last executing test programs: 10.882054439s ago: executing program 4 (id=1230): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000002e34000a000000", @ANYRES32=r2], 0x48}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x15, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 10.559270668s ago: executing program 3 (id=1232): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 10.255593249s ago: executing program 4 (id=1233): io_setup(0x80, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdb6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c30000000b8adaed8ec6e8fac0000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e6700000000000000000000000000000000000000000004000000000018040000000000000c0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f00000000000000000000009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000e21071ce4cc8eaac65a0f6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000009476b0c33efd5e65b7316c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014bc1d077b4817d693d02c0000000000000000000000000000000000416cbf6525780f42e3870800000000000000000000000000000000000000000000000000000000000000abcc3311337430270000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d65992000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081cc42e042291bc3000000000000200000000000000000000000000000000000000000000000000000000000005de0eab8674f2269845f530928d7000000000000000000000000000000000000000000000000000000000000000000000000000000ee72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095dd0000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000670000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c81e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d100000000000000000000000000000000000000000000000000000000000000000072"]}, 0x9c0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$alg(r3, &(0x7f0000001880)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0x37, 0xfffe}], 0x18}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000040601010000000000000000000000000900020073797a32000000000500010007000000252c3173ee3b1f7f7f225a6a9ee85d0e0c753dbdcc4ac08f5d9cc11eff7fad62d035899122c108f83cc54e4da56ddda0fb7336290ce767dddd849a32d975f3850b7ee5cff33cf4529a92878beae2d1e3bfea6828bf01ecf94b9ebca277a9c3b360833cc9d48861262b91e47b75618853dfa9dae49f36ee819431aa0f7260f9fe8f01e741b8ad11e9bd70b8354f62"], 0x28}}, 0x0) 10.085481464s ago: executing program 0 (id=1235): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x3, 0x4, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffff}]}}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000600)=0x2) 9.239235302s ago: executing program 2 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000001020104000000002f2c00000a0000003c0002802c000180140003"], 0x50}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x0, 0x4}]}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="a4e5b02d1c7ffa7b68b5c942445bc327fb0283ec570f6b01c1a767b1b8acab91febb0760616d1e163fd58bcd74265405868f9299f0cbeb2d33c1d3bb97901a77f03d4af07dffc18482e604d26d48977724b274d9e046320dabcf3c71b6ab25cbb7605166c53f0d652bc08c6735fde42e69b31f589199aba1028e9b6ead6dd49db6259f5204ab946ab1d638db9fc0a2a3c9d245da78c300e9db57a87fa4015a3b841477616fb87111671981a5f6cb841503465f4c9a29e914a5826df91b2c1d0d130ff6e2ffd9589417d587ed3aa5ebb7c73af9ea33fc8ce2263514d7aea795c68e4f55389fc263ca28d515032b37e9ab6b9e0f4cc2f7e50c5856280989c0fc0ecb4a16b2417bee0606394ee20a76d64be08900eedf5ab1a004e382ba526ac9cce3b915a5a35ae7e93f3d10591f921f8503683451cbf8137d7564f0b2acc5f11df1629892ab7c926a97f66f02641287f950f0ac756c6d3377452fb5b495bc706c3f5b4b2e23ca1a2b84adb79ca73acce8d377a4d99c8f56b6f6b956dfb458e8eb96aa50cec11a90da84c9b6bb867c98d69a69ed5b4fbb069864a92ea9c9e885b21ccb120df669d4c9fd29e81ab3763001c1485be5d82cf46dd87c9ad36612f57b3ace8173a8dd455214f6cfab2cb7894a7f5d6bc08ef8e697ae86d076ba5a291b1fdee071b73c525c6de0e78580d7c6156a8f7b7fc4e236fb0d6aff75e10629fdc99d1ab3cfcb9b03f64653ecc8bb5b69eb57f90ce92cc30c6e3eb06fa984805cb35c841fad9f72b26cbc993dcb6bed925b0201f9ba482b7f9797f02441f9a5f36a285b8728b883fbc23c34eadca443f0a611b08034bb4896b8fad7f4357a032bde001dc8f467e99c2c0f72fa1059e36c6fc348a33e8eccdbd2ec5f6f4853cccaa3dbd70547bba6968c8187cb05095d6f7a29434099ac48c49b58854e4ba0f48813e4596a5b1140887f697b9bf2615fa96490a5f25328768099399a9fc6d942e86112af2024e5911f2d64e4cfd04a405e2f5a27120c547e48e1af647d19015540701faf706c2263976de6616f365cfef3ed64b85834b7252eb3165f8c86db134a2ae2f0ea3735f49d148f10f640661b2d4329eab4dcb9e04186643f6f18e5c96f79e139f8e541c1dbe2f62bea14953b4896ac46b81c3a8298e7819448e461317ce2b13aa0bc1e135355ad9a1c5c2ba410917a751d7e0dc4db52eb46bdaad9b20f3bbcc4f2fb23c24ed006dce16b0bc6e4b5deeffd22a607ed7fafc9c464d925c7268468ebfe25770b18e3457e0268d8cf32d82ca3fd5a391bfa7c333490f6264fd213bcefbd2b17dfbb0a5ae961d3994478bf5ac6d88e8986b8351d105862cd9f05b0bfc8bd6d54fb2d50d642da92c1165f06ec4baf7a9c87d984439927b835d7087f28e82d9d2e0312986beaf9b1d7efa95d7bff2c72bbc7419b902b58bb0f1bbf0071aec1098122579b301302b7ddd49385c7c9172ba3cc1aae62760836e156fbc59c9292220cf437550f6c27a23049cce5a2c8f1cbd86f61b26ce5453db05a26771efdf46e96ef78cf061520aa769b0b5d30ff83f31920be55227b2385286eaeac2d44e91a10bb22a5d80e7906439d6635c9ae1fbe30318c80758665eb68794039fe9d9d945874aa18ec942f526b81ca277e223329a50fa209088677a75c43f88e5f555b8156fc572f6710d8d4e6cd608294f0ab05c2d0d992ff8f6365ff784596874f2dc12ab6952a2f2d693ccf3d624d53fd56894826e78dc01f95a65d65f1370c330755112809604f48a28528b0004cc0c1957561ca5b97e6b68bed39ead403c8d6116cfb3a30bc37828cb76573ab65f2c4d738891a5cf23bf6ed449f3fe743a5ebaea84bd031fe7e32c1499510b123d7a9e6116beea49cd2286e7ce2a0687c560eeb55634655c322a34243319dbfdecf53b5199c4905d85c8cf133f5a17dfc48683578902eafcf4b63e13fb36c9798610afec95b961f6215f1f44275bd7ea02daeefe09a1227b86a891ba133ff2686f11ad71f2d40f53f61d0f561ce4d3305c83a41467dfabc3c2664b21cb8edbe6dabde62205ca8e79eec12ea8ae3228a25758f136d5492d6b6736a9b2a49b4563494aaf535afa9655eef94078f04f5c1cb385123ce95610a2d0bc2886e76903d1eda0a8e40710ba53d94df3ec8d4fac4bc3c7dedad541cd5b580478a2432b2aa2fcaa0649bf2b46f4ecd90e55a576a236b2daf322b33b76b32341589ae5aff45d48e55664a3025557497a6ebf6219d90da0b044615157d860f87cbd9466c8cfee47c8281a61ca4e2e6ee7a5e515ef19e308c915c363bf3e536ec5e44ce08892645c55f94d844abdd11455499c396af31342af32d0bbe93eb2ecf3c93258b41a220681f7ac84ffbc5939eb0c7cbfb59764484e5886e0fa50ffb55817b6cfcdaab64054b2d5a673b4fdeb849eadb8a6699ebb295f973db7f4ec0ac65182d284a5753d3954e439ee0124c3dd95603a389ee54d1313f4da95ac251f31fe77211ce1c3fee6c7bc8de376b12b4836ae4b26e1e9d73368be43cc93a0c4e6cb42596357d58ade783af7d2eaed445e4ac899c7749327ef8618f5187df9f7b37ccb497bab8776984397a521b442b51cabce7144c37520896aa77733a85a4bd3a2b13a721ea509ca17aa8df71156cc612b91330418fc6ba8eee7ce04d611a687a32c4c50a5690f564c9e65197e6212dd9a3e30eefcccc307407e0a975aa5b43069d2ed447d209dd110598f9622fbe573db976c5f4bef82f5474dd0ea5bfe736e0f3f969bb38469839ff24b7157e6b8846b4710d7ad7f3cc3ac3be89160b9b429a899d4722fefaf6b05e540afae163b1a1a88deba6ea8501c375e856c5997dd6587a8a02c910df6ea9516c8d9e9a2422e980b5c044d4e57a2fb3f8c39a749176669f22d270dbca7cd656e88d2467271e38f79748205af3e8c154d74253e5223fe00ef53df3acdddc732d1139b6e6ce3382c7d0aa5885f1c98c53cedc5c4850eed9393277516a125c96d61b8319771a83fb02ff0e6cde27ce894ecfc4b42695b45037ebc6db705a661e29e031509b2eaa4dd48a2fe9768440278ffd9dbdca1a36b788fee353c45b2197be3805feea42012efdbecc6521dd0e24271a16", 0x8a7}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e", 0x23}], 0x1}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0x4, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x1000, 0x0, 0x4, r10, 0x3}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r10, 0x7}) sendmsg$inet(r7, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="c109000000000000001d1e010271261c", 0x10}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4000007b, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) syz_usb_control_io$hid(r6, 0x0, 0x0) connect(r7, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000300)=0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x20000014) 8.680657667s ago: executing program 0 (id=1238): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x2c060000) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x20}, {}, {}, {0x3}, {0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) 8.581986312s ago: executing program 4 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) 8.268855167s ago: executing program 3 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 8.061571324s ago: executing program 4 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = dup(r1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 7.771965473s ago: executing program 0 (id=1242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) 6.848278556s ago: executing program 4 (id=1244): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x55a7, &(0x7f0000006a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r0, 0x4008c0d) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 6.689602708s ago: executing program 0 (id=1245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x5, 0x0, [{0x6000, 0x73, &(0x7f0000000300)=""/115}, {0x5000, 0xfd, &(0x7f0000000880)=""/253}, {0x16000, 0x3a, &(0x7f0000000780)=""/58}, {0x10000, 0x20, &(0x7f00000007c0)=""/32}, {0x0, 0x97, &(0x7f0000000b00)=""/151}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r3 = io_uring_setup(0x30d3, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x19b}], 0x1) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0, 0x3}]) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000380)}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) 6.643418026s ago: executing program 3 (id=1246): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) write(r4, &(0x7f0000000140)='i', 0x1) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r0, r1) 6.220353983s ago: executing program 1 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 5.667094119s ago: executing program 1 (id=1248): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x3, 0x4, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffff}]}}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000600)=0x2) 5.64430261s ago: executing program 3 (id=1249): io_setup(0x80, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdb6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9c0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$alg(r3, &(0x7f0000001880)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0x37, 0xfffe}], 0x18}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000040601010000000000000000000000000900020073797a32000000000500010007000000252c3173ee3b1f7f7f225a6a9ee85d0e0c753dbdcc4ac08f5d9cc11eff7fad62d035899122c108f83cc54e4da56ddda0fb7336290ce767dddd849a32d975f3850b7ee5cff33cf4529a92878beae2d1e3bfea6828bf01ecf94b9ebca277a9c3b360833cc9d48861262b91e47b75618853dfa9dae49f36ee819431aa0f7260f9fe8f01e741b8ad11e9bd70b8354f62a2b79e1fa1269299e3d22542bb"], 0x28}}, 0x0) 5.345323005s ago: executing program 2 (id=1250): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) 2.704194343s ago: executing program 2 (id=1251): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0) 2.703874381s ago: executing program 1 (id=1252): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x2c060000) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x20}, {}, {}, {0x3}, {0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) 2.504359178s ago: executing program 0 (id=1253): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000280)=[{0x7, 0x3, 0xff}, {0x7, 0x2, 0x5, 0x3}, {0x1, 0x3, 0x4, 0xffffffff}, {0x1, 0x29, 0x3, 0x3c}, {0x201e, 0x6, 0x4, 0x1007}]}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r4, &(0x7f0000019680)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020006000500000000000000000000004000000000000000000000000000f50000000038000000000000000000000000000000000023020000000000000000000000000000000000000000000000000000000000000000000000000000a8b6e136545d98c9ed204d101fe2c436acfc6d40a9a82cfdda4be4f4e882bc7ce04f834c06a98cb43d87b6ae920c1064a299b9a9a2ec99c2de5c4c1ab61977134752fd349b4e6a57a00ac90ceb1e245aa32c2caf8f37fedc36bed03c1cac11f3bcebf13fbe0463b07111000000"], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000680)=""/102373, 0x18fe5}], 0x1, 0x0, 0x9c) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) io_uring_setup(0x49c4, &(0x7f0000000180)={0x0, 0x5b9e, 0x4, 0x2, 0x400003a4, 0x0, r3}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x3, 0xd4a4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 2.171808282s ago: executing program 4 (id=1254): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x55a7, &(0x7f0000006a40)="$eJzs3M+LG+UbAPBnst3+/vZbxIO3DhRhF5ql2f5AT1ZtUYstxR8HT5rdpCHtJrNs0nTtqQeP4sH/RBQ8efRv8KBHPQjiQRE8CJXMO1uatrbaJru2fj4weWaeefPM+07LwjMDCeA/63D+2y9ZHIp9ETEXEQezKPezaou4GXEmjX0uIo5ERO2OLavytxO7I2J/RBwaF081s+rUp8dGR0/9fP7Xr77Zs+vAZ19+u6MLB3bU8xHRW0/713spFp0y3Jqr8s1Rt4y9k6Mqrk/U6BUpf729Ula43twa1yzjiU4aX6xfG4zj5bXm6jh2upfL/Ho/XXAw6mzVGX8hv9LcKI9b7ZUydgdFGTs30nU3b6S/bTcGw1SnVdX7sCwfw+FWTPn2ZjutZ/1qGVf7wyqf6hat9uY4jqpYXS5Wi7VWOY+VR73L/35vdvvXNvNRe2PQLfr5qaXGC0uN0/XGRtFqD9sn681e6/TJfKGzNh5WH7abvTOdouistZdWi95ivtBZXa03GvnC2fZKt9nPG42lE0vH66cWq71j+WsX383XWvnCOL7S7V8bdtdqcbnYyNM3FvPlpRMvLuZHG/nbFy7ll946d+7CpXfeP/vexZcvvPFqNeieaeULy8eXl+uN4/XlxuITt/5B/qjr/6ia9D9Yf1bF85Pp7797vNsGSbbTEwB48tzT/8fd/X/o/4Gpe0D/H1ce0v/3rlbHs+n/4779f22y/49p9v/jlkr///D+t7YD/e986P9nuH54LI/W/++e+jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh2P8x//nq5czgdH6jy/6tSz1THWUTUIuLWfczF7omac1Wd+b8YP3/XHL7OoqwwvsaeatsfEWeq7Y//z/ouAAAAwNPri5tHPkndevqoHgHc1c3zlEr/zLWDH0ypXhYR84d/mlK12vjj2SkVK/9/74rNKVUrH2DtnVKx9Mht17Sq/S1zE2HvHSFLobat0wEAALbFZCfwoC7k5rbMBwAAgFn5+IFnX9q2eTBDv/94by6LrVeZt1/570lhb3oDuG/iHAAAAPAEynZ6AgAAAMDMlf2/3/8DAACAp1v6/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/ZuZvcxGEoAMAvgcAwPxo0mgPNDo4xR5jlbOEqHIEbVOoFOAOVuugR2lKRuEhpQULCgRZ9nxSDHXi2IZtnSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVcjo6PczN0+Y0OeYCAAAA7LeultP6zbipf0vtP1LTr1QvIqKMiH25ey8GrZi9FKc68PnqzRhuI+oI2/Zhur5GxJ90Pf7s+lcAAACA67WaLyZNtt4UaQng/pjvDjsdGWfQLNqU3/9mildERDV+yBSt3Ba/MwWrn+9+/M8UrV7A+pIpWLPk1t9/b5Crk7Ze6+V1JrP6T6xrZTf9AgAAl9TOBA5kIQAAAFyBf5ceAOfwPrUvdsVunzHt6qcNwVGrBgAAAHxCxaUHAAAAAHSuzv8/0vl/hfP/AAAAILvm/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6tK6W09V8MTl0f3ZknOfNafLNCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF/bnHYVCGAjD6Nzru5Psf61GftBOW6tzIPAxQwgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3vyuU/87hsReVWOmiSnjVlVzVoklq8SadWLLhfb8Ru9H//RTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsj8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCn/O6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW8/PXGUYQDAn93Z3ZaqEdGQiJqa9KAXS7e1tVdjNMSDH8GE0KWiW6uUg22IlYs3w7kXo0fTmGjwxnfouSS91FsPHDDx5AEzszN0FlZLqp2B8vsl777Pzg7vPyaEZ95ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgsPluvNrM4yR9GR/ExbG7W8tzab2xq06tr96bSksaNyoe9yHwWvnNycn6BgIAAMARcHtQJUV+HxH322szad0cz/L/dnFqmvP/8NwgLvL53Xn/xtby8fyjqSL//+3XBy/t9DeeZP2kjc4v9Htn9o6o9SSmeRg8/8gzWtnKZ/dekuwX0vxw5cXNdraeje/u3Hm/k4XHqhgtAPA4Thd1HhT/D6V1t86BAXBktEqJd5H/J+P1jgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgCpsr8UwRNyJiqvUwTm1sLc+Nqr9ZvTe1npcLt26tlttMm2hHxPxCv3emwrkcXMVq3vhstt/vLV67XnVwMiJGfHRzfz+e5MP/x3M6ETF05NTLI9r5eB997WpnT5BfnlHtGo6l83vkyY2hI409C/7e9kAdF0C/t9ipYumaeSd1TPBJB8W19/+3XOGfIgAAjoR2XtJM9H57bSY91piI2P5xOP9/oxTHUN6/fXNwZPB+vZT/P/jkwt1yX+X8v1vR/A6D6aUrX0xfu37jrYUrs5d7l3ufv322+0733MXz5y9OZ/dKpuej6Y4JAAAA/0EnL+X8vzmxd///RCmOf9n/L+f/X37f/brcVyL/H+nhpl/dIwEAADiKOjvRC6//+UdjxBmNTie+ml1aWuwOXnfenx28Vjrcx3QsL+X8P5moe1QAAABAFTZXGkP7/5dKcexz///Zn175udxmEhFjEVcjond67mr/UnXTOdCq+KJy1lGn7pkCAABQl7G8lPf/29nz/82dRx6aEfHmqYi/8u/wxz7z/+SDb2+X+yo//3+u0lkePM3JwXpk9WREa7LuEQEAAPA0O56XNNn/vb028+kvJz7qeP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGp/BwAA///DADQU") ftruncate(0xffffffffffffffff, 