last executing test programs: 46m47.863973202s ago: executing program 3 (id=741): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x1000005, 0x13, r2, 0xa51bd000) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 46m43.996967839s ago: executing program 3 (id=751): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xf, 0x80000000, 0x2, @loopback, @loopback, 0x10, 0x8, 0x0, 0x6}}) dup3(0xffffffffffffffff, r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fac0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x800}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) timer_settime(0x0, 0x1, 0x0, 0x0) 46m41.029159877s ago: executing program 3 (id=753): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 46m37.30397192s ago: executing program 3 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) 46m32.139264599s ago: executing program 3 (id=765): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap(&(0x7f000030f000/0x1000)=nil, 0x1000, 0x0, 0x97052, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, 0x0) 46m27.831138361s ago: executing program 3 (id=774): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000080)={0x0, 0xce2, 0x7c, 0x101, 0x8, 0x7, 0xffff0000}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x10) r4 = open(0x0, 0x442, 0x2) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000180)={0x1, 0x4}) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 46m12.46947218s ago: executing program 32 (id=774): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000080)={0x0, 0xce2, 0x7c, 0x101, 0x8, 0x7, 0xffff0000}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x10) r4 = open(0x0, 0x442, 0x2) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000180)={0x1, 0x4}) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 45m24.157288226s ago: executing program 1 (id=860): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x44}}, 0x0) setsockopt$llc_int(r4, 0x10c, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x787602, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40605414, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="0000000000000000000000000000000000000000ac5b4e28fc8bd354ac3fc8593570716708fdab16bd88f2f5c8ebcb5a8336dc5cde37a3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 45m15.719295772s ago: executing program 1 (id=874): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xc8a, 0x7, {}, {}, 0x8001, 0x3}) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000080)=""/124, 0x7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000002060108000000000000000000000040050001000600000005000500020000000500610a28d6fc9c2018020073797a31000000000c000780080012400000000011000300686173683a69702c6d61726b00000000304d9a65c21efb5b7ef423da10bcb3b1c01fa35e6f3971d2e114768573157e25ea3260906ea7775f31fa124a91578e0e718100098975"], 0x58}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r5, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000000)={0x402a, 0x10100002000001, 0x0, 0x80000000}) 45m14.049502s ago: executing program 1 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e00, @local}, 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa4481004c00080600012b0006340009012dfb4580c2000003ac141426ffffffffffff0a0101"], &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="3800000000000000000200000000181100004b4d803a", @ANYRES32=r6, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) r8 = timerfd_create(0x7, 0x0) timerfd_gettime(r8, &(0x7f0000001200)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x600, 0x1, 0x1, 'vcan0\x00', 'xfrm0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0x2}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 0x4, 0x8, {@mac=@random="15d197f069f5", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6bd, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$UI_SET_PROPBIT(r9, 0x4004556e, 0x16) 45m12.107137055s ago: executing program 1 (id=878): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x300a088, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000580)='\x00', 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=r4, @ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x50, 0x0}, 0x10) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r7, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000440), 0x1000a) sendfile(r7, r8, &(0x7f0000000000)=0x5, 0x20001) r9 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x50, 0x43]}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x8006, 0x8a, 0x0, 0x8001}) 45m10.920253864s ago: executing program 1 (id=883): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x2000, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x53, &(0x7f0000002180)=ANY=[@ANYBLOB="0180c20000030180c200000086dd60081f20001d3afffe8000000000000000000000000000bbff02da60c6e5dd41eda32b342926a86f0000000000000000000000000001860090780000fb8df558a658a7d0000000000200001885000000000000f0d8b39c361d1c0dc3f5d151ee2fdc7bc8361eed543f1eb98f817ade2f9adc85d78fa9437b49a540cc5b"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)={0x200e, 0x200f, 0xe, 0x5, 0x16d, 0x0}) sendfile(r0, r1, 0x0, 0x11000002) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x983a}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x133) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) stat(&(0x7f0000002140)='./file1\x00', &(0x7f00000020c0)) 45m8.206674006s ago: executing program 1 (id=887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x735c, &(0x7f0000000980)) 44m52.577874593s ago: executing program 33 (id=887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x735c, &(0x7f0000000980)) 44m52.553609786s ago: executing program 4 (id=909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x735c, &(0x7f0000000980)) 44m49.998389832s ago: executing program 4 (id=912): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) 44m49.062140226s ago: executing program 4 (id=916): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b6c, 0x11, r3, 0xffffd000) 44m47.941317598s ago: executing program 4 (id=918): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) 44m47.42162049s ago: executing program 4 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000080)=@xdp={0x2c, 0x3, 0x0, 0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="aac65a4a8d582eb23306fa1009eea9cac4731cc37e9cc85afc11b0ee33c4a7f9e88be7ce7f1409c560ff2c941a9d72e1d33b9845d2dce7c0b254246eca7a18d4bb47f9fb0f9e6f048ff9f1a5c8c52438c583cbf8fdfeae48aa4041a8a59246641d18fe611ec86935b970ca141267bb098ef966a89ff6dff078e4", 0x7a}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x210}, 0x4040804) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x5565, &(0x7f000000c100)="$eJzs3E1vG8UbAPCxk7T/Nv2XCHHg1kUVUiLVVpyXCm4BWvGaKipw4ASO7VhubG8UO07IqQeOiAPfBIHEiSOfgQNnbogDiBsSyDub0lcRETum6e8nrZ+d2dnHM6vE0bMbOQDPrLnk918L4XK4EEKYCiFcCiHbL+RbZi2GF0MIV0IIxfu2Qt5/r+NcCOFiCOHyMHnMWcgPfXltcHX1l3d+++6H89OzX3374+RWDUzayyGEzk7c3+/EmDZjvJP3VwetLHZWBnmMBzrbeTuNcb+xmWXYrx6Nq2ZxuRnHpzt7vWHcaldrw9hsbWX9O934hr1B8yhPdsKd6m7Wrjc2s9jqpVlsHsZ5HRzGz7bDXj/mqef5Ps3Sh37/KMb+xkEjrmdnO4u1bj/vj3nTeuNgGAd57KXZJ2iope16No/Nk13r/7CX3mt19w6SQWO310q7yWq58kq5cr1U2U3rjX5jpVTt1K+vJPPN9nBYqd+odtaaadpsN8q1tLOQzDdrtVKlkszfaGy2qt27lUp5ubxYWl1I4t615M1bHybtejI/jK+3unv9VruXbKW7STxjIVkqL7+6kFytJO+vbyQbt2/eXN/44OMbH916bf3tN/JBj0wrmV9aXFoqVRZLS5WFk12Aka4/GfP6P8snPcL1w4kUJj0BgKeP+h+YhPHV/7u3Q3i0/i+OuP4P463/47izX///2/r3/DHr39l/qH+n75/L4+rf4d9D9f/41g8nov4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhm/TTz9VvZzlxsz+b9/8+7ns/bhRBCMYTw52NMhXMP5JzK88w8YfzMQ3P4vhCyDMP3OJ9vF0MIa/n2x3PjvgoAAABwdn1z98oXsVqPL3PHOuvCmGfFKYk3bYqXPhlRvkIIYWbu5xFlKw5fXhhRsuznezocjChbdgPrfyNKFm+5TY8q27Fkv+7vxnBvJVkoxFB8+IyRrRYAAJiYqQfC6VYhAAAAnKbPn3hk+1TnwSkrhKNHmUfPgrP/vP/7Yd+F2PboDwAAAJ5ehUlPAAAAABi7rP73/X8AAABwtsXv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAvdu7lRm0gjAP4Z2MH8lJQlHtayQ3KSAk55hhRQJqgBNJCGqAGcksJK1jh8aL1in2wHoN29ftJ9mDL/D3D4zBj6QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjSv3o1//Pr6+++OdtdP3lGAwAAAByzqVfz5sU0Hb9vz39sT31uj4uIKCPi2Nx9FG86maM2p77n+vpOH/5GNAn7e4zb7V1EfEvbLj4N/SkAAADAq1Ttd+vFcpZm62k3vXSv6O2E7zAt2pQfvme6dRER9fR/prRyn/clU1jz+67iZ6a0ZgFrkiksLblVudKepPm7H1btJreaIjXlw+/PNnYAAOCMRp3mvLMQAAAAzunHpTvAEN4+ekURN48yD8apmXQiPOwDAACAl6u4dAcAAACAwTXz/1Pq/8Xxen7jTv2/Knv9v7hS/w8AAACeLdX/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEibejVfL5azvjnbXT95RgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzf68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczONq2Ka5Q9RETBg17sdltbexMPSvDgnyCEdFtjt/5oc7ClCLl4k5x7ET2KCEq89R/w1JvQQi/11sMeKojgZWVmZ7KTJujG4MyafD7w5n13M5n3fW8h5DtvEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6axon2aEziePivbuPbq5m/b3H+sztzftLWcviqM6k/x9eqL6Ius0lAgAAwNGRlPV9COFBurWc9XEnr//T8pys5v/6qUlc1vOP1/1lX9b+Wfvpx4fPbQ/UmYyTXfTi2nBwancqrf9ulvPt6X88o5WvfH7vJck/kPjdjWdHab6e0Zd37rzdzsNjdWQLAPwbJ8u+CMrfh7K+32RiABwZrUrhXdT/fySdhpMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqMFoIzxRxlEIYak1jTP3Ht1c3au/vXl/qWznbt3arF4zu0QaQri4NhycqnEu8+7a9RuXV4bDwdX6gxdDCE2N/mYx/cvvz3ByCI2sz98ECwdZuj/H4/G+vmthHqZ8gCAuPuwZTm7PS87NBw3+UAIA4FBKi5bV9Q/SreXsvWgxhPE3O+v/VypxmLH+f/jBubvVsar1f7+2Gc6/3vqVT3rXrt94be3KyqXBpcFHr5/uv9E/c/7s2fO9/F5Jzx0TAAAADqZdtGr9Hy/u3v8/UYnDjPX/p1/1P5+O9Et+VP/vNt30azoTAACAo+2Zl37/Ldrj/ajdDp+trK9f7U+O269PT44NpLpvx4pWrf+TxaazAgAAAOow2oh27P9fqMRhxv3/J799/vvqNZMQwvFi///k6sfDC/VNZ67V8efETc8RAACAZh0vWnX/P82f/4+3H3mIQwivvjyJi38DOFP9n7zzxXfVsZLK8/9n6pviXIq7k/XI+24Ire6OL//cWGIAAAAcSgtFy4r9X9Ot5Q9/OPFe2/P/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7KwAA//+5GTzU") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x62) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="fd21a663755bc8357c72fb10131f69a8bf2b3e937e3a15cf876ab949914872a22359e5b9160caab11547ec519464db0e52c6070bed1daeb95749d341946a0d069d2eb9ea9d1b31606a0166fca6c322767c423f99e643eafcadfa2c06"]) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r5, &(0x7f0000002c00)={0x2020}, 0x2020) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000042e3010a0000"], 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 44m45.959870697s ago: executing program 4 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r1 = socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x8, {0xffffffffffffffdf, 0x6, 0x20ff, 0x803, 0xf7c, 0x800000000000d615, 0x80003fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x1c}}, {0x0, 0x1f}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000640)={0x40002, 0x0, {[0xdaf, 0x5, 0x1, 0xffffffffffff335c, 0x8, 0x6, 0x4, 0x1]}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) 44m30.800973957s ago: executing program 34 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r1 = socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x8, {0xffffffffffffffdf, 0x6, 0x20ff, 0x803, 0xf7c, 0x800000000000d615, 