last executing test programs: 11m54.853819767s ago: executing program 2 (id=1634): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) 11m54.685529274s ago: executing program 2 (id=1637): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) sendto$inet6(r1, &(0x7f0000000140)="feff41", 0x3, 0x24004041, 0x0, 0x0) 11m53.049711625s ago: executing program 4 (id=1653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000001240)={@void, @val={0x0, 0x0, 0xfc0, 0x6, 0xee9f, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x18, 0xfbd, 0x64, 0x0, 0x9, 0x11, 0x0, @empty, @broadcast}, "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"}}, 0xfc7) 11m52.700110047s ago: executing program 4 (id=1659): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1b) read(r3, 0x0, 0x0) 11m52.693854711s ago: executing program 1 (id=1660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 11m52.51290566s ago: executing program 1 (id=1663): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298087f6, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m52.496553628s ago: executing program 4 (id=1664): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xe9, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) 11m52.324780394s ago: executing program 4 (id=1667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto$inet(r0, &(0x7f0000000500)="ea", 0x1, 0x800, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 11m52.149357997s ago: executing program 4 (id=1668): syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) socket(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x18, 0x4932, 0x82, 0x1, 0x1}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x62, 0x50, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x26, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x40, 0x9, {0xa, 0x25, 0x25, 0x3, 0xb, 0x320}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x0, 0x0, {0xa, 0x25, 0x25, 0x4, 0x8, 0x5}}}}}}}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 11m52.052116304s ago: executing program 1 (id=1670): ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000004ff"], 0x50}}, 0x0) socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 11m51.843270657s ago: executing program 1 (id=1674): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1b) read(r3, 0x0, 0x0) 11m51.677530493s ago: executing program 0 (id=1676): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, &(0x7f0000000480)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m51.601018749s ago: executing program 0 (id=1677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x80}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0xffffffff, 0x7fff, 0x1, 0x1ed67de4, 0x9, 0x0, 0x2e32, 0x6, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x5, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100002, 0x762, 0x3, 0xd, 0xb, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x3f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x0, 0x2, 0x180000, 0x4007, 0x408b, 0x5, 0x2af, 0xf7, 0x5, 0x6, 0x6, 0x10001, 0x6, 0xe0e, 0x8, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x210001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x3, 0x84, 0xfc, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0x8, 0x4, 0x2a2, 0xfffffff9, 0x3, 0x2, 0x5, 0x8, 0x0, 0x7, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0x3, 0x7fff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11m51.59451763s ago: executing program 1 (id=1678): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 11m51.592605685s ago: executing program 2 (id=1679): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000280)=r2, 0x12) 11m51.477002679s ago: executing program 1 (id=1680): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3b) 11m51.402909686s ago: executing program 2 (id=1681): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298087f6, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m51.159883242s ago: executing program 2 (id=1682): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m51.04875283s ago: executing program 2 (id=1683): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x0) 11m50.77527212s ago: executing program 4 (id=1684): ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000004ff"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 11m50.62649962s ago: executing program 0 (id=1685): bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x6}}}, 0x10, 0x0}, 0x0) 11m50.480567784s ago: executing program 0 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x48, 0x0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5817cd1317223ccff37e2f4d2e"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 11m50.428584174s ago: executing program 0 (id=1687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f00000001c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m50.309419955s ago: executing program 0 (id=1688): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1b) read(r3, 0x0, 0x0) 11m36.337200606s ago: executing program 32 (id=1680): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3b) 11m35.251538935s ago: executing program 33 (id=1688): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1b) read(r3, 0x0, 0x0) 11m35.189931526s ago: executing program 34 (id=1683): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x0) 11m35.115928287s ago: executing program 35 (id=1684): ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000004ff"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 6m2.823317451s ago: executing program 3 (id=2854): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000400)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)='Z', 0x1}], 0x1}}], 0x2, 0x24048050) 6m2.133130874s ago: executing program 3 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf9}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x49054}, 0x4000080) 6m0.916525108s ago: executing program 3 (id=2865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) shutdown(r0, 0x0) 6m0.368154142s ago: executing program 3 (id=2874): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="401170"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m57.109327562s ago: executing program 3 (id=2900): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x2) flock(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5m55.42795496s ago: executing program 3 (id=2913): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) 13.12431921s ago: executing program 8 (id=4734): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0xffff0000, 0x6, 0x9, 0x30385056, [0x8, 0x10], [0x9, 0x9], 0x1}}) 11.530411042s ago: executing program 8 (id=4737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf2564010101000000200100000000004e2100020a0000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x8000890) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000008, 0x4c033, 0xffffffffffffffff, 0x8000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000058) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0x78) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000600), 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) 10.592288841s ago: executing program 6 (id=4749): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) mkdirat(0xffffffffffffff9c, 0x0, 0x61c28c7771d1cf5f) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 8.557921062s ago: executing program 6 (id=4763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) close(0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 7.501714452s ago: executing program 8 (id=4773): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c842, 0x24) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb1d17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202e928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x10af}}, 0x1006) sendfile(r1, r0, 0x0, 0xe3aa6ea) 6.853712164s ago: executing program 6 (id=4777): fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000240)=@v2={0x2000000, [{}, {0x7, 0x3}]}, 0x14, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 5.150946137s ago: executing program 8 (id=4794): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff7, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000ecd600000900010073"], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.645248977s ago: executing program 6 (id=4799): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 4.410300942s ago: executing program 8 (id=4803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x80, r1, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x21}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x32040000) 4.292360666s ago: executing program 6 (id=4805): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0xffff0000, 0x6, 0x9, 0x30385056, [0x8, 0x10], [0x9, 0x9], 0x1}}) 4.12232435s ago: executing program 8 (id=4807): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000080)={[{@noinline_xattr}, {@inline_dentry, 0x0}, {@discard}, {@reserve_root={'reserver_root', 0x3d, 0x103}}, {@background_gc_off}, {@background_gc_on}, {@lazytime}, {@fsync_mode_strict}, {@fastboot}, {@nouser_xattr}, {@barrier}, {@user_xattr}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@alloc_mode_def}]}, 0x1, 0x5548, &(0x7f0000005880)="$eJzs3EtvG2UXAODj3Hr9+kWIBbuOVCElUh3V6UWwK9CKi2hVFViwAsd2LLe2J4pdN3TFgiViwT9BILFiyW9gwRpWiAWIHRLI805QExogihsT8jzS+Mwcz5w5Y0WRzvgSwLG1mP3yUyXOxamImI2IsxHFeqVcCtdTeC4isoiYeWyplPk/EgsRcToizo2Lp5qV8qlPL44uXP3xjZ+/+ubE3JnPvvx2elcNTNvzEdHbSOsPeynm7RTvlfn6qFPE3pVRGdMTvfvF9kIvT/mHrbWiwsP69n71mIuIy+20f77xYDCO6916YxzbnfUiv9FPJxyM2tt1igPu1TeL7WZrrYidQV7E9qPU19aj9L/t0WCY6jTXi/NtGw4bZUznaW210vVs3C9ioz8s86lu3mxtjeOojOXpopF3m0Ufawd4of/l3uz0H2xlo9bmoJP3s6srtRdWateqtc282Rq2rlTrvea1K9lSuzverTps1XvX23ne7rZWGnlvOVtqNxrVWi1butFa69T7Wa22cnnlUvXqcrl2MXv19jtZt5ktjePLnf6DYac7yNbzzSwdsZytrlx+cTm7UMveunUnu3P35s1bd95+78a7t1+69for5U5/aitbWr20ulqtXaqu1paP0fV/VDY9weuHA6lMuwGAo2e/8/958z8wAROY/+PJ8//m3Yh6kX+a83/smv+L+MH23L9j/p+LMP/v5UjNv8d9/v/r658/+F8D7JP5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg2Ppu/vPXipXFtH2mzP+vTD1TblciYiYifnuC2VjYUXO2rDO/x/7zu3r4uhJFhfE5TpTL6Yi4Xi6//n/P9iuTeyUAAADgv+mLD89/kqb19LA47YY4TOmmzczZ9ydUrxIR84s/7POok3vkZ8YPzx68q6T5fcRcbE2oWnEDa6/G96245TY3qWr/yOyOcPKxUElhZvcRC4fYHQAA8HTsnAQOdwoBAADgMH087QaYjuKz8+Vn8cu3906kUL4heGrHFgAAAHDUnPLdeQAAADgOivn/iP/+HwAAAPA30u//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7NzbrdowHAfgfwIp9Kaiqu9dpW8wRkfoCJQBugQj0BW6ADPQt45QkYrYqqCiRxzFhMPR90nBcUh+2Fwe7CADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANf0s9ksvi8/fuubs2/7KdMbAAAA4Jxds1l0O7NUf52Pv82H3ud6FRF1RJwbu4/ixUnmKOc0/zm/+acNPyK6hMNrTPL2KiI+5e33u2u/CwAAAPB8bVfreRqtp4fZrRvEkNKkTf3mc4+Mr0f7VUQ0s1+925XUh7wPhcK67/c4poXSugmsUmFpym1cKu0i3c/976zd9KioUlE/fH2xvgMAAAManRTDjkIAAAAY0pfjSnW7dlBEe/FH2J2Y/4ufbwVOUpFv7708qQEAAAB3yFwPAAAA3Jl28uhLuvH/U13/r1qm56z/BwAAAP2k9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4pl2zWWxX63nfnH3bT5neAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8If9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu30WOKg4A+JuZnY2JiuspV5yIgoU25rKJienEQjks/BOE49zEMxt/JFeYEMRr7OTqNKKliKCcXf6H1AmkiV2KKyJYK/Pr9mVz4PojM5vbzwfevO8Ow3vfNwtLvvMmBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI29tydxVhwGVZzW527dv7ZR9Len+sKNnTsrRSvipM2kHw8vxh+S5e4SAQAAYHFkTX0fQrib764VfToo6/+8uaao+b97uoqben667m/6pvYv2q+/3Ht+f6JBNU8x6LnN8ejEw6n0Ht0q59szf3tFr7zz5bOXrPxC0ve2n9vLy/uZfHPz5jv9MjzSRrYAwL9xvOnroPn3UNEPu0wMgIXRiwrvpv7PBt3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCGve3wZBMnIYSV3iQu3L5/beOg/sbOnZWmnbl+fScesxgiDyGc2xyPTrS4lnl3+crVC+vj8ehS+8FLIYSuZn+rXv6FD2a4OIRO7o/gfwrS+suel3zioP5pC/OSzyTo6AcJAIBDK69bUdffzXfXinPJUgh/fv9g/f9qFIeD6v+vqvNx/X/vozO34rni+n/Y0voeB6tbFz9bvXzl6uubF9fPj86PPnnj5PDN4amzp0+fXS2flax6YgIAAMB/069bXP+nSw/v/x+L4jDj/v/n3w6/jOfKpur/QWurnG+TTb+uMwEAAFhsz778x+/JAeeTfj98sb61dWlYHfc/n6yOHaT6jx2pW1z/Z0tdZwUAAAC0YW87eWD//8MoDjPu/z/1wws/xWNmIYSj9f7/8Y1Px9NjLqo2/jtx12sEAACgW0frFu//5+X7/+l+WZ6GEF57pYqbv5U1S/2fvfv1j/Fc8fv/p9pb4lxKl6v7UfbLIfSWu84IAACAw+yJuhXF/m/57trHPx97v+/9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC2/RUAAP//tss7QA==") 2.062011329s ago: executing program 6 (id=4818): syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) io_uring_setup(0x1b7b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.548383409s ago: executing program 7 (id=4822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180), 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)='\b', 0x1}], 0x1, 0x0, 0x1a0}, 0x41) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/93, 0x5d}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 1.548208379s ago: executing program 5 (id=4823): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r3, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0xa4, 0x8, 0x2}, 0x9c) 1.409910082s ago: executing program 5 (id=4824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 1.400530846s ago: executing program 7 (id=4825): lseek(0xffffffffffffffff, 0x4, 0x3) 1.152591322s ago: executing program 7 (id=4826): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) 920.957842ms ago: executing program 5 (id=4827): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0xffff0000, 0x6, 0x9, 0x30385056, [0x8, 0x10], [0x9, 0x9], 0x1}}) 906.11023ms ago: executing program 7 (id=4828): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) 492.42699ms ago: executing program 5 (id=4829): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file5\x00', 0x2001020, &(0x7f0000000140)={[], [{@obj_role={'obj_role', 0x3d, 'hash'}}, {@smackfsdef={'smackfsdef', 0x3d, '*(:\xc3^'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0xfd, 0x583, &(0x7f0000001040)="$eJzs3d9rW1UcAPDvTZPuR6fdYAz1QQZ7cDKWrq0/Jgibj6LDgb7P0GZlNF1Gk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggzFG0QcRKjdNutgmbZqlS2Y+H7jd+d57k3NOzj33nntvshvA0Dqe/slEvBoR3yQR4/X5oxGRTRP71ldK11t9cnMmnZJYW/v0cRLnNr1XUv93rB68EhG/fhVxKrM138ryynyhVCou1uOJ6sK1icryyukrC4W54lzx6tT09Nm3p6fee/edntX1zYt/ff/J/Q/Pfn1i9bufHx65m8T5OFRfltarB1ncag6OF/6pp3JxftOKkz3IbJAk/S4AXRmp9/NcpPuA8RhZ7/XAEPgyIta6MdrtC4HBkejGMKQa44DGuX2PzoNfGI8+WD8B2lr/7Pq1kdhfOzc6uJrsyZlRmscvf9y7m06x/XWIAzvEALty63ZEnMlmt+7/kvr+r3tnaleW2xmp/d2cx7Adf6Cf7qfjn+RWxJb+n9kY/0SL8c9Yi77bjZ37f+ZhD7JpKx3/vd9y/Lux6zo8Uo9eSoPIJZevlIpnIuLliDgZuX1pvN39nLOrD9baLWse/6VTmn9jLFgvx8Psvv++ZrZQLTxLnZs9uh3xWsvxb7LR/kmL9k8/j4sd5nGseO/1dst2rv/eWvsp4o2W7f/0jlay/f3Jidr2MNHYKrb6886x39rl3+/6p+1/cPv6H06a79dWOnrbkebgx/1/F9ut2O32P5p8VkuP1ufdKFSri5MRo8nH2bHN86eevrYRN9ZP63/yRIv6b5xdtd7+08Wfd/RRRNw5eqftqoPQ/rO7av/dJx589MUP7fLvrP3fqqVO1ud0sv/rtIDP8tkBAAAAAADAoMlExKFIMvmNdCaTz69/v+NoHMyUypXqqcvlpauzUfut7OHIZRp3usebvg8xWUs/jac2xdMRcSQivh05UIvzM+XSbL8rDwAAAAAAAAAAAAAAAAAAAANirM3v/1O/j/S7dMCe23jQPzB0dnywZS+e9AQMpL14sC3wYth9/3dlAP4vHP9heLXq/49H+1AQ4Llz/Ifh1Wn/z43vcUGA587xH4aX/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9dfHChXRaW31ycyaNZ68vL82Xr5+eLVbm8wtLM/mZ8uK1/Fy5PFcq5mfKCzu9X6lcvjY5FUs3JqrFSnWisrxyaaG8dLV66cpCYa54qZjznw0DAAAAAAAAAAAAAAAAAADAFpXllflCqVRclGibOBcDUYxuE0kHFVzXVRbZvldQYi8Sfd4xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECTfwMAAP//u9Ivyw==") renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) 428.770246ms ago: executing program 7 (id=4830): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44000000100001080000", @ANYRES32=r2, @ANYBLOB="00000000048a00001c002b8008000800", @ANYRES32=r2, @ANYBLOB="080003001900000008000100", @ANYRES32], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYRES16=r3], 