0x4008c0d) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 2.055921081s ago: executing program 1 (id=1255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.736707416s ago: executing program 3 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.626525071s ago: executing program 2 (id=1257): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000002e34000a000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x15, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 1.506863556s ago: executing program 1 (id=1258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 956.528549ms ago: executing program 2 (id=1259): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) write(r4, &(0x7f0000000140)='i', 0x1) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r0, r1) 870.791951ms ago: executing program 1 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000001020104000000002f2c00000a0000003c0002802c000180140003"], 0x50}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x0, 0x4}]}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e", 0x23}], 0x1}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0x4, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x1000, 0x0, 0x4, r10, 0x3}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r10, 0x7}) sendmsg$inet(r7, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="c109000000000000001d1e010271261c", 0x10}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4000007b, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) syz_usb_control_io$hid(r6, 0x0, 0x0) connect(r7, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000300)=0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x20000014) 656.197107ms ago: executing program 3 (id=1261): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x20) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) 447.044225ms ago: executing program 0 (id=1262): r0 = syz_io_uring_setup(0x5638, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x5, 0x0, [{0x6000, 0x73, &(0x7f0000000300)=""/115}, {0x5000, 0xfd, &(0x7f0000000880)=""/253}, {0x16000, 0x3a, &(0x7f0000000780)=""/58}, {0x10000, 0x20, &(0x7f00000007c0)=""/32}, {0x0, 0x97, &(0x7f0000000b00)=""/151}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r3 = io_uring_setup(0x30d3, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x1df}], 0x1) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0, 0x3}]) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000380)}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): fig [ 587.399940][ T5112] usb 2-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 587.417625][ T5112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.417767][ T5112] usb 2-1: Product: syz [ 587.417871][ T5112] usb 2-1: Manufacturer: syz [ 587.417979][ T5112] usb 2-1: SerialNumber: syz [ 587.518613][ T3031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.600642][ T3031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.620711][ T3031] bond0 (unregistering): Released all slaves [ 587.807761][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.808031][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.870135][ T5112] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 587.870491][ T5112] dvb_usb_af9035 2-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 587.911429][ T5112] usb 2-1: USB disconnect, device number 16 [ 588.470076][ C0] eth0: bad gso: type: 1, size: 1408 [ 588.851925][ T3031] hsr_slave_0: left promiscuous mode [ 588.885289][ T3031] hsr_slave_1: left promiscuous mode [ 588.935600][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.943598][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.006585][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.026096][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.105009][ T3031] veth1_macvtap: left promiscuous mode [ 589.110815][ T3031] veth0_macvtap: left promiscuous mode [ 589.117670][ T3031] veth1_vlan: left promiscuous mode [ 589.130623][ T3031] veth0_vlan: left promiscuous mode [ 590.819369][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.692'. [ 592.865474][ T7946] xt_TPROXY: Can be used only with -p tcp or -p udp [ 593.079618][ T7614] veth0_vlan: entered promiscuous mode [ 593.166141][ T7614] veth1_vlan: entered promiscuous mode [ 593.763253][ T7614] veth0_macvtap: entered promiscuous mode [ 593.889902][ T7614] veth1_macvtap: entered promiscuous mode [ 593.941041][ T5112] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 593.994633][ C0] eth0: bad gso: type: 1, size: 1408 [ 594.092777][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.103670][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.113862][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.124916][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.138326][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.157633][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.170002][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.180807][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.191077][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.201926][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.212708][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.223618][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.238885][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.467476][ T5112] usb 3-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 594.546279][ T5112] usb 3-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 594.562844][ T5112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.574180][ T5112] usb 3-1: Product: syz [ 594.578852][ T5112] usb 3-1: Manufacturer: syz [ 594.582836][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.583602][ T5112] usb 3-1: SerialNumber: syz [ 594.594127][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.594212][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.624995][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.635219][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.645946][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.659063][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.670695][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.680898][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.691658][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.702390][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.713141][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.728178][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.957417][ T7614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.973933][ T7614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.985375][ T7614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.994899][ T7614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.027306][ T5112] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 595.034271][ T5112] dvb_usb_af9035 3-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 595.087514][ T5112] usb 3-1: USB disconnect, device number 17 [ 596.717500][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.706'. [ 597.150653][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.162358][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.185100][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.220153][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.229366][ T7993] netlink: 'syz.2.708': attribute type 4 has an invalid length. [ 597.268317][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 597.341233][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.789398][ T7989] 9pnet_fd: Insufficient options for proto=fd [ 599.511226][ T5053] Bluetooth: hci1: command tx timeout [ 600.117878][ T7991] chnl_net:caif_netlink_parms(): no params data found [ 600.270342][ C0] eth0: bad gso: type: 1, size: 1408 [ 600.660448][ T1550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.728939][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.757162][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.778350][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 600.807107][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 600.818540][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 600.829925][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 600.912651][ T1550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.044187][ T8014] xt_TPROXY: Can be used only with -p tcp or -p udp [ 601.080863][ T1550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.315814][ T1550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.575136][ T51] Bluetooth: hci1: command tx timeout [ 601.908272][ T1550] bridge_slave_1: left allmulticast mode [ 601.914195][ T1550] bridge_slave_1: left promiscuous mode [ 601.921197][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.123654][ T1550] bridge_slave_0: left allmulticast mode [ 602.133393][ T1550] bridge_slave_0: left promiscuous mode [ 602.142677][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.806540][ T1551] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 602.922974][ T1550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.937135][ T51] Bluetooth: hci2: command tx timeout [ 602.998624][ T1550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.063202][ T1551] usb 2-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 603.079261][ T1550] bond0 (unregistering): Released all slaves [ 603.177073][ T1551] usb 2-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 603.186505][ T1551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.194783][ T1551] usb 2-1: Product: syz [ 603.199110][ T1551] usb 2-1: Manufacturer: syz [ 603.203872][ T1551] usb 2-1: SerialNumber: syz [ 603.515653][ T1551] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 603.523251][ T1551] dvb_usb_af9035 2-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 603.636373][ T1551] usb 2-1: USB disconnect, device number 17 [ 603.659867][ T8028] Bluetooth: hci1: command tx timeout [ 603.688130][ T1550] hsr_slave_0: left promiscuous mode [ 603.761879][ T1550] hsr_slave_1: left promiscuous mode [ 603.831103][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.839089][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.907001][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.915087][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.993847][ T1550] veth1_macvtap: left promiscuous mode [ 603.999819][ T1550] veth0_macvtap: left promiscuous mode [ 604.006078][ T1550] veth1_vlan: left promiscuous mode [ 604.011634][ T1550] veth0_vlan: left promiscuous mode [ 604.971390][ T1550] team0 (unregistering): Port device team_slave_1 removed [ 605.018875][ T8028] Bluetooth: hci2: command tx timeout [ 605.109724][ T1550] team0 (unregistering): Port device team_slave_0 removed [ 605.174696][ T8028] Bluetooth: hci4: command 0x0406 tx timeout [ 605.181184][ T8028] Bluetooth: hci0: command 0x0406 tx timeout [ 605.739502][ T51] Bluetooth: hci1: command tx timeout [ 605.957140][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.965206][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.973053][ T7991] bridge_slave_0: entered allmulticast mode [ 605.982527][ T7991] bridge_slave_0: entered promiscuous mode [ 606.250729][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.258646][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.266581][ T7991] bridge_slave_1: entered allmulticast mode [ 606.276004][ T7991] bridge_slave_1: entered promiscuous mode [ 606.730317][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.885403][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.905250][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'. [ 607.028450][ T1550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.097131][ T51] Bluetooth: hci2: command tx timeout [ 607.383534][ T1550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.482636][ T7991] team0: Port device team_slave_0 added [ 607.614106][ T1550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.749392][ T7991] team0: Port device team_slave_1 added [ 607.883092][ T1550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.950557][ T8013] chnl_net:caif_netlink_parms(): no params data found [ 608.252058][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.259696][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.290937][ T7991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.339267][ T5053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 608.348892][ T5053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 608.358272][ T5053] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 608.375765][ T5053] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 608.387349][ T5053] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 608.397542][ T5053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 608.426270][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.433452][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.460051][ T7991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.756028][ T7991] hsr_slave_0: entered promiscuous mode [ 608.798832][ T7991] hsr_slave_1: entered promiscuous mode [ 608.826488][ T8063] xt_TPROXY: Can be used only with -p tcp or -p udp [ 609.139842][ T1550] bridge_slave_1: left allmulticast mode [ 609.145975][ T1550] bridge_slave_1: left promiscuous mode [ 609.152933][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.178407][ T51] Bluetooth: hci2: command tx timeout [ 609.365186][ T1550] bridge_slave_0: left allmulticast mode [ 609.371137][ T1550] bridge_slave_0: left promiscuous mode [ 609.378063][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.010537][ T1550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.070762][ T1550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.159245][ T1550] bond0 (unregistering): Released all slaves [ 610.317499][ T5058] Bluetooth: hci5: command 0x0406 tx timeout [ 610.535306][ T51] Bluetooth: hci3: command tx timeout [ 610.912635][ T1550] hsr_slave_0: left promiscuous mode [ 610.947344][ T1550] hsr_slave_1: left promiscuous mode [ 610.983724][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.992025][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.053534][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.061381][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.177153][ T1550] veth1_macvtap: left promiscuous mode [ 611.182917][ T1550] veth0_macvtap: left promiscuous mode [ 611.188939][ T1550] veth1_vlan: left promiscuous mode [ 611.194710][ T1550] veth0_vlan: left promiscuous mode [ 612.624676][ T51] Bluetooth: hci3: command tx timeout [ 612.646376][ T1550] team0 (unregistering): Port device team_slave_1 removed [ 612.710221][ T1550] team0 (unregistering): Port device team_slave_0 removed [ 614.330668][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.338564][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.346577][ T8013] bridge_slave_0: entered allmulticast mode [ 614.356239][ T8013] bridge_slave_0: entered promiscuous mode [ 614.684174][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.692031][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.694873][ T51] Bluetooth: hci3: command tx timeout [ 614.699915][ T8013] bridge_slave_1: entered allmulticast mode [ 614.714002][ T8013] bridge_slave_1: entered promiscuous mode [ 615.156128][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 615.181043][ T7991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 615.226046][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.284145][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.329729][ T7991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.642424][ T7991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 615.871037][ T8013] team0: Port device team_slave_0 added [ 615.922708][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.729'. [ 615.936607][ T7991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.009159][ T8013] team0: Port device team_slave_1 added [ 616.340995][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.349049][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.379844][ T8013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.588518][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.595827][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.622640][ T8013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.686588][ T8109] xt_TPROXY: Can be used only with -p tcp or -p udp [ 616.776912][ T51] Bluetooth: hci3: command tx timeout [ 617.328006][ T8013] hsr_slave_0: entered promiscuous mode [ 617.391606][ T8013] hsr_slave_1: entered promiscuous mode [ 617.444919][ T8013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.452852][ T8013] Cannot create hsr debugfs directory [ 617.993442][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.005705][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.013572][ T8058] bridge_slave_0: entered allmulticast mode [ 618.023029][ T8058] bridge_slave_0: entered promiscuous mode [ 618.218471][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.226376][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.235870][ T8058] bridge_slave_1: entered allmulticast mode [ 618.245513][ T8058] bridge_slave_1: entered promiscuous mode [ 618.658104][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.107425][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.423765][ T8058] team0: Port device team_slave_0 added [ 619.547970][ T8058] team0: Port device team_slave_1 added [ 620.117960][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.125877][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.157446][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.264473][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.308427][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 620.391297][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.398583][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.425084][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.521440][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.796911][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.804628][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.818279][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.825818][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.003369][ T8013] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 621.134040][ T8013] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 621.407514][ T8013] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 621.701283][ T8058] hsr_slave_0: entered promiscuous mode [ 621.798758][ T8058] hsr_slave_1: entered promiscuous mode [ 621.824541][ T8058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.832363][ T8058] Cannot create hsr debugfs directory [ 621.839409][ T8013] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 622.716117][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.738'. [ 623.423845][ T3475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.442280][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 623.792163][ T3475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.006181][ T3475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.220689][ T3475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.749084][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.765021][ T3475] bridge_slave_1: left allmulticast mode [ 624.770910][ T3475] bridge_slave_1: left promiscuous mode [ 624.778596][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.881970][ T3475] bridge_slave_0: left allmulticast mode [ 624.888193][ T3475] bridge_slave_0: left promiscuous mode [ 624.896125][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.707275][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.790192][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.849076][ T3475] bond0 (unregistering): Released all slaves [ 625.942129][ T8013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.739465][ T3475] hsr_slave_0: left promiscuous mode [ 626.749814][ T3475] hsr_slave_1: left promiscuous mode [ 626.772131][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.780976][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.816570][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.824576][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.861651][ T3475] veth1_macvtap: left promiscuous mode [ 626.867726][ T3475] veth0_macvtap: left promiscuous mode [ 626.873630][ T3475] veth1_vlan: left promiscuous mode [ 626.879371][ T3475] veth0_vlan: left promiscuous mode [ 627.915179][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 628.026618][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 628.285546][ T8013] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.503814][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.511649][ T5112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.576305][ T8058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.656103][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.663822][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.729285][ T8058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.887286][ T8058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 629.044751][ T8058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 629.647305][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.747'. [ 630.092661][ T7991] veth0_vlan: entered promiscuous mode [ 630.250765][ T7991] veth1_vlan: entered promiscuous mode [ 630.500448][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 630.778871][ T7991] veth0_macvtap: entered promiscuous mode [ 630.882857][ T7991] veth1_macvtap: entered promiscuous mode [ 631.017973][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.228799][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.239704][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.250070][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.262906][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.273094][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.283777][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.293848][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.304661][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.322763][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.452393][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.535528][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.543314][ T2515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.683837][ T2515] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.691652][ T2515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.049287][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.060336][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.070505][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.081533][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.091740][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.103924][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.114119][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.126354][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.144086][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.523507][ T8013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.563204][ T7991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.572701][ T7991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.584650][ T7991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.593694][ T7991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.453188][ T8013] veth0_vlan: entered promiscuous mode [ 633.623775][ T8013] veth1_vlan: entered promiscuous mode [ 634.147281][ T8013] veth0_macvtap: entered promiscuous mode [ 634.287897][ T8013] veth1_macvtap: entered promiscuous mode [ 634.568702][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.669644][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.680748][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.693045][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.708183][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.719310][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.730118][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.740268][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.751039][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.761122][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.771734][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.785549][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.228571][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.239441][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.249617][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.260732][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.270863][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.282384][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.292585][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.303312][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.315725][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.327504][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.342700][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.587595][ T8058] veth0_vlan: entered promiscuous mode [ 635.792714][ T8058] veth1_vlan: entered promiscuous mode [ 635.820854][ T8013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.830041][ T8013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.839363][ T8013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.848453][ T8013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.367554][ T8058] veth0_macvtap: entered promiscuous mode [ 636.513306][ T8058] veth1_macvtap: entered promiscuous mode [ 636.729473][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.742561][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.753423][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.764255][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.776747][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.787902][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.798015][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.809009][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.819214][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.830052][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.842463][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.853833][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.869507][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.069755][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.080710][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.090978][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.102090][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.112366][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.123113][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.133424][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.144221][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.156492][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.167905][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.178066][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.189116][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.204632][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.319470][ T8058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.328611][ T8058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.338338][ T8058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.347423][ T8058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.043430][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 642.117847][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.126575][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.182146][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 642.621220][ T7427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.629432][ T7427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.268750][ T5058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 646.274999][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.278301][ T5058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 646.283815][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.313686][ T5058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 646.487555][ T5058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 646.498405][ T5058] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 646.508766][ T5058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 646.557122][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.565492][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.848095][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.856775][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.261596][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.270084][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.539614][ T5058] Bluetooth: hci4: command tx timeout [ 648.597729][ T8343] chnl_net:caif_netlink_parms(): no params data found [ 649.109837][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'. [ 649.212679][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.219820][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.596785][ C0] eth0: bad gso: type: 1, size: 1408 [ 650.617097][ T5058] Bluetooth: hci4: command tx timeout [ 651.321405][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 651.592379][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.600317][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.608373][ T8343] bridge_slave_0: entered allmulticast mode [ 651.686628][ T8343] bridge_slave_0: entered promiscuous mode [ 651.767412][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.776078][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.783787][ T8343] bridge_slave_1: entered allmulticast mode [ 651.798566][ T8343] bridge_slave_1: entered promiscuous mode [ 652.307847][ T8343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.458333][ T8343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.694795][ T5058] Bluetooth: hci4: command tx timeout [ 652.975845][ T8343] team0: Port device team_slave_0 added [ 653.008934][ T8343] team0: Port device team_slave_1 added [ 653.437905][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.445294][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.471837][ T8343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.613316][ T8403] loop0: detected capacity change from 0 to 1024 [ 653.691884][ T8407] IPVS: length: 176 != 206344 [ 653.759026][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.766439][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.792948][ T8343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.879502][ T8408] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 654.645905][ T8343] hsr_slave_0: entered promiscuous mode [ 654.706409][ T8343] hsr_slave_1: entered promiscuous mode [ 654.774639][ T5058] Bluetooth: hci4: command tx timeout [ 654.877918][ T8343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.886751][ T8343] Cannot create hsr debugfs directory [ 656.067243][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 656.280318][ T8343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.549969][ T8415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.730592][ T8343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.960514][ T8343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.201081][ T8343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.049352][ T8343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 658.100852][ T8343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 658.130821][ T8343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 658.348952][ T8343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 658.607598][ T1550] bridge_slave_1: left allmulticast mode [ 658.613504][ T1550] bridge_slave_1: left promiscuous mode [ 658.620302][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.715071][ T1550] bridge_slave_0: left allmulticast mode [ 658.720982][ T1550] bridge_slave_0: left promiscuous mode [ 658.730279][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.733670][ T1550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.829084][ T1550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.848857][ T5058] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 659.879202][ T1550] bond0 (unregistering): Released all slaves [ 660.144605][ T5058] Bluetooth: hci2: unexpected event 0x34 length: 10 > 6 [ 660.805608][ T1550] hsr_slave_0: left promiscuous mode [ 660.865106][ T1550] hsr_slave_1: left promiscuous mode [ 660.915445][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.923372][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.967734][ T1550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.975700][ T1550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.046780][ T1550] veth1_macvtap: left promiscuous mode [ 661.052704][ T1550] veth0_macvtap: left promiscuous mode [ 661.059492][ T1550] veth1_vlan: left promiscuous mode [ 661.065431][ T1550] veth0_vlan: left promiscuous mode [ 661.895096][ T5058] Bluetooth: hci2: command tx timeout [ 661.968917][ T6322] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 662.233168][ T6322] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.248525][ T6322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 662.260917][ T6322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 662.271087][ T6322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 662.284544][ T6322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 662.293872][ T6322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.346405][ T6322] usb 4-1: config 0 descriptor?? [ 662.433311][ T1550] team0 (unregistering): Port device team_slave_1 removed [ 662.488284][ T1550] team0 (unregistering): Port device team_slave_0 removed [ 662.913052][ T8454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.785'. [ 662.931492][ T8448] netlink: 'syz.4.782': attribute type 2 has an invalid length. [ 663.246295][ T6322] usbhid 4-1:0.0: can't add hid device: -71 [ 663.252958][ T6322] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 663.307008][ T6322] usb 4-1: USB disconnect, device number 5 [ 663.497528][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 663.761623][ T8343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.000074][ T8343] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.226847][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.234677][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.310627][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.787'. [ 664.418020][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.425807][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.953624][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 665.034231][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 665.096327][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 665.140648][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 665.160314][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 665.174201][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.099415][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 667.257241][ T51] Bluetooth: hci0: command tx timeout [ 667.566252][ T51] Bluetooth: hci5: unexpected event 0x34 length: 10 > 6 [ 667.636324][ T8470] chnl_net:caif_netlink_parms(): no params data found [ 667.696126][ T8343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.916911][ T8343] veth0_vlan: entered promiscuous mode [ 669.048219][ T8343] veth1_vlan: entered promiscuous mode [ 669.175045][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 669.336025][ T51] Bluetooth: hci0: command tx timeout [ 669.416723][ T8343] veth0_macvtap: entered promiscuous mode [ 669.549580][ T8343] veth1_macvtap: entered promiscuous mode [ 669.638167][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 669.647485][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 669.679226][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 669.944928][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.955725][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.966004][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.979143][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.990606][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.001498][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.011599][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.030489][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.042448][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.053143][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.063225][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.073839][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.087942][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.393687][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.404819][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.416644][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.435331][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.447854][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.458630][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.468768][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.479575][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.489765][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.500618][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.500694][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.500787][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.506387][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.661343][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.661860][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.662509][ T8470] bridge_slave_0: entered allmulticast mode [ 670.665851][ T8470] bridge_slave_0: entered promiscuous mode [ 670.758041][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.758564][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.759300][ T8470] bridge_slave_1: entered allmulticast mode [ 670.762620][ T8470] bridge_slave_1: entered promiscuous mode [ 670.947623][ T8343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.947854][ T8343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.948068][ T8343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.948276][ T8343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.976358][ T5111] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 671.182217][ T8470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.196285][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.798'. [ 671.263440][ T8470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.343361][ T5111] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 671.343535][ T5111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 671.343704][ T5111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 671.343853][ T5111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.344086][ T5111] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.344238][ T5111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.366605][ T5111] usb 4-1: config 0 descriptor?? [ 671.415119][ T51] Bluetooth: hci0: command tx timeout [ 671.709842][ T8470] team0: Port device team_slave_0 added [ 671.800385][ T8470] team0: Port device team_slave_1 added [ 672.266546][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.266620][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.266764][ T8470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.288424][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.288500][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.288645][ T8470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.759394][ T8470] hsr_slave_0: entered promiscuous mode [ 672.809292][ T8470] hsr_slave_1: entered promiscuous mode [ 672.842193][ T8470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.842348][ T8470] Cannot create hsr debugfs directory [ 673.497938][ T51] Bluetooth: hci0: command tx timeout [ 674.812371][ T8470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.162712][ T8470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.431248][ T5111] usbhid 4-1:0.0: can't add hid device: -71 [ 675.437708][ T5111] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 675.584875][ T5111] usb 4-1: USB disconnect, device number 6 [ 675.686021][ T8470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.862089][ T8470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.412939][ T8470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 676.519405][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 676.555985][ T8470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 676.728337][ T8470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 676.850671][ T8470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 676.860986][ T51] Bluetooth: hci5: unexpected event 0x34 length: 10 > 6 [ 678.384630][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 678.402123][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 678.411541][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 678.472961][ T8470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.484603][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'. [ 678.543817][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 678.623259][ T7520] bridge_slave_1: left allmulticast mode [ 678.645167][ T7520] bridge_slave_1: left promiscuous mode [ 678.651528][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.918794][ T7520] bridge_slave_0: left allmulticast mode [ 678.925043][ T7520] bridge_slave_0: left promiscuous mode [ 678.941652][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.824486][ T7520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.888894][ T7520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.949539][ T7520] bond0 (unregistering): Released all slaves [ 680.185982][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.267628][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.275405][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.589509][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.597404][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.014224][ T7520] hsr_slave_0: left promiscuous mode [ 681.093288][ T7520] hsr_slave_1: left promiscuous mode [ 681.137189][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.146420][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.217592][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.225683][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.310659][ T8587] loop0: detected capacity change from 0 to 512 [ 681.335920][ T7520] veth1_macvtap: left promiscuous mode [ 681.341780][ T7520] veth0_macvtap: left promiscuous mode [ 681.348037][ T7520] veth1_vlan: left promiscuous mode [ 681.353593][ T7520] veth0_vlan: left promiscuous mode [ 681.373522][ T8587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 681.714650][ T8587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 681.774793][ T8587] System zones: 1-12 [ 681.800747][ T8587] EXT4-fs (loop0): 1 truncate cleaned up [ 681.808636][ T8587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.358643][ T7331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.588042][ T7520] team0 (unregistering): Port device team_slave_1 removed [ 682.740207][ T7520] team0 (unregistering): Port device team_slave_0 removed [ 682.756284][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 682.986108][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 682.998316][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 683.011827][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 683.027370][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.042355][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.051822][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.176376][ T8] usb 5-1: config 0 descriptor?? [ 683.200410][ T8594] loop0: detected capacity change from 0 to 256 [ 683.530110][ T8594] syz.0.813 uses obsolete (PF_INET,SOCK_PACKET) [ 683.721731][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.729886][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.849221][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 683.859858][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 683.997669][ T8] usb 5-1: USB disconnect, device number 21 [ 684.113978][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.123117][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.180196][ T51] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 686.339867][ T8470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.879653][ T51] Bluetooth: hci2: unexpected event 0x34 length: 10 > 6 [ 687.168447][ T8470] veth0_vlan: entered promiscuous mode [ 687.340759][ T8470] veth1_vlan: entered promiscuous mode [ 687.676921][ T8470] veth0_macvtap: entered promiscuous mode [ 687.757471][ T8470] veth1_macvtap: entered promiscuous mode [ 687.778094][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 