last executing test programs: 14.572069883s ago: executing program 2 (id=2173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="020344ff420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 14.332534492s ago: executing program 2 (id=2174): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x8000003bfd, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/103, 0x67}}], 0x1, 0x12040, 0x0) 14.274226857s ago: executing program 2 (id=2175): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@index_off}]}) 14.196954053s ago: executing program 3 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x4, 0x20000002, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000002294ff79802700"/25, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r10, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x15, 0x0, 0x14000, 0x0, [{0xfff, 0x9, 0x31}, {0x9, 0x3ff, 0x1}, {0x3, 0x6}, {0x72e8798d, 0x9, 0x6}, {0x2, 0x401, 0x5}, {0xffffffff, 0xfffffff8, 0x3}, {0x2, 0x3, 0x2}, {0xfff, 0x5, 0x5}, {0x5, 0x4, 0x65f0}, {0x1000, 0x0, 0x2}, {0x88ea, 0x5, 0x1000}, {0xf9, 0x9, 0xff}, {0x3f, 0x2, 0x8}, {0x8000, 0xe44f7000}, {0x0, 0xffff256d, 0xc42e}, {0x1000, 0x9, 0x7fff}, {0xb5, 0x800, 0x6}, {0x7, 0x6, 0xed}, {0x10001, 0x3, 0x40}, {0x84e8, 0x200, 0x4}, {0xfe, 0xfff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000646c6c2500000000002007007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r8, &(0x7f0000000480)={0x0, 0x75, 0x0}, 0x0) 13.290499277s ago: executing program 3 (id=2179): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 13.214614644s ago: executing program 3 (id=2180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)='W', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x34000, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) 12.339399454s ago: executing program 3 (id=2185): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 11.78702745s ago: executing program 3 (id=2188): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001100000000000000000200000000000000000000000000000000000000feffffff0100000019000000000000000800000000000000000000000000e9ffffff7465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000b8000000b8000000e8"]}, 0x145) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [], 0x0, 0x0, 0x0}, 0x1f0) 11.312745888s ago: executing program 3 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 6.176688027s ago: executing program 1 (id=2221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x2}, 0x48) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r4, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000a2220840d219bc75819b0102c5f809021200010000000009040000000202"], 0x0) 3.758555974s ago: executing program 2 (id=2176): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xb, &(0x7f0000001400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8af7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001240)={@ifindex, r5, 0x5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@udp6=r3}, 0x20) close(r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000400)={0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000140)={r7, 0x0, r8}) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xffffffffffffb3c9]}, 0x8, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0xb30, 0xb2, 0xc4, r9, 0x7, '\x00', r10, r11, 0x5, 0xfffffffe, 0x0, 0x4}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020703500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x10) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 3.4425338s ago: executing program 4 (id=2230): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x70bd29}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r5, 0xbcaa9c0f86c3443d, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x44}}, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = accept4(r2, &(0x7f0000000480)=@tipc=@id, &(0x7f0000000280)=0x80, 0x80800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x54, 0x0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xaa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4001) r9 = openat$cgroup_int(r7, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004fc0)={0x38, 0x0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0xe}, {0x7, 0x1, 0xb, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) close(r9) 3.237273426s ago: executing program 4 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x4, 0x20000002, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000002294ff79802700"/25, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r10, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x15, 0x0, 0x14000, 0x0, [{0xfff, 0x9, 0x31}, {0x9, 0x3ff, 0x1}, {0x3, 0x6}, {0x72e8798d, 0x9, 0x6}, {0x2, 0x401, 0x5}, {0xffffffff, 0xfffffff8, 0x3}, {0x2, 0x3, 0x2}, {0xfff, 0x5, 0x5}, {0x5, 0x4, 0x65f0}, {0x1000, 0x0, 0x2}, {0x88ea, 0x5, 0x1000}, {0xf9, 0x9, 0xff}, {0x3f, 0x2, 0x8}, {0x8000, 0xe44f7000}, {0x0, 0xffff256d, 0xc42e}, {0x1000, 0x9, 0x7fff}, {0xb5, 0x800, 0x6}, {0x7, 0x6, 0xed}, {0x10001, 0x3, 0x40}, {0x84e8, 0x200, 0x4}, {0xfe, 0xfff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000646c6c2500000000002007007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r8, &(0x7f0000000480)={0x0, 0x75, 0x0}, 0x0) 1.792650204s ago: executing program 4 (id=2233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 1.776699725s ago: executing program 1 (id=2234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FAMILY={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) 1.503609857s ago: executing program 0 (id=2235): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc1105511, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}) 1.452621611s ago: executing program 2 (id=2236): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x11, &(0x7f0000000000), 0x4) 1.452206102s ago: executing program 1 (id=2237): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b0100000000000000010000850000000000000000020000000000000000000000da0009b6edb82b0152861994d41514c39363c17189b345c141ab19bbb6c8a571f50142d654bff48c78f94706d7ad1a259cafe8a9fe9b18a100000000"], 0x0, 0x4e}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='cachefiles_unlink\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 728.66774ms ago: executing program 2 (id=2238): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0xb, 0x3ff, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000240)="0e5e74cde9bdb7fd5998", &(0x7f00000001c0)=@buf="5903c99594d74485d25ddaf4950dc07be0df4b47f55336b33ba686b2e8316dd81bc712832523120ae873da5c76922e44e00e7cee99b16d", 0x2}, 0x20) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000580)=0x2, 0x4) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x44}}, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x986, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0xa, 0x101}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9a8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000004}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x0) recvmmsg(r7, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ppoll(&(0x7f0000000280)=[{r0, 0x4}, {r9, 0x200}], 0x2, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000380)={[0x20]}, 0x8) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) 412.575656ms ago: executing program 1 (id=2239): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) writev(r0, &(0x7f0000002440)=[{&(0x7f0000000040)='\f\x00\x00\x00', 0x4}], 0x1) 412.101666ms ago: executing program 1 (id=2240): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 406.556797ms ago: executing program 0 (id=2241): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1, 0x8000000}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "240086ddffff0000"}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x9, 0x0, 0x1804, r0, 0xcb1e, '\x00', 0x0, r3, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) quotactl$Q_QUOTAON(0x0, 0x0, 0x0, 0x0) 373.138089ms ago: executing program 1 (id=2242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x54, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x800}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f49aa70ab6a07c7810278b23e59d6734eb4deefd45697d51f81e9ac1fff7b7ca91837ff53dc23c8440431b20b31a6f0f6374b215a57f16fcf428", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c657874656e745f63616368652c61636c2c6163746976655f6c6f67733d362c6e6f666c7573685f6d6572676500000000000000065f726f6c6c5f666f72776172642c6e6f696e6c696e655f64656e7472792c6673796e635f6d6f64653d706f7369782c686561702c6e6f696e6c696e655f646174612c6e6f657874656e745f63616368652c6d6f64653d6164617074697665ac6e6f657874656e745f63616368652c00"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) futex(&(0x7f0000000280), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x3e) recvmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x1, 0xfffffffffffffff8) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)) 293.953796ms ago: executing program 0 (id=2243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 188.805654ms ago: executing program 0 (id=2244): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000002700)={0x0, 0x0, {0x0, 0x0, 0x3011, 0x3}}) 177.977795ms ago: executing program 4 (id=2245): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x3856ab791beaab16, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 155.439827ms ago: executing program 0 (id=2246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FAMILY={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) 93.239843ms ago: executing program 4 (id=2247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x11, &(0x7f0000000000), 0x4) 91.459222ms ago: executing program 0 (id=2248): syz_open_dev$dri(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x4) lseek(r1, 0x7ffffb, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open(&(0x7f00000000c0)='.\x00', 0x591002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000100)='i', 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x0, "d64724f6257e43b341dc333940c0ca00", 0xffffffff}, 0x3c) close(r2) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x20, 0x6de, &(0x7f0000000840)="$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") syz_io_uring_setup(0x1f9, 0x0, 0x0, &(0x7f0000000140)) 0s ago: executing program 4 (id=2249): mkdir(0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) get_robust_list(0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): nl_net:caif_netlink_parms(): no params data found [ 301.298118][ T7938] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 301.349911][ T7871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.360953][ T7895] XFS (loop0): Mounting V5 Filesystem [ 301.370617][ T7871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.431539][ T7871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.456009][ T7895] XFS (loop0): Ending clean mount [ 301.489886][ T5793] Bluetooth: hci0: command 0x0419 tx timeout [ 301.500302][ T7871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.544607][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.560185][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.569106][ T7918] device bridge_slave_0 entered promiscuous mode [ 301.591309][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.616635][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.631009][ T7918] device bridge_slave_1 entered promiscuous mode [ 301.753469][ T7918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.803373][ T7918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.903983][ T7918] team0: Port device team_slave_0 added [ 301.925064][ T7918] team0: Port device team_slave_1 added [ 301.988598][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.029916][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.036902][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.065322][ T7918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.109108][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.121911][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.142240][ T7871] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.150173][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.157137][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.206156][ T7918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.303235][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.312860][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.321716][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.328790][ T5499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.396674][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.405466][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.414503][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.424444][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.431594][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.439326][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.448150][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.461451][ T7918] device hsr_slave_0 entered promiscuous mode [ 302.468532][ T7918] device hsr_slave_1 entered promiscuous mode [ 302.475495][ T7918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.484901][ T7918] Cannot create hsr debugfs directory [ 302.494409][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.510872][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.536866][ T5264] device hsr_slave_0 left promiscuous mode [ 302.543848][ T5264] device hsr_slave_1 left promiscuous mode [ 302.560719][ T5264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.568214][ T5264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.587205][ T5264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.599119][ T5264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.622050][ T5264] device vlan1 left promiscuous mode [ 302.627625][ T5264] bridge0: port 3(vlan1) entered disabled state [ 302.647066][ T5264] device bridge_slave_1 left promiscuous mode [ 302.658261][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.678672][ T5264] device bridge_slave_0 left promiscuous mode [ 302.686724][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.709112][ T5264] device veth1_macvtap left promiscuous mode [ 302.715280][ T5264] device veth0_macvtap left promiscuous mode [ 302.721636][ T5264] device veth1_vlan left promiscuous mode [ 302.727457][ T5264] device veth0_vlan left promiscuous mode [ 302.857270][ T5797] Bluetooth: hci4: command 0x0409 tx timeout [ 303.052329][ T5264] bond2 (unregistering): Released all slaves [ 303.073439][ T5264] bond1 (unregistering): Released all slaves [ 303.100304][ T5351] Bluetooth: hci7: command 0x041b tx timeout [ 303.282618][ T5264] team0 (unregistering): Port device team_slave_1 removed [ 303.323879][ T5264] team0 (unregistering): Port device team_slave_0 removed [ 303.370323][ T5264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.401423][ T5264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.561589][ T5264] bond0 (unregistering): Released all slaves [ 303.660895][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.669099][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.690593][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.699161][ T7973] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1398'. [ 303.717571][ T7973] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1398'. [ 303.777350][ T7871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.795256][ T7871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.821117][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.831221][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.840080][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.848488][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.870588][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.214301][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.233442][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.273623][ T7871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.298432][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.308285][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.374127][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.397482][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.410815][ T7871] device veth0_vlan entered promiscuous mode [ 304.422803][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.440026][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.454896][ T7871] device veth1_vlan entered promiscuous mode [ 304.543718][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.570597][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.590362][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.620179][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.648184][ T7998] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1408'. [ 304.661904][ T7998] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1408'. [ 304.687052][ T7871] device veth0_macvtap entered promiscuous mode [ 304.711646][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.740416][ T7871] device veth1_macvtap entered promiscuous mode [ 304.794015][ T7918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.815666][ T7918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.854025][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.888132][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.908646][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.929838][ T5793] Bluetooth: hci4: command 0x041b tx timeout [ 304.939994][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.979568][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.009580][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.031183][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.049961][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.069497][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.089791][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.109489][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.129511][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.161863][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.169340][ T7918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.179495][ T3516] Bluetooth: hci7: command 0x040f tx timeout [ 305.192947][ T7918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.217369][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.230365][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.263557][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.289485][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.299347][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.355009][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.374440][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.395486][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.413613][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.449477][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.459346][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.501502][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.528620][ T7871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.547103][ T7871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.561323][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.590098][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.598955][ T5346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.617610][ T7871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.628145][ T7871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.637872][ T7871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.647581][ T7871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.891740][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.911982][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.973819][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.987579][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.006636][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.015962][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.055547][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.072366][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.104138][ T7918] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.124054][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.166941][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.176842][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.201301][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.208423][ T5793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.226671][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.247302][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.269871][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.276997][ T5793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.299654][ T8019] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1417'. [ 306.319049][ T8019] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1417'. [ 306.350689][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.371753][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.400267][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.450415][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.460516][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.469350][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.500888][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.520609][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.570384][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.625120][ T7918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.661230][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.678712][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.687557][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.707164][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.002719][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.015719][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.041547][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.048704][ T5793] Bluetooth: hci4: command 0x040f tx timeout [ 307.120531][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.142924][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.205552][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.220651][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.252395][ T7918] device veth0_vlan entered promiscuous mode [ 307.265992][ T7918] device veth1_vlan entered promiscuous mode [ 307.272726][ T5791] Bluetooth: hci7: command 0x0419 tx timeout [ 307.313556][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.322424][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.349098][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.378591][ T8051] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1429'. [ 307.411725][ T8051] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1429'. [ 307.474545][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.491001][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.514295][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.553610][ T7918] device veth0_macvtap entered promiscuous mode [ 307.574147][ T7918] device veth1_macvtap entered promiscuous mode [ 307.635143][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.658506][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.683591][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.706281][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.746842][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.769362][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.789876][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.806112][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.827285][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.845773][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.863997][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.875211][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.885652][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.900318][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.926655][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.950040][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.966104][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.975983][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.987036][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.003334][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.028541][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.039012][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.050476][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.064383][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.077634][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.088531][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.099861][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.112893][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.123922][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.137366][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.150133][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.160605][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.171716][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.202077][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.231050][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.252139][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.280625][ T7918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.309839][ T7918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.337019][ T7918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.347153][ T7918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.569002][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.593329][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.596437][ T8082] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1441'. [ 308.649528][ T8082] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1441'. [ 308.682622][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.702778][ T7750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.721643][ T7750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.765020][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.844695][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1442'. [ 308.947702][ T8088] loop3: detected capacity change from 0 to 2048 [ 309.026304][ T8088] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 309.050369][ T8092] loop7: detected capacity change from 0 to 16384 [ 309.070145][ T8088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.093274][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 309.171974][ T150] blk_update_request: I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 309.184524][ T150] Buffer I/O error on dev loop7, logical block 16, lost async page write [ 309.229270][ T8093] blk_update_request: I/O error, dev loop7, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 309.292963][ T8092] blk_update_request: I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 309.369704][ T8093] Buffer I/O error on dev loop7, logical block 17, lost async page write [ 309.613185][ T8112] loop3: detected capacity change from 0 to 256 [ 309.777535][ T8112] FAT-fs (loop3): Directory bread(block 64) failed [ 309.807877][ T8112] FAT-fs (loop3): Directory bread(block 65) failed [ 309.841976][ T8112] FAT-fs (loop3): Directory bread(block 66) failed [ 309.848652][ T8112] FAT-fs (loop3): Directory bread(block 67) failed [ 309.921921][ T8112] FAT-fs (loop3): Directory bread(block 68) failed [ 309.928598][ T8112] FAT-fs (loop3): Directory bread(block 69) failed [ 309.996884][ T8112] FAT-fs (loop3): Directory bread(block 70) failed [ 310.031954][ T8112] FAT-fs (loop3): Directory bread(block 71) failed [ 310.074677][ T8112] FAT-fs (loop3): Directory bread(block 72) failed [ 310.095386][ T8110] chnl_net:caif_netlink_parms(): no params data found [ 310.116524][ T8112] FAT-fs (loop3): Directory bread(block 73) failed [ 310.911121][ T8141] loop7: detected capacity change from 0 to 16384 [ 310.920862][ T8112] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 310.971431][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.012616][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.037396][ T8110] device bridge_slave_0 entered promiscuous mode [ 311.047076][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.065016][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.078658][ T8110] device bridge_slave_1 entered promiscuous mode [ 311.101083][ T150] blk_update_request: I/O error, dev loop7, sector 248 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 311.115172][ T150] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 311.164375][ T8141] blk_update_request: I/O error, dev loop7, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 311.170193][ T8144] blk_update_request: I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 311.176607][ T8141] Buffer I/O error on dev loop7, logical block 32, lost async page write [ 311.230073][ T8110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.257542][ T8151] device ipip0 entered promiscuous mode [ 311.263997][ T5797] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 311.266771][ T8148] loop3: detected capacity change from 0 to 1024 [ 311.297343][ T8110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.364498][ T8110] team0: Port device team_slave_0 added [ 311.376578][ T8148] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 311.389169][ T8110] team0: Port device team_slave_1 added [ 311.426736][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.450698][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.529670][ T5797] usb 5-1: Using ep0 maxpacket: 32 [ 311.544782][ T8110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.571375][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.584052][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.649745][ T8110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.760612][ T21] Bluetooth: hci8: command 0x0409 tx timeout [ 311.799788][ T5797] usb 5-1: config 0 has an invalid interface number: 140 but max is 0 [ 311.807999][ T5797] usb 5-1: config 0 has no interface number 0 [ 312.257634][ T8110] device hsr_slave_0 entered promiscuous mode [ 312.288609][ T8164] loop3: detected capacity change from 0 to 2048 [ 312.305736][ T8110] device hsr_slave_1 entered promiscuous mode [ 312.325976][ T8110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.344157][ T8110] Cannot create hsr debugfs directory [ 312.389387][ T8164] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 312.390019][ T5797] usb 5-1: New USB device found, idVendor=2040, idProduct=b150, bcdDevice=b8.ec [ 