0xc) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000004f80)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r5, &(0x7f0000006280)={&(0x7f0000005200)={0x1d, r6, 0x0, {0x3, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000006240)={&(0x7f0000005240)}, 0x1, 0x0, 0x0, 0x24000090}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x1}, 0x94) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, &(0x7f00000001c0)='discard') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x40) write$9p(r7, &(0x7f0000000080)="1eeeda4c0d052b331ff2f44ebf5f61700740937407ebd1fa8962a6683d262925bd9c41c2c7c8ebb1c41b935316c459ab8746b5d1ee75c03e191d5762ebfd51bff0df1a2ebfca0389ff47a3e50254de40d6b51fae5c10b233e66fe58c42d248962a6cce8c818bfee01bd2f3c14637ef5be02ea17e2a9f981f", 0x78) r8 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005c193ce80e210af87fad3cf5927a0a35998a23d463f3e3366dc8c0544324e99c59232d35c3b7230fdb4f77e1d879241f84eb3e556ef9c618e55748d3faa7c81669ff29aec731ec18930594ad52d2d88422b05ecf3065ecfe", @ANYRES16=r8, @ANYBLOB="08002dbd7000fddbdf250100000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 244.820375ms ago: executing program 5 (id=4831): bpf$PROG_LOAD(0x5, 0x0, 0x0) 48.762047ms ago: executing program 7 (id=4832): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x2, 0x0, &(0x7f0000000100)) setrlimit(0xf, &(0x7f0000000000)={0x2, 0x439eda03}) timer_settime(0x0, 0x42a28f29afc7695a, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 5 (id=4833): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0xa4, 0x8, 0x2}, 0x9c) kernel console output (not intermixed with test programs): 1][T11023] usb 6-1: unable to get BOS descriptor or descriptor too short [ 648.048092][T11023] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.048116][T11023] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.051067][T11023] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 648.051104][T11023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.051123][T11023] usb 6-1: Product: syz [ 648.051137][T11023] usb 6-1: Manufacturer: syz [ 648.051151][T11023] usb 6-1: SerialNumber: syz [ 648.114201][T11023] usb 6-1: selecting invalid altsetting 1 [ 648.115029][T11023] usb 6-1: unit 6 not found! [ 648.115049][T11023] usb 6-1: unit 2 not found! [ 648.443753][T11023] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 648.474966][T11023] usb 6-1: USB disconnect, device number 24 [ 648.712449][T10407] udevd[10407]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.726753][ T5611] Bluetooth: hci0: command tx timeout [ 648.819537][T14417] overlayfs: failed to resolve './file2': -2 [ 650.803196][ T5611] Bluetooth: hci0: command tx timeout [ 651.029600][T14460] overlayfs: failed to resolve './file2': -2 [ 652.876944][ T5611] Bluetooth: hci0: command tx timeout [ 654.751738][ T1192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.943080][T14497] overlayfs: failed to resolve './file2': -2 [ 656.202349][T14515] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 658.304900][ T1192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.618027][T14329] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.620011][T14329] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.620331][T14329] bridge_slave_0: entered allmulticast mode [ 658.653083][T14329] bridge_slave_0: entered promiscuous mode [ 658.668361][T14329] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.668664][T14329] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.668954][T14329] bridge_slave_1: entered allmulticast mode [ 658.675272][T14329] bridge_slave_1: entered promiscuous mode [ 659.569693][T14329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.606171][T14329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.318113][ T1192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.451811][T14329] team0: Port device team_slave_0 added [ 660.465129][T14329] team0: Port device team_slave_1 added [ 660.543516][T14329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.543533][T14329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.543558][T14329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.593922][T14329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.593938][T14329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.593963][T14329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.766375][T14575] overlayfs: failed to resolve './file2': -2 [ 662.588907][T14570] Unsupported ieee802154 address type: 0 [ 662.820703][T14329] hsr_slave_0: entered promiscuous mode [ 662.824471][T14329] hsr_slave_1: entered promiscuous mode [ 663.589698][ T1192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.230503][T14628] overlayfs: failed to resolve './file2': -2 [ 667.094267][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3050'. [ 667.414383][T14652] gfs2: error -5 reading superblock [ 669.962512][ T1245] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 670.154540][ T1245] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 670.154597][ T1245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.154615][ T1245] usb 7-1: Product: syz [ 670.154629][ T1245] usb 7-1: Manufacturer: syz [ 670.154642][ T1245] usb 7-1: SerialNumber: syz [ 670.203479][ T1245] usb 7-1: config 0 descriptor?? [ 670.262829][ T1245] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 021 [ 670.652247][ T1245] (null): failure reading functionality [ 670.798145][ T1245] i2c i2c-1: connected i2c-tiny-usb device [ 670.933192][ T5786] usb 7-1: USB disconnect, device number 21 [ 671.028725][ T1192] bridge_slave_1: left allmulticast mode [ 671.028759][ T1192] bridge_slave_1: left promiscuous mode [ 671.091889][T14695] overlayfs: failed to resolve './file2': -2 [ 671.968295][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.179257][ T1192] bridge_slave_0: left allmulticast mode [ 672.179291][ T1192] bridge_slave_0: left promiscuous mode [ 672.179603][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.204657][T14732] overlayfs: failed to resolve './file2': -2 [ 674.267350][T14760] sctp: [Deprecated]: syz.6.3079 (pid 14760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.267350][T14760] Use struct sctp_sack_info instead [ 674.760309][ T1192] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 675.001467][T14773] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3096'. [ 675.078408][ T1192] erspan0 (unregistering): left allmulticast mode [ 675.679241][ T1192] bond3 (unregistering): (slave gretap1): Releasing active interface [ 675.679266][ T1192] bond3 (unregistering): (slave gretap1): the permanent HWaddr of slave - a6:93:a6:f8:73:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 675.946339][ T1192] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 676.109469][ T1192] bond3 (unregistering): (slave bridge2): Releasing active interface [ 676.361540][ T1192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.440664][ T1192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.484554][ T1192] bond0 (unregistering): Released all slaves [ 676.496671][ T1192] bond1 (unregistering): Released all slaves [ 676.519847][ T1192] bond2 (unregistering): Released all slaves [ 676.543980][ T1192] bond3 (unregistering): Released all slaves [ 676.690613][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 676.774723][T14850] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3133'. [ 686.574904][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.575003][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.709772][ T1192] hsr_slave_0: left promiscuous mode [ 690.735571][ T38] audit: type=1326 audit(1778796385.615:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.735919][ T38] audit: type=1326 audit(1778796385.615:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.736496][ T38] audit: type=1326 audit(1778796385.625:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.736532][ T38] audit: type=1326 audit(1778796385.625:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.736564][ T38] audit: type=1326 audit(1778796385.625:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.740594][ T38] audit: type=1326 audit(1778796385.625:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.740636][ T38] audit: type=1326 audit(1778796385.625:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.740670][ T38] audit: type=1326 audit(1778796385.625:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.749668][ T1192] hsr_slave_1: left promiscuous mode [ 690.750874][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.750900][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.751434][ T38] audit: type=1326 audit(1778796385.635:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.751478][ T38] audit: type=1326 audit(1778796385.635:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.8.3182" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 690.809567][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.809596][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.023331][ T1192] veth0_macvtap: left promiscuous mode [ 691.023620][ T1192] veth1_vlan: left promiscuous mode [ 691.027378][ T1192] veth0_vlan: left promiscuous mode [ 692.675814][ T5786] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 692.863800][ T5786] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.863827][ T5786] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 692.863875][ T5786] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 693.263261][ T5786] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.263390][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.263436][ T5786] usb 6-1: Product: syz [ 693.263568][ T5786] usb 6-1: Manufacturer: syz [ 693.263608][ T5786] usb 6-1: SerialNumber: syz [ 693.554242][ T5786] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 693.554289][ T5786] cdc_ncm 6-1:1.0: bind() failure [ 694.315198][T15009] Process accounting resumed [ 694.715954][T11023] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 694.868920][T11023] usb 9-1: Using ep0 maxpacket: 16 [ 694.874154][T11023] usb 9-1: unable to get BOS descriptor or descriptor too short [ 694.877424][T11023] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.877447][T11023] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 694.877495][T11023] usb 9-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0 [ 694.879852][T11023] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.879878][T11023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.879897][T11023] usb 9-1: Product: syz [ 694.879910][T11023] usb 9-1: Manufacturer: syz [ 694.879923][T11023] usb 9-1: SerialNumber: syz [ 695.117945][T11023] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 695.117993][T11023] cdc_ncm 9-1:1.0: bind() failure [ 695.219163][T11023] usb 9-1: USB disconnect, device number 37 [ 695.306345][ T1192] team0 (unregistering): Port device team_slave_1 removed [ 695.368151][ T1192] team0 (unregistering): Port device team_slave_0 removed [ 695.875580][ T38] kauditd_printk_skb: 36 callbacks suppressed [ 695.875596][ T38] audit: type=1326 audit(1778796390.755:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.879427][ T38] audit: type=1326 audit(1778796390.765:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.879472][ T38] audit: type=1326 audit(1778796390.765:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.889086][ T38] audit: type=1326 audit(1778796390.775:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.889386][ T38] audit: type=1326 audit(1778796390.775:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.889732][ T38] audit: type=1326 audit(1778796390.775:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.890964][ T38] audit: type=1326 audit(1778796390.775:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.895747][ T38] audit: type=1326 audit(1778796390.775:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.895798][ T38] audit: type=1326 audit(1778796390.775:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 695.900157][ T38] audit: type=1326 audit(1778796390.785:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.6.3218" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 696.180564][T15029] syzkaller1: entered promiscuous mode [ 696.180590][T15029] syzkaller1: entered allmulticast mode [ 696.219946][ T5786] usb 6-1: USB disconnect, device number 25 [ 699.296231][T15148] netlink: 'syz.8.3240': attribute type 10 has an invalid length. [ 699.780812][T15148] veth0_vlan: left promiscuous mode [ 699.814944][T15148] veth0_vlan: entered promiscuous mode [ 699.841953][T15148] team0: Device veth0_vlan failed to register rx_handler [ 700.219488][T15105] Process accounting resumed [ 703.353056][T15187] overlayfs: failed to resolve './file2': -2 [ 706.299731][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 706.391654][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 706.394170][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 706.406049][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 706.420182][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.423771][ T38] kauditd_printk_skb: 75 callbacks suppressed [ 706.423792][ T38] audit: type=1326 audit(1778796401.295:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.423838][ T38] audit: type=1326 audit(1778796401.295:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.495666][ T38] audit: type=1326 audit(1778796401.355:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.495723][ T38] audit: type=1326 audit(1778796401.355:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.495760][ T38] audit: type=1326 audit(1778796401.355:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.495799][ T38] audit: type=1326 audit(1778796401.355:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.495843][ T38] audit: type=1326 audit(1778796401.355:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.495888][ T38] audit: type=1326 audit(1778796401.375:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.495927][ T38] audit: type=1326 audit(1778796401.375:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 706.496686][ T38] audit: type=1326 audit(1778796401.375:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.5.3256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 707.373064][T15241] netlink: 'syz.8.3265': attribute type 10 has an invalid length. [ 708.385245][T15241] veth0_vlan: left promiscuous mode [ 708.387791][T15241] veth0_vlan: entered promiscuous mode [ 708.393554][T15241] team0: Device veth0_vlan failed to register rx_handler [ 708.715931][ T5611] Bluetooth: hci1: command tx timeout [ 709.595294][T15225] Process accounting resumed [ 709.684959][T15271] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3273'. [ 710.797229][ T5611] Bluetooth: hci1: command tx timeout [ 711.115458][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 711.115479][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3280'. [ 711.228378][T15299] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 711.228405][T15299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 711.228501][T15299] vhci_hcd vhci_hcd.0: Device attached [ 711.479088][T11023] usb 