687.787275][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 687.788783][ T8635] loop4: detected capacity change from 0 to 512 [ 687.796569][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 687.916526][ T8635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 687.963847][ T8635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 688.038829][ T8635] System zones: 1-12 [ 688.049241][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.049343][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.049413][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.049501][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.049567][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.049652][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.049722][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.124032][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.134786][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.154675][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.167863][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.170929][ T51] Bluetooth: hci2: command tx timeout [ 688.178601][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.183516][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.295312][ T8635] EXT4-fs (loop4): 1 truncate cleaned up [ 688.302900][ T8635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.442755][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.460791][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.477233][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.493471][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.503696][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.522861][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.533068][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.547908][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.565209][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.578091][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.588264][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.599013][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.613980][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.897369][ T7991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.936255][ T8470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.945523][ T8470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.954756][ T8470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.971722][ T8470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.105149][ T8644] tipc: Started in network mode [ 689.110237][ T8644] tipc: Node identity f7, cluster identity 4711 [ 689.117013][ T8644] tipc: Node number set to 247 [ 691.229185][ T29] audit: type=1804 audit(1721636547.989:3): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.830" name="/newroot/64/file0/bus" dev="hugetlbfs" ino=27615 res=1 errno=0 [ 691.582446][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 691.916925][ T51] Bluetooth: hci4: unexpected event 0x34 length: 10 > 6 [ 692.427281][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 692.448747][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 692.461331][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 692.681231][ T8680] loop4: detected capacity change from 0 to 512 [ 692.710108][ T8680] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 692.846954][ T8680] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 692.985267][ T8680] System zones: 1-12 [ 693.056306][ T8680] EXT4-fs (loop4): 1 truncate cleaned up [ 693.068891][ T8680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.528712][ T7991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.547096][ T8683] loop1: detected capacity change from 0 to 4096 [ 693.579243][ T51] Bluetooth: hci4: command tx timeout [ 693.795172][ T8692] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 696.728038][ T8706] loop4: detected capacity change from 0 to 2048 [ 697.010143][ T8712] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 697.378029][ T8716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 697.491700][ T8716] Remounting filesystem read-only [ 697.497993][ T8716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 697.508910][ T8716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 697.520771][ T8716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 697.531913][ T8716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 697.542414][ T8716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 697.765250][ T29] audit: type=1800 audit(1721636554.569:4): pid=8716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.840" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 697.963763][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 698.025111][ T8716] syz.4.840 (8716) used greatest stack depth: 4200 bytes left [ 698.400254][ T51] Bluetooth: hci5: unexpected event 0x34 length: 10 > 6 [ 699.895598][ T7517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.903668][ T7517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.020064][ T5058] Bluetooth: hci5: command 0x0406 tx timeout [ 700.200731][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.209068][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.682852][ T8759] overlayfs: statfs failed on './file0' [ 702.454604][ T5058] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 702.463202][ T5058] Bluetooth: hci4: Injecting HCI hardware error event [ 702.471161][ T51] Bluetooth: hci4: hardware error 0x00 [ 702.498180][ T8767] loop0: detected capacity change from 0 to 16 [ 702.625684][ T8767] erofs: (device loop0): mounted with root inode @ nid 36. [ 702.702769][ T5058] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 703.421097][ T5058] Bluetooth: hci4: unexpected event 0x34 length: 10 > 6 [ 704.544692][ T6322] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 704.622286][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 704.946205][ T6322] usb 3-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 705.085434][ T6322] usb 3-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 705.097212][ T6322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.105988][ T6322] usb 3-1: Product: syz [ 705.110419][ T6322] usb 3-1: Manufacturer: syz [ 705.115381][ T6322] usb 3-1: SerialNumber: syz [ 705.437937][ T6322] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 705.448277][ T6322] dvb_usb_af9035 3-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 705.522088][ T6322] usb 3-1: USB disconnect, device number 18 [ 707.494700][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 707.509073][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 707.521118][ T5058] Bluetooth: hci1: hardware error 0x00 [ 708.036211][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 708.083498][ T8819] loop1: detected capacity change from 0 to 16 [ 712.231043][ T5058] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 712.398779][ T8819] erofs: (device loop1): erofs_read_superblock: cannot read erofs superblock [ 712.845370][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 712.851870][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.887648][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 715.080619][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 715.334634][ T10] usb 1-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 715.401333][ T10] usb 1-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 715.410937][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.419384][ T10] usb 1-1: Product: syz [ 715.423873][ T10] usb 1-1: Manufacturer: syz [ 715.428884][ T10] usb 1-1: SerialNumber: syz [ 715.928088][ T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 715.935160][ T10] dvb_usb_af9035 1-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 716.037431][ T10] usb 1-1: USB disconnect, device number 8 [ 716.222326][ T5058] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 716.414468][ T5058] Bluetooth: hci2: unexpected event 0x34 length: 10 > 6 [ 717.188386][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 718.296830][ T5058] Bluetooth: hci2: command tx timeout [ 718.385188][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 719.202173][ T8906] IPVS: length: 176 != 8 [ 721.982622][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 723.044126][ T8961] IPVS: length: 176 != 8 [ 724.928968][ T8994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.930'. [ 725.160997][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 725.715677][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 727.823421][ T51] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 727.832221][ T51] Bluetooth: hci5: Injecting HCI hardware error event [ 727.839907][ T51] Bluetooth: hci5: hardware error 0x00 [ 728.056272][ T5053] Bluetooth: hci2: command 0x0406 tx timeout [ 728.956496][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 729.346447][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 729.873312][ T9052] overlayfs: failed to resolve './file1': -2 [ 729.896349][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 732.419852][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 734.274597][ T29] audit: type=1326 audit(1721636591.089:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.0.967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa620d75b59 code=0x0 [ 734.594683][ T9105] netlink: 'syz.2.971': attribute type 2 has an invalid length. [ 735.263774][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 735.272532][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 735.280819][ T51] Bluetooth: hci0: hardware error 0x00 [ 735.435843][ T5053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.446913][ T5053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.463559][ T5053] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.526845][ T5053] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.576380][ T5053] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 735.600764][ T5053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 735.957239][ T9121] loop4: detected capacity change from 0 to 256 [ 735.982316][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 736.207787][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 736.325527][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.336299][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.347803][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 736.357960][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 736.368034][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.457242][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 736.467456][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 736.481599][ T10] usb 3-1: Manufacturer: syz [ 736.547353][ T10] usb 3-1: config 0 descriptor?? [ 737.205903][ T10] rc_core: IR keymap rc-hauppauge not found [ 737.212051][ T10] Registered IR keymap rc-empty [ 737.217983][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 737.337371][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 737.340029][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 737.470548][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 737.487074][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 737.587235][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 737.727747][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 737.735990][ T51] Bluetooth: hci3: command tx timeout [ 737.785530][ T9111] chnl_net:caif_netlink_parms(): no params data found [ 737.834875][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 737.898160][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 737.974962][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 738.034892][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 738.084816][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 738.151181][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 738.234716][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 738.304819][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 738.350687][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 738.359442][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 738.476680][ T10] usb 3-1: USB disconnect, device number 19 [ 738.904004][ T8599] udevd[8599]: setting owner of /dev/bus/usb/003/019 to uid=0, gid=0 failed: No such file or directory [ 741.822915][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 741.832011][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 741.839578][ T5058] Bluetooth: hci3: command tx timeout [ 741.847883][ T8028] Bluetooth: hci2: hardware error 0x00 [ 743.457125][ T29] audit: type=1326 audit(1721636600.239:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.2.984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff306175b59 code=0x0 [ 743.899044][ T51] Bluetooth: hci3: command tx timeout [ 744.276507][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.284180][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.292075][ T9111] bridge_slave_0: entered allmulticast mode [ 744.301902][ T9111] bridge_slave_0: entered promiscuous mode [ 744.421531][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.430234][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.438104][ T9111] bridge_slave_1: entered allmulticast mode [ 744.446586][ T9111] bridge_slave_1: entered promiscuous mode [ 744.876698][ T8028] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 744.942122][ T9111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.989861][ T9111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.272053][ T9111] team0: Port device team_slave_0 added [ 745.383096][ T9111] team0: Port device team_slave_1 added [ 745.707956][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.715894][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.742365][ T9111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.928982][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.936474][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.962901][ T9111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.991391][ T8028] Bluetooth: hci3: command tx timeout [ 746.927109][ T9111] hsr_slave_0: entered promiscuous mode [ 747.118891][ T9111] hsr_slave_1: entered promiscuous mode [ 747.145829][ T9111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.153640][ T9111] Cannot create hsr debugfs directory [ 747.460298][ T9188] input: syz1 as /devices/virtual/input/input17 [ 748.471817][ T29] audit: type=1326 audit(1721636605.239:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.0.998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa620d75b59 code=0x0 [ 748.924704][ T9111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.241051][ T9111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.652154][ T9111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.050255][ T9111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.739658][ T9111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 750.937596][ T9111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 751.826836][ T9111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 752.015878][ T9111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 