0x80003fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x1c}}, {0x0, 0x1f}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000640)={0x40002, 0x0, {[0xdaf, 0x5, 0x1, 0xffffffffffff335c, 0x8, 0x6, 0x4, 0x1]}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) 24.534850904s ago: executing program 7 (id=19806): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 21.358465182s ago: executing program 7 (id=19824): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) epoll_create(0x10000) 20.058719952s ago: executing program 7 (id=19828): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 19.847257243s ago: executing program 7 (id=19830): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) 19.633271324s ago: executing program 7 (id=19831): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x8002]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x0, 0x4, 0xf, 0x9}, 0x20) 19.418943496s ago: executing program 7 (id=19833): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 7.608363538s ago: executing program 2 (id=19896): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f00000001c0), 0x0) 7.359541723s ago: executing program 2 (id=19898): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 7.116519898s ago: executing program 2 (id=19900): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 6.902294099s ago: executing program 2 (id=19902): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.317390118s ago: executing program 2 (id=19920): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 1.922545637s ago: executing program 2 (id=19931): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto(r4, 0x0, 0x0, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) 1.910604849s ago: executing program 0 (id=19932): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.643481956s ago: executing program 0 (id=19934): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r4, 0x0}]) 1.640233496s ago: executing program 6 (id=19935): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r6, 0x0, 0x0) 1.481423362s ago: executing program 5 (id=19936): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) 1.377437362s ago: executing program 6 (id=19937): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x16, 0x0, &(0x7f0000000180)) 1.312373119s ago: executing program 5 (id=19938): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f00000001c0), 0x0) 1.256844964s ago: executing program 0 (id=19939): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="05000000000000", @ANYRES32], 0x80}}, 0x0) 1.052976685s ago: executing program 6 (id=19940): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r4, 0x0, 0x0) 1.052348385s ago: executing program 0 (id=19941): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.034611016s ago: executing program 5 (id=19942): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x0) 824.824658ms ago: executing program 0 (id=19943): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = dup(r4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) 689.374381ms ago: executing program 5 (id=19944): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) write(r4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 688.827521ms ago: executing program 6 (id=19945): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 551.392545ms ago: executing program 0 (id=19946): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r6, 0x0, 0x0) 462.262754ms ago: executing program 5 (id=19947): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) 443.567886ms ago: executing program 6 (id=19948): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r4, 0x0}]) 93.336851ms ago: executing program 5 (id=19949): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x5, 0x20) 0s ago: executing program 6 (id=19950): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto(r5, 0x0, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) kernel console output (not intermixed with test programs): : Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2552.651003][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2552.715350][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2554.121608][ T9279] netlink: 68 bytes leftover after parsing attributes in process `syz.5.16020'. [ 2558.843180][ T9326] 9pnet_fd: Insufficient options for proto=fd [ 2566.280239][ T9414] netlink: 104 bytes leftover after parsing attributes in process `syz.6.16084'. [ 2566.936223][ T4379] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 2567.136016][ T4379] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2567.154280][ T4379] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2567.192349][ T4379] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 2567.201773][ T4379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.230069][ T4379] usb 3-1: config 0 descriptor?? [ 2567.235916][ T9428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2567.419662][ T9446] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16099'. [ 2567.474801][ T4379] usbhid 3-1:0.0: can't add hid device: -71 [ 2567.497112][ T4379] usbhid: probe of 3-1:0.0 failed with error -71 [ 2567.532112][ T4379] usb 3-1: USB disconnect, device number 8 [ 2571.956311][T12083] Bluetooth: hci4: command 0x0406 tx timeout [ 2573.610181][ T9540] netlink: 104 bytes leftover after parsing attributes in process `syz.5.16144'. [ 2583.887438][ T9757] netlink: 68 bytes leftover after parsing attributes in process `syz.6.16249'. [ 2584.880396][ T9784] netlink: 68 bytes leftover after parsing attributes in process `syz.7.16262'. [ 2590.361664][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2602.244611][T10078] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 2608.921088][T10203] 9pnet_fd: Insufficient options for proto=fd [ 2609.355579][ T27] audit: type=1326 audit(1763343030.054:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10213 comm="syz.6.16465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bab8f6c9 code=0x0 [ 2611.586157][T14156] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 2611.778014][T14156] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2611.798364][T14156] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2611.829184][T14156] usb 3-1: config 179 has no interface number 0 [ 2611.846402][T14156] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2611.886823][T14156] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2611.913810][T14156] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2611.933707][T14156] usb 3-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2611.957806][T14156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.227952][T26411] usb 3-1: USB disconnect, device number 9 [ 2613.046183][ T27] audit: type=1326 audit(1763343033.744:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.7.16510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac0518f6c9 code=0x0 [ 2615.600477][T10382] netlink: 68 bytes leftover after parsing attributes in process `syz.5.16543'. [ 2619.816687][T26785] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2619.963061][T12083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2619.964624][T26785] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2619.982985][T12083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2619.991433][T12083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2620.000638][T12083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2620.012824][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2620.020319][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2620.255848][T26785] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.394923][T26785] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.838784][T10523] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16609'. [ 2620.872113][T10503] chnl_net:caif_netlink_parms(): no params data found [ 2621.112365][ T27] audit: type=1326 audit(1763343041.814:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.6.16611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bab8f6c9 code=0x0 [ 2621.430075][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 2621.444952][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 2621.474266][T10503] device bridge_slave_0 entered promiscuous mode [ 2621.593048][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 2621.600691][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 2621.634108][T10503] device bridge_slave_1 entered promiscuous mode [ 2621.963644][T10503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2622.108980][T10503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2622.116324][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 2622.405306][T10503] team0: Port device team_slave_0 added [ 2622.437254][T10503] team0: Port device team_slave_1 added [ 2622.590518][T10503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2622.606264][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2622.706121][T10503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2622.824758][T10503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2622.842437][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2622.940122][T10503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2623.327421][T10503] device hsr_slave_0 entered promiscuous mode [ 2623.363732][T10503] device hsr_slave_1 entered promiscuous mode [ 2623.381148][T10503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2623.436256][T10503] Cannot create hsr debugfs directory [ 2623.794007][T26785] device hsr_slave_0 left promiscuous mode [ 2623.842723][T26785] device hsr_slave_1 left promiscuous mode [ 2623.856453][T26785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2623.879755][T26785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2623.910233][T26785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2623.942105][T26785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2623.983131][T26785] device bridge_slave_1 left promiscuous mode [ 2624.002901][T26785] bridge0: port 2(bridge_slave_1) entered disabled state [ 2624.011782][T26785] device bridge_slave_0 left promiscuous mode [ 2624.028646][T26785] bridge0: port 1(bridge_slave_0) entered disabled state [ 2624.090836][T26785] device veth1_macvtap left promiscuous mode [ 2624.106332][T26785] device veth0_macvtap left promiscuous mode [ 2624.148200][T26785] device veth1_vlan left promiscuous mode [ 2624.154072][T26785] device veth0_vlan left promiscuous mode [ 2624.196956][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 2626.276221][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 2626.515394][T26785] team0 (unregistering): Port device team_slave_1 removed [ 2626.698185][T26785] team0 (unregistering): Port device team_slave_0 removed [ 