43-2: new low-speed USB device number 2 using vhci_hcd [ 711.511946][ T37] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 711.561441][T15310] syzkaller1: entered promiscuous mode [ 711.561461][T15310] syzkaller1: entered allmulticast mode [ 711.581217][T15213] lo speed is unknown, defaulting to 1000 [ 711.808011][ T37] usb 6-1: config index 0 descriptor too short (expected 8192, got 45) [ 711.808039][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.808059][ T37] usb 6-1: config 0 has no interfaces? [ 711.808087][ T37] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 711.808118][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.821049][ T37] usb 6-1: config 0 descriptor?? [ 712.082133][ T37] usb 6-1: string descriptor 0 read error: -71 [ 712.119842][ T37] usb 6-1: USB disconnect, device number 26 [ 712.141087][T15304] vhci_hcd: connection closed [ 712.169974][ T160] vhci_hcd vhci_hcd.5: stop threads [ 712.169993][ T160] vhci_hcd vhci_hcd.5: release socket [ 712.170044][ T160] vhci_hcd vhci_hcd.5: disconnect device [ 712.207053][T11023] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 712.238751][ T38] kauditd_printk_skb: 29 callbacks suppressed [ 712.238767][ T38] audit: type=1326 audit(1778796407.115:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.238818][ T38] audit: type=1326 audit(1778796407.115:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.238863][ T38] audit: type=1326 audit(1778796407.115:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.238903][ T38] audit: type=1326 audit(1778796407.115:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.238945][ T38] audit: type=1326 audit(1778796407.115:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.238985][ T38] audit: type=1326 audit(1778796407.115:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.239029][ T38] audit: type=1326 audit(1778796407.115:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.239070][ T38] audit: type=1326 audit(1778796407.115:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.239106][ T38] audit: type=1326 audit(1778796407.115:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.239137][ T38] audit: type=1326 audit(1778796407.115:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.3284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18a4ce59 code=0x7ffc0000 [ 712.723895][T15308] Process accounting resumed [ 713.021854][ T5611] Bluetooth: hci1: command tx timeout [ 713.149643][T15339] netlink: 'syz.5.3292': attribute type 10 has an invalid length. [ 714.289396][T15339] veth0_vlan: left promiscuous mode [ 714.293090][T15339] veth0_vlan: entered promiscuous mode [ 714.301967][T15339] team0: Device veth0_vlan failed to register rx_handler [ 715.859255][ T5611] Bluetooth: hci1: command tx timeout [ 720.292450][T15213] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.292740][T15213] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.293038][T15213] bridge_slave_0: entered allmulticast mode [ 720.326379][T15213] bridge_slave_0: entered promiscuous mode [ 720.343919][T15213] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.344359][T15213] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.344682][T15213] bridge_slave_1: entered allmulticast mode [ 720.369358][T15213] bridge_slave_1: entered promiscuous mode [ 720.436253][T15213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.441591][T15213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.513083][T15213] team0: Port device team_slave_0 added [ 720.527793][T15213] team0: Port device team_slave_1 added [ 720.580956][T15213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.580972][T15213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.580995][T15213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.584327][T15213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.584342][T15213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.584367][T15213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.198640][T15404] overlayfs: failed to resolve './file2': -2 [ 722.032610][T15414] syzkaller1: entered promiscuous mode [ 722.032636][T15414] syzkaller1: entered allmulticast mode [ 722.075825][T15213] hsr_slave_0: entered promiscuous mode [ 722.078526][T15213] hsr_slave_1: entered promiscuous mode [ 722.081789][T15213] debugfs: 'hsr0' already exists in 'hsr' [ 722.081814][T15213] Cannot create hsr debugfs directory [ 723.070131][T15457] overlayfs: failed to resolve './file2': -2 [ 723.875965][ T67] bridge_slave_1: left allmulticast mode [ 723.876000][ T67] bridge_slave_1: left promiscuous mode [ 723.876271][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.964779][ T67] bridge_slave_0: left allmulticast mode [ 723.964812][ T67] bridge_slave_0: left promiscuous mode [ 723.965085][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.791595][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.919533][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.031976][ T67] bond0 (unregistering): Released all slaves [ 725.161062][ T1245] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 725.376460][ T5786] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 725.484161][ T1245] usb 7-1: Using ep0 maxpacket: 32 [ 725.492429][ T1245] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.492458][ T1245] usb 7-1: config 0 has no interface number 0 [ 725.492504][ T1245] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.492532][ T1245] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.492574][ T1245] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 725.492598][ T1245] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.609206][ T1245] usb 7-1: config 0 descriptor?? [ 725.719100][ T5786] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 725.719156][ T5786] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 725.719180][ T5786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.790995][ T5786] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 726.029549][ T67] hsr_slave_0: left promiscuous mode [ 726.093283][ T67] hsr_slave_1: left promiscuous mode [ 726.094505][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.134570][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.244030][ T1245] usbhid 7-1:0.1: can't add hid device: -71 [ 726.244179][ T1245] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 726.280465][ T1245] usb 7-1: USB disconnect, device number 22 [ 726.436389][ T5002] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 726.595928][ T5002] usb 6-1: Using ep0 maxpacket: 16 [ 726.599324][ T5002] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 726.599351][ T5002] usb 6-1: config 0 has no interface number 0 [ 726.599396][ T5002] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 726.599422][ T5002] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 726.601823][ T5002] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 726.601853][ T5002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.601873][ T5002] usb 6-1: Product: syz [ 726.601887][ T5002] usb 6-1: Manufacturer: syz [ 726.601901][ T5002] usb 6-1: SerialNumber: syz [ 726.709779][ T5002] usb 6-1: config 0 descriptor?? [ 726.710662][T15532] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 726.710881][T15532] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 726.952183][T15532] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 726.952304][T15532] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 727.003246][ T5786] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 727.003270][ T5786] stv0680 9-1:4.0: Could not get descriptor 0200 [ 727.004516][ T5786] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 727.004537][ T5786] stv0680 9-1:4.0: last error: 34, command = 0x19 [ 727.079106][ T5786] usb 9-1: USB disconnect, device number 38 [ 727.157780][ T5002] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 727.158059][ T5002] asix 6-1:0.34: probe with driver asix failed with error -61 [ 727.265880][ T1245] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 727.346379][ T67] team0 (unregistering): Port device team_slave_1 removed [ 727.409307][ T67] team0 (unregistering): Port device team_slave_0 removed [ 727.426511][ T1245] usb 7-1: Using ep0 maxpacket: 16 [ 727.445087][ T1245] usb 7-1: unable to get BOS descriptor or descriptor too short [ 727.454823][ T1245] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 727.454864][ T1245] usb 7-1: can't read configurations, error -71 [ 729.290836][T11023] usb 6-1: USB disconnect, device number 27 [ 729.629836][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 730.631935][ T1245] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 731.697365][ T1245] usb 6-1: Using ep0 maxpacket: 16 [ 731.706690][ T1245] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 731.706717][ T1245] usb 6-1: config 0 has no interface number 0 [ 731.706759][ T1245] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 731.706782][ T1245] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 731.759994][ T1245] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 731.760025][ T1245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.760045][ T1245] usb 6-1: Product: syz [ 731.760058][ T1245] usb 6-1: Manufacturer: syz [ 731.760073][ T1245] usb 6-1: SerialNumber: syz [ 731.852257][ T1245] usb 6-1: config 0 descriptor?? [ 731.865910][T15623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 731.866092][T15623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.088941][T15623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.089193][T15623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.097479][ T5612] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 732.278236][ T5612] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.278263][ T5612] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.278377][ T5612] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.298222][ T1245] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 732.298522][ T1245] asix 6-1:0.34: probe with driver asix failed with error -61 [ 732.473370][ T5612] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.473398][ T5612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.473415][ T5612] usb 9-1: Product: syz [ 732.473427][ T5612] usb 9-1: Manufacturer: syz [ 732.473438][ T5612] usb 9-1: SerialNumber: syz [ 732.636426][ T5612] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 732.636467][ T5612] cdc_ncm 9-1:1.0: bind() failure [ 732.750200][ T5714] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 732.773426][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 732.852480][ T5612] usb 9-1: USB disconnect, device number 39 [ 732.967065][ T5714] usb 7-1: Using ep0 maxpacket: 8 [ 732.969343][ T5714] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 732.969395][ T5714] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.969417][ T5714] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 732.969441][ T5714] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.969464][ T5714] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.969502][ T5714] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 732.969524][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.230001][ T5714] usb 7-1: usb_control_msg returned -32 [ 733.230062][ T5714] usbtmc 7-1:16.0: can't read capabilities [ 733.552369][ T5714] usb 7-1: USB disconnect, device number 25 [ 733.583963][T15654] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 733.584197][T15679] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -19 [ 733.666005][T11023] usb 6-1: USB disconnect, device number 28 [ 734.092448][T15694] netlink: 'syz.8.3431': attribute type 10 has an invalid length. [ 734.134575][T15693] veth0_vlan: left promiscuous mode [ 734.136754][T15693] veth0_vlan: entered promiscuous mode [ 734.168417][T15693] geneve2: left promiscuous mode [ 734.169435][T15694] veth0_vlan: left promiscuous mode [ 734.172402][T15694] veth0_vlan: entered promiscuous mode [ 734.178059][T15694] team0: Device veth0_vlan failed to register rx_handler [ 735.710864][T15730] program syz.6.3443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.717609][ T5613] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 735.958429][ T5613] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.958456][ T5613] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 735.958519][ T5613] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.966468][ T5613] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.966496][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.966515][ T5613] usb 6-1: Product: syz [ 735.966528][ T5613] usb 6-1: Manufacturer: syz [ 735.966541][ T5613] usb 6-1: SerialNumber: syz [ 736.089980][ T5613] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 736.090023][ T5613] cdc_ncm 6-1:1.0: bind() failure [ 736.305446][ T5744] usb 6-1: USB disconnect, device number 29 [ 736.679947][T15756] netlink: 'syz.6.3452': attribute type 10 has an invalid length. [ 736.817125][T15756] veth0_vlan: left promiscuous mode [ 736.820068][T15756] veth0_vlan: entered promiscuous mode [ 736.825888][T15756] team0: Device veth0_vlan failed to register rx_handler [ 742.083543][T15809] netlink: 'syz.6.3468': attribute type 10 has an invalid length. [ 742.109299][T15809] veth0_vlan: left promiscuous mode [ 742.111742][T15809] veth0_vlan: entered promiscuous mode [ 742.117487][T15809] team0: Device veth0_vlan failed to register rx_handler [ 742.524823][T15213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 742.555044][T15820] program syz.8.3456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 742.896156][T15213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.902952][T15213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 743.052746][T15213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.070412][T15213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 743.209575][T15213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.218401][T15213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 743.534659][T15213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.622639][T11892] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 745.766035][T11892] usb 7-1: Using ep0 maxpacket: 32 [ 745.770415][T11892] usb 7-1: config 119 has an invalid descriptor of length 0, skipping remainder of the config [ 745.770440][T11892] usb 7-1: config 119 has 0 interfaces, different from the descriptor's value: 1 [ 745.770470][T11892] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 745.770490][T11892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.860239][T15213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.694511][T15885] 9p: Could not find request transport: fd0x0000000000000005 [ 746.756118][T15213] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.840544][T11892] usb 7-1: string descriptor 0 read error: -71 [ 746.866389][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.866489][T11510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.901478][T11510] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.901654][T11510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.902178][T15897] program syz.5.3489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.918221][T11892] usb 