312.473298][ T8164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.510200][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.526329][ T5797] usb 5-1: Product: syz [ 312.530982][ T5797] usb 5-1: Manufacturer: syz [ 312.537299][ T5797] usb 5-1: SerialNumber: syz [ 312.547630][ T5797] usb 5-1: config 0 descriptor?? [ 312.674493][ T8110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.781767][ T8110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.817409][ T5791] usb 5-1: USB disconnect, device number 14 [ 312.831034][ T8177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1475'. [ 312.938834][ T8110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.084309][ T8110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.199048][ T8190] loop7: detected capacity change from 0 to 16384 [ 313.257067][ T8110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.293851][ T8110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.328121][ T8110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.352452][ T150] blk_update_request: I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 313.364034][ T150] Buffer I/O error on dev loop7, logical block 16, lost async page write [ 313.391145][ T8110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.420574][ T8192] blk_update_request: I/O error, dev loop7, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 313.459650][ T8190] blk_update_request: I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 313.519632][ T8192] Buffer I/O error on dev loop7, logical block 17, lost async page write [ 313.719666][ T5791] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 313.809715][ T5793] Bluetooth: hci8: command 0x041b tx timeout [ 313.968423][ T8110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.110363][ T5791] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 314.148906][ T5791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.278103][ T8110] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.308552][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.330911][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.359759][ T5791] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 314.379240][ T5791] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 314.430916][ T5791] usb 5-1: Manufacturer: syz [ 314.445686][ T8110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.464747][ T8204] loop3: detected capacity change from 0 to 2048 [ 314.473200][ T8110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.476330][ T5791] usb 5-1: config 0 descriptor?? [ 314.495710][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.510362][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.518997][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.526173][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.547905][ T8204] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 314.549110][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.581626][ T5791] igorplugusb 5-1:0.0: incorrect number of endpoints [ 314.592406][ T8204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.613349][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.640170][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.647333][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.670020][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.689978][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.709188][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.718500][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.727553][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.736729][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.745685][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.754458][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.763659][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.774782][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.783845][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.792230][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.808061][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.816063][ T8208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1486'. [ 314.831228][ T3504] usb 5-1: USB disconnect, device number 15 [ 314.996764][ T8229] loop3: detected capacity change from 0 to 1024 [ 315.029205][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.043347][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.058492][ T8110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.082033][ T8229] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 315.117375][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.128842][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.209472][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.220524][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.242223][ T8110] device veth0_vlan entered promiscuous mode [ 315.261304][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.271299][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.288037][ T8110] device veth1_vlan entered promiscuous mode [ 315.309705][ T3516] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 315.335582][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.345108][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 315.354082][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.363911][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.395784][ T8110] device veth0_macvtap entered promiscuous mode [ 315.423106][ T8242] loop7: detected capacity change from 0 to 16384 [ 315.439320][ T8110] device veth1_macvtap entered promiscuous mode [ 315.476950][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.490548][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.504968][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.523063][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.591977][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.618986][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.650950][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.685241][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.729726][ T3516] usb 3-1: Using ep0 maxpacket: 32 [ 315.749740][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.760882][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.890732][ T5791] Bluetooth: hci8: command 0x040f tx timeout [ 316.401474][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.423400][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.443976][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.465220][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.486448][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.512694][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.560863][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.600402][ T8254] loop3: detected capacity change from 0 to 2048 [ 316.629876][ T3516] usb 3-1: config 0 has an invalid interface number: 140 but max is 0 [ 316.639571][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.647760][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.667388][ T8254] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 316.670719][ T3516] usb 3-1: config 0 has no interface number 0 [ 316.700378][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.722556][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.732876][ T8254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.752911][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.780665][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.808858][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.821067][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.832681][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.843411][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.854884][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.865647][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.879861][ T3516] usb 3-1: New USB device found, idVendor=2040, idProduct=b150, bcdDevice=b8.ec [ 316.891659][ T3516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.891885][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.900610][ T3516] usb 3-1: Product: syz [ 316.915419][ T3516] usb 3-1: Manufacturer: syz [ 316.922101][ T3516] usb 3-1: SerialNumber: syz [ 316.925070][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.928903][ T3516] usb 3-1: config 0 descriptor?? [ 316.947601][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.958257][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.968330][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.979178][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.989095][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.999717][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.024207][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.044583][ T8262] device ipip0 entered promiscuous mode [ 317.054224][ T8260] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1501'. [ 317.072613][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.090891][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.122469][ T8110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.150566][ T8110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.174060][ T8110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.200014][ T8110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.219369][ T8272] program syz.3.1505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.232611][ T5351] usb 3-1: USB disconnect, device number 10 [ 317.271801][ T3516] kernel write not supported for file bpf-prog (pid: 3516 comm: kworker/0:4) [ 317.389304][ T4041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.407338][ T4041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.422716][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.432473][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.515147][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 317.546212][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.579581][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.596910][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.980086][ T3504] Bluetooth: hci8: command 0x0419 tx timeout [ 318.404713][ T8285] blk_update_request: I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 18 prio class 0 [ 318.411531][ T8292] raw_sendmsg: syz.4.1512 forgot to set AF_INET. Fix it! [ 318.667536][ T8311] program syz.2.1517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.700090][ T8297] sctp: failed to load transform for md5: -2 [ 318.726488][ T5793] kernel write not supported for file bpf-prog (pid: 5793 comm: kworker/1:12) [ 318.789749][ T8321] vxcan1: tx address claim with dest, not broadcast [ 319.098635][ T8337] loop7: detected capacity change from 0 to 16384 [ 319.997342][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 320.158016][ T8357] program syz.4.1533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.190690][ T21] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 320.205504][ T8359] vxcan1: tx address claim with dest, not broadcast [ 320.243158][ T7555] kernel write not supported for file bpf-prog (pid: 7555 comm: kworker/0:18) [ 320.429657][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 320.549951][ T21] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 320.568020][ T21] usb 1-1: config 0 has no interface number 0 [ 320.629836][ T8386] blk_update_request: I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 320.760048][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=b150, bcdDevice=b8.ec [ 320.818466][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.967466][ T21] usb 1-1: Product: syz [ 321.043353][ T21] usb 1-1: Manufacturer: syz [ 321.112143][ T21] usb 1-1: SerialNumber: syz [ 321.198865][ T8395] program syz.3.1547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.310652][ T21] usb 1-1: config 0 descriptor?? [ 321.409957][ T8386] blk_update_request: I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 321.451008][ T8403] vxcan1: tx address claim with dest, not broadcast [ 321.481858][ T5499] kernel write not supported for file bpf-prog (pid: 5499 comm: kworker/0:15) [ 321.572654][ T21] usb 1-1: USB disconnect, device number 21 [ 321.862866][ T8430] program syz.4.1562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.012414][ T7555] kernel write not supported for file bpf-prog (pid: 7555 comm: kworker/0:18) [ 322.013322][ T8439] vxcan1: tx address claim with dest, not broadcast [ 323.011476][ T8470] vxcan1: tx address claim with dest, not broadcast [ 323.016458][ T8473] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 323.248611][ T8488] overlayfs: failed to resolve './file1': -2 [ 323.360970][ T8500] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 323.656633][ T8529] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 323.799663][ T7555] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 325.413849][ T26] audit: type=1326 audit(1720079893.895:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.2.1616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x0 [ 325.487703][ T8565] device wlan1 entered promiscuous mode [ 325.496524][ T8565] device macsec1 entered promiscuous mode [ 325.507092][ T8565] device wlan1 left promiscuous mode [ 325.530364][ T7555] usb 1-1: Using ep0 maxpacket: 8 [ 325.582049][ T8572] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 325.680021][ T7555] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.697772][ T7555] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.708018][ T7555] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42157, setting to 1024 [ 325.720508][ T7555] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 325.737417][ T7555] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.752630][ T7555] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.762246][ T7555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.888245][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1627'. [ 325.908731][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.916330][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.039895][ T7555] usb 1-1: GET_CAPABILITIES returned 0 [ 326.045692][ T7555] usbtmc 1-1:16.0: can't read capabilities [ 327.409561][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 327.435997][ T26] audit: type=1804 audit(1720079895.885:40): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1632" name="/newroot/114/file1/bus/file1" dev="overlay" ino=636 res=1 errno=0 [ 327.454493][ T5499] usb 1-1: USB disconnect, device number 22 [ 327.532885][ T8609] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 327.540637][ T26] audit: type=1804 audit(1720079896.025:41): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1637" name="/newroot/115/file0/bus" dev="hugetlbfs" ino=62886 res=1 errno=0 [ 327.589162][ T26] audit: type=1804 audit(1720079896.065:42): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1637" name="/newroot/115/file0/bus" dev="hugetlbfs" ino=62886 res=1 errno=0 [ 327.619757][ T7393] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 327.927361][ T26] audit: type=1326 audit(1720079896.415:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.1644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb89467ebd9 code=0x0 [ 327.970014][ T26] audit: type=1326 audit(1720079896.445:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.3.1643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9f4ce8bd9 code=0x0 [ 328.154191][ T7393] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 328.168770][ T7393] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.411333][ T7393] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 328.515034][ T7393] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 328.635490][ T7393] usb 5-1: Manufacturer: syz [ 328.760319][ T7393] usb 5-1: config 0 descriptor?? [ 328.806049][ T7393] igorplugusb 5-1:0.0: incorrect number of endpoints [ 329.987836][ T5499] usb 5-1: USB disconnect, device number 16 [ 330.068682][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1650'. [ 330.106842][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.114375][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.140359][ T26] audit: type=1804 audit(1720079898.635:45): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1651" name="/newroot/18/file0/bus" dev="hugetlbfs" ino=64018 res=1 errno=0 [ 330.204494][ T26] audit: type=1804 audit(1720079898.655:46): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1651" name="/newroot/18/file0/bus" dev="hugetlbfs" ino=64018 res=1 errno=0 [ 330.234327][ T8662] loop3: detected capacity change from 0 to 256 [ 330.379283][ T8662] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000e55b, chksum : 0xac11a2d4, utbl_chksum : 0xe619d30d) [ 330.389880][ T8667] device wlan1 entered promiscuous mode [ 330.413295][ T8667] device macsec1 entered promiscuous mode [ 330.428565][ T8667] device wlan1 left promiscuous mode [ 330.435172][ T8662] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 330.531824][ T26] audit: type=1326 audit(1720079899.025:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.1.