length. [ 236.536171][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.580331][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.741062][ T8110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.827583][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.878613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.108776][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 238.348494][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.381984][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.458891][ T8110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.509464][ T7988] device veth0_vlan entered promiscuous mode [ 238.546148][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.586729][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.669354][ T7988] device veth1_vlan entered promiscuous mode [ 238.748176][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.796798][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.865938][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.033108][ T7988] device veth0_macvtap entered promiscuous mode [ 239.110496][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.156865][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.233972][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.353312][ T8295] netlink: 'syz.5.873': attribute type 4 has an invalid length. [ 239.412643][ T7988] device veth1_macvtap entered promiscuous mode [ 239.469100][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.530262][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.614466][ T8110] device hsr_slave_0 entered promiscuous mode [ 239.675090][ T8110] device hsr_slave_1 entered promiscuous mode [ 239.908190][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.989473][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.060240][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.128468][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.217734][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.242360][ C0] net_ratelimit: 48 callbacks suppressed [ 240.297375][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.349598][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.396978][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.441312][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.459337][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 240.525573][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.581975][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.637895][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.710097][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.755797][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.821333][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.841461][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.855537][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.865898][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.879926][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.899120][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.975538][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.882'. [ 241.103482][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.151075][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.190159][ T7988] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.227653][ T7988] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.238303][ T7988] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.250614][ T7988] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.555163][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.612749][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.723588][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.765463][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.802928][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.866069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.099737][ T8110] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 242.219891][ T8110] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 242.282554][ T8110] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 242.384764][ T8110] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 242.500707][ T8366] bond0: (slave bond_slave_0): Releasing backup interface [ 242.910590][ T8110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.009129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.056246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.127860][ T8110] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.222067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.267004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.335887][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.343019][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.471684][ T8392] netlink: 'syz.8.887': attribute type 4 has an invalid length. [ 243.507867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.551412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.618187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.687511][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.694631][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.807600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.880137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.935835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.018284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.133642][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.889'. [ 244.190866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.234379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.287446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.331076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.389557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.426367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.456224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.481787][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.081079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.136216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.195567][ T8110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.444822][ C0] net_ratelimit: 100 callbacks suppressed [ 246.526894][ T8462] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 246.545479][ T8462] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 [ 246.566867][ T8462] pci 0000:00:07.0: reg 0x10: [io 0xc0a0-0xc0bf] [ 246.584871][ T8462] pci 0000:00:07.0: reg 0x14: [mem 0xfe802000-0xfe80203f] [ 246.653292][ T8462] pci 0000:00:07.0: BAR 1: assigned [mem 0xc0000000-0xc000003f] [ 246.667612][ T8462] pci 0000:00:07.0: BAR 0: assigned [io 0xc0a0-0xc0bf] [ 246.735684][ T6818] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 246.890616][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 247.244974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.321824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.453232][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.497456][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.538522][ T8110] device veth0_vlan entered promiscuous mode [ 247.568124][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.599905][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.641210][ T8110] device veth1_vlan entered promiscuous mode [ 247.758013][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.907'. [ 247.851430][ T8110] device veth0_macvtap entered promiscuous mode [ 247.891023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.010478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.091688][ T8110] device veth1_macvtap entered promiscuous mode [ 248.128245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.160564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.250353][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.359431][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.391474][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.414805][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.457320][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.492278][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.520470][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.555464][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.566984][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.580924][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.606011][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.651846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.679538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.724426][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.778406][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.791524][ T8524] loop5: detected capacity change from 0 to 512 [ 248.803207][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.845411][ T8524] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.864218][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.878901][ T8524] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.890955][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.912073][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.929796][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.981859][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.998864][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.018318][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.035373][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.066931][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.101826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.156528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.199711][ T8110] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.240780][ T8110] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.270147][ T8110] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.287964][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 249.306725][ T8110] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.424433][ T7] usb 2-1: config 0 has no interfaces? [ 249.594871][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.604999][ T7] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 249.645065][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.656456][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.688639][ T7] usb 2-1: Product: syz [ 249.720510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.732106][ T7] usb 2-1: Manufacturer: syz [ 249.736772][ T7] usb 2-1: SerialNumber: syz [ 249.758428][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.799111][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.811698][ T7] usb 2-1: config 0 descriptor?? [ 249.860703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.369060][ T8547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.388584][ T8522] udc-core: couldn't find an available UDC or it's busy [ 250.461468][ C0] net_ratelimit: 95 callbacks suppressed [ 250.472514][ T8522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.770831][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.920'. [ 251.147984][ T8545] loop9: detected capacity change from 0 to 32768 [ 251.219764][ T8545] (syz.9.836,8545,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 251.219764][ T8545] " or missing value [ 251.706451][ T8545] (syz.9.836,8545,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 255.447597][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 255.522170][ C0] net_ratelimit: 61 callbacks suppressed [ 255.684691][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.691063][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.379968][ T8615] loop8: detected capacity change from 0 to 32768 [ 256.439218][ T8610] loop9: detected capacity change from 0 to 40427 [ 256.473022][ T8615] (syz.8.934,8615,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 256.473022][ T8615] " or missing value [ 256.594566][ T8615] (syz.8.934,8615,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 256.606732][ T8610] F2FS-fs (loop9): invalid crc value [ 256.714958][ T8610] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 257.062726][ T8610] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 259.568063][ T8110] attempt to access beyond end of device [ 259.568063][ T8110] loop9: rw=2049, want=45104, limit=40427 [ 259.610931][ T8667] loop5: detected capacity change from 0 to 128 [ 260.710940][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'. [ 260.802569][ C0] net_ratelimit: 51 callbacks suppressed [ 260.880882][ T26] audit: type=1800 audit(1791290072.283:82): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.948" name=08 dev="sda1" ino=2053 res=0 errno=0 [ 262.643101][ T26] audit: type=1800 audit(1791290074.053:83): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.948" name=08 dev="sda1" ino=2053 res=0 errno=0 [ 262.750368][ T8713] loop1: detected capacity change from 0 to 2048 [ 262.995653][ T8707] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 263.060249][ T8713] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.814959][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.960'. [ 264.971570][ T8765] loop1: detected capacity change from 0 to 256 [ 265.027426][ T8765] exfat: Deprecated parameter 'utf8' [ 265.100037][ T8765] exfat: Deprecated parameter 'utf8' [ 265.226628][ T8765] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 266.322251][ C0] net_ratelimit: 69 callbacks suppressed [ 267.188653][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.969'. [ 267.935691][ T8797] loop5: detected capacity change from 0 to 32768 [ 267.985892][ T8797] (syz.5.970,8797,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 267.985892][ T8797] " or missing value [ 268.090587][ T8797] (syz.5.970,8797,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 268.401068][ T8802] overlayfs: failed to clone upperpath [ 268.474580][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.481902][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.534759][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.628071][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.425496][ T8792] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.446735][ T8792] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.476110][ T8792] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.520386][ T8792] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.124678][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.8.976'. [ 271.442159][ C0] net_ratelimit: 61 callbacks suppressed [ 271.468989][ T8840] loop5: detected capacity change from 0 to 2048 [ 271.755368][ T8840] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.163951][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.992'. [ 274.196350][ T8874] loop1: detected capacity change from 0 to 32768 [ 274.241868][ T8874] (syz.1.985,8874,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 274.241868][ T8874] " or missing value [ 274.347852][ T8874] (syz.1.985,8874,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 275.445292][ T8936] loop9: detected capacity change from 0 to 512 [ 275.451809][ T8938] netlink: 'syz.5.1002': attribute type 1 has an invalid length. [ 275.519278][ T8936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 275.587541][ T8936] System zones: 1-12 [ 275.611842][ T8938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.631423][ T8936] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.1001: missing EA_INODE flag [ 275.754676][ T8942] bond1: (slave dummy0): making interface the new active one [ 275.779196][ T8936] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1001: error while reading EA inode 12 err=-117 [ 275.837162][ T8942] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 275.871797][ T8936] EXT4-fs (loop9): 1 orphan inode deleted [ 275.885702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 275.910394][ T8936] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 277.512436][ T155] net_ratelimit: 55 callbacks suppressed [ 278.550967][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1006'. [ 280.670264][ T8965] FAULT_INJECTION: forcing a failure. [ 280.670264][ T8965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.683762][ T8965] CPU: 0 PID: 8965 Comm: syz.5.1009 Not tainted syzkaller #0 [ 280.691132][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.701192][ T8965] Call Trace: [ 280.704466][ T8965] [ 280.707403][ T8965] dump_stack_lvl+0x188/0x250 [ 280.712074][ T8965] ? show_regs_print_info+0x20/0x20 [ 280.717283][ T8965] ? load_image+0x410/0x410 [ 280.721802][ T8965] ? uncharge_page+0x490/0x490 [ 280.726557][ T8965] should_fail+0x383/0x4b0 [ 280.730974][ T8965] prepare_alloc_pages+0x1e3/0x5b0 [ 280.736082][ T8965] __alloc_pages+0x11b/0x480 [ 280.740665][ T8965] ? zone_statistics+0x170/0x170 [ 280.745604][ T8965] ? rcu_lock_acquire+0x30/0x30 [ 280.750447][ T8965] ? alloc_pages+0x452/0x560 [ 280.755029][ T8965] __get_free_pages+0x8/0x30 [ 280.759623][ T8965] __tlb_remove_page_size+0x1f2/0x3f0 [ 280.764993][ T8965] unmap_page_range+0xfcf/0x2410 [ 280.769935][ T8965] unmap_vmas+0x131/0x250 [ 280.774254][ T8965] ? unmap_page_range+0x2410/0x2410 [ 280.779436][ T8965] ? __mutex_lock_common+0x435/0x2400 [ 280.784813][ T8965] ? exit_mm_release+0x16/0x30 [ 280.789574][ T8965] exit_mmap+0x3b9/0x640 [ 280.793812][ T8965] ? vm_brk+0x20/0x20 [ 280.797796][ T8965] ? uprobe_clear_state+0x2f6/0x460 [ 280.803015][ T8965] __mmput+0x115/0x390 [ 280.807077][ T8965] exit_mm+0x632/0x7b0 [ 280.811140][ T8965] ? perf_pmu_migrate_context+0xb70/0xb70 [ 280.816865][ T8965] ? do_exit+0x2110/0x2110 [ 280.821275][ T8965] ? __ia32_sys_timer_delete+0x40/0x40 [ 280.826729][ T8965] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 280.832206][ T8965] ? tty_audit_exit+0x149/0x1f0 [ 280.837075][ T8965] do_exit+0x5b8/0x2110 [ 280.841224][ T8965] ? put_task_struct+0x80/0x80 [ 280.845978][ T8965] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 280.851956][ T8965] ? _raw_spin_lock_irq+0xb7/0xf0 [ 280.856975][ T8965] do_group_exit+0x12c/0x2f0 [ 280.861554][ T8965] ? lockdep_hardirqs_on+0x94/0x140 [ 280.866742][ T8965] get_signal+0x7eb/0x12e0 [ 280.871182][ T8965] arch_do_signal_or_restart+0xe6/0x12a0 [ 280.876821][ T8965] ? futex_exit_release+0x1c0/0x1c0 [ 280.882038][ T8965] ? get_sigframe_size+0x10/0x10 [ 280.886989][ T8965] ? __context_tracking_exit+0x4c/0x80 [ 280.892451][ T8965] ? exit_to_user_mode_loop+0x3b/0x130 [ 280.897904][ T8965] exit_to_user_mode_loop+0x9e/0x130 [ 280.903192][ T8965] exit_to_user_mode_prepare+0xee/0x180 [ 280.908730][ T8965] syscall_exit_to_user_mode+0x16/0x40 [ 280.914176][ T8965] do_syscall_64+0x58/0xa0 [ 280.918580][ T8965] ? clear_bhb_loop+0x30/0x80 [ 280.923244][ T8965] ? clear_bhb_loop+0x30/0x80 [ 280.927914][ T8965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.933802][ T8965] RIP: 0033:0x7f00d94ea199 [ 280.938206][ T8965] Code: Unable to access opcode bytes at RIP 0x7f00d94ea16f. [ 280.945555][ T8965] RSP: 002b:00007f00d77420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.953960][ T8965] RAX: 0000000000000001 RBX: 00007f00d9771fa8 RCX: 00007f00d94ea199 [ 280.961933][ T8965] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f00d9771fac [ 280.969898][ T8965] RBP: 00007f00d9771fa0 R08: 00254e8f69035bd6 R09: 0000000000000000 [ 280.977864][ T8965] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 280.985828][ T8965] R13: 00007f00d9772038 R14: 00007ffdc4b1bca0 R15: 00007ffdc4b1bd88 [ 280.993805][ T8965] [ 281.509411][ T8992] netlink: 'syz.9.1015': attribute type 1 has an invalid length. [ 281.622264][ T6264] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 282.002547][ T6264] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 282.035299][ T6264] usb 9-1: config 0 has no interface number 0 [ 282.063572][ T6264] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.295556][ T6264] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 282.341362][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1020'. [ 282.351646][ T6264] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.390804][ T6264] usb 9-1: Product: syz [ 282.405492][ T6264] usb 9-1: Manufacturer: syz [ 282.424921][ T6264] usb 9-1: SerialNumber: syz [ 282.448966][ T6264] usb 9-1: config 0 descriptor?? [ 282.559298][ T6264] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 282.566882][ C0] net_ratelimit: 45 callbacks suppressed [ 283.115186][ T9051] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 283.265185][ T9051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.375572][ T9055] bond1: (slave dummy0): making interface the new active one [ 283.487315][ T9055] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 283.539135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 283.741088][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 284.165013][ T9091] loop1: detected capacity change from 0 to 256 [ 284.199334][ T9091] exfat: Deprecated parameter 'utf8' [ 284.241167][ T9091] exfat: Deprecated parameter 'utf8' [ 284.289838][ T9091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 284.372206][ C0] usb 9-1: yurex_control_callback - control failed: -2 [ 284.396280][ T6264] usb 9-1: USB disconnect, device number 2 [ 284.453660][ T6264] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 284.500222][ T9095] loop9: detected capacity change from 0 to 2048 [ 284.660165][ T9095] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.014376][ T9118] netlink: 'syz.8.1041': attribute type 1 has an invalid length. [ 286.238094][ T9118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.355679][ T9123] bond1: (slave dummy0): making interface the new active one [ 286.425761][ T9123] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 286.556763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 286.618570][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1043'. [ 288.000208][ C0] net_ratelimit: 49 callbacks suppressed [ 288.139880][ T9119] loop1: detected capacity change from 0 to 32768 [ 288.214397][ T9119] (syz.1.1042,9119,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 288.214397][ T9119] " or missing value [ 288.390317][ T9119] (syz.1.1042,9119,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 288.681888][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1054'. [ 290.767595][ T9194] ================================================================== [ 290.776596][ T9194] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290 [ 290.783454][ T9194] Read of size 1 at addr ffff88805cfc93d0 by task syz.8.1059/9194 [ 290.791250][ T9194] [ 290.793566][ T9194] CPU: 0 PID: 9194 Comm: syz.8.1059 Not tainted syzkaller #0 [ 290.800945][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 290.811002][ T9194] Call Trace: [ 290.814277][ T9194] [ 290.817202][ T9194] dump_stack_lvl+0x188/0x250 [ 290.821877][ T9194] ? show_regs_print_info+0x20/0x20 [ 290.827073][ T9194] ? _printk+0xda/0x130 [ 290.831229][ T9194] ? load_image+0x410/0x410 [ 290.835727][ T9194] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 290.841188][ T9194] print_address_description+0x60/0x2d0 [ 290.846730][ T9194] ? string+0x204/0x290 [ 290.850880][ T9194] kasan_report+0xdf/0x130 [ 290.855293][ T9194] ? string+0x204/0x290 [ 290.859456][ T9194] string+0x204/0x290 [ 290.863431][ T9194] vsnprintf+0x10db/0x1c20 [ 290.867850][ T9194] pointer+0x7b2/0xc60 [ 290.871920][ T9194] ? string+0x290/0x290 [ 290.876072][ T9194] ? format_decode+0x8b1/0x1330 [ 290.880921][ T9194] vsnprintf+0xd7c/0x1c20 [ 290.885274][ T9194] vprintk_store+0x378/0x11b0 [ 290.889955][ T9194] ? printk_parse_prefix+0x310/0x310 [ 290.895239][ T9194] ? mark_lock+0x94/0x320 [ 290.899569][ T9194] ? __lock_acquire+0x12df/0x7d40 [ 290.904599][ T9194] ? mark_lock+0x94/0x320 [ 290.908924][ T9194] ? 