753.091437][ T9234] input: syz1 as /devices/virtual/input/input18 [ 754.070638][ T9111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.368883][ T9111] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.631179][ T1551] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.639001][ T1551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.655811][ T1551] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.663502][ T1551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.292801][ T9284] loop3: detected capacity change from 0 to 256 [ 757.425563][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.691737][ T9288] input: syz1 as /devices/virtual/input/input19 [ 758.194536][ T9111] veth0_vlan: entered promiscuous mode [ 758.298712][ T9111] veth1_vlan: entered promiscuous mode [ 758.828394][ T9111] veth0_macvtap: entered promiscuous mode [ 758.897089][ T9111] veth1_macvtap: entered promiscuous mode [ 758.931521][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 758.943619][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 758.953891][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 759.165381][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.178621][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.189212][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.199916][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.216647][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.228776][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.238849][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.249509][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.260466][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.271285][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.281332][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.292041][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.302084][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.319300][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.334897][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.892194][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.903305][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.913681][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.931522][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.944516][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.955424][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.965563][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.976478][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.986511][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.997145][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.007169][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.017912][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.035038][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.047399][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.061173][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.151708][ T9305] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 760.266648][ T9111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.275934][ T9111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.285161][ T9111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.294171][ T9111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.929891][ T9315] loop3: detected capacity change from 0 to 256 [ 761.161444][ T2515] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 761.375249][ T2515] usb 5-1: device descriptor read/64, error -71 [ 761.697808][ T2515] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 761.867198][ T9323] loop2: detected capacity change from 0 to 256 [ 761.944570][ T2515] usb 5-1: device descriptor read/64, error -71 [ 762.105469][ T2515] usb usb5-port1: attempt power cycle [ 762.585401][ T2515] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 762.709288][ T2515] usb 5-1: device descriptor read/8, error -71 [ 763.033087][ T2515] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 763.129357][ T2515] usb 5-1: device descriptor read/8, error -71 [ 763.337785][ T2515] usb usb5-port1: unable to enumerate USB device [ 763.536169][ T9336] input: syz1 as /devices/virtual/input/input20 [ 763.810853][ T7517] bridge_slave_1: left allmulticast mode [ 763.825487][ T7517] bridge_slave_1: left promiscuous mode [ 763.832116][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.936444][ T7517] bridge_slave_0: left allmulticast mode [ 763.942361][ T7517] bridge_slave_0: left promiscuous mode [ 763.949360][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.132432][ T7517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.176270][ T7517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.195387][ T7517] bond0 (unregistering): Released all slaves [ 765.773254][ T7517] tipc: Left network mode [ 765.814805][ T9344] loop3: detected capacity change from 0 to 2048 [ 766.415176][ T9360] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 766.459726][ T9359] netlink: 'syz.2.1045': attribute type 2 has an invalid length. [ 766.661681][ T7517] hsr_slave_0: left promiscuous mode [ 766.728888][ T7517] hsr_slave_1: left promiscuous mode [ 766.810141][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.818336][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.857537][ T9365] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 766.877851][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.886666][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.019254][ T9365] Remounting filesystem read-only [ 767.028376][ T9365] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 767.042420][ T9365] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 767.056202][ T9365] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 767.068891][ T9365] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 767.079201][ T9365] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 767.136141][ T7517] veth1_macvtap: left promiscuous mode [ 767.142029][ T7517] veth0_macvtap: left promiscuous mode [ 767.148106][ T7517] veth1_vlan: left promiscuous mode [ 767.153673][ T7517] veth0_vlan: left promiscuous mode [ 767.192743][ T9369] loop2: detected capacity change from 0 to 256 [ 767.200244][ T29] audit: type=1800 audit(1721636623.999:8): pid=9365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1041" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 768.568140][ T7517] team0 (unregistering): Port device team_slave_1 removed [ 768.670508][ T7517] team0 (unregistering): Port device team_slave_0 removed [ 768.924524][ T5102] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 769.279067][ T5102] usb 1-1: device descriptor read/64, error -71 [ 769.664569][ T5102] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 769.889651][ T5102] usb 1-1: device descriptor read/64, error -71 [ 770.352561][ T5102] usb usb1-port1: attempt power cycle [ 771.092296][ T5102] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 771.197596][ T5102] usb 1-1: device descriptor read/8, error -71 [ 771.469222][ T9407] netlink: 'syz.3.1057': attribute type 2 has an invalid length. [ 771.511403][ T5102] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 771.927134][ T5102] usb 1-1: device descriptor read/8, error -71 [ 772.077141][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.083933][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.123288][ T5102] usb usb1-port1: unable to enumerate USB device [ 772.794965][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.803052][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.041538][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.049950][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.467265][ T9417] loop3: detected capacity change from 0 to 2048 [ 773.801750][ T9430] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 774.328527][ T9438] input: syz1 as /devices/virtual/input/input21 [ 774.337079][ T9445] netlink: 'syz.1.1069': attribute type 2 has an invalid length. [ 774.509684][ T9444] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 774.589702][ T9444] Remounting filesystem read-only [ 774.595929][ T9444] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 774.606405][ T9444] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 774.618126][ T9444] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 774.629402][ T9444] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 774.639795][ T9444] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 774.664718][ T29] audit: type=1800 audit(1721636631.519:9): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1060" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 774.895949][ T5102] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 775.164704][ T5102] usb 3-1: device descriptor read/64, error -71 [ 775.498631][ T5102] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 775.709105][ T5102] usb 3-1: device descriptor read/64, error -71 [ 775.875804][ T5102] usb usb3-port1: attempt power cycle [ 776.344584][ T5102] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 776.420684][ T5102] usb 3-1: device descriptor read/8, error -71 [ 776.747987][ T5102] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 776.840541][ T5102] usb 3-1: device descriptor read/8, error -71 [ 777.010569][ T5102] usb usb3-port1: unable to enumerate USB device [ 778.285798][ T9485] netlink: 'syz.4.1081': attribute type 2 has an invalid length. [ 778.406534][ T9484] input: syz1 as /devices/virtual/input/input22 [ 779.948905][ T9490] loop0: detected capacity change from 0 to 2048 [ 780.008105][ T9501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.253627][ T9505] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 780.676497][ T9507] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 780.710188][ T9507] Remounting filesystem read-only [ 780.727436][ T9507] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 780.737676][ T9507] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 780.750678][ T9507] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 780.761865][ T9507] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 780.772152][ T9507] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 780.876570][ T29] audit: type=1800 audit(1721636637.729:10): pid=9507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1083" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 781.776398][ T9518] netlink: 900 bytes leftover after parsing attributes in process `syz.2.1091'. [ 783.131205][ T9532] input: syz1 as /devices/virtual/input/input23 [ 784.414601][ T9547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.345147][ T9550] loop3: detected capacity change from 0 to 2048 [ 785.604499][ T9555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 785.929006][ T9558] netlink: 900 bytes leftover after parsing attributes in process `syz.4.1105'. [ 786.098782][ T9561] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 786.170803][ T9561] Remounting filesystem read-only [ 786.177310][ T9561] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 786.187738][ T9561] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 786.199746][ T9561] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 786.210783][ T9561] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 786.224028][ T9561] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 786.298429][ T9561] syz.3.1102 (9561) used greatest stack depth: 4088 bytes left [ 786.373155][ T29] audit: type=1800 audit(1721636643.169:11): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1102" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 787.326271][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 787.335823][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 787.344973][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 787.379321][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 787.400418][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 787.409134][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 789.036119][ T9583] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 789.044537][ T9583] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1113'. [ 789.053811][ T9583] netlink: 9360 bytes leftover after parsing attributes in process `syz.2.1113'. [ 789.092133][ T9572] chnl_net:caif_netlink_parms(): no params data found [ 789.489128][ T9587] input: syz1 as /devices/virtual/input/input24 [ 789.574643][ T8028] Bluetooth: hci4: command tx timeout [ 790.388380][ T7520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.594895][ T7520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.891562][ T7520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.149568][ T7520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.684082][ T8028] Bluetooth: hci4: command tx timeout [ 791.866292][ T7520] bridge_slave_1: left allmulticast mode [ 791.872312][ T7520] bridge_slave_1: left promiscuous mode [ 791.887222][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.984588][ T7520] bridge_slave_0: left allmulticast mode [ 791.990507][ T7520] bridge_slave_0: left promiscuous mode [ 791.997445][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.771410][ T7520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.872811][ T7520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.936833][ T7520] bond0 (unregistering): Released all slaves [ 793.195446][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.203225][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.219586][ T9572] bridge_slave_0: entered allmulticast mode [ 793.230879][ T9572] bridge_slave_0: entered promiscuous mode [ 793.358235][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.366039][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.373855][ T9572] bridge_slave_1: entered allmulticast mode [ 793.383603][ T9572] bridge_slave_1: entered promiscuous mode [ 793.734629][ T8028] Bluetooth: hci4: command tx timeout [ 793.935036][ T9615] loop3: detected capacity change from 0 to 2048 [ 793.935870][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.105056][ T7520] hsr_slave_0: left promiscuous mode [ 794.167686][ T7520] hsr_slave_1: left promiscuous mode [ 794.206699][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.218473][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.279969][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.282121][ T9628] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 794.289319][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.461466][ T7520] veth1_macvtap: left promiscuous mode [ 794.467808][ T7520] veth0_macvtap: left promiscuous mode [ 794.473991][ T7520] veth1_vlan: left promiscuous mode [ 794.479929][ T7520] veth0_vlan: left promiscuous mode [ 794.878208][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.895791][ T9630] Remounting filesystem read-only [ 794.901980][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.912474][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.924358][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.935394][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.954029][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.984946][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.995327][ T9630] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 795.025131][ T29] audit: type=1800 audit(1721636651.879:12): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1118" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 795.537481][ T7520] team0 (unregistering): Port device team_slave_1 removed [ 795.637245][ T7520] team0 (unregistering): Port device team_slave_0 removed [ 795.814704][ T8028] Bluetooth: hci4: command tx timeout [ 795.962352][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.002322][ T9627] netlink: 'syz.2.1121': attribute type 2 has an invalid length. [ 796.401244][ T9572] team0: Port device team_slave_0 added [ 796.440089][ T9572] team0: Port device team_slave_1 added [ 796.573390][ T9635] loop2: detected capacity change from 0 to 64 [ 796.745870][ T9635] hfs: request for non-existent node 293 in B*Tree [ 796.752689][ T9635] hfs: request for non-existent node 293 in B*Tree [ 796.758374][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.759760][ T9635] hfs: get root inode failed [ 796.766648][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.803651][ T9572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.083499][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.091017][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.125188][ T9572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.029692][ T9572] hsr_slave_0: entered promiscuous mode [ 798.106211][ T9572] hsr_slave_1: entered promiscuous mode [ 798.154360][ T9572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.162087][ T9572] Cannot create hsr debugfs directory [ 798.377443][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 798.386970][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 798.396793][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 798.410643][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 798.422142][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 798.486123][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.714577][ T51] Bluetooth: hci3: command tx timeout [ 800.743389][ T9662] loop2: detected capacity change from 0 to 128 [ 800.760065][ T9662] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 800.946100][ T9572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 801.116629][ T9572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 801.251848][ T9645] chnl_net:caif_netlink_parms(): no params data found [ 801.331838][ T9572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 801.441084][ T9572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 802.248706][ T9680] netlink: 'syz.2.1133': attribute type 2 has an invalid length. [ 802.782216][ T51] Bluetooth: hci3: command tx timeout [ 803.008747][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.615239][ T9679] loop3: detected capacity change from 0 to 2048 [ 803.790762][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.798914][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.807009][ T9645] bridge_slave_0: entered allmulticast mode [ 803.816571][ T9645] bridge_slave_0: entered promiscuous mode [ 803.853295][ T9572] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.192225][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.200298][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.216897][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.224704][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.596962][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.604828][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.612710][ T9645] bridge_slave_1: entered allmulticast mode [ 804.625003][ T9645] bridge_slave_1: entered promiscuous mode [ 804.654998][ T9691] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 805.841310][ T51] Bluetooth: hci3: command tx timeout [ 806.394454][ T9645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.565194][ T9645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.250323][ T9645] team0: Port device team_slave_0 added [ 807.373270][ T9645] team0: Port device team_slave_1 added [ 807.902698][ T51] Bluetooth: hci3: command tx timeout [ 808.730911][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.738656][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.765420][ T9645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.954647][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.961921][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.994001][ T9645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.670485][ T9645] hsr_slave_0: entered promiscuous mode [ 809.756340][ T9645] hsr_slave_1: entered promiscuous mode [ 809.829110][ T9645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.837317][ T9645] Cannot create hsr debugfs directory [ 810.339980][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.687455][ T9736] netlink: 'syz.0.1143': attribute type 2 has an invalid length. [ 811.261042][ T9645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.349869][ T9572] veth0_vlan: entered promiscuous mode [ 811.512833][ T9645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.684088][ T9572] veth1_vlan: entered promiscuous mode [ 811.778779][ T9645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.021118][ T9645] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.049829][ C0] eth0: bad gso: type: 1, size: 1408 [ 812.452112][ T9572] veth0_macvtap: entered promiscuous mode [ 812.722689][ T9572] veth1_macvtap: entered promiscuous mode [ 812.896385][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.907527][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.917763][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.928568][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.940969][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.952260][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.962457][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.980078][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.991982][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.003115][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.013571][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.036268][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.054405][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.122499][ T9645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 813.213074][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.224627][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.235029][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.246070][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.259335][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.270579][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.287775][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.300758][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.311512][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.331394][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.342731][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.354578][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.370087][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.448586][ T9645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 813.546398][ T9645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 813.656128][ T9572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.665168][ T9572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.674037][ T9572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.683090][ T9572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.727221][ T9645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 815.526228][ T5111] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 815.785153][ T5111] usb 4-1: device descriptor read/64, error -71 [ 815.879826][ T9645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.115844][ T5111] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 816.254435][ T9645] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.366219][ T5111] usb 4-1: device descriptor read/64, error -71 [ 816.483086][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.490970][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.507045][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.514813][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.560490][ T5111] usb usb4-port1: attempt power cycle [ 816.885131][ T4369] bridge_slave_1: left allmulticast mode [ 816.891042][ T4369] bridge_slave_1: left promiscuous mode [ 816.898562][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.006477][ T4369] bridge_slave_0: left allmulticast mode [ 817.012380][ T4369] bridge_slave_0: left promiscuous mode [ 817.019222][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.029261][ T5111] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 817.154851][ T5111] usb 4-1: device descriptor read/8, error -71 [ 817.446092][ T5111] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 817.803909][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.866352][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.909806][ T5111] usb 4-1: device descriptor read/8, error -71 [ 817.955351][ T4369] bond0 (unregistering): Released all slaves [ 818.050691][ T5111] usb usb4-port1: unable to enumerate USB device [ 818.747394][ T9797] loop2: detected capacity change from 0 to 256 [ 818.758802][ T9797] exfat: Deprecated parameter 'namecase' [ 818.765135][ T9797] exfat: Deprecated parameter 'utf8' [ 818.813551][ T9797] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 819.104518][ T4369] hsr_slave_0: left promiscuous mode [ 819.156254][ T4369] hsr_slave_1: left promiscuous mode [ 819.196948][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.205510][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.276259][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.284133][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.394531][ T4369] veth1_macvtap: left promiscuous mode [ 819.400392][ T4369] veth0_macvtap: left promiscuous mode [ 819.406780][ T4369] veth1_vlan: left promiscuous mode [ 819.412439][ T4369] veth0_vlan: left promiscuous mode [ 820.505393][ T9812] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 820.576916][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 820.607098][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 820.755676][ T9812] [U] J"—e:ÀÆ" [ 822.275915][ T9645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.094694][ T8499] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 823.345811][ T5102] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 823.394977][ T8499] usb 1-1: device descriptor read/64, error -71 [ 823.729584][ T5102] usb 4-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 823.740974][ T8499] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 823.819451][ T5102] usb 4-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 823.832933][ T5102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.842654][ T5102] usb 4-1: Product: syz [ 823.847455][ T5102] usb 4-1: Manufacturer: syz [ 823.852293][ T5102] usb 4-1: SerialNumber: syz [ 823.944467][ T8499] usb 1-1: device descriptor read/64, error -71 [ 824.085921][ T8499] usb usb1-port1: attempt power cycle [ 824.239187][ T5102] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 824.246903][ T5102] dvb_usb_af9035 4-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 824.332030][ T5102] usb 4-1: USB disconnect, device number 11 [ 824.577545][ T8499] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 824.679845][ T8499] usb 1-1: device descriptor read/8, error -71 [ 825.032560][ T8499] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 825.077465][ T9862] tmpfs: Bad value for 'mpol' [ 825.103336][ T9645] veth0_vlan: entered promiscuous mode [ 825.119450][ T8499] usb 1-1: device descriptor read/8, error -71 [ 825.250402][ T9645] veth1_vlan: entered promiscuous mode [ 825.271426][ T8499] usb usb1-port1: unable to enumerate USB device [ 825.490034][ T7427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.499974][ T7427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.810977][ T9645] veth0_macvtap: entered promiscuous mode [ 825.921933][ T9645] veth1_macvtap: entered promiscuous mode [ 825.960042][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.968449][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.239868][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.251396][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.261672][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.272521][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.290006][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.302992][ T9867] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 826.311063][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.321709][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.332650][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.343622][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.354569][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.357699][ T9872] [U] J"—e:ÀÆ" [ 826.364777][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.379082][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.399100][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.595386][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.606668][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.616964][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.627782][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.637900][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.648908][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.659252][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.669956][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.680530][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.696411][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.708004][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.718777][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.732114][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.841384][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'. [ 826.852696][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1106'. [ 826.984007][ T9645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.993530][ T9645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.010423][ T9645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.024559][ T9645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.386788][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 827.645371][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 827.663583][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 827.676534][ T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 827.686369][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.748517][ T8] usb 2-1: config 0 descriptor?? [ 828.396691][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.407222][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.497437][ T8] hid (null): nested delimiters [ 828.502593][ T8] hid (null): nested delimiters [ 828.507920][ T8] hid (null): nested delimiters [ 828.514372][ T8] hid (null): unknown global