2626.872429][T26785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2627.065094][T26785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2628.362977][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 2629.129084][T26785] bond0 (unregistering): Released all slaves [ 2629.516801][T10622] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16648'. [ 2630.672390][T10503] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2630.745633][T10503] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2630.791392][T10503] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2630.850761][T10503] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2630.874068][ T27] audit: type=1326 audit(1763343051.574:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.2.16662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80c3f8f6c9 code=0x0 [ 2631.207008][T10503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2631.252328][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2631.281956][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2631.317368][T10503] 8021q: adding VLAN 0 to HW filter on device team0 [ 2631.351288][T26785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2631.370359][T26785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2631.416650][T26785] bridge0: port 1(bridge_slave_0) entered blocking state [ 2631.423858][T26785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2631.472679][T26785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2631.507356][T26785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2631.525149][T26785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2631.535089][T26785] bridge0: port 2(bridge_slave_1) entered blocking state [ 2631.542462][T26785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2631.592061][T26785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2631.619334][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2631.666459][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2631.704657][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2631.770719][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2631.808815][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2631.854762][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2631.903814][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2631.923023][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2631.970465][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2631.999855][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2632.037445][T10503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2632.581266][ T27] audit: type=1326 audit(1763343053.284:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.6.16675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bab8f6c9 code=0x0 [ 2633.042672][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2633.061874][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2633.105384][T10503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2634.483398][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2634.503170][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2634.562198][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2634.581295][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2634.620666][T10503] device veth0_vlan entered promiscuous mode [ 2634.638466][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2634.656689][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2634.700399][T10503] device veth1_vlan entered promiscuous mode [ 2634.799260][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2634.808510][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2634.828687][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2634.857862][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2634.897146][T10503] device veth0_macvtap entered promiscuous mode [ 2634.918265][T10503] device veth1_macvtap entered promiscuous mode [ 2634.971240][ T27] audit: type=1326 audit(1763343055.674:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10749 comm="syz.5.16687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2635.034381][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2635.083392][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.144571][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2635.165511][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.198656][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2635.229795][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.277501][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2635.308334][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.366131][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2635.402574][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.415545][T10761] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16690'. [ 