0xffffffffa002a000 [ 290.913074][ T9194] vprintk_emit+0x85/0x150 [ 290.917505][ T9194] _printk+0xda/0x130 [ 290.921484][ T9194] ? load_image+0x410/0x410 [ 290.925983][ T9194] __dynamic_pr_debug+0x196/0x240 [ 290.931020][ T9194] ? collect_syscall+0x6a0/0x6a0 [ 290.935969][ T9194] ? rcu_lock_release+0x5/0x20 [ 290.940758][ T9194] idletimer_tg_checkentry_v1+0xba5/0xe10 [ 290.946485][ T9194] xt_check_target+0x49d/0xbf0 [ 290.951247][ T9194] ? 0xffffffffa002a000 [ 290.955398][ T9194] ? xt_find_jump_offset+0xe0/0xe0 [ 290.960514][ T9194] ? stack_trace_save+0xa6/0xf0 [ 290.965361][ T9194] ? nft_target_init+0x1d4/0x980 [ 290.970294][ T9194] nft_target_init+0x664/0x980 [ 290.975091][ T9194] ? nft_target_release_ops+0x70/0x70 [ 290.980474][ T9194] ? ____sys_sendmsg+0x5be/0x8f0 [ 290.985408][ T9194] ? ___sys_sendmsg+0x236/0x2e0 [ 290.990274][ T9194] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 290.995293][ T9194] ? do_syscall_64+0x4c/0xa0 [ 290.999884][ T9194] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.005970][ T9194] nf_tables_newrule+0x16cc/0x27a0 [ 291.011085][ T9194] ? nf_tables_delchain+0xf00/0xf00 [ 291.016278][ T9194] ? __lock_acquire+0x7d40/0x7d40 [ 291.021304][ T9194] ? nf_tables_newtable+0xce0/0x1680 [ 291.026591][ T9194] ? __nla_parse+0x3c/0x50 [ 291.031008][ T9194] nfnetlink_rcv+0x1117/0x2450 [ 291.035781][ T9194] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 291.041342][ T9194] ? rcu_lock_release+0x5/0x20 [ 291.046102][ T9194] ? __lock_acquire+0x7d40/0x7d40 [ 291.051128][ T9194] netlink_unicast+0x78f/0x940 [ 291.055891][ T9194] netlink_sendmsg+0x8ba/0xbe0 [ 291.060647][ T9194] ? netlink_getsockopt+0x570/0x570 [ 291.065836][ T9194] ? aa_sock_msg_perm+0x94/0x150 [ 291.070770][ T9194] ? apparmor_socket_sendmsg+0x88/0x230 [ 291.076318][ T9194] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 291.081609][ T9194] ? security_socket_sendmsg+0x7c/0xa0 [ 291.087069][ T9194] ? netlink_getsockopt+0x570/0x570 [ 291.092270][ T9194] ____sys_sendmsg+0x5be/0x8f0 [ 291.097068][ T9194] ? __sys_sendmsg_sock+0x30/0x30 [ 291.102113][ T9194] ? import_iovec+0x6f/0xa0 [ 291.106641][ T9194] ___sys_sendmsg+0x236/0x2e0 [ 291.111319][ T9194] ? __sys_sendmsg+0x290/0x290 [ 291.116097][ T9194] __se_sys_sendmsg+0x1b7/0x2a0 [ 291.120979][ T9194] ? __x64_sys_sendmsg+0x80/0x80 [ 291.125905][ T9194] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 291.131893][ T9194] ? lockdep_hardirqs_on+0x94/0x140 [ 291.137085][ T9194] do_syscall_64+0x4c/0xa0 [ 291.141511][ T9194] ? clear_bhb_loop+0x30/0x80 [ 291.146182][ T9194] ? clear_bhb_loop+0x30/0x80 [ 291.150858][ T9194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.156763][ T9194] RIP: 0033:0x7f3dd6781199 [ 291.161165][ T9194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.180766][ T9194] RSP: 002b:00007f3dd49d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.189186][ T9194] RAX: ffffffffffffffda RBX: 00007f3dd6a08fa0 RCX: 00007f3dd6781199 [ 291.197163][ T9194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 291.205150][ T9194] RBP: 00007f3dd68188e0 R08: 0000000000000000 R09: 0000000000000000 [ 291.213181][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.221163][ T9194] R13: 00007f3dd6a09038 R14: 00007f3dd6a08fa0 R15: 00007fff4d3d7f98 [ 291.229148][ T9194] [ 291.232166][ T9194] [ 291.234479][ T9194] Allocated by task 9194: [ 291.238803][ T9194] __kasan_kmalloc+0xaf/0xe0 [ 291.243388][ T9194] nf_tables_newrule+0x1496/0x27a0 [ 291.248515][ T9194] nfnetlink_rcv+0x1117/0x2450 [ 291.253295][ T9194] netlink_unicast+0x78f/0x940 [ 291.258071][ T9194] netlink_sendmsg+0x8ba/0xbe0 [ 291.262822][ T9194] ____sys_sendmsg+0x5be/0x8f0 [ 291.267579][ T9194] ___sys_sendmsg+0x236/0x2e0 [ 291.272269][ T9194] __se_sys_sendmsg+0x1b7/0x2a0 [ 291.277119][ T9194] do_syscall_64+0x4c/0xa0 [ 291.281567][ T9194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.287456][ T9194] [ 291.289772][ T9194] Last potentially related work creation: [ 291.295498][ T9194] kasan_save_stack+0x35/0x60 [ 291.300178][ T9194] kasan_record_aux_stack+0xb8/0x100 [ 291.305459][ T9194] kvfree_call_rcu+0x105/0x7f0 [ 291.310207][ T9194] cfg80211_update_known_bss+0x184/0xb60 [ 291.315855][ T9194] cfg80211_bss_update+0x156/0x21f0 [ 291.321040][ T9194] cfg80211_inform_bss_frame_data+0x88d/0x1ed0 [ 291.327194][ T9194] ieee80211_bss_info_update+0x6ba/0xa80 [ 291.332817][ T9194] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 291.338975][ T9194] ieee80211_iface_work+0x714/0xc50 [ 291.344197][ T9194] cfg80211_wiphy_work+0x224/0x260 [ 291.349304][ T9194] process_one_work+0x867/0xff0 [ 291.354168][ T9194] worker_thread+0xad7/0x12a0 [ 291.358836][ T9194] kthread+0x42e/0x520 [ 291.362897][ T9194] ret_from_fork+0x1f/0x30 [ 291.367302][ T9194] [ 291.369610][ T9194] Second to last potentially related work creation: [ 291.376172][ T9194] kasan_save_stack+0x35/0x60 [ 291.380854][ T9194] kasan_record_aux_stack+0xb8/0x100 [ 291.386130][ T9194] kvfree_call_rcu+0x105/0x7f0 [ 291.390907][ T9194] ieee80211_check_fast_xmit+0x50f/0x10c0 [ 291.396618][ T9194] ieee80211_ibss_rx_queued_mgmt+0x14e3/0x2b50 [ 291.402771][ T9194] ieee80211_iface_work+0x714/0xc50 [ 291.408060][ T9194] cfg80211_wiphy_work+0x224/0x260 [ 291.413163][ T9194] process_one_work+0x867/0xff0 [ 291.418010][ T9194] worker_thread+0xad7/0x12a0 [ 291.422680][ T9194] kthread+0x42e/0x520 [ 291.426742][ T9194] ret_from_fork+0x1f/0x30 [ 291.431180][ T9194] [ 291.433491][ T9194] The buggy address belongs to the object at ffff88805cfc9380 [ 291.433491][ T9194] which belongs to the cache kmalloc-96 of size 96 [ 291.447358][ T9194] The buggy address is located 80 bytes inside of [ 291.447358][ T9194] 96-byte region [ffff88805cfc9380, ffff88805cfc93e0) [ 291.460449][ T9194] The buggy address belongs to the page: [ 291.466066][ T9194] page:ffffea000173f240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cfc9 [ 291.476210][ T9194] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 291.483763][ T9194] raw: 00fff00000000200 ffffea000079fa00 0000000a0000000a ffff888016c41780 [ 291.492362][ T9194] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 291.500933][ T9194] page dumped because: kasan: bad access detected [ 291.507778][ T9194] page_owner tracks the page as allocated [ 291.513494][ T9194] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 144, ts 74486779709, free_ts 74358922269 [ 291.530847][ T9194] get_page_from_freelist+0x24f6/0x2670 [ 291.536398][ T9194] __alloc_pages+0x1ee/0x480 [ 291.540986][ T9194] new_slab+0xc0/0x4b0 [ 291.545064][ T9194] ___slab_alloc+0x807/0xdd0 [ 291.549644][ T9194] __kmalloc+0x11d/0x340 [ 291.553871][ T9194] cfg80211_inform_bss_frame_data+0x525/0x1ed0 [ 291.560016][ T9194] ieee80211_bss_info_update+0x6ba/0xa80 [ 291.565642][ T9194] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 291.571785][ T9194] ieee80211_iface_work+0x714/0xc50 [ 291.576969][ T9194] cfg80211_wiphy_work+0x224/0x260 [ 291.582074][ T9194] process_one_work+0x867/0xff0 [ 291.586915][ T9194] worker_thread+0xad7/0x12a0 [ 291.591576][ T9194] kthread+0x42e/0x520 [ 291.595642][ T9194] ret_from_fork+0x1f/0x30 [ 291.600042][ T9194] page last free stack trace: [ 291.604696][ T9194] free_unref_page_prepare+0x637/0x6c0 [ 291.610145][ T9194] free_unref_page_list+0x119/0x830 [ 291.615327][ T9194] release_pages+0x185f/0x1bd0 [ 291.620079][ T9194] tlb_finish_mmu+0x1b4/0x370 [ 291.624744][ T9194] exit_mmap+0x3d0/0x640 [ 291.628969][ T9194] __mmput+0x115/0x390 [ 291.633018][ T9194] exit_mm+0x632/0x7b0 [ 291.637083][ T9194] do_exit+0x5b8/0x2110 [ 291.641222][ T9194] do_group_exit+0x12c/0x2f0 [ 291.645799][ T9194] get_signal+0x7eb/0x12e0 [ 291.650207][ T9194] arch_do_signal_or_restart+0xe6/0x12a0 [ 291.655835][ T9194] exit_to_user_mode_loop+0x9e/0x130 [ 291.661109][ T9194] exit_to_user_mode_prepare+0xee/0x180 [ 291.666648][ T9194] syscall_exit_to_user_mode+0x16/0x40 [ 291.672114][ T9194] do_syscall_64+0x58/0xa0 [ 291.676543][ T9194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.682424][ T9194] [ 291.684745][ T9194] Memory state around the buggy address: [ 291.690359][ T9194] ffff88805cfc9280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 291.698498][ T9194] ffff88805cfc9300: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 291.706552][ T9194] >ffff88805cfc9380: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 291.714596][ T9194] ^ [ 291.721254][ T9194] ffff88805cfc9400: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 291.729312][ T9194] ffff88805cfc9480: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 291.737359][ T9194] ================================================================== [ 291.745402][ T9194] Disabling lock debugging due to kernel taint [ 291.751542][ T9194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 291.758717][ T9194] CPU: 0 PID: 9194 Comm: syz.8.1059 Tainted: G B syzkaller #0 [ 291.767473][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 