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f862cefcbd9 code=0x0 [ 330.575778][ T26] audit: type=1326 audit(1720079899.065:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.0.1657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb89467ebd9 code=0x0 [ 330.735324][ T8678] loop3: detected capacity change from 0 to 512 [ 330.815303][ T8678] EXT4-fs (loop3): Unrecognized mount option "." or missing value [ 331.817866][ T8702] [U]  [ 331.824427][ T26] audit: type=1804 audit(1720079900.315:49): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1668" name="/newroot/116/file0/bus" dev="hugetlbfs" ino=64147 res=1 errno=0 [ 331.885917][ T8707] device wlan1 entered promiscuous mode [ 331.919747][ T8707] device macsec1 entered promiscuous mode [ 331.930382][ T26] audit: type=1804 audit(1720079900.345:50): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1668" name="/newroot/116/file0/bus" dev="hugetlbfs" ino=64147 res=1 errno=0 [ 331.960177][ T8707] device wlan1 left promiscuous mode [ 332.185248][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 332.236764][ T26] audit: type=1326 audit(1720079900.725:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.3.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9f4ce8bd9 code=0x0 [ 332.269618][ T7] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 332.299813][ T26] audit: type=1326 audit(1720079900.755:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.2.1678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x0 [ 333.263230][ T8742] [U]  [ 333.309643][ T5499] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 333.348822][ T8746] loop3: detected capacity change from 0 to 512 [ 333.419469][ T7] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 333.423841][ T8746] EXT4-fs (loop3): Unrecognized mount option "." or missing value [ 333.440053][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.467705][ T26] audit: type=1804 audit(1720079901.955:53): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1686" name="/newroot/121/file0/bus" dev="hugetlbfs" ino=63280 res=1 errno=0 [ 333.529843][ T26] audit: type=1804 audit(1720079901.985:54): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1686" name="/newroot/121/file0/bus" dev="hugetlbfs" ino=63280 res=1 errno=0 [ 333.552226][ T7] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 333.569963][ T7] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 333.584411][ T7] usb 1-1: Manufacturer: syz [ 333.605942][ T7] usb 1-1: config 0 descriptor?? [ 333.681468][ T7] igorplugusb 1-1:0.0: incorrect number of endpoints [ 333.710248][ T5499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14135, setting to 64 [ 333.722015][ T5499] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 333.744551][ T5499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.765982][ T5499] usb 2-1: config 0 descriptor?? [ 333.809834][ T5793] Bluetooth: hci4: command 0x0409 tx timeout [ 333.809942][ T8728] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 333.898355][ T8762] sctp: [Deprecated]: syz.3.1690 (pid 8762) Use of int in maxseg socket option. [ 333.898355][ T8762] Use struct sctp_assoc_value instead [ 334.020276][ T7555] usb 1-1: USB disconnect, device number 23 [ 334.032269][ T8772] [U]  [ 334.193732][ T26] audit: type=1326 audit(1720079902.685:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.2.1696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x0 [ 334.352676][ T5499] usb 2-1: USB disconnect, device number 9 [ 335.101493][ T26] audit: type=1804 audit(1720079903.595:56): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1700" name="/newroot/71/file0/bus" dev="hugetlbfs" ino=64466 res=1 errno=0 [ 335.243950][ T8797] overlayfs: unrecognized mount option "\" or missing value [ 335.401884][ T8803] sctp: [Deprecated]: syz.3.1706 (pid 8803) Use of int in maxseg socket option. [ 335.401884][ T8803] Use struct sctp_assoc_value instead [ 335.460473][ T8810] [U]  [ 335.699648][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 335.699667][ T26] audit: type=1326 audit(1720079904.165:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.0.1716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb89467ebd9 code=0x0 [ 335.868624][ T5499] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 336.300382][ T5499] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 336.403511][ T5499] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.472566][ T8839] overlayfs: unrecognized mount option "\" or missing value [ 336.544061][ T7393] Bluetooth: hci4: command 0x0409 tx timeout [ 336.559856][ T5499] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 336.603366][ T5499] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 336.652042][ T5499] usb 4-1: Manufacturer: syz [ 336.685485][ T5499] usb 4-1: config 0 descriptor?? [ 336.733235][ T8850] [U]  [ 336.751558][ T5499] igorplugusb 4-1:0.0: incorrect number of endpoints [ 337.108179][ T8874] overlayfs: unrecognized mount option "\" or missing value [ 337.810200][ T5499] usb 4-1: USB disconnect, device number 21 [ 338.236407][ T8901] x_tables: unsorted underflow at hook 2 [ 338.294600][ T8904] overlayfs: unrecognized mount option "\" or missing value [ 339.779339][ T8929] x_tables: unsorted underflow at hook 2 [ 339.970007][ T8942] overlayfs: unrecognized mount option "\" or missing value [ 341.009747][ T8966] x_tables: unsorted underflow at hook 2 [ 341.637115][ T8997] x_tables: unsorted underflow at hook 2 [ 342.875507][ T9017] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 344.012511][ T26] audit: type=1326 audit(1720079912.505:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 344.118902][ T26] audit: type=1326 audit(1720079912.505:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 344.200241][ T26] audit: type=1326 audit(1720079912.505:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 344.494162][ T26] audit: type=1326 audit(1720079912.505:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 345.133243][ T26] audit: type=1326 audit(1720079912.505:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 345.287899][ T26] audit: type=1326 audit(1720079912.585:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 345.320355][ T26] audit: type=1326 audit(1720079912.645:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 345.445456][ T26] audit: type=1326 audit(1720079912.645:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 345.616982][ T26] audit: type=1326 audit(1720079912.645:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 345.738749][ T26] audit: type=1326 audit(1720079912.645:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7880aa4bd9 code=0x7ffc0000 [ 346.854076][ T9079] chnl_net:caif_netlink_parms(): no params data found [ 346.979320][ T9130] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 347.034207][ T9130] loop3: detected capacity change from 0 to 764 [ 347.129307][ T9138] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 347.569683][ T5795] Bluetooth: hci9: command 0x0409 tx timeout [ 347.909369][ T9130] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 347.932330][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.970909][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.033293][ T9079] device bridge_slave_0 entered promiscuous mode [ 348.033673][ T9144] rock: directory entry would overflow storage [ 348.087956][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.222247][ T9144] rock: sig=0x4f50, size=4, remaining=3 [ 348.242777][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.249682][ T9144] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 349.006448][ T9079] device bridge_slave_1 entered promiscuous mode [ 349.205863][ T9079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.278291][ T9079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.482981][ T9079] team0: Port device team_slave_0 added [ 349.530536][ T9079] team0: Port device team_slave_1 added [ 349.679292][ T9079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.709644][ T9079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.736392][ T5793] Bluetooth: hci9: command 0x041b tx timeout [ 349.743774][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 349.743788][ T26] audit: type=1326 audit(1720079918.235:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 349.783886][ T9186] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 349.809664][ T5796] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 349.845614][ T9079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.857244][ T26] audit: type=1326 audit(1720079918.235:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 349.894554][ T9079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.909149][ T9079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.948919][ T26] audit: type=1326 audit(1720079918.235:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 349.950658][ T9186] loop3: detected capacity change from 0 to 764 [ 350.002956][ T9079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.024445][ T26] audit: type=1326 audit(1720079918.285:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 350.095294][ T26] audit: type=1326 audit(1720079918.285:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 350.179815][ T5796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14135, setting to 64 [ 350.189523][ T26] audit: type=1326 audit(1720079918.285:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 350.216504][ T9197] rock: directory entry would overflow storage [ 350.222908][ T9197] rock: sig=0x4f50, size=4, remaining=3 [ 350.228525][ T9197] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 350.256646][ T5796] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 350.257870][ T26] audit: type=1326 audit(1720079918.285:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 350.276465][ T26] audit: type=1326 audit(1720079918.285:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 350.321287][ T9079] device hsr_slave_0 entered promiscuous mode [ 350.337634][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.347482][ T9079] device hsr_slave_1 entered promiscuous mode [ 350.350731][ T26] audit: type=1326 audit(1720079918.285:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 350.376569][ T5796] usb 1-1: config 0 descriptor?? [ 350.390622][ T26] audit: type=1326 audit(1720079918.295:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa17694bd9 code=0x7ffc0000 [ 350.415961][ T9178] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.433238][ T9079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.456153][ T9079] Cannot create hsr debugfs directory [ 350.730082][ T5796] usb 1-1: USB disconnect, device number 24 [ 350.863023][ T9223] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1872'. [ 350.969968][ T9079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.977043][ T9231] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 351.143675][ T9079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.247157][ T9239] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 351.363694][ T9079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.531043][ T9079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.809692][ T21] Bluetooth: hci9: command 0x040f tx timeout [ 351.874094][ T9079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.928322][ T9079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.956992][ T9079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.091821][ T9079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.413184][ T9271] loop3: detected capacity change from 0 to 32768 [ 353.889910][ T5796] Bluetooth: hci9: command 0x0419 tx timeout [ 354.133704][ T9079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.221675][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.232877][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.242313][ T9271] XFS (loop3): Mounting V5 Filesystem [ 354.252811][ T9079] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.298936][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.310679][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.321010][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.328101][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.338211][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.432270][ T9302] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 354.442925][ T9271] XFS (loop3): Ending clean mount [ 354.456059][ T9271] XFS (loop3): Quotacheck needed: Please wait. [ 354.463318][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.497539][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.537405][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.544551][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.617279][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.635508][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.655771][ T9271] XFS (loop3): Quotacheck: Done. [ 354.691486][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.726789][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.757481][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.794127][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.812611][ T9271] kAFS: Can only specify source 'none' with -o dyn [ 354.858085][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.895050][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.940799][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.975045][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.011797][ T7918] XFS (loop3): Unmounting Filesystem [ 