2635.453304][T10503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2635.473024][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2635.494970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2635.504662][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2635.528404][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2635.549177][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2635.595434][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.636329][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2635.689345][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.746315][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2635.773583][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.812385][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2635.834361][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.883090][T10503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2635.915802][T10503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2635.974163][T10503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2636.006303][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2636.033486][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2636.071341][T10503] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.099145][T10503] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.129421][T10503] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.166109][T10503] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2636.438281][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2636.447401][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2636.507929][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2636.575275][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2636.606138][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2636.631433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2638.331545][ T27] audit: type=1326 audit(1763343059.034:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.0.16721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b79b8f6c9 code=0x0 [ 2643.936217][T31574] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 2644.137907][T31574] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2644.162632][T31574] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2644.193714][T31574] usb 8-1: config 179 has no interface number 0 [ 2644.219264][T31574] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2644.251350][T31574] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2644.305686][T31574] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2644.319775][T31574] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2644.350262][T31574] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2644.595582][T31574] usb 8-1: USB disconnect, device number 2 [ 2647.286091][T26411] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 2647.497866][T26411] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2647.516141][T26411] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2647.546083][T26411] usb 6-1: config 179 has no interface number 0 [ 2647.570461][T26411] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2647.601139][T26411] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2647.655543][T26411] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2647.664809][T26411] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2647.714933][T26411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2647.950547][ T6506] usb 6-1: USB disconnect, device number 5 [ 2650.936256][T26411] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 2651.134069][T26411] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2651.153842][T26411] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2651.183189][T26411] usb 8-1: config 179 has no interface number 0 [ 2651.193322][T26411] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2651.224328][T26411] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2651.270605][T26411] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2651.290325][T26411] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2651.324228][T26411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.567610][T14056] usb 8-1: USB disconnect, device number 3 [ 2651.800794][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.584269][T11142] 9pnet_fd: Insufficient options for proto=fd [ 2657.667601][T11246] 9pnet_fd: Insufficient options for proto=fd [ 2658.996233][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 2660.479561][T11304] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16941'. [ 2661.534263][ T27] audit: type=1326 audit(1763343082.234:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.7.16950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7aa78f6c9 code=0x0 [ 2661.747752][T11323] 9pnet_fd: Insufficient options for proto=fd [ 2661.966211][T11325] netlink: 68 bytes leftover after parsing attributes in process `syz.6.16953'. [ 2665.501267][T11372] 9pnet_fd: Insufficient options for proto=fd [ 2666.016201][ T129] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 2666.208220][ T129] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2666.230275][ T129] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2666.258568][ T129] usb 6-1: config 179 has no interface number 0 [ 2666.293394][ T129] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2666.325049][ T129] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2666.366856][ T129] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2666.384041][ T129] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2666.415272][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2666.672755][ T4379] usb 6-1: USB disconnect, device number 6 [ 2666.916146][ T27] audit: type=1326 audit(1763343087.614:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.7.16984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7aa78f6c9 code=0x0 [ 2667.023167][T11399] 