7-1: USB disconnect, device number 26 [ 748.109312][T15906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.294372][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3492'. [ 748.294393][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3492'. [ 748.377959][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.378061][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.164084][T15910] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 749.164109][T15910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 749.164202][T15910] vhci_hcd vhci_hcd.0: Device attached [ 749.470141][T11892] usb 43-2: new low-speed USB device number 3 using vhci_hcd [ 749.497298][ T5613] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 750.421729][ T5613] usb 6-1: config index 0 descriptor too short (expected 8192, got 45) [ 750.421757][ T5613] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.421776][ T5613] usb 6-1: config 0 has no interfaces? [ 750.421806][ T5613] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 750.421829][ T5613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.525592][ T5613] usb 6-1: config 0 descriptor?? [ 750.731083][ T5613] usb 6-1: can't set config #0, error -71 [ 750.744478][T15912] vhci_hcd: connection reset by peer [ 750.776529][ T5613] usb 6-1: USB disconnect, device number 30 [ 750.806315][ T1045] vhci_hcd vhci_hcd.5: stop threads [ 750.806342][ T1045] vhci_hcd vhci_hcd.5: release socket [ 750.820685][ T1045] vhci_hcd vhci_hcd.5: disconnect device [ 750.972802][T15929] 9pnet_fd: Insufficient options for proto=fd [ 753.480562][T15213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.669323][ T37] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 754.537362][ T37] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 754.537390][ T37] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 754.537408][ T37] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 754.537428][ T37] usb 7-1: config 220 has no interface number 2 [ 754.537495][ T37] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 754.537522][ T37] usb 7-1: config 220 interface 0 has no altsetting 0 [ 754.537540][ T37] usb 7-1: config 220 interface 76 has no altsetting 0 [ 754.537558][ T37] usb 7-1: config 220 interface 1 has no altsetting 0 [ 754.563942][ T37] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 754.563973][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.563993][ T37] usb 7-1: Product: syz [ 754.564006][ T37] usb 7-1: Manufacturer: syz [ 754.564021][ T37] usb 7-1: SerialNumber: syz [ 754.565795][T11892] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 754.846231][ T37] usb 7-1: selecting invalid altsetting 0 [ 755.214802][ T37] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 755.214978][ T37] uvcvideo 7-1:220.0: No valid video chain found. [ 756.095686][ T37] usb 7-1: selecting invalid altsetting 0 [ 756.095733][ T37] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 756.142858][ T37] usb 7-1: USB disconnect, device number 27 [ 756.376936][T15213] veth0_vlan: entered promiscuous mode [ 757.943819][T15213] veth1_vlan: entered promiscuous mode [ 758.345191][T15213] veth0_macvtap: entered promiscuous mode [ 758.388799][T15213] veth1_macvtap: entered promiscuous mode [ 759.396900][T15213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.452483][T15213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.555000][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.557549][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.560191][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.560232][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.967046][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3530'. [ 759.967068][T16014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3530'. [ 760.080367][T16016] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 760.080388][T16016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 760.080479][T16016] vhci_hcd vhci_hcd.0: Device attached [ 760.325834][ T5744] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 760.415770][ T5002] usb 45-2: new low-speed USB device number 2 using vhci_hcd [ 760.478198][ T5744] usb 7-1: config index 0 descriptor too short (expected 8192, got 45) [ 760.478227][ T5744] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.478245][ T5744] usb 7-1: config 0 has no interfaces? [ 760.478273][ T5744] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 760.478296][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.564550][ T5744] usb 7-1: config 0 descriptor?? [ 761.059279][ T5002] usb 45-2: device descriptor read/64, error -71 [ 761.283312][T16026] 9pnet_fd: Insufficient options for proto=fd [ 761.358218][ T5002] usb 45-2: new low-speed USB device number 3 using vhci_hcd [ 761.824286][ T5744] usb 7-1: string descriptor 0 read error: -71 [ 761.971999][T16018] vhci_hcd: connection closed [ 761.999919][T11510] vhci_hcd vhci_hcd.6: stop threads [ 761.999947][T11510] vhci_hcd vhci_hcd.6: release socket [ 762.000015][T11510] vhci_hcd vhci_hcd.6: disconnect device [ 762.072009][ T5744] usb 7-1: USB disconnect, device number 28 [ 762.458281][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.458301][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.339256][ T38] kauditd_printk_skb: 91 callbacks suppressed [ 764.339274][ T38] audit: type=1326 audit(1778796459.215:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339319][ T38] audit: type=1326 audit(1778796459.215:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339359][ T38] audit: type=1326 audit(1778796459.215:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339399][ T38] audit: type=1326 audit(1778796459.215:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339439][ T38] audit: type=1326 audit(1778796459.215:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339480][ T38] audit: type=1326 audit(1778796459.215:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339517][ T38] audit: type=1326 audit(1778796459.215:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339558][ T38] audit: type=1326 audit(1778796459.215:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.339612][ T38] audit: type=1326 audit(1778796459.215:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.340018][ T38] audit: type=1326 audit(1778796459.215:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16047 comm="syz.5.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9cdce59 code=0x7ffc0000 [ 764.365012][T16048] Process accounting resumed [ 765.065815][T13890] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 765.112632][T16060] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 765.169446][T11153] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 765.199922][T16060] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 765.204615][T16060] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 765.214743][T16060] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 765.215452][T16060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 765.267161][T13890] usb 7-1: Using ep0 maxpacket: 16 [ 765.269646][T13890] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 765.269671][T13890] usb 7-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 765.269688][T13890] usb 7-1: config 0 has no interface number 0 [ 765.269724][T13890] usb 7-1: config 0 interface 214 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 765.269751][T13890] usb 7-1: config 0 interface 214 has no altsetting 0 [ 765.278927][T13890] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 765.278957][T13890] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 765.278976][T13890] usb 7-1: Manufacturer: syz [ 765.278990][T13890] usb 7-1: SerialNumber: syz [ 765.370652][T13890] usb 7-1: config 0 descriptor?? [ 765.435376][T11153] usb 9-1: device descriptor read/64, error -71 [ 765.687071][T11153] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 765.741079][T13890] usb 7-1: USB disconnect, device number 29 [ 765.835876][T11153] usb 9-1: device descriptor read/64, error -71 [ 765.946126][T11153] usb usb9-port1: attempt power cycle [ 766.408523][T11153] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 766.430373][T11153] usb 9-1: device descriptor read/8, error -71 [ 766.466506][ T5002] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 766.732452][T16080] Process accounting resumed [ 766.855898][T11153] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 766.876726][T11153] usb 9-1: device descriptor read/8, error -71 [ 767.010702][T11153] usb usb9-port1: unable to enumerate USB device [ 767.209440][T16088] binder: 16086:16088 unknown command 4294967250 [ 767.209460][T16088] binder: 16086:16088 ioctl c0306201 200000000080 returned -22 [ 767.755894][T16060] Bluetooth: hci0: command tx timeout [ 768.019874][T16108] Process accounting resumed [ 768.699425][ T5002] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 768.885887][ T5002] usb 6-1: Using ep0 maxpacket: 32 [ 768.894725][ T5002] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 768.894758][ T5002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 768.894784][ T5002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 768.894807][ T5002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 768.894833][ T5002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 768.985782][ T5002] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 768.985863][ T5002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.985884][ T5002] usb 6-1: Product: syz [ 768.985897][ T5002] usb 6-1: Manufacturer: syz [ 768.985912][ T5002] usb 6-1: SerialNumber: syz [ 769.016466][ T5002] usb 6-1: config 0 descriptor?? [ 769.486610][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 769.516393][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 769.724927][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.725401][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.725882][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.726352][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.728136][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.728582][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.729009][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.729453][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.733299][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.733752][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.734182][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.734616][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.735058][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.743485][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.766401][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.766859][ T5002] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 769.766900][ T5002] input input19: Timeout waiting for response from device. [ 769.837043][T16060] Bluetooth: hci0: command tx timeout [ 769.884286][ T5002] usb 6-1: USB disconnect, device number 31 [ 770.747495][T11152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.078939][T16060] Bluetooth: hci0: command tx timeout [ 772.268616][T16058] lo speed is unknown, defaulting to 1000 [ 774.165913][T16060] Bluetooth: hci0: command tx timeout [ 776.795805][T11152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.500331][T11152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.085864][ T5744] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 781.243466][ T5744] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 781.243494][ T5744] usb 6-1: config 0 has no interface number 0 [ 781.243538][ T5744] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 781.279202][ T5744] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 781.279232][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.279253][ T5744] usb 6-1: Product: syz [ 781.279267][ T5744] usb 6-1: Manufacturer: syz [ 781.279282][ T5744] usb 6-1: SerialNumber: syz [ 781.330898][ T5744] usb 6-1: config 0 descriptor?? [ 781.343625][ T5744] yurex 6-1:0.50: Could not find endpoints [ 781.631071][ T5744] usb 6-1: USB disconnect, device number 32 [ 781.807137][T11152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.367985][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3626'. [ 782.368007][T16260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3626'. [ 782.427836][T16260] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 782.427894][T16260] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 782.478351][T16260] vhci_hcd vhci_hcd.0: Device attached [ 783.407366][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.415146][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.415923][T16058] bridge_slave_0: entered allmulticast mode [ 783.427395][T16058] bridge_slave_0: entered promiscuous mode [ 783.444197][T16058] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.446524][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.446845][T16058] bridge_slave_1: entered allmulticast mode [ 783.455402][T16058] bridge_slave_1: entered promiscuous mode [ 783.785799][ T37] usb 43-2: new low-speed USB device number 4 using vhci_hcd [ 783.865817][T11153] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 783.909700][T16058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.971725][T16058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.162621][T16058] team0: Port device team_slave_0 added [ 784.169267][T16058] team0: Port device team_slave_1 added [ 784.250968][T11153] usb 6-1: config index 0 descriptor too short (expected 8192, got 45) [ 784.250995][T11153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.251014][T11153] usb 6-1: config 0 has no interfaces? [ 784.251043][T11153] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 784.251066][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.276708][T13890] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 784.973089][T16058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.973107][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.973133][T16058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.048378][T13890] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 785.048408][T13890] usb 7-1: config 0 has no interface number 0 [ 785.048453][T13890] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 785.054013][T13890] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 785.054045][T13890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.054066][T13890] usb 7-1: Product: syz [ 785.054080][T13890] usb 7-1: Manufacturer: syz [ 785.054094][T13890] usb 7-1: SerialNumber: syz [ 785.153585][T11153] usb 6-1: config 0 descriptor?? [ 785.234460][T13890] usb 7-1: config 0 descriptor?? [ 785.256907][T13890] yurex 7-1:0.50: Could not find endpoints [ 785.344775][T16302] overlayfs: missing 'workdir' [ 785.380017][T11153] usb 6-1: string descriptor 0 read error: -71 [ 785.382846][T11153] usb 6-1: USB disconnect, device number 33 [ 785.392794][T16263] vhci_hcd: connection reset by peer [ 785.393385][ T94] vhci_hcd vhci_hcd.5: stop threads [ 785.393410][ T94] vhci_hcd vhci_hcd.5: release socket [ 