355.030544][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.153497][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.289117][ T9316] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1904'. [ 355.527095][ T9326] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 355.918180][ T4043] device hsr_slave_0 left promiscuous mode [ 356.065125][ T4043] device hsr_slave_1 left promiscuous mode [ 356.219024][ T4043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.282705][ T4043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.324876][ T4043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.368041][ T4043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.387464][ T4043] device vlan1 left promiscuous mode [ 356.401084][ T4043] bridge0: port 3(vlan1) entered disabled state [ 356.426401][ T4043] device bridge_slave_1 left promiscuous mode [ 356.433008][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.443841][ T4043] device bridge_slave_0 left promiscuous mode [ 356.459217][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.477748][ T4043] device veth1_macvtap left promiscuous mode [ 356.484444][ T4043] device veth0_macvtap left promiscuous mode [ 356.490839][ T4043] device veth1_vlan left promiscuous mode [ 356.496713][ T4043] device veth0_vlan left promiscuous mode [ 356.726456][ T4043] team0 (unregistering): Port device team_slave_1 removed [ 356.745243][ T4043] team0 (unregistering): Port device team_slave_0 removed [ 356.762552][ T4043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.781261][ T4043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.886716][ T4043] bond0 (unregistering): Released all slaves [ 356.971193][ T9079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.988772][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.998649][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.084582][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.108685][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.327578][ T9079] device veth0_vlan entered promiscuous mode [ 357.348214][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.359065][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.375170][ T9079] device veth1_vlan entered promiscuous mode [ 358.145824][ T9079] device veth0_macvtap entered promiscuous mode [ 358.169319][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.181292][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.199561][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.216899][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.235629][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.249362][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.306939][ T9374] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1921'. [ 358.327465][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.344726][ T9079] device veth1_macvtap entered promiscuous mode [ 358.424784][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.440879][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.450878][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.461432][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.471353][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.479744][ T13] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 358.481865][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.507620][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.519642][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.529889][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.540388][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.550361][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.560865][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.570760][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.581264][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.591195][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.602259][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.622740][ T9079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.635745][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.652868][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.663277][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.674465][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.685139][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.696555][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.706725][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.717462][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.728054][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.739800][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 358.739826][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.755283][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.765872][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.776387][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.787048][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.796947][ T9079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.808057][ T9079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.819375][ T9079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.831781][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.850567][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.866975][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.875997][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.889925][ T13] usb 1-1: config 0 has an invalid interface number: 48 but max is 2 [ 358.898734][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.911003][ T13] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 358.927539][ T13] usb 1-1: config 0 has no interface number 0 [ 358.986975][ T9079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.003174][ T9079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.029666][ T9079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.048806][ T9079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.110572][ T13] usb 1-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=b3.94 [ 359.131973][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.159485][ T13] usb 1-1: Product: syz [ 359.163745][ T13] usb 1-1: Manufacturer: syz [ 359.168356][ T13] usb 1-1: SerialNumber: syz [ 359.194597][ T13] usb 1-1: config 0 descriptor?? [ 359.247732][ T13] ftdi_sio 1-1:0.1: FTDI USB Serial Device converter detected [ 359.277437][ T13] usb 1-1: Detected FT2232C [ 359.318568][ T7751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.343765][ T7751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.397718][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.456330][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.500991][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.501761][ T9397] trusted_key: encrypted_key: keyword 'ne}' not recognized [ 359.539761][ T13] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 359.559670][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.582878][ T13] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 359.611535][ T13] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 359.670914][ T13] usb 1-1: USB disconnect, device number 25 [ 359.697018][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 359.720852][ T13] ftdi_sio 1-1:0.1: device disconnected [ 360.735983][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 360.735998][ T26] audit: type=1326 audit(1720079929.225:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f4ce8bd9 code=0x7fc00000 [ 361.022541][ T9439] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 361.141176][ T9443] netem: change failed [ 361.710824][ T9462] loop3: detected capacity change from 0 to 512 [ 362.346438][ T9473] netem: change failed [ 362.411914][ T9433] kAFS: Can only specify source 'none' with -o dyn [ 362.740807][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 362.745969][ T9462] loop3: detected capacity change from 0 to 32768 [ 362.798275][ T9491] device syzkaller1 entered promiscuous mode [ 363.247540][ T9511] loop3: detected capacity change from 0 to 1764 [ 363.339209][ T9511] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 364.210377][ T3516] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 364.599919][ T3516] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.614935][ T3516] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.653823][ T3516] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.688404][ T3516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.879999][ T3516] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.900260][ T3516] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.927945][ T3516] usb 1-1: Product: syz [ 364.943754][ T3516] usb 1-1: Manufacturer: syz [ 365.012792][ T3516] cdc_wdm 1-1:1.0: skipping garbage [ 365.019859][ T3516] cdc_wdm 1-1:1.0: skipping garbage [ 365.060296][ T3516] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 365.079305][ T3516] cdc_wdm 1-1:1.0: Unknown control protocol [ 365.219670][ T1064] usb 1-1: USB disconnect, device number 26 [ 365.248221][ T9536] netem: change failed [ 365.289578][ T3559] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 365.809798][ T3559] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 365.818882][ T3559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.872684][ T3559] usb 5-1: Product: syz [ 365.876887][ T3559] usb 5-1: Manufacturer: syz [ 365.899531][ T3559] usb 5-1: SerialNumber: syz [ 365.926087][ T3559] usb 5-1: config 0 descriptor?? [ 366.414746][ T5798] usb 5-1: USB disconnect, device number 17 [ 366.450315][ T3559] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 366.609727][ T3504] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 366.699581][ T3559] usb 3-1: Using ep0 maxpacket: 16 [ 366.798812][ T9574] loop3: detected capacity change from 0 to 2048 [ 366.819796][ T3559] usb 3-1: config 0 has an invalid interface number: 48 but max is 2 [ 366.827907][ T3559] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.860351][ T9574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.869568][ T3559] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 366.878527][ T3559] usb 3-1: config 0 has no interface number 0 [ 366.999689][ T3504] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.008355][ T3504] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.022463][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 367.031622][ T3504] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.049226][ T3504] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.060479][ T3559] usb 3-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=b3.94 [ 367.070518][ T9577] device syzkaller1 entered promiscuous mode [ 367.077771][ T3559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.090398][ T3559] usb 3-1: Product: syz [ 367.095972][ T3559] usb 3-1: Manufacturer: syz [ 367.100845][ T3559] usb 3-1: SerialNumber: syz [ 367.110730][ T3559] usb 3-1: config 0 descriptor?? [ 367.151135][ T3559] ftdi_sio 3-1:0.1: FTDI USB Serial Device converter detected [ 367.159248][ T3559] usb 3-1: Detected FT2232C [ 367.209793][ T3504] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.218903][ T3504] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.229636][ T7] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 367.250026][ T3504] usb 2-1: Product: syz [ 367.254217][ T3504] usb 2-1: Manufacturer: syz [ 367.310475][ T3504] cdc_wdm 2-1:1.0: skipping garbage [ 367.315720][ T3504] cdc_wdm 2-1:1.0: skipping garbage [ 367.336906][ T3504] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 367.349509][ T3504] cdc_wdm 2-1:1.0: Unknown control protocol [ 367.399862][ T3559] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 367.419612][ T3559] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 367.432837][ T3559] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 367.461815][ T3559] usb 3-1: USB disconnect, device number 11 [ 367.481675][ T3559] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 367.521833][ T3559] ftdi_sio 3-1:0.1: device disconnected [ 367.569214][ T3516] usb 2-1: USB disconnect, device number 10 [ 367.713527][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.740219][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.859949][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 367.884082][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.899588][ T7] usb 4-1: SerialNumber: syz [ 368.010678][ T5798] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 368.014566][ T9602] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 368.212210][ T7] usb 4-1: 0:2 : does not exist [ 368.343156][ T7] usb 4-1: USB disconnect, device number 22 [ 369.110779][ T5798] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 369.158929][ T5798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.188157][ T5798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.219057][ T5798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 369.336525][ T26] audit: type=1326 audit(1720079937.825:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9622 comm="syz.1.2028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f862cefcbd9 code=0x0 [ 369.360772][ T5798] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 369.377632][ T5798] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 369.402137][ T5798] usb 5-1: Manufacturer: syz [ 369.427023][ T5798] usb 5-1: config 0 descriptor?? [ 369.439532][ T3559] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 369.716347][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2016'. [ 370.865519][ T9637] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 371.638504][ T9639] ALSA: mixer_oss: invalid OSS volume 'MI2ĉq&<,s㠔cC' [ 371.671269][ T5798] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 371.679756][ T3559] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 371.688825][ T3559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.710023][ T5798] appleir 0003:05AC:8243.000B: parse failed [ 371.716002][ T5798] appleir: probe of 0003:05AC:8243.000B failed with error -22 [ 371.729739][ T3559] usb 1-1: Product: syz [ 371.733938][ T3559] usb 1-1: Manufacturer: syz [ 371.738536][ T3559] usb 1-1: SerialNumber: syz [ 371.755061][ T3559] usb 1-1: config 0 descriptor?? [ 371.874325][ T7] usb 5-1: USB disconnect, device number 18 [ 372.001286][ T13] usb 1-1: USB disconnect, device number 27 [ 372.139062][ T9654] loop3: detected capacity change from 0 to 256 [ 372.249664][ T5798] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 372.467029][ T9654] loop3: detected capacity change from 0 to 512 [ 372.488280][ T9662] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2040'. [ 372.609778][ T5798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.639582][ T5798] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.651816][ T9670] ALSA: mixer_oss: invalid OSS volume 'MI2ĉq&<,s㠔cC' [ 372.739885][ T5798] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 372.749015][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 372.809553][ T5798] usb 3-1: SerialNumber: syz [ 373.552109][ T9682] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 373.815398][ T9682] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 373.933240][ T5798] usb 3-1: 0:2 : does not exist [ 373.954939][ T5798] usb 3-1: USB disconnect, device number 12 [ 374.034348][ T3504] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 