9pnet_fd: Insufficient options for proto=fd [ 2668.249534][ T6506] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 2668.453937][ T6506] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2668.486206][ T6506] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2668.536300][ T6506] usb 8-1: config 179 has no interface number 0 [ 2668.562446][ T6506] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2668.583528][ T6506] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2668.613442][ T6506] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2668.640955][ T6506] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2668.666043][ T6506] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.904296][T14056] usb 8-1: USB disconnect, device number 4 [ 2669.372045][ T27] audit: type=1326 audit(1763343090.074:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.5.17032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2669.588943][T11499] 9pnet_fd: Insufficient options for proto=fd [ 2670.549269][T11529] 9pnet_fd: Insufficient options for proto=fd [ 2670.560795][ T4379] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 2670.758640][ T4379] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2670.778242][ T4379] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2670.812115][ T4379] usb 3-1: config 179 has no interface number 0 [ 2670.832371][ T4379] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2670.872186][ T4379] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2670.913467][ T4379] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2670.939085][ T4379] usb 3-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2670.970748][ T4379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2671.219426][ T4379] usb 3-1: USB disconnect, device number 10 [ 2672.374711][ T27] audit: type=1326 audit(1763343093.074:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.5.17066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2673.266110][T31574] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 2673.448081][T31574] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2673.468088][T31574] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2673.499048][T31574] usb 3-1: config 179 has no interface number 0 [ 2673.505406][T31574] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2673.556228][T31574] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2673.586186][T31574] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2673.593134][T31574] usb 3-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2673.621908][T31574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2673.872739][T31574] usb 3-1: USB disconnect, device number 11 [ 2676.276231][T31574] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2676.474285][T31574] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2676.492414][T31574] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2676.536101][T31574] usb 3-1: config 179 has no interface number 0 [ 2676.542457][T31574] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2676.579156][T31574] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2676.623117][T31574] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2676.666121][T31574] usb 3-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2676.675404][T31574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.941352][T31574] usb 3-1: USB disconnect, device number 12 [ 2680.352418][T11751] netlink: 120 bytes leftover after parsing attributes in process `syz.7.17156'. [ 2680.382384][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17156'. [ 2691.230268][T11879] netlink: 120 bytes leftover after parsing attributes in process `syz.2.17219'. [ 2691.260010][T11879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17219'. [ 2695.379218][T11930] netlink: 120 bytes leftover after parsing attributes in process `syz.7.17244'. [ 2695.426101][T11930] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17244'. [ 2702.772841][T12025] 9pnet_fd: Insufficient options for proto=fd [ 2706.146777][T12064] netlink: 120 bytes leftover after parsing attributes in process `syz.7.17306'. [ 2706.176244][T12064] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17306'. [ 2707.366211][ T4379] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 2707.558018][ T4379] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2707.586222][ T4379] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2707.616158][ T4379] usb 8-1: config 179 has no interface number 0 [ 2707.642874][ T4379] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2707.663291][ T4379] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2707.697593][ T4379] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2707.707723][ T4379] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2707.739327][ T4379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.998405][ T4379] usb 8-1: USB disconnect, device number 5 [ 2712.401770][T12141] netlink: 120 bytes leftover after parsing attributes in process `syz.6.17344'. [ 2712.451208][T12141] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17344'. [ 2713.240712][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2719.175574][T12201] netlink: 120 bytes leftover after parsing attributes in process `syz.7.17373'. [ 2719.216141][T12201] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17373'. [ 