785.421496][T16058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.421512][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.421537][T16058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.465921][ T94] vhci_hcd vhci_hcd.5: disconnect device [ 785.521678][ T1245] usb 7-1: USB disconnect, device number 30 [ 788.865933][ T37] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 791.948023][T16333] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 792.288963][T16058] hsr_slave_0: entered promiscuous mode [ 792.292478][T16058] hsr_slave_1: entered promiscuous mode [ 792.513611][T16344] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3659'. [ 792.585331][T16347] ntfs3(loop6): try to read out of volume at offset 0x0 [ 796.091773][T16384] vivid-002: disconnect [ 796.198002][T16377] vivid-002: reconnect [ 796.308372][T11152] bridge_slave_1: left allmulticast mode [ 796.308408][T11152] bridge_slave_1: left promiscuous mode [ 796.308705][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.423427][T11152] bridge_slave_0: left allmulticast mode [ 796.423464][T11152] bridge_slave_0: left promiscuous mode [ 796.423744][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.944811][T16436] kAFS: unable to lookup cell '(' [ 802.568825][T16438] kAFS: unable to lookup cell '(,c¾ûL' [ 804.040084][T11152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.136833][T11152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.197467][T11152] bond0 (unregistering): Released all slaves [ 804.340609][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 804.893449][T16484] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3707'. [ 807.587366][ T37] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 807.741642][ T37] usb 9-1: Using ep0 maxpacket: 16 [ 807.743895][ T37] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 807.743911][ T37] usb 9-1: config 0 has no interface number 0 [ 807.743946][ T37] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 807.743960][ T37] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 807.747238][ T37] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 807.747266][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.747285][ T37] usb 9-1: Product: syz [ 807.747299][ T37] usb 9-1: Manufacturer: syz [ 807.747312][ T37] usb 9-1: SerialNumber: syz [ 807.769343][ T37] usb 9-1: config 0 descriptor?? [ 807.770364][T16511] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 807.771123][T16511] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 807.982357][T16511] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 807.983692][T16511] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 808.418129][ T37] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 808.418159][ T37] asix 9-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 808.418421][ T37] asix 9-1:0.34: probe with driver asix failed with error -61 [ 809.444431][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.444523][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.701834][ T37] usb 9-1: USB disconnect, device number 44 [ 812.870828][T11152] hsr_slave_0: left promiscuous mode [ 812.938388][T11152] hsr_slave_1: left promiscuous mode [ 812.939707][T11152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.939734][T11152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.976946][T11152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.976972][T11152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.232627][T11152] veth1_macvtap: left promiscuous mode [ 813.232730][T11152] veth0_macvtap: left promiscuous mode [ 813.233040][T11152] veth1_vlan: left promiscuous mode [ 813.233238][T11152] veth0_vlan: left promiscuous mode [ 813.301912][T16594] program syz.8.3747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.532131][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3735'. [ 813.532152][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3735'. [ 813.587463][T16597] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 813.587482][T16597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 813.587547][T16597] vhci_hcd vhci_hcd.0: Device attached [ 813.630633][T16598] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 813.644612][ T67] vhci_hcd vhci_hcd.6: stop threads [ 813.644637][ T67] vhci_hcd vhci_hcd.6: release socket [ 813.644676][ T67] vhci_hcd vhci_hcd.6: disconnect device [ 817.998307][T16627] input: syz1 as /devices/virtual/input/input20 [ 818.308679][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3763'. [ 818.308702][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3763'. [ 818.349924][T16634] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 818.349951][T16634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 818.354146][T16634] vhci_hcd vhci_hcd.0: Device attached [ 818.363198][T16636] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 818.363777][ T94] vhci_hcd vhci_hcd.6: stop threads [ 818.363793][ T94] vhci_hcd vhci_hcd.6: release socket [ 818.363829][ T94] vhci_hcd vhci_hcd.6: disconnect device [ 819.345478][T16655] program syz.5.3760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.484690][T11152] team0 (unregistering): Port device team_slave_1 removed [ 823.830781][T11152] team0 (unregistering): Port device team_slave_0 removed [ 824.865129][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 824.936669][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 824.943370][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 824.974455][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 825.000307][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 825.864809][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 826.385244][T16730] program syz.8.3798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.530176][ T5618] Bluetooth: hci1: command tx timeout [ 827.585272][T16739] Process accounting resumed [ 830.010543][ T5618] Bluetooth: hci1: command tx timeout [ 830.759341][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3804'. [ 832.076473][ T5618] Bluetooth: hci1: command tx timeout [ 832.246073][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3816'. [ 833.033595][T16696] lo speed is unknown, defaulting to 1000 [ 833.193652][T16803] program syz.8.3821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.238500][ T5618] Bluetooth: hci1: command tx timeout [ 835.428589][T16812] Process accounting resumed [ 836.111964][T16830] libceph: resolve '0..' (ret=-3): failed [ 840.468800][ T5002] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 840.619356][ T5002] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.619382][ T5002] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.620902][ T5002] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 840.620929][ T5002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 840.620949][ T5002] usb 9-1: SerialNumber: syz [ 841.402529][ T5002] usb 9-1: 0:2 : does not exist [ 841.585489][ T5002] usb 9-1: USB disconnect, device number 45 [ 842.768333][T16843] udevd[16843]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.838450][T16868] Process accounting resumed [ 844.019512][ T823] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 844.167106][ T823] usb 7-1: Using ep0 maxpacket: 16 [ 844.187499][ T823] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 844.187527][ T823] usb 7-1: config 0 has no interface number 0 [ 844.187574][ T823] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 844.187599][ T823] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 844.194278][ T823] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 844.194307][ T823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.194325][ T823] usb 7-1: Product: syz [ 844.194339][ T823] usb 7-1: Manufacturer: syz [ 844.194354][ T823] usb 7-1: SerialNumber: syz [ 844.204955][ T823] usb 7-1: config 0 descriptor?? [ 844.226336][T16874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 844.226595][T16874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 844.431024][T16874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 844.431097][T16874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 844.616648][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3845'. [ 845.054934][ T823] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 845.059155][ T823] asix 7-1:0.34: probe with driver asix failed with error -32 [ 846.643698][T11153] usb 7-1: USB disconnect, device number 31 [ 846.909722][T16935] 9p: Bad value for 'rfdno' [ 848.753038][T16947] syzkaller1: entered promiscuous mode [ 848.753054][T16947] syzkaller1: entered allmulticast mode [ 849.049053][ T1192] bridge_slave_1: left allmulticast mode [ 849.049087][ T1192] bridge_slave_1: left promiscuous mode [ 849.049388][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.164106][ T1192] bridge_slave_0: left allmulticast mode [ 849.164144][ T1192] bridge_slave_0: left promiscuous mode [ 849.164531][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.827878][ T1192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.457298][ T1192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.587682][ T1192] bond0 (unregistering): Released all slaves [ 851.807112][ T5786] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 852.102253][ T5786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 852.102302][ T5786] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 852.102326][ T5786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.141864][ T5786] usb 6-1: config 0 descriptor?? [ 852.142678][T16999] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 852.669812][T16696] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.670242][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.670711][T16696] bridge_slave_0: entered allmulticast mode [ 852.699773][T16696] bridge_slave_0: entered promiscuous mode [ 852.771101][T16696] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.785173][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.785493][T16696] bridge_slave_1: entered allmulticast mode [ 852.796893][ T5786] hid (null): report_id 0 is invalid [ 852.797174][ T5786] hid (null): unknown global tag 0xd [ 852.797188][ T5786] hid (null): unknown global tag 0xe [ 852.797268][ T5786] hid (null): invalid report_count 43779 [ 852.844444][T16696] bridge_slave_1: entered promiscuous mode [ 852.999282][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999328][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999352][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999378][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999406][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999430][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999455][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999481][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999506][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 852.999531][ T5786] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 853.003788][ T5786] uclogic 0003:5543:0064.0003: report_id 0 is invalid [ 853.003822][ T5786] uclogic 0003:5543:0064.0003: item 0 0 1 8 parsing failed [ 853.004589][ T5786] uclogic 0003:5543:0064.0003: parse failed [ 853.004694][ T5786] uclogic 0003:5543:0064.0003: probe with driver uclogic failed with error -22 [ 853.082024][ T5786] usb 6-1: USB disconnect, device number 34 [ 853.324062][ T1192] hsr_slave_0: left promiscuous mode [ 853.367852][ T1192] hsr_slave_1: left promiscuous mode [ 853.368990][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.406563][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.943242][ T38] kauditd_printk_skb: 89 callbacks suppressed [ 855.943259][ T38] audit: type=1326 audit(1778796550.815:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.943304][ T38] audit: type=1326 audit(1778796550.835:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.945576][ T38] audit: type=1326 audit(1778796550.835:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.952695][ T38] audit: type=1326 audit(1778796550.835:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.952758][ T38] audit: type=1326 audit(1778796550.835:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.952799][ T38] audit: type=1326 audit(1778796550.835:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.952840][ T38] audit: type=1326 audit(1778796550.835:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.955388][ T38] audit: type=1326 audit(1778796550.835:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 855.955445][ T38] audit: type=1326 audit(1778796550.835:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.3899" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe6156ece59 code=0x7ffc0000 [ 856.941068][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3907'. [ 857.748275][T17077] Process accounting resumed [ 857.802052][ T1192] team0 (unregistering): Port device team_slave_1 removed [ 857.922822][ T1192] team0 (unregistering): Port device team_slave_0 removed [ 863.791306][T16696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.831913][T16696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.935432][T17107] netlink: 'syz.6.3921': attribute type 10 has an invalid length. [ 864.015361][T17107] veth0_vlan: left promiscuous mode [ 864.046277][T17107] veth0_vlan: entered promiscuous mode [ 864.178409][T17107] team0: Device veth0_vlan failed to register rx_handler [ 864.923413][T16696] team0: Port device team_slave_0 added [ 864.956797][ T823] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 865.188953][T16696] team0: Port device team_slave_1 added [ 865.202772][ T823] usb 6-1: Using ep0 maxpacket: 16 [ 865.211856][ T823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 865.215236][ T823] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 865.215257][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.215268][ T823] usb 6-1: Product: syz [ 865.215275][ T823] usb 6-1: Manufacturer: syz [ 865.215283][ T823] usb 6-1: SerialNumber: syz [ 865.442715][T16696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.442733][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.442765][T16696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.482647][T16696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.482664][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.482691][T16696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.728154][ T823] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 865.728725][ T823] gspca_vc032x: reg_w err -71 [ 865.728751][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728761][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728770][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728778][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728787][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728796][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728805][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728820][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728829][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728843][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728852][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728861][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728869][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728878][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728887][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728895][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728904][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728913][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728921][ T823] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.728930][ T823] gspca_vc032x: Unknown sensor... [ 865.729083][ T823] vc032x 6-1:12.0: probe with driver vc032x failed with error -22 [ 865.945929][ T823] usb 6-1: USB disconnect, device number 35 [ 866.190239][T16696] hsr_slave_0: entered promiscuous mode [ 866.220629][T16696] hsr_slave_1: entered promiscuous mode [ 870.916956][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.917054][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.761102][T16696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 872.887717][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 872.944726][T16696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 874.499759][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.507099][T17228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.568736][ T5613] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 874.580215][T16696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 874.645895][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.648839][T16696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 874.685818][ T823] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 874.825846][ T5613] usb 7-1: device descriptor read/64, error -71 [ 874.909817][ T823] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 874.909835][ T823] usb 9-1: config 0 has no interface number 0 [ 874.909862][ T823] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 874.909877][ T823] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.909889][ T823] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.909903][ T823] usb 9-1: config 0 interface 1 has no altsetting 0 [ 874.909921][ T823] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 874.909933][ T823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.912893][ T823] usb 9-1: config 0 descriptor?? [ 875.174284][ T5613] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 875.177740][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.248518][T17219] syzkaller1: entered promiscuous mode [ 875.248543][T17219] syzkaller1: entered allmulticast mode [ 875.337839][ T5613] usb 7-1: device descriptor read/64, error -71 [ 875.449442][ T5613] usb usb7-port1: attempt power cycle [ 875.793065][ T823] uclogic 0003:145F:0212.0004: pen parameters not found [ 875.793080][ T823] uclogic 0003:145F:0212.0004: interface is invalid, ignoring [ 875.833529][ T823] usb 9-1: USB disconnect, device number 46 [ 875.916397][ T5613] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 875.970675][ T5613] usb 7-1: device descriptor read/8, error -71 [ 877.023458][T17268] 9pnet_fd: p9_fd_create_unix (17268): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 877.146027][ T1245] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 877.282531][T13890] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 877.303385][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.319207][ T1245] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.319234][ T1245] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 877.335060][ T1245] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 877.335090][ T1245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 877.335109][ T1245] usb 9-1: SerialNumber: syz [ 877.496775][T13890] usb 6-1: Using ep0 maxpacket: 16 [ 877.512484][T13890] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 877.530801][T13890] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 877.530832][T13890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.530861][T13890] usb 6-1: Product: syz [ 877.530877][T13890] usb 6-1: Manufacturer: syz [ 877.530892][T13890] usb 6-1: SerialNumber: syz [ 877.651401][T13890] r8152-cfgselector 6-1: Unknown version 0x0000 [ 877.651425][T13890] r8152-cfgselector 6-1: config 0 descriptor?? [ 877.677928][ T1245] usb 9-1: 0:2 : does not exist [ 877.678013][ T1245] usb 9-1: unit 5 not found! [ 877.750461][T16696] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.464391][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.480716][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.731433][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.731529][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.772666][T17268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.805066][T17268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.087283][T13890] r8152-cfgselector 6-1: USB disconnect, device number 36 [ 879.151046][ T1245] usb 9-1: USB disconnect, device number 47 [ 879.233027][T17287] syzkaller1: entered promiscuous mode [ 879.233061][T17287] syzkaller1: entered allmulticast mode [ 879.366287][ T823] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 879.495398][T16696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.526916][ T823] usb 7-1: device descriptor read/64, error -71 [ 879.547850][T17117] udevd[17117]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.796607][ T823] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 879.927461][ T823] usb 7-1: device descriptor read/64, error -71 [ 880.202399][ T823] usb usb7-port1: attempt power cycle [ 880.367276][ T1245] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 880.529149][ T1245] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 880.529170][ T1245] usb 9-1: config 0 has no interface number 0 [ 880.529200][ T1245] usb 9-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.532051][ T1245] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 880.532070][ T1245] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.532081][ T1245] usb 9-1: Product: syz [ 880.532088][ T1245] usb 9-1: Manufacturer: syz [ 880.532096][ T1245] usb 9-1: SerialNumber: syz [ 880.539550][ T1245] usb 9-1: config 0 descriptor?? [ 880.553888][ T1245] yurex 9-1:0.50: Could not find endpoints [ 880.580943][ T823] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 880.646726][ T823] usb 7-1: device descriptor read/8, error -71 [ 880.895901][ T823] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 880.916699][T11153] usb 9-1: USB disconnect, device number 48 [ 880.922772][ T823] usb 7-1: device descriptor read/8, error -71 [ 881.042128][ T823] usb usb7-port1: unable to enumerate USB device [ 881.959407][T16696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.125403][T11153] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 883.375777][T11153] usb 9-1: Using ep0 maxpacket: 32 [ 883.387955][T11153] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 883.387977][T11153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 883.387990][T11153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 883.388002][T11153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 883.388016][T11153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 883.407363][T11153] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 883.407381][T11153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.407391][T11153] usb 9-1: Product: syz [ 883.407399][T11153] usb 9-1: Manufacturer: syz [ 883.407406][T11153] usb 9-1: SerialNumber: syz [ 883.412115][T11153] usb 9-1: config 0 descriptor?? [ 883.858220][T11153] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 883.858253][T11153] input input21: Device does not respond to id packet M [ 883.859540][T11153] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 883.859588][T11153] input input21: Device does not respond to id packet P [ 884.110732][T11153] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 884.110763][T11153] input input21: Device does not respond to id packet N [ 884.111151][T11153] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 884.111615][T11153] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 884.112059][T11153] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 884.112495][T11153] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 884.167611][T11153] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input21 [ 884.229721][T11153] usb 9-1: USB disconnect, device number 49 [ 887.559327][T16060] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 887.608206][T16060] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 887.610293][T16060] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 887.611586][T16060] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 887.638067][T16060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 889.768617][ T5618] Bluetooth: hci0: command tx timeout [ 891.853065][ T5618] Bluetooth: hci0: command tx timeout [ 892.100671][T17471] binder_alloc: 17465: binder_alloc_buf, no vma [ 893.058231][T17384] lo speed is unknown, defaulting to 1000 [ 893.934801][ T5618] Bluetooth: hci0: command tx timeout [ 894.265579][T17503] ntfs3(loop6): try to read out of volume at offset 0x0 [ 895.065152][T17537] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4090'. [ 895.995824][ T5618] Bluetooth: hci0: command tx timeout [ 898.423817][T17572] netlink: 'syz.8.4102': attribute type 10 has an invalid length. [ 899.586713][T17572] veth0_vlan: left promiscuous mode [ 899.589233][T17572] veth0_vlan: entered promiscuous mode [ 899.595104][T17572] team0: Device veth0_vlan failed to register rx_handler [ 900.136602][T17384] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.136975][T17384] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.137411][T17384] bridge_slave_0: entered allmulticast mode [ 900.138206][ T1245] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 900.140734][T17384] bridge_slave_0: entered promiscuous mode [ 900.171935][ T5613] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 900.220065][T17384] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.220358][T17384] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.220647][T17384] bridge_slave_1: entered allmulticast mode [ 900.252827][T17384] bridge_slave_1: entered promiscuous mode [ 900.309998][ T1245] usb 9-1: Using ep0 maxpacket: 32 [ 900.363300][ T1245] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 900.363328][ T1245] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 900.363348][ T1245] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 900.363368][ T1245] usb 9-1: config 1 has no interface number 0 [ 900.363411][ T1245] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.363435][ T1245] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 900.363483][ T1245] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 900.363505][ T1245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.426942][ T1245] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 900.464105][ T5613] usb 6-1: Using ep0 maxpacket: 32 [ 900.484652][ T5613] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.484677][ T5613] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 900.485551][T17384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.500720][ T5613] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 900.500751][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.500821][ T5613] usb 6-1: Product: syz [ 900.500835][ T5613] usb 6-1: Manufacturer: syz [ 900.500849][ T5613] usb 6-1: SerialNumber: syz [ 900.582082][T17384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.705782][ T5613] usb 6-1: config 0 descriptor?? [ 900.766931][ T5613] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 901.112177][ T1245] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 901.228722][ T37] usb 9-1: USB disconnect, device number 50 [ 901.231671][ T37] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 901.370355][T17621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4108'. [ 903.762570][T17384] team0: Port device team_slave_0 added [ 904.103231][ T5714] usb 6-1: USB disconnect, device number 37 [ 904.138589][T13890] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 904.230537][T17637] 9pnet_fd: p9_fd_create_unix (17637): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 904.299090][T13890] usb 9-1: Using ep0 maxpacket: 32 [ 904.306944][T13890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.306969][T13890] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 904.452307][T13890] usb 9-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 904.452337][T13890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.452355][T13890] usb 9-1: Product: syz [ 904.452369][T13890] usb 9-1: Manufacturer: syz [ 904.452383][T13890] usb 9-1: SerialNumber: syz [ 904.632153][T13890] usb 9-1: config 0 descriptor?? [ 904.645223][T13890] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 904.656846][ T5714] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 904.805751][ T5714] usb 6-1: Using ep0 maxpacket: 16 [ 904.814705][ T5714] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 904.822501][T17384] team0: Port device team_slave_1 added [ 904.840156][ T5714] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 904.840186][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.840206][ T5714] usb 6-1: Product: syz [ 904.840219][ T5714] usb 6-1: Manufacturer: syz [ 904.840232][ T5714] usb 6-1: SerialNumber: syz [ 905.121064][ T5714] r8152-cfgselector 6-1: Unknown version 0x0000 [ 905.121091][ T5714] r8152-cfgselector 6-1: config 0 descriptor?? [ 906.413610][T17637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.449731][T17637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.624117][T17384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.624133][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.624156][T17384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.661213][T11892] r8152-cfgselector 6-1: USB disconnect, device number 38 [ 906.704234][T17384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.704251][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.704275][T17384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.260359][T17384] hsr_slave_0: entered promiscuous mode [ 907.319267][T17384] hsr_slave_1: entered promiscuous mode [ 907.329631][T17384] debugfs: 'hsr0' already exists in 'hsr' [ 907.329656][T17384] Cannot create hsr debugfs directory [ 907.486631][T13890] usb 9-1: USB disconnect, device number 51 [ 907.599084][T11776] bridge_slave_1: left allmulticast mode [ 907.599117][T11776] bridge_slave_1: left promiscuous mode [ 907.599376][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.814118][T11776] bridge_slave_0: left allmulticast mode [ 907.814153][T11776] bridge_slave_0: left promiscuous mode [ 907.814426][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.065884][T13890] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 909.228452][T13890] usb 9-1: Using ep0 maxpacket: 32 [ 909.230850][T13890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.230875][T13890] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 909.237935][T13890] usb 9-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 909.237963][T13890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.237983][T13890] usb 9-1: Product: syz [ 909.237996][T13890] usb 9-1: Manufacturer: syz [ 