374.050776][ T3504] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 374.260566][ T7] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 374.287412][ T9707] loop3: detected capacity change from 0 to 512 [ 374.379711][ T9707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 374.409989][ T3516] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 374.455476][ T9707] EXT4-fs (loop3): 1 truncate cleaned up [ 374.461322][ T9707] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 374.670371][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 374.689974][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.719570][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.748472][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 374.830364][ T3516] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 374.842465][ T3516] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 374.885699][ T9724] loop3: detected capacity change from 0 to 2048 [ 374.905876][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 374.925199][ T7] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 374.954394][ T7] usb 1-1: Manufacturer: syz [ 374.973788][ T7] usb 1-1: config 0 descriptor?? [ 374.975371][ T3504] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 374.998800][ T3504] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.059842][ T3516] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 375.080525][ T3516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.088559][ T3516] usb 5-1: Product: syz [ 375.113552][ T3516] usb 5-1: Manufacturer: syz [ 375.118195][ T3516] usb 5-1: SerialNumber: syz [ 375.150574][ T3516] usb 5-1: config 0 descriptor?? [ 375.190028][ T9695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 375.210540][ T9695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 375.235658][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2052'. [ 375.359504][ T5798] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 375.468976][ T9695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 375.498191][ T9695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 375.609941][ T7] appleir 0003:05AC:8243.000E: item fetching failed at offset 0/1 [ 375.618243][ T7] appleir 0003:05AC:8243.000E: parse failed [ 375.645727][ T7] appleir: probe of 0003:05AC:8243.000E failed with error -22 [ 375.719868][ T5798] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.739591][ T5798] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.814427][ T7] usb 1-1: USB disconnect, device number 28 [ 375.829945][ T5798] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 375.839685][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 375.847925][ T5798] usb 4-1: SerialNumber: syz [ 375.939338][ T9749] nfs: Unknown parameter 'smackfsroot' [ 375.981504][ T7555] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 375.989214][ T3516] dm9601: No valid MAC address in EEPROM, using 76:df:10:90:36:d3 [ 376.008058][ T7555] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.132469][ T5798] usb 4-1: 0:2 : does not exist [ 376.152167][ T5798] usb 4-1: USB disconnect, device number 23 [ 376.159909][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 376.539659][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.569669][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.599769][ T9772] nfs: Unknown parameter 'smackfsroot' [ 376.603252][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.629547][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.661407][ T13] usb 2-1: config 0 descriptor?? [ 376.695352][ T7] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 376.729060][ T7] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.850168][ T3516] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 376.886443][ T3516] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 76:df:10:90:36:d3 [ 376.928770][ T3516] usb 5-1: USB disconnect, device number 19 [ 376.946514][ T3516] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 377.031924][ T9785] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 377.796007][ T13] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 377.830578][ T13] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 377.989060][ T5791] usb 2-1: USB disconnect, device number 11 [ 378.263773][ T9794] loop3: detected capacity change from 0 to 4096 [ 378.548996][ T9794] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 378.655434][ T9794] ntfs3: loop3: Failed to load $Volume. [ 378.943239][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.949744][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.244541][ T9802] nfs: Unknown parameter 'smackfsroot' [ 379.249813][ T5793] Bluetooth: hci8: command 0x0406 tx timeout [ 379.334783][ T5791] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 379.355284][ T9807] program syz.2.2101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.376512][ T5791] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.139724][ T3516] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 380.139780][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 380.820864][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.854732][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.879737][ T3516] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 380.917551][ T3516] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 380.956226][ T9836] nfs: Unknown parameter 'smackfsroot' [ 381.011906][ T9840] program syz.3.2112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.023185][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.039450][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.057917][ T7] usb 3-1: SerialNumber: syz [ 381.170227][ T3516] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 381.180939][ T3516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.189239][ T3516] usb 2-1: Product: syz [ 381.197591][ T3516] usb 2-1: Manufacturer: syz [ 381.203053][ T3516] usb 2-1: SerialNumber: syz [ 381.230668][ T3516] usb 2-1: config 0 descriptor?? [ 381.249910][ T9828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 381.259894][ T9828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 381.268920][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2115'. [ 381.353871][ T7] usb 3-1: 0:2 : does not exist [ 381.377406][ T7] usb 3-1: USB disconnect, device number 13 [ 381.483918][ T9828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 381.501498][ T9828] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 381.519508][ T13] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 381.900083][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.917908][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.946426][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.963957][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.979611][ T3516] dm9601: No valid MAC address in EEPROM, using 76:df:10:90:36:d3 [ 382.003656][ T13] usb 4-1: config 0 descriptor?? [ 382.136032][ T9850] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 383.726142][ T13] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 383.773588][ T13] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 383.798827][ T13] usb 4-1: USB disconnect, device number 24 [ 383.899208][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2128'. [ 383.979903][ T3516] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 384.009504][ T3516] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 76:df:10:90:36:d3 [ 384.071849][ T3516] usb 2-1: USB disconnect, device number 12 [ 384.099621][ T3516] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 384.419580][ T5794] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 384.800396][ T5794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.829642][ T5794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.897439][ T9885] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 384.929710][ T5794] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.939694][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.947807][ T5794] usb 1-1: SerialNumber: syz [ 385.096354][ T9908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2139'. [ 385.241646][ T5794] usb 1-1: 0:2 : does not exist [ 385.260345][ T5794] usb 1-1: USB disconnect, device number 29 [ 385.329741][ T13] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 385.499511][ T5791] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 385.619708][ T13] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 385.859746][ T5791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 385.882317][ T5791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 385.920010][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2143'. [ 385.937698][ T9918] loop3: detected capacity change from 0 to 4096 [ 386.005208][ T9918] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 386.015557][ T9918] ntfs3: loop3: Failed to load $Volume. [ 386.049848][ T5791] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 386.066910][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.086444][ T5791] usb 3-1: Product: syz [ 386.096532][ T5791] usb 3-1: Manufacturer: syz [ 386.109500][ T5791] usb 3-1: SerialNumber: syz [ 386.128844][ T5791] usb 3-1: config 0 descriptor?? [ 386.161822][ T9916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.174684][ T9916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.404703][ T9916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.416801][ T9916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.541041][ T13] usb 5-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 386.561477][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 386.589530][ T13] usb 5-1: Product: syz [ 386.595614][ T13] usb 5-1: Manufacturer: syz [ 386.610184][ T13] usb 5-1: SerialNumber: syz [ 386.617718][ T13] usb 5-1: config 0 descriptor?? [ 386.670731][ T13] cdc_acm 5-1:0.0: Zero length descriptor references [ 386.677471][ T13] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 386.836562][ T9925] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 386.879752][ T5791] dm9601: No valid MAC address in EEPROM, using 76:df:10:90:36:d3 [ 386.902763][ T5793] usb 5-1: USB disconnect, device number 20 [ 387.178125][ T9926] loop3: detected capacity change from 0 to 32768 [ 387.199151][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2151'. [ 387.234129][ T9926] XFS (loop3): Mounting V5 Filesystem [ 387.324754][ T9926] XFS (loop3): Ending clean mount [ 387.335608][ T9926] XFS (loop3): Quotacheck needed: Please wait. [ 387.393090][ T9926] XFS (loop3): Quotacheck: Done. [ 387.643803][ T7918] XFS (loop3): Unmounting Filesystem [ 387.720225][ T5791] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 387.742334][ T5791] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 76:df:10:90:36:d3 [ 387.768490][ T5791] usb 3-1: USB disconnect, device number 14 [ 387.793171][ T5791] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 387.889844][ T3516] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 387.946700][ T9956] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2155'. [ 388.032943][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2157'. [ 388.300670][ T3516] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.309314][ T3516] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.359463][ T3516] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.398548][ T3516] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.589793][ T3516] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.622843][ T3516] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.665062][ T3516] usb 5-1: Product: syz [ 388.669354][ T3516] usb 5-1: Manufacturer: syz [ 388.730595][ T3516] cdc_wdm 5-1:1.0: skipping garbage [ 388.735934][ T3516] cdc_wdm 5-1:1.0: skipping garbage [ 388.767169][ T3516] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 388.795086][ T3516] cdc_wdm 5-1:1.0: Unknown control protocol [ 389.007929][ T7] usb 5-1: USB disconnect, device number 21 [ 389.069672][ T9965] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 390.181419][ T9982] loop3: detected capacity change from 0 to 1024 [ 390.255049][ T9982] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 390.279632][ T9982] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 390.309557][ T9982] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 390.351584][ T9982] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,data_err=abort,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 390.429490][ T5794] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 390.539577][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 390.709653][ T5794] usb 1-1: too many configurations: 248, using maximum allowed: 8 [ 390.959797][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 390.977795][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 391.169850][ T7] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 391.182412][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.191077][ T7] usb 2-1: Product: syz [ 391.195735][ T7] usb 2-1: Manufacturer: syz [ 391.203359][ T7] usb 2-1: SerialNumber: syz [ 391.232466][ T7] usb 2-1: config 0 descriptor?? [ 391.247209][ T5791] Bluetooth: hci6: command 0x0406 tx timeout [ 391.260171][ T9988] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 391.269850][ T9988] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 391.344182][T10005] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 391.412037][T10007] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 391.495812][ T9988] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 391.510483][ T9988] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 391.727930][ T5794] usb 1-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 391.749531][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 391.758100][ T5794] usb 1-1: Product: syz [ 391.766999][ T5794] usb 1-1: Manufacturer: syz [ 391.937583][ T5794] usb 1-1: SerialNumber: syz [ 392.020420][ T5794] usb 1-1: config 0 descriptor?? [ 392.098925][ T5794] cdc_acm 1-1:0.0: Zero length descriptor references [ 392.122267][ T5794] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 392.369302][ T7555] usb 1-1: USB disconnect, device number 30 [ 392.389683][ T7] dm9601: No valid MAC address in EEPROM, using 76:df:10:90:36:d3 [ 392.597223][T10011] chnl_net:caif_netlink_parms(): no params data found [ 392.626231][ T3593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.639314][T10028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2182'. [ 392.683531][ T3593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.754475][ T3593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.820283][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.839502][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.847562][T10011] device bridge_slave_0 entered promiscuous mode [ 392.872343][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.880286][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.888947][T10011] device bridge_slave_1 entered promiscuous mode [ 392.931076][ T3593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.967390][T10011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.982577][T10011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.031751][T10011] team0: Port device team_slave_0 added [ 393.059329][T10011] team0: Port