291.777515][ T9194] Call Trace: [ 291.780783][ T9194] [ 291.783696][ T9194] dump_stack_lvl+0x188/0x250 [ 291.788364][ T9194] ? show_regs_print_info+0x20/0x20 [ 291.793544][ T9194] ? load_image+0x410/0x410 [ 291.798055][ T9194] panic+0x2f8/0x850 [ 291.801932][ T9194] ? __lock_acquire+0x7d40/0x7d40 [ 291.806941][ T9194] ? bpf_jit_dump+0xd0/0xd0 [ 291.811433][ T9194] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 291.817314][ T9194] ? _raw_spin_unlock+0x40/0x40 [ 291.822148][ T9194] ? string+0x204/0x290 [ 291.826302][ T9194] check_panic_on_warn+0x80/0xa0 [ 291.831222][ T9194] ? string+0x204/0x290 [ 291.835364][ T9194] end_report+0x6d/0xf0 [ 291.839514][ T9194] kasan_report+0x102/0x130 [ 291.844018][ T9194] ? string+0x204/0x290 [ 291.848174][ T9194] string+0x204/0x290 [ 291.852147][ T9194] vsnprintf+0x10db/0x1c20 [ 291.856556][ T9194] pointer+0x7b2/0xc60 [ 291.860629][ T9194] ? string+0x290/0x290 [ 291.864765][ T9194] ? format_decode+0x8b1/0x1330 [ 291.869734][ T9194] vsnprintf+0xd7c/0x1c20 [ 291.874062][ T9194] vprintk_store+0x378/0x11b0 [ 291.878728][ T9194] ? printk_parse_prefix+0x310/0x310 [ 291.884005][ T9194] ? mark_lock+0x94/0x320 [ 291.888319][ T9194] ? __lock_acquire+0x12df/0x7d40 [ 291.893347][ T9194] ? mark_lock+0x94/0x320 [ 291.897660][ T9194] ? 0xffffffffa002a000 [ 291.901812][ T9194] vprintk_emit+0x85/0x150 [ 291.906233][ T9194] _printk+0xda/0x130 [ 291.910197][ T9194] ? load_image+0x410/0x410 [ 291.914677][ T9194] __dynamic_pr_debug+0x196/0x240 [ 291.919689][ T9194] ? collect_syscall+0x6a0/0x6a0 [ 291.924616][ T9194] ? rcu_lock_release+0x5/0x20 [ 291.929383][ T9194] idletimer_tg_checkentry_v1+0xba5/0xe10 [ 291.935101][ T9194] xt_check_target+0x49d/0xbf0 [ 291.939860][ T9194] ? 0xffffffffa002a000 [ 291.944004][ T9194] ? xt_find_jump_offset+0xe0/0xe0 [ 291.949109][ T9194] ? stack_trace_save+0xa6/0xf0 [ 291.953950][ T9194] ? nft_target_init+0x1d4/0x980 [ 291.958883][ T9194] nft_target_init+0x664/0x980 [ 291.963644][ T9194] ? nft_target_release_ops+0x70/0x70 [ 291.969008][ T9194] ? ____sys_sendmsg+0x5be/0x8f0 [ 291.973949][ T9194] ? ___sys_sendmsg+0x236/0x2e0 [ 291.978805][ T9194] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 291.983814][ T9194] ? do_syscall_64+0x4c/0xa0 [ 291.988382][ T9194] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.994437][ T9194] nf_tables_newrule+0x16cc/0x27a0 [ 291.999534][ T9194] ? nf_tables_delchain+0xf00/0xf00 [ 292.004761][ T9194] ? __lock_acquire+0x7d40/0x7d40 [ 292.009778][ T9194] ? nf_tables_newtable+0xce0/0x1680 [ 292.015058][ T9194] ? __nla_parse+0x3c/0x50 [ 292.019480][ T9194] nfnetlink_rcv+0x1117/0x2450 [ 292.024246][ T9194] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 292.029817][ T9194] ? rcu_lock_release+0x5/0x20 [ 292.034590][ T9194] ? __lock_acquire+0x7d40/0x7d40 [ 292.039621][ T9194] netlink_unicast+0x78f/0x940 [ 292.044375][ T9194] netlink_sendmsg+0x8ba/0xbe0 [ 292.049132][ T9194] ? netlink_getsockopt+0x570/0x570 [ 292.054312][ T9194] ? aa_sock_msg_perm+0x94/0x150 [ 292.059239][ T9194] ? apparmor_socket_sendmsg+0x88/0x230 [ 292.064775][ T9194] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 292.070046][ T9194] ? security_socket_sendmsg+0x7c/0xa0 [ 292.075490][ T9194] ? netlink_getsockopt+0x570/0x570 [ 292.080691][ T9194] ____sys_sendmsg+0x5be/0x8f0 [ 292.085444][ T9194] ? __sys_sendmsg_sock+0x30/0x30 [ 292.090448][ T9194] ? import_iovec+0x6f/0xa0 [ 292.094931][ T9194] ___sys_sendmsg+0x236/0x2e0 [ 292.099593][ T9194] ? __sys_sendmsg+0x290/0x290 [ 292.104350][ T9194] __se_sys_sendmsg+0x1b7/0x2a0 [ 292.109184][ T9194] ? __x64_sys_sendmsg+0x80/0x80 [ 292.114102][ T9194] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 292.120089][ T9194] ? lockdep_hardirqs_on+0x94/0x140 [ 292.125288][ T9194] do_syscall_64+0x4c/0xa0 [ 292.129865][ T9194] ? clear_bhb_loop+0x30/0x80 [ 292.134616][ T9194] ? clear_bhb_loop+0x30/0x80 [ 292.139284][ T9194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.145158][ T9194] RIP: 0033:0x7f3dd6781199 [ 292.149553][ T9194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.169144][ T9194] RSP: 002b:00007f3dd49d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.177548][ T9194] RAX: ffffffffffffffda RBX: 00007f3dd6a08fa0 RCX: 00007f3dd6781199 [ 292.185526][ T9194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 292.193489][ T9194] RBP: 00007f3dd68188e0 R08: 0000000000000000 R09: 0000000000000000 [ 292.201456][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.209419][ T9194] R13: 00007f3dd6a09038 R14: 00007f3dd6a08fa0 R15: 00007fff4d3d7f98 [ 292.217411][ T9194] [ 292.220494][ T9194] Kernel Offset: disabled [ 292.224818][ T9194] Rebooting in 86400 seconds..