909.238010][T13890] usb 9-1: SerialNumber: syz [ 909.258378][T13890] usb 9-1: config 0 descriptor?? [ 909.305558][T13890] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 911.104347][T11153] usb 9-1: USB disconnect, device number 52 [ 914.086733][T11776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.166704][T11776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.209542][T11776] bond0 (unregistering): Released all slaves [ 914.248410][T17746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 915.138427][T11776] hsr_slave_0: left promiscuous mode [ 915.175803][T11776] hsr_slave_1: left promiscuous mode [ 915.177088][T11776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.216777][T11776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.263888][T17900] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 919.263916][T17900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 919.269322][T17900] vhci_hcd vhci_hcd.0: Device attached [ 919.441961][T11776] team0 (unregistering): Port device team_slave_1 removed [ 919.507122][ T5714] usb 45-2: new low-speed USB device number 4 using vhci_hcd [ 919.534621][T11153] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 919.596694][T11776] team0 (unregistering): Port device team_slave_0 removed [ 919.688737][T11153] usb 7-1: config 0 has no interfaces? [ 919.688774][T11153] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 919.688798][T11153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.829242][T11153] usb 7-1: config 0 descriptor?? [ 920.041168][T17901] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 920.043800][ T94] vhci_hcd vhci_hcd.6: stop threads [ 920.043819][ T94] vhci_hcd vhci_hcd.6: release socket [ 920.043900][ T94] vhci_hcd vhci_hcd.6: disconnect device [ 920.053965][ T823] usb 7-1: USB disconnect, device number 40 [ 920.315553][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 920.799276][ T5613] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 920.956930][ T5613] usb 9-1: Using ep0 maxpacket: 32 [ 920.966305][ T5613] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.966329][ T5613] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 920.968902][ T5613] usb 9-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 920.968928][ T5613] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.968947][ T5613] usb 9-1: Product: syz [ 920.968959][ T5613] usb 9-1: Manufacturer: syz [ 920.968972][ T5613] usb 9-1: SerialNumber: syz [ 921.033542][ T5613] usb 9-1: config 0 descriptor?? [ 921.092809][ T5613] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 922.501961][T11153] usb 9-1: USB disconnect, device number 53 [ 926.256503][ T5714] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 926.550093][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 929.411247][T18101] vcan0: tx address claim with different name [ 931.288273][T18116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 931.667149][T11153] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 931.818996][T11153] usb 7-1: Using ep0 maxpacket: 32 [ 931.831511][T11153] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.831537][T11153] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 931.863587][T11153] usb 7-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 931.863617][T11153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.863636][T11153] usb 7-1: Product: syz [ 931.863650][T11153] usb 7-1: Manufacturer: syz [ 931.863664][T11153] usb 7-1: SerialNumber: syz [ 931.905952][T11153] usb 7-1: config 0 descriptor?? [ 931.956078][T11153] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 932.468964][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.469069][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.603534][T18157] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4326'. [ 933.665134][ T5714] usb 7-1: USB disconnect, device number 41 [ 935.342051][T17384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 935.383391][T17384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 935.397519][T17384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 935.614497][T17384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 935.625686][T17384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 935.796583][T17384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 935.799717][T17384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 937.241541][T17384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 938.071346][T17384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.235487][T17384] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.434639][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.436467][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.785882][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.786131][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.899353][ T1045] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 940.116010][ T1045] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 940.815990][T11153] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 940.965878][T11153] usb 9-1: Using ep0 maxpacket: 8 [ 940.968154][T11153] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.968208][T11153] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 940.968235][T11153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 940.968262][T11153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 940.968290][T11153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 940.968316][T11153] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.974168][T11153] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 940.974199][T11153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.974217][T11153] usb 9-1: Product: syz [ 940.974232][T11153] usb 9-1: Manufacturer: syz [ 940.974247][T11153] usb 9-1: SerialNumber: syz [ 941.010294][T11153] usb 9-1: config 0 descriptor?? [ 941.016899][T18353] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 941.033714][T17384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.460435][T17384] veth0_vlan: entered promiscuous mode [ 941.607673][T17384] veth1_vlan: entered promiscuous mode [ 941.814070][T17384] veth0_macvtap: entered promiscuous mode [ 941.856011][T17384] veth1_macvtap: entered promiscuous mode [ 941.908508][T17384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.947884][T17384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.984324][T11767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.000642][T11767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.001640][T11767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.001720][T11767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.736361][T11153] rc_core: IR keymap rc-snapstream-firefly not found [ 943.736384][T11153] Registered IR keymap rc-empty [ 943.799605][T11153] rc rc0: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 943.860143][T11153] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input22 [ 944.549441][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.549463][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.602069][T11153] input: syz syz mouse as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input23 [ 944.995525][T11153] usb 9-1: USB disconnect, device number 54 [ 944.995646][ C1] ati_remote 9-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 945.034024][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4443'. [ 945.034044][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4443'. [ 945.069382][ T4959] ati_remote 9-1:0.0: ati_remote_open: usb_submit_urb failed! [ 945.246241][T18444] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(8) [ 945.246269][T18444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 945.255906][T18444] vhci_hcd vhci_hcd.0: Device attached [ 945.498352][ T5613] usb 49-2: new low-speed USB device number 2 using vhci_hcd [ 945.765885][T11153] usb 9-1: new low-speed USB device number 55 using dummy_hcd [ 945.927552][T11153] usb 9-1: config index 0 descriptor too short (expected 8192, got 45) [ 945.927571][T11153] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.927581][T11153] usb 9-1: config 0 has no interfaces? [ 945.927598][T11153] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 945.927610][T11153] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.930483][T11153] usb 9-1: config 0 descriptor?? [ 945.989023][T16060] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 946.074546][T16060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 946.081256][T16060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 946.116234][T16060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 946.124089][T16060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 946.461284][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4451'. [ 946.503214][T11153] usb 9-1: string descriptor 0 read error: -71 [ 946.544861][T18447] vhci_hcd: connection closed [ 946.547579][T11153] usb 9-1: USB disconnect, device number 55 [ 946.601036][ T1045] vhci_hcd vhci_hcd.8: stop threads [ 946.601061][ T1045] vhci_hcd vhci_hcd.8: release socket [ 946.601137][ T1045] vhci_hcd vhci_hcd.8: disconnect device [ 946.705806][ T5613] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 948.476594][ T5618] Bluetooth: hci1: command tx timeout [ 950.815780][ T5618] Bluetooth: hci1: command tx timeout [ 950.975098][T18543] 9pnet_fd: p9_fd_create_unix (18543): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 951.218480][ T37] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 951.418552][ T37] usb 7-1: Using ep0 maxpacket: 16 [ 951.422923][ T37] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 951.442878][ T37] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 951.442908][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.442926][ T37] usb 7-1: Product: syz [ 951.442934][ T37] usb 7-1: Manufacturer: syz [ 951.442942][ T37] usb 7-1: SerialNumber: syz [ 951.524516][ T37] r8152-cfgselector 7-1: Unknown version 0x0000 [ 951.524556][ T37] r8152-cfgselector 7-1: config 0 descriptor?? [ 951.732082][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.732656][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.952497][T13890] r8152-cfgselector 7-1: USB disconnect, device number 42 [ 952.875786][ T5618] Bluetooth: hci1: command tx timeout [ 954.283503][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.213420][ T5618] Bluetooth: hci1: command tx timeout [ 956.549785][T18457] lo speed is unknown, defaulting to 1000 [ 956.939782][T18649] autofs: Bad value for 'fd' [ 958.384601][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.434781][T18661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.497915][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.784975][ T823] lo speed is unknown, defaulting to 1000 [ 961.665607][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.793686][T18457] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.794042][T18457] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.794345][T18457] bridge_slave_0: entered allmulticast mode [ 968.820626][T18457] bridge_slave_0: entered promiscuous mode [ 968.898720][T18457] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.899020][T18457] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.903189][T18457] bridge_slave_1: entered allmulticast mode [ 968.918642][T18457] bridge_slave_1: entered promiscuous mode [ 969.344042][T18457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.496878][T18457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.835748][T18827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 971.193217][ T12] bridge_slave_1: left allmulticast mode [ 971.193252][ T12] bridge_slave_1: left promiscuous mode [ 971.193550][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.309956][ T12] bridge_slave_0: left allmulticast mode [ 971.309992][ T12] bridge_slave_0: left promiscuous mode [ 971.310297][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.903417][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.977897][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.024397][ T12] bond0 (unregistering): Released all slaves [ 973.408569][T18457] team0: Port device team_slave_0 added [ 973.436465][T18457] team0: Port device team_slave_1 added [ 973.758317][T18457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.758334][T18457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.758360][T18457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.820392][T18457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.820409][T18457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.820434][T18457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.088959][T18958] netlink: 'syz.8.4663': attribute type 10 has an invalid length. [ 974.330093][T18958] veth0_vlan: left promiscuous mode [ 974.354688][T18958] veth0_vlan: entered promiscuous mode [ 974.409669][T18958] team0: Device veth0_vlan failed to register rx_handler [ 975.070070][ T5612] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 975.245783][ T5612] usb 7-1: Using ep0 maxpacket: 32 [ 975.248400][ T5612] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.248444][ T5612] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 975.254906][ T5612] usb 7-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 975.254933][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.254952][ T5612] usb 7-1: Product: syz [ 975.254966][ T5612] usb 7-1: Manufacturer: syz [ 975.254979][ T5612] usb 7-1: SerialNumber: syz [ 975.374755][ T5612] usb 7-1: config 0 descriptor?? [ 976.226798][ T5612] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 976.704419][T18993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4667'. [ 977.896213][T18457] hsr_slave_0: entered promiscuous mode [ 977.907352][T18457] hsr_slave_1: entered promiscuous mode [ 977.969501][ T823] usb 7-1: USB disconnect, device number 43 [ 979.049581][T19035] kAFS: unable to lookup cell '(' [ 979.205560][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17 [ 979.229316][T19035] kAFS: unable to lookup cell '(,c¾ûL' [ 980.518054][ T12] hsr_slave_0: left promiscuous mode [ 980.633367][ T12] hsr_slave_1: left promiscuous mode [ 980.634499][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.634523][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.662566][ T5612] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 980.684966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.684996][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.838702][ T5612] usb 7-1: Using ep0 maxpacket: 32 [ 980.843131][ T5612] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.843157][ T5612] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 980.873116][ T5612] usb 7-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 980.873144][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.873163][ T5612] usb 7-1: Product: syz [ 980.873175][ T5612] usb 7-1: Manufacturer: syz [ 980.873188][ T5612] usb 7-1: SerialNumber: syz [ 980.920800][ T5612] usb 7-1: config 0 descriptor?? [ 980.944373][ T5612] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 981.570820][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4710'. [ 982.730940][ T12] veth1_macvtap: left promiscuous mode [ 982.731054][ T12] veth0_macvtap: left promiscuous mode [ 982.731352][ T12] veth1_vlan: left promiscuous mode [ 982.731526][ T12] veth0_vlan: left promiscuous mode [ 987.057829][ T12] team0 (unregistering): Port device team_slave_1 removed [ 987.106757][ T12] team0 (unregistering): Port device team_slave_0 removed [ 987.576674][ T823] usb 7-1: USB disconnect, device number 44 [ 987.800553][T19153] loop6: detected capacity change from 0 to 128 [ 987.922898][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 987.957199][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.112345][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.131672][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.133033][T11152] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.199855][T11152] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.199922][T11152] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.202623][T19085] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.202676][T19085] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 988.216824][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.300530][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.300575][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.300594][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.328614][T19085] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.641565][ T131] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 988.943075][T19153] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 989.052387][T19085] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 989.052715][T19153] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.384213][T19085] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 989.571523][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18 [ 989.920921][ T1335] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 989.921068][ T1335] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 989.921112][ T1335] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 990.491011][T10286] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 990.531234][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 990.771116][T10286] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 991.313705][T19240] loop8: detected capacity change from 0 to 128 [ 991.369910][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.391963][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.392581][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.392934][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.393105][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.520719][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.522636][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.551962][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.553196][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.553860][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.554470][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.561952][T11152] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.563872][T11767] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.564235][T11767] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.564620][T11767] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.703496][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.705421][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.706551][ T131] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.724282][T11152] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.730324][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.741772][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.743340][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.748317][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.748688][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.749328][T11152] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.752868][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.753120][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.756953][T11152] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.757217][T11152] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 991.758181][T19240] FAT-fs (loop8): Directory bread(block 32) failed [ 991.758208][T19240] FAT-fs (loop8): Directory bread(block 33) failed [ 991.758393][T19240] FAT-fs (loop8): Directory bread(block 34) failed [ 991.758413][T19240] FAT-fs (loop8): Directory bread(block 35) failed [ 991.758527][T19240] FAT-fs (loop8): Directory bread(block 36) failed [ 991.758546][T19240] FAT-fs (loop8): Directory bread(block 37) failed [ 991.758634][T19240] FAT-fs (loop8): Directory bread(block 38) failed [ 991.758654][T19240] FAT-fs (loop8): Directory bread(block 39) failed [ 991.758744][T19240] FAT-fs (loop8): Directory bread(block 40) failed [ 991.758764][T19240] FAT-fs (loop8): Directory bread(block 41) failed [ 992.001428][ T67] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 992.473498][ T38] audit: type=1800 audit(1778796687.305:3675): pid=19240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4773" name="file1" dev="loop8" ino=1048651 res=0 errno=0 [ 992.582992][T19265] syz.8.4773: attempt to access beyond end of device [ 992.582992][T19265] loop8: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 993.193886][T19086] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 993.487042][T10293] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 993.662809][T19295] loop7: detected capacity change from 0 to 7 [ 993.670155][ T1335] lo_rw_aio(loop7) starting read with raw_refcnt=0x1, refcnt=2 [ 993.682655][T19295] Dev loop7: unable to read RDB block 7 [ 993.682703][T19295] loop7: unable to read partition table [ 993.682919][T19295] loop7: partition table beyond EOD, truncated [ 993.682957][T19295] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 993.806166][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.806266][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.818650][T18709] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 993.984295][T19303] netlink: 'syz.8.4803': attribute type 1 has an invalid length. [ 996.928814][T19317] loop8: detected capacity change from 0 to 40427 [ 997.111280][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.114760][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.116588][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.132920][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.140033][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.173712][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.316327][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.443875][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.445130][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.446393][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.447927][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.448598][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.449231][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.449846][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.450483][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.451137][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.451908][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.457735][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.458550][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.460722][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.462002][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.464267][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.466771][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.467446][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.468098][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.470823][T11767] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.478920][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.485258][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.503961][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.587843][T11510] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 997.587918][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.589563][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.589604][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.589632][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.591456][T11510] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.593153][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 997.796202][T19317] F2FS-fs (loop8): Fix alignment : done, start(4096) end(16896) block(12288) [ 998.238931][ T67] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 998.239485][T19317] F2FS-fs (loop8): invalid crc value [ 998.292792][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 998.294957][T19086] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 998.302237][T19317] F2FS-fs (loop8): invalid crc value [ 998.302277][T19317] F2FS-fs (loop8): Failed to get valid F2FS checkpoint [ 998.302401][T19317] INFO: trying to register non-static key. [ 998.302410][T19317] The code is fine but needs lockdep annotation, or maybe [ 998.302418][T19317] you didn't initialize this object before use? [ 998.302432][T19317] turning off the locking correctness validator. [ 998.302463][T19317] CPU: 1 UID: 0 PID: 19317 Comm: syz.8.4807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 998.302493][T19317] Tainted: [L]=SOFTLOCKUP [ 998.302501][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 998.302521][T19317] Call Trace: [ 998.302537][T19317] [ 998.302545][T19317] dump_stack_lvl+0xe8/0x150 [ 998.302578][T19317] assign_lock_key+0x133/0x150 [ 998.302603][T19317] register_lock_class+0xcc/0x2e0 [ 998.302625][T19317] __lock_acquire+0xad/0x2d10 [ 998.302646][T19317] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 998.302665][T19317] ? __lock_acquire+0x6b5/0x2d10 [ 998.302687][T19317] ? __lock_acquire+0x6b5/0x2d10 [ 998.302710][T19317] ? f2fs_exist_written_data+0x53/0x90 [ 998.302739][T19317] lock_acquire+0x106/0x350 [ 998.302757][T19317] ? f2fs_exist_written_data+0x53/0x90 [ 998.302787][T19317] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 998.302809][T19317] rt_spin_lock+0x83/0x400 [ 998.302837][T19317] ? f2fs_exist_written_data+0x53/0x90 [ 998.302865][T19317] ? __pfx_rt_spin_lock+0x10/0x10 [ 998.302893][T19317] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 998.302916][T19317] ? preempt_count_add+0x91/0x190 [ 998.302945][T19317] f2fs_exist_written_data+0x53/0x90 [ 998.302972][T19317] f2fs_drop_inode+0xda/0xbf0 [ 998.302995][T19317] iput+0x651/0xe80 [ 998.303024][T19317] f2fs_fill_super+0x6047/0x7850 [ 998.303071][T19317] get_tree_bdev_flags+0x431/0x4f0 [ 998.303101][T19317] ? __pfx_f2fs_fill_super+0x10/0x10 [ 998.303131][T19317] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 998.303164][T19317] vfs_get_tree+0x92/0x2a0 [ 998.303193][T19317] do_new_mount+0x341/0xd30 [ 998.303214][T19317] ? apparmor_capable+0x126/0x170 [ 998.303239][T19317] ? __pfx_do_new_mount+0x10/0x10 [ 998.303262][T19317] ? ns_capable+0x89/0xe0 [ 998.303290][T19317] ? user_path_at+0xd4/0x160 [ 998.303318][T19317] ? user_path_at+0xd4/0x160 [ 998.303343][T19317] __se_sys_mount+0x31d/0x420 [ 998.303370][T19317] ? __pfx___se_sys_mount+0x10/0x10 [ 998.303411][T19317] ? __x64_sys_mount+0x20/0xc0 [ 998.303442][T19317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.303463][T19317] do_syscall_64+0x15f/0xf80 [ 998.303487][T19317] ? trace_irq_disable+0x3b/0x140 [ 998.303517][T19317] ? clear_bhb_loop+0x40/0x90 [ 998.303539][T19317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.303559][T19317] RIP: 0033:0x7fae18a4e0ca [ 998.303587][T19317] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.303605][T19317] RSP: 002b:00007fae16ca5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 998.303627][T19317] RAX: ffffffffffffffda RBX: 00007fae16ca5ee0 RCX: 00007fae18a4e0ca [ 998.303646][T19317] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fae16ca5ea0 [ 998.303662][T19317] RBP: 0000200000000040 R08: 00007fae16ca5ee0 R09: 0000000000000000 [ 998.303674][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 998.303686][T19317] R13: 00007fae16ca5ea0 R14: 0000000000005548 R15: 0000200000000080 [ 998.303705][T19317] [ 998.510438][T18457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 998.706127][T18457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 998.707536][T18457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 998.711598][T10293] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 998.752105][T18457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.757501][T18457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 998.790513][T18457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.794211][T18457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 998.824269][T18457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 998.847234][ T823] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 998.978700][T18457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.996656][ T823] usb 7-1: Using ep0 maxpacket: 32 [ 998.998115][ T823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.998142][ T823] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 999.000199][ T823] usb 7-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 999.000227][ T823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.000248][ T823] usb 7-1: Product: syz [ 999.000263][ T823] usb 7-1: Manufacturer: syz [ 999.000277][ T823] usb 7-1: SerialNumber: syz [ 999.002781][ T823] usb 7-1: config 0 descriptor?? [ 999.019851][ T823] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 999.029908][T18457] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.049045][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.049133][T11510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.063334][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.063473][T11767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.481476][T19423] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4818'. [ 999.969595][ T823] usb 7-1: USB disconnect, device number 45 [ 1000.263239][T18457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.311512][T18457] veth0_vlan: entered promiscuous mode [ 1000.323596][T18457] veth1_vlan: entered promiscuous mode [ 1000.353532][T18457] veth0_macvtap: entered promiscuous mode [ 1000.360416][T18457] veth1_macvtap: entered promiscuous mode [ 1000.382641][T18457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.393679][T18457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.409426][T11152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.409931][T11152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.411524][T11152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.412824][T11152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.568464][T18457] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 1000.588158][T11152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.588176][T11152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.591242][T18457] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 1000.612276][T11152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.612296][T11152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50