device team_slave_1 added [ 393.123364][T10011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.146708][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.202966][T10011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.218190][T10011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.225573][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.253739][T10011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.280234][ T7] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 393.337751][T10037] loop3: detected capacity change from 0 to 512 [ 393.373498][ T7] dm9601 2-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 76:df:10:90:36:d3 [ 393.395745][ T7] usb 2-1: USB disconnect, device number 13 [ 393.403404][ T7] dm9601 2-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 393.425221][T10037] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 393.446701][T10011] device hsr_slave_0 entered promiscuous mode [ 393.454750][T10011] device hsr_slave_1 entered promiscuous mode [ 393.469756][T10011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.477662][T10011] Cannot create hsr debugfs directory [ 393.500829][T10037] EXT4-fs (loop3): 1 truncate cleaned up [ 393.506498][T10037] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 393.889613][ T5794] Bluetooth: hci5: command 0x0409 tx timeout [ 394.402590][T10011] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.420964][T10011] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.485003][T10011] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.537463][T10011] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.613780][ T3593] device hsr_slave_0 left promiscuous mode [ 394.671162][ T3593] device hsr_slave_1 left promiscuous mode [ 394.702131][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.719691][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.749622][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.761762][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.780105][ T3593] device bridge_slave_1 left promiscuous mode [ 394.808593][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.832361][ T3593] device bridge_slave_0 left promiscuous mode [ 394.857201][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.905814][ T3593] device veth1_macvtap left promiscuous mode [ 394.923452][ T3593] device veth0_macvtap left promiscuous mode [ 394.936530][ T3593] device veth1_vlan left promiscuous mode [ 394.951816][ T3593] device veth0_vlan left promiscuous mode [ 395.452373][ T3593] team0 (unregistering): Port device team_slave_1 removed [ 395.478996][ T3593] team0 (unregistering): Port device team_slave_0 removed [ 395.496944][ T3593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.526751][ T3593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.645578][ T3593] bond0 (unregistering): Released all slaves [ 395.720389][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2193'. [ 395.747747][T10070] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 395.809910][ T7] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 395.834590][T10070] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 395.845538][T10070] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 395.857288][T10075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.865602][ T144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 395.903678][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 395.975217][T10011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.979205][ T5796] Bluetooth: hci5: command 0x041b tx timeout [ 395.990888][ T8288] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 396.032890][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.044555][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.055949][T10011] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.123703][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.140199][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.148673][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.155900][ T5351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.164349][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.174596][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.183509][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.190635][ T5351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.198878][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.208202][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.229738][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 396.249467][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 396.270852][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.284925][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.298917][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.316655][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.327562][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.336519][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.345579][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.354138][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.363044][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.374734][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.400628][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.422276][ T7] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 396.431605][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.459190][T10053] chnl_net:caif_netlink_parms(): no params data found [ 396.484569][ T7] usb 1-1: Product: syz [ 396.488772][ T7] usb 1-1: Manufacturer: syz [ 396.519455][ T7] usb 1-1: SerialNumber: syz [ 396.546740][ T7] usb 1-1: config 0 descriptor?? [ 396.590084][T10062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 396.603588][T10062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 396.604974][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.627486][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.721550][T10053] device bridge_slave_0 entered promiscuous mode [ 396.778578][ T5793] Bluetooth: hci4: command 0x0409 tx timeout [ 396.840786][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.854052][T10062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 396.854896][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.861407][T10062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 396.892152][T10053] device bridge_slave_1 entered promiscuous mode [ 397.502665][T10011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.695019][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.719873][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.727446][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.759785][ T7] dm9601: No valid MAC address in EEPROM, using 76:df:10:90:36:d3 [ 397.780178][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.788835][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.807418][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.832430][T10011] device veth0_vlan entered promiscuous mode [ 397.855291][T10107] netlink: 'syz.4.2210': attribute type 1 has an invalid length. [ 397.919960][T10110] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 397.951245][T10110] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 397.969749][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.977840][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.002095][T10112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.007940][ T8288] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.026857][T10011] device veth1_vlan entered promiscuous mode [ 398.049818][ T5796] Bluetooth: hci5: command 0x040f tx timeout [ 398.072743][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.106210][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 398.132437][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.209805][ T8288] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.269243][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.278900][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.304917][T10053] team0: Port device team_slave_0 added [ 398.313250][T10011] device veth0_macvtap entered promiscuous mode [ 398.332804][T10053] team0: Port device team_slave_1 added [ 398.343252][T10011] device veth1_macvtap entered promiscuous mode [ 398.596099][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.607536][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.705416][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.859234][ T5791] Bluetooth: hci4: command 0x041b tx timeout [ 398.954051][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.209521][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.280736][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.331987][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.399473][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.409791][ T7] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 399.419482][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.470862][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.499526][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.529458][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.542788][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.555723][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.566203][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.577178][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.589954][T10011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.599233][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.619975][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.664558][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.700209][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.720354][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.728528][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.752227][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.769851][T10139] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 399.778417][ T7] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 76:df:10:90:36:d3 [ 399.797061][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.808090][ T5351] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 399.817292][ T7] usb 1-1: USB disconnect, device number 31 [ 399.823874][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.835554][ T7] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 399.846599][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.872684][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.885608][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.896907][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.907412][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.918854][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.929155][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.940486][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.950808][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.964380][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.980072][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.001848][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.022962][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.045827][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.077582][T10011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.107865][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.120468][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.129700][ T5791] Bluetooth: hci5: command 0x0419 tx timeout [ 400.147226][ T5351] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 400.188031][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.212204][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.224931][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.261059][T10011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.279471][T10011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.298682][T10011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.317553][T10011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.483291][T10053] device hsr_slave_0 entered promiscuous mode [ 400.500906][T10053] device hsr_slave_1 entered promiscuous mode [ 400.520723][T10053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.539031][T10053] Cannot create hsr debugfs directory [ 400.649307][T10153] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2225'. [ 400.681384][ T5264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.703143][ T5264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.779701][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.889304][ T4043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.922799][ T4043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.930807][ T5791] Bluetooth: hci4: command 0x040f tx timeout [ 401.029090][T10053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.065433][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.370246][T10053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.708781][T10053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.875980][T10053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.939758][ T5351] usb 2-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 401.957564][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 401.973792][ T5351] usb 2-1: Product: syz [ 401.983472][ T5351] usb 2-1: Manufacturer: syz [ 401.988100][ T5351] usb 2-1: SerialNumber: syz [ 402.013422][ T5351] usb 2-1: config 0 descriptor?? [ 402.070506][ T5351] cdc_acm 2-1:0.0: Zero length descriptor references [ 402.077245][ T5351] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 402.162570][T10053] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.186877][T10053] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.207859][T10053] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.238933][T10053] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.307616][ T13] usb 2-1: USB disconnect, device number 14 [ 403.192038][ T5793] Bluetooth: hci4: command 0x0419 tx timeout [ 403.500473][T10176] CIFS: VFS: Malformed UNC in devname [ 403.810775][T10053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.190215][T10178] netlink: 'syz.4.2233': attribute type 1 has an invalid length. [ 405.256408][T10053] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.276085][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.286075][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.309699][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.318426][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.327770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.334888][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.355833][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.376395][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.391338][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.398458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.416515][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.437588][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.529919][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.545830][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.571731][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.590383][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.610206][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.629875][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.650872][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.670064][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.679147][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.704922][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.730055][ T27] INFO: task syz.2.1037:6813 blocked for more than 144 seconds. [ 405.741344][T10053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.749917][ T27] Not tainted 5.15.161-syzkaller #0 [ 405.768988][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.800399][ T27] task:syz.2.1037 state:D stack:24352 pid: 6813 ppid: 5953 flags:0x00004004 [ 405.826772][ T27] Call Trace: [ 405.837954][ T27] [ 405.846656][ T27] __schedule+0x12c4/0x45b0 [ 405.864453][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 405.881391][ T27] ? release_firmware_map_entry+0x190/0x190 [ 405.899146][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 405.933480][ T27] schedule+0x11b/0x1f0 [ 405.951208][ T27] xlog_grant_head_wait+0x381/0x900 [ 405.967288][ T27] xlog_grant_head_check+0x295/0x480 [ 405.987240][ T27] ? prandom_u32+0x218/0x260 [ 406.002351][ T27] ? xlog_grant_push_ail+0xd0/0xd0 [ 406.022515][ T27] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 406.039015][ T27] xfs_log_reserve+0x3b8/0xb10 [ 406.053712][ T27] ? xlog_grant_head_check+0x480/0x480 [ 406.074231][ T27] ? xfs_mod_fdblocks+0x1ca/0x480 [ 406.091104][ T27] xfs_trans_reserve+0x23d/0x690 [ 406.108390][ T27] xfs_trans_alloc+0x420/0x7f0 [ 406.127789][ T27] xfs_trans_alloc_inode+0x129/0x450 [ 406.134523][ T27] ? validate_chain+0x112/0x5930 [ 406.150225][ T27] ? xfs_trans_dup+0x620/0x620 [ 406.155332][ T27] xfs_attr_set+0x848/0x1460 [ 406.169494][ T27] ? xfs_attr_remove_iter+0xd30/0xd30 [ 406.185939][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 406.193465][ T27] ? look_up_lock_class+0x77/0x120 [ 406.209361][ T27] ? register_lock_class+0x100/0x9a0 [ 406.217316][ T27] ? _raw_spin_unlock+0x24/0x40 [ 406.225309][ T27] ? handle_mm_fault+0x3a6f/0x5950 [ 406.239465][ T27] ? is_dynamic_key+0x1f0/0x1f0 [ 406.252575][ T27] xfs_xattr_set+0x227/0x3a0 [ 406.258325][ T27] ? xfs_xattr_get+0x2f0/0x2f0 [ 406.268320][ T27] ? aa_get_newest_label+0xf9/0x6c0 [ 406.279898][ T27] ? evm_protect_xattr+0x33b/0xa70 [ 406.289895][ T27] ? xfs_xattr_get+0x2f0/0x2f0 [ 406.319308][ T27] __vfs_setxattr+0x3e7/0x420 [ 406.328473][ T27] __vfs_setxattr_noperm+0x12a/0x5e0 [ 406.336685][ T27] vfs_setxattr+0x21d/0x420 [ 406.343301][ T27] ? asm_exc_page_fault+0x22/0x30 [ 406.352112][ T27] ? xattr_permission+0x4f0/0x4f0 [ 406.362296][ T27] ? copy_user_enhanced_fast_string+0xe/0x40 [ 406.374299][ T27] ? _copy_from_user+0x10f/0x170 [ 406.385363][ T27] setxattr+0x27e/0x2e0 [ 406.399365][ T27] ? path_setxattr+0x2a0/0x2a0 [ 406.411498][ T27] ? preempt_count_add+0x8f/0x180 [ 406.418786][ T27] ? __mnt_want_write+0x1e6/0x260 [ 406.436094][ T27] path_setxattr+0x1bc/0x2a0 [ 406.446646][ T27] ? simple_xattr_list_add+0xf0/0xf0 [ 406.457940][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 406.470986][ T27] __x64_sys_lsetxattr+0xb4/0xd0 [ 406.483279][ T27] do_syscall_64+0x3b/0xb0 [ 406.492436][ T27] ? clear_bhb_loop+0x15/0x70 [ 406.501283][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.507370][ T27] RIP: 0033:0x7fb73b065bd9 [ 406.512939][ T27] RSP: 002b:00007fb739ae6048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 406.529814][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 406.531102][ T27] RAX: ffffffffffffffda RBX: 00007fb73b1f3f60 RCX: 00007fb73b065bd9 [ 406.562869][ T27] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000100 [ 406.580112][ T27] RBP: 00007fb73b0d4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 406.598318][ T27] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 406.612894][ T27] R13: 000000000000000b R14: 00007fb73b1f3f60 R15: 00007ffc3deb2de8 [ 406.635611][ T27] [ 406.651248][ T27] INFO: task syz.2.1037:6869 blocked for more than 144 seconds. [ 406.659598][ T27] Not tainted 5.15.161-syzkaller #0 [ 406.673014][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.691513][ T27] task:syz.2.1037 state:D stack:26208 pid: 6869 ppid: 5953 flags:0x00004004 [ 406.709455][ T27] Call Trace: [ 406.712766][ T27] [ 406.715719][ T27] __schedule+0x12c4/0x45b0 [ 406.737980][ T27] ? release_firmware_map_entry+0x190/0x190 [ 406.744442][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 406.759479][ T27] schedule+0x11b/0x1f0 [ 406.763681][ T27] xlog_grant_head_wait+0x381/0x900 [ 406.768911][ T27] xlog_grant_head_check+0x295/0x480 [ 406.789462][ T27] ? prandom_u32+0x218/0x260 [ 406.794098][ T27] ? xlog_grant_push_ail+0xd0/0xd0 [ 406.799227][ T27] ? xlog_grant_push_threshold+0x166/0x1f0 [ 406.819066][ T27] xfs_log_reserve+0x3b8/0xb10 [ 406.831596][ T27] ? xlog_grant_head_check+0x480/0x480 [ 406.844418][ T27] ? xfs_mod_fdblocks+0x1ca/0x480 [ 406.857785][ T27] xfs_trans_reserve+0x23d/0x690 [ 406.869544][ T27] xfs_trans_alloc+0x420/0x7f0 [ 406.881190][ T27] xfs_trans_alloc_icreate+0xc5/0x2b0 [ 406.892435][ T27] ? xfs_trans_alloc_inode+0x450/0x450 [ 406.904792][ T27] xfs_create+0x745/0x1370 [ 406.914972][ T27] ? xfs_inode_inherit_flags2+0x340/0x340 [ 406.928815][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 406.939906][ T27] ? posix_acl_create+0x155/0x420 [ 406.947680][ T27] xfs_generic_create+0x426/0xd00 [ 406.960888][ T27] ? xfs_vn_tmpfile+0x40/0x40 [ 406.972747][ T27] ? xfs_vn_lookup+0x1cb/0x290 [ 406.983289][ T27] ? generic_permission+0x21c/0x4f0 [ 406.994483][ T27] ? inode_permission+0xf7/0x450 [ 407.005307][ T27] ? bpf_lsm_inode_create+0x5/0x10 [ 407.016680][ T27] ? security_inode_create+0xb4/0x100 [ 407.028804][ T27] ? xfs_vn_ci_lookup+0x430/0x430 [ 407.034185][ T27] path_openat+0x130a/0x2f20 [ 407.038944][ T27] ? do_filp_open+0x460/0x460 [ 407.043876][ T27] do_filp_open+0x21c/0x460 [ 407.048498][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 407.053404][ T27] ? _raw_spin_unlock+0x24/0x40 [ 407.058385][ T27] ? alloc_fd+0x594/0x630 [ 407.063572][ T27] do_sys_openat2+0x13b/0x500 [ 407.068375][ T27] ? __context_tracking_enter+0x5f/0x90 [ 407.074122][ T27] ? do_sys_open+0x220/0x220 [ 407.078847][ T27] __x64_sys_openat+0x243/0x290 [ 407.092721][ T27] ? __ia32_sys_open+0x270/0x270 [ 407.097877][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 407.104069][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 407.111942][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 407.118045][ T27] do_syscall_64+0x3b/0xb0 [ 407.122924][ T27] ? clear_bhb_loop+0x15/0x70 [ 407.127712][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.134950][ T27] RIP: 0033:0x7fb73b065bd9 [ 407.139676][ T27] RSP: 002b:00007fb739ac5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.148194][ T27] RAX: ffffffffffffffda RBX: 00007fb73b1f4038 RCX: 00007fb73b065bd9 [ 407.156654][ T27] RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c [ 407.164936][ T27] RBP: 00007fb73b0d4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 407.173916][ T27] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 407.182268][ T27] R13: 000000000000006e R14: 00007fb73b1f4038 R15: 00007ffc3deb2de8 [ 407.192100][ T27] [ 407.195344][ T27] [ 407.195344][ T27] Showing all locks held in the system: [ 407.209160][ T27] 3 locks held by kworker/0:0/7: [ 407.239685][ T27] #0: ffff888023511138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 407.262459][ T27] #1: ffffc90000cc7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 407.284273][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 407.297829][ T27] 1 lock held by khungtaskd/27: [ 407.308219][ T27] #0: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 407.327039][ T27] 2 locks held by getty/3257: [ 407.333654][ T27] #0: ffff8880243c7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 407.344670][ T27] #1: ffffc9000229b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 407.354904][ T27] 5 locks held by kworker/u4:5/3593: [ 407.360238][ T27] #0: ffff888011dcd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 407.372650][ T27] #1: ffffc90003147d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 407.382724][ T27] #2: ffffffff8d9dc790 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 407.392277][ T27] #3: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: ip6_tnl_exit_batch_net+0xc0/0x5e0 [ 407.402135][ T27] #4: ffffffff8c9240a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 407.413121][ T27] 3 locks held by kworker/1:10/5791: [ 407.418427][ T27] #0: ffff888023511138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 407.429484][ T27] #1: ffffc90003037d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 407.442772][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 407.452298][ T27] 3 locks held by kworker/1:12/5793: [ 407.457584][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 407.468054][ T27] #1: ffffc90002fe7d20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 407.479237][ T27] #2: ffffffff8c9240a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 407.492517][ T27] 2 locks held by kworker/1:13/5794: [ 407.497827][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 407.508433][ T27] #1: ffffc90003407d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 407.519898][ T27] 3 locks held by syz.2.1037/6813: [ 407.525020][ T27] #0: ffff88807808e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.534419][ T27] #1: ffff888062851200 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 407.545491][ T27] #2: ffff88807808e650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 407.555632][ T27] 3 locks held by syz.2.1037/6869: [ 407.560855][ T27] #0: ffff88807808e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.570263][ T27] #1: ffff888062852100 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: path_openat+0x824/0x2f20 [ 407.581697][ T27] #2: ffff88807808e650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_icreate+0xc5/0x2b0 [ 407.591951][ T27] 3 locks held by syz.4.1234/7436: [ 407.597081][ T27] #0: ffff88801a9aa460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.608475][ T27] #1: ffff8880640e6c00 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 407.619037][ T27] #2: ffff88801a9aa650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 407.629183][ T27] 3 locks held by syz.4.1234/7461: [ 407.634363][ T27] #0: ffff88801a9aa460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.644321][ T27] #1: ffff8880640e4680 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: path_openat+0x824/0x2f20 [ 407.656057][ T27] #2: ffff88801a9aa650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_icreate+0xc5/0x2b0 [ 407.666304][ T27] 3 locks held by kworker/0:18/7555: [ 407.671645][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 407.682155][ T27] #1: ffffc900022cfd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 407.692611][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 407.701730][ T27] 3 locks held by syz.1.1290/7659: [ 407.706852][ T27] #0: ffff888016384460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.717741][ T27] #1: ffff8880640e5580 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 407.728276][ T27] #2: ffff888016384650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 407.738389][ T27] 3 locks held by syz.1.1290/7684: [ 407.743624][ T27] #0: ffff888016384460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.753560][ T27] #1: ffff8880640e6480 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: path_openat+0x824/0x2f20 [ 407.765017][ T27] #2: ffff888016384650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_icreate+0xc5/0x2b0 [ 407.775241][ T27] 3 locks held by syz.0.1370/7895: [ 407.780421][ T27] #0: ffff888058a4e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.789737][ T27] #1: ffff888062851980 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 407.800343][ T27] #2: ffff888058a4e650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 407.810441][ T27] 3 locks held by syz.0.1370/7954: [ 407.815563][ T27] #0: ffff888058a4e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 407.826860][ T27] #1: ffff8880640e0300 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: path_openat+0x824/0x2f20 [ 407.838386][ T27] #2: ffff888058a4e650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_icreate+0xc5/0x2b0 [ 407.849261][ T27] 1 lock held by syz-executor/10053: [ 407.854737][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 407.864288][ T27] 1 lock held by syz.2.2238/10196: [ 407.869502][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 407.889367][ T27] [ 407.894624][ T27] ============================================= [ 407.894624][ T27] [ 407.905635][ T27] NMI backtrace for cpu 1 [ 407.910005][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.161-syzkaller #0 [ 407.918002][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 407.928068][ T27] Call Trace: [ 407.931515][ T27] [ 407.934466][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 407.939146][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 407.944780][ T27] ? panic+0x860/0x860 [ 407.948884][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 407.954000][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 407.959005][ T27] ? __wake_up_klogd+0xd5/0x100 [ 407.963870][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 407.970050][ T27] ? _printk+0xd1/0x120 [ 407.974231][ T27] ? panic+0x860/0x860 [ 407.978314][ T27] ? __wake_up_klogd+0xcc/0x100 [ 407.983181][ T27] ? panic+0x860/0x860 [ 407.987262][ T27] ? __rcu_read_unlock+0x92/0x100 [ 407.992288][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 407.998349][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 408.004322][ T27] watchdog+0xe72/0xeb0 [ 408.008494][ T27] kthread+0x3f6/0x4f0 [ 408.012560][ T27] ? hungtask_pm_notify+0x50/0x50 [ 408.017604][ T27] ? kthread_blkcg+0xd0/0xd0 [ 408.022207][ T27] ret_from_fork+0x1f/0x30 [ 408.026647][ T27] [ 408.030419][ T27] Sending NMI from CPU 1 to CPUs 0: [ 408.035671][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 408.059720][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 408.066597][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.161-syzkaller #0 [ 408.074587][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 408.084656][ T27] Call Trace: [ 408.087945][ T27] [ 408.090885][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 408.095597][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 408.101246][ T27] ? panic+0x860/0x860 [ 408.105343][ T27] panic+0x318/0x860 [ 408.109259][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 408.114910][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 408.121087][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 408.126307][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 408.132389][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 408.138554][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 408.144701][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 408.150851][ T27] watchdog+0xeb0/0xeb0 [ 408.155018][ T27] kthread+0x3f6/0x4f0 [ 408.159095][ T27] ? hungtask_pm_notify+0x50/0x50 [ 408.164114][ T27] ? kthread_blkcg+0xd0/0xd0 [ 408.168699][ T27] ret_from_fork+0x1f/0x30 [ 408.173134][ T27] [ 408.176430][ T27] Kernel Offset: disabled [ 408.180755][ T27] Rebooting in 86400 seconds..