tag 0x83 [ 828.555065][ T8] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 828.562805][ T8] hid-generic 0003:0158:0100.000C: unexpected long global item [ 828.668780][ T8] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 828.755907][ T9874] vlan2: entered promiscuous mode [ 829.096332][ T9902] tmpfs: Bad value for 'mpol' [ 829.302401][ T5102] usb 2-1: USB disconnect, device number 18 [ 829.534857][ T5111] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 829.638335][ T6322] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 829.786357][ T5111] usb 1-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 829.844552][ T6322] usb 3-1: device descriptor read/64, error -71 [ 829.858457][ T5111] usb 1-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 829.872222][ T5111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.882316][ T5111] usb 1-1: Product: syz [ 829.886843][ T5111] usb 1-1: Manufacturer: syz [ 829.891665][ T5111] usb 1-1: SerialNumber: syz [ 830.196088][ T6322] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 830.352917][ T5111] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 830.360042][ T5111] dvb_usb_af9035 1-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 830.395248][ T6322] usb 3-1: device descriptor read/64, error -71 [ 830.461369][ T5111] usb 1-1: USB disconnect, device number 17 [ 830.555694][ T6322] usb usb3-port1: attempt power cycle [ 831.044682][ T6322] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 831.117170][ T6322] usb 3-1: device descriptor read/8, error -71 [ 831.454723][ T6322] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 831.530413][ T6322] usb 3-1: device descriptor read/8, error -71 [ 831.594826][ T9924] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 831.679999][ T9927] [U] J"—e:ÀÆ" [ 831.694668][ T6322] usb usb3-port1: unable to enumerate USB device [ 832.200520][ C0] eth0: bad gso: type: 1, size: 1408 [ 832.757664][ T29] audit: type=1326 audit(1721636689.539:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.3.1190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3950b75b59 code=0x0 [ 832.808293][ T9944] tmpfs: Bad value for 'mpol' [ 833.167270][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 833.176720][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 833.517319][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.524008][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.585035][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 833.809832][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 833.848473][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 833.864517][ T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 833.873860][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.927158][ T8] usb 2-1: config 0 descriptor?? [ 834.489703][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.499704][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.560485][ T8] hid (null): nested delimiters [ 834.566216][ T8] hid (null): nested delimiters [ 834.571296][ T8] hid (null): nested delimiters [ 834.586225][ T8] hid (null): unknown global tag 0x83 [ 834.664649][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.672718][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.711011][ T9970] loop2: detected capacity change from 0 to 256 [ 834.735611][ T8] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 834.743344][ T8] hid-generic 0003:0158:0100.000D: unexpected long global item [ 834.764466][ T4502] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 834.857682][ T8] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 834.878916][ T9949] vlan2: entered promiscuous mode [ 835.015324][ T4502] usb 4-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 835.078032][ T4502] usb 4-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 835.091866][ T4502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.101642][ T4502] usb 4-1: Product: syz [ 835.106248][ T4502] usb 4-1: Manufacturer: syz [ 835.111079][ T4502] usb 4-1: SerialNumber: syz [ 835.154541][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.162701][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.554716][ T6322] usb 2-1: USB disconnect, device number 19 [ 835.811612][ T4502] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 835.818844][ T4502] dvb_usb_af9035 4-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 835.935735][ T4502] usb 4-1: USB disconnect, device number 12 [ 836.042894][ T9979] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1204'. [ 836.644761][ T9978] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 836.752666][ T9981] [U] J"—e:ÀÆ" [ 836.768730][ T9987] tmpfs: Bad value for 'mpol' [ 837.329446][ C0] eth0: bad gso: type: 1, size: 1408 [ 838.447227][T10004] loop3: detected capacity change from 0 to 256 [ 838.937596][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 838.947123][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 839.065335][T10015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1216'. [ 839.385425][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 839.648969][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 839.714468][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 839.726817][ T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 839.736390][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.817428][ T8] usb 2-1: config 0 descriptor?? [ 839.873962][ T5154] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 840.167708][ T5154] usb 5-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 840.242563][ T5154] usb 5-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 840.252176][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.260630][ T5154] usb 5-1: Product: syz [ 840.265175][ T5154] usb 5-1: Manufacturer: syz [ 840.269998][ T5154] usb 5-1: SerialNumber: syz [ 840.337959][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.348070][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.460098][ T8] hid (null): nested delimiters [ 840.466061][ T8] hid (null): nested delimiters [ 840.471248][ T8] hid (null): nested delimiters [ 840.477875][ T8] hid (null): unknown global tag 0x83 [ 840.660994][T10009] vlan2: entered promiscuous mode [ 840.708163][ T8] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 840.716348][ T8] hid-generic 0003:0158:0100.000E: unexpected long global item [ 840.766105][ T5154] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 840.772835][ T5154] dvb_usb_af9035 5-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 840.851226][ T8] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 840.874881][ T5154] usb 5-1: USB disconnect, device number 26 [ 841.195476][ T6322] usb 2-1: USB disconnect, device number 20 [ 842.064983][ T29] audit: type=1326 audit(1721636698.859:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff306175b59 code=0x7ffc0000 [ 842.087919][ T29] audit: type=1326 audit(1721636698.879:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ff306175b59 code=0x7ffc0000 [ 842.635429][T10040] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 842.851759][T10044] [U] J"—e:ÀÆ" [ 842.951297][T10052] loop1: detected capacity change from 0 to 256 [ 843.136930][T10054] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1230'. [ 843.603566][ C0] eth0: bad gso: type: 1, size: 1408 [ 843.831094][T10059] loop3: detected capacity change from 0 to 512 [ 844.456154][T10059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.469224][T10059] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.826049][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 844.835543][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1237'. [ 844.912234][T10059] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 845.027489][ T4502] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 845.263318][ T4502] usb 2-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 845.370594][ T4502] usb 2-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 845.380108][ T4502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.388678][ T4502] usb 2-1: Product: syz [ 845.393082][ T4502] usb 2-1: Manufacturer: syz [ 845.398024][ T4502] usb 2-1: SerialNumber: syz [ 845.464812][ T8013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.484667][ T6322] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 845.704904][ T6322] usb 3-1: Using ep0 maxpacket: 16 [ 845.725506][ T4502] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 845.732352][ T4502] dvb_usb_af9035 2-1:164.0: probe with driver dvb_usb_af9035 failed with error -22 [ 845.764595][ T6322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 845.776333][ T6322] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 845.786182][ T6322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.805431][ T4502] usb 2-1: USB disconnect, device number 21 [ 845.888045][ T6322] usb 3-1: config 0 descriptor?? [ 846.567443][ C0] eth0: bad gso: type: 1, size: 1408 [ 846.628204][T10083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.638138][T10083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.743815][ T6322] hid (null): nested delimiters [ 846.749092][ T6322] hid (null): nested delimiters [ 846.754359][ T6322] hid (null): nested delimiters [ 846.773676][ T6322] hid (null): unknown global tag 0x83 [ 846.910914][ T6322] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 846.918957][ T6322] hid-generic 0003:0158:0100.000F: unexpected long global item [ 846.957635][T10083] vlan2: entered promiscuous mode [ 847.042626][ T6322] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 847.167423][T10099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1243'. [ 847.444717][ T8] usb 3-1: USB disconnect, device number 28 [ 848.185116][T10106] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 848.435567][T10106] [U] J"—e:ÀÆ" [ 849.882249][ T8599] udevd[8599]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 852.480059][T10142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1257'. [ 853.241131][ C0] eth0: bad gso: type: 1, size: 1408 [ 853.292565][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 853.302482][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1260'. [ 853.865811][ T5154] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 853.903153][T10160] ===================================================== [ 853.911066][T10160] BUG: KMSAN: uninit-value in io_req_task_work_add_remote+0x588/0x5d0 [ 853.919745][T10160] io_req_task_work_add_remote+0x588/0x5d0 [ 853.926206][T10160] io_msg_ring+0x1c38/0x1ef0 [ 853.939115][T10160] io_issue_sqe+0x383/0x22c0 [ 853.943923][T10160] io_submit_sqes+0x1259/0x2f20 [ 853.951640][T10160] __se_sys_io_uring_enter+0x40c/0x3ca0 [ 853.957706][T10160] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 853.963481][T10160] x64_sys_call+0x2d82/0x3c10 [ 853.968568][T10160] do_syscall_64+0xcd/0x1e0 [ 853.973282][T10160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.989411][T10160] [ 853.991844][T10160] Uninit was created at: [ 853.999086][T10160] __alloc_pages_noprof+0x9d6/0xe70 [ 854.004768][T10160] allocate_slab+0x20a/0x1550 [ 854.009638][T10160] ___slab_alloc+0x12ef/0x35e0 [ 854.014870][T10160] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 854.021103][T10160] __io_alloc_req_refill+0x84/0x560 [ 854.027012][T10160] io_submit_sqes+0x171b/0x2f20 [ 854.040148][T10160] __se_sys_io_uring_enter+0x40c/0x3ca0 [ 854.048404][T10160] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 854.054164][T10160] x64_sys_call+0x2d82/0x3c10 [ 854.062189][T10160] do_syscall_64+0xcd/0x1e0 [ 854.067264][T10160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.073274][T10160] [ 854.076191][T10160] CPU: 1 PID: 10160 Comm: syz.0.1262 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 854.086168][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 854.096403][T10160] ===================================================== [ 854.103402][T10160] Disabling lock debugging due to kernel taint [ 854.109937][T10160] Kernel panic - not syncing: kmsan.panic set ... [ 854.116415][T10160] CPU: 1 PID: 10160 Comm: syz.0.1262 Tainted: G B 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 854.127896][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 854.138486][T10160] Call Trace: [ 854.141825][T10160] [ 854.144822][T10160] dump_stack_lvl+0x216/0x2d0 [ 854.149629][T10160] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 854.155599][T10160] dump_stack+0x1e/0x30 [ 854.159872][T10160] panic+0x4e2/0xcd0 [ 854.163889][T10160] ? kmsan_get_metadata+0xf1/0x1d0 [ 854.169152][T10160] kmsan_report+0x2d5/0x2e0 [ 854.173790][T10160] ? __msan_warning+0x95/0x120 [ 854.178672][T10160] ? io_req_task_work_add_remote+0x588/0x5d0 [ 854.184776][T10160] ? io_msg_ring+0x1c38/0x1ef0 [ 854.189658][T10160] ? io_issue_sqe+0x383/0x22c0 [ 854.194546][T10160] ? io_submit_sqes+0x1259/0x2f20 [ 854.199682][T10160] ? __se_sys_io_uring_enter+0x40c/0x3ca0 [ 854.205542][T10160] ? __x64_sys_io_uring_enter+0x11f/0x1a0 [ 854.211383][T10160] ? x64_sys_call+0x2d82/0x3c10 [ 854.216355][T10160] ? do_syscall_64+0xcd/0x1e0 [ 854.221142][T10160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.227307][T10160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.233502][T10160] ? mod_objcg_state+0x70e/0xe10 [ 854.238589][T10160] ? __memcg_slab_post_alloc_hook+0xbdd/0x1540 [ 854.244938][T10160] ? kmsan_get_metadata+0x146/0x1d0 [ 854.250269][T10160] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 854.256720][T10160] ? kmsan_get_metadata+0x146/0x1d0 [ 854.262050][T10160] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 854.267991][T10160] __msan_warning+0x95/0x120 [ 854.272695][T10160] io_req_task_work_add_remote+0x588/0x5d0 [ 854.278637][T10160] io_msg_ring+0x1c38/0x1ef0 [ 854.283353][T10160] ? __pfx_io_msg_ring+0x10/0x10 [ 854.288406][T10160] io_issue_sqe+0x383/0x22c0 [ 854.293117][T10160] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 854.299068][T10160] io_submit_sqes+0x1259/0x2f20 [ 854.304065][T10160] __se_sys_io_uring_enter+0x40c/0x3ca0 [ 854.309749][T10160] ? kmsan_get_metadata+0x146/0x1d0 [ 854.315086][T10160] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 854.321040][T10160] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 854.326891][T10160] x64_sys_call+0x2d82/0x3c10 [ 854.331682][T10160] do_syscall_64+0xcd/0x1e0 [ 854.336303][T10160] ? clear_bhb_loop+0x25/0x80 [ 854.341103][T10160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.347154][T10160] RIP: 0033:0x7fa620d75b59 [ 854.351654][T10160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.371372][T10160] RSP: 002b:00007fa621aeb048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 854.379887][T10160] RAX: ffffffffffffffda RBX: 00007fa620f05f60 RCX: 00007fa620d75b59 [ 854.387943][T10160] RDX: 0000000000000000 RSI: 0000000000000054 RDI: 0000000000000003 [ 854.395984][T10160] RBP: 00007fa620de4e5d R08: 0000000000000000 R09: 0000000000000000 [ 854.404025][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.412085][T10160] R13: 000000000000000b R14: 00007fa620f05f60 R15: 00007fff0ddc4018 [ 854.420154][T10160] [ 854.423353][T10160] Kernel Offset: disabled [ 854.427734][T10160] Rebooting in 86400 seconds..