2728.039290][T12275] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17408'. [ 2739.136233][T12419] netlink: 68 bytes leftover after parsing attributes in process `syz.6.17474'. [ 2742.447678][T12483] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17504'. [ 2745.697200][ T27] audit: type=1326 audit(1763343166.404:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.6.17529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bab8f6c9 code=0x0 [ 2746.036237][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 2746.781197][ T27] audit: type=1326 audit(1763343167.484:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.7.17542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7aa78f6c9 code=0x0 [ 2748.891020][ T27] audit: type=1326 audit(1763343169.594:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12583 comm="syz.5.17554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2750.953895][ T27] audit: type=1326 audit(1763343171.654:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.5.17565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2753.326062][ T129] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 2753.544891][ T129] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2753.570957][ T129] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2753.606096][ T129] usb 8-1: config 179 has no interface number 0 [ 2753.632990][ T129] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2753.674128][ T129] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2753.712313][ T129] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2753.722516][ T129] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2753.759465][ T129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2754.006793][ T129] usb 8-1: USB disconnect, device number 6 [ 2756.376072][T14056] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 2756.577912][T14056] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2756.596008][T14056] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2756.626043][T14056] usb 6-1: config 179 has no interface number 0 [ 2756.632409][T14056] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2756.686232][T14056] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2756.716008][T14056] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2756.722969][T14056] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2756.766013][T14056] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.009404][T14056] usb 6-1: USB disconnect, device number 7 [ 2758.976252][ T4379] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 2759.167850][ T4379] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2759.187201][ T4379] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2759.218094][ T4379] usb 7-1: config 179 has no interface number 0 [ 2759.238736][ T4379] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2759.286125][ T4379] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2759.323645][ T4379] usb 7-1: config 179 interface 65 has no altsetting 0 [ 2759.346105][ T4379] usb 7-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2759.375666][ T4379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.604772][ T4379] usb 7-1: USB disconnect, device number 7 [ 2761.616237][ T4379] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 2761.808272][ T4379] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2761.828172][ T4379] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2761.860248][ T4379] usb 7-1: config 179 has no interface number 0 [ 2761.880615][ T4379] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2761.937404][ T4379] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2761.971976][ T4379] usb 7-1: config 179 interface 65 has no altsetting 0 [ 2761.996098][ T4379] usb 7-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2762.025844][ T4379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2762.263008][ T4379] usb 7-1: USB disconnect, device number 8 [ 2764.584696][ T27] audit: type=1326 audit(1763343185.284:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12806 comm="syz.0.17664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b79b8f6c9 code=0x0 [ 2767.132674][T12870] netlink: 120 bytes leftover after parsing attributes in process `syz.2.17697'. [ 2767.165489][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17697'. [ 2774.680950][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2788.098384][ T27] audit: type=1326 audit(1763343208.804:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.2.17841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80c3f8f6c9 code=0x0 [ 2789.023474][T13197] netlink: 120 bytes leftover after parsing attributes in process `syz.2.17851'. [ 2789.046139][T13197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17851'. [ 2790.916189][T26411] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 2791.146521][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2791.185566][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2791.188719][T26411] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2791.202725][T12083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2791.214488][T12083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2791.223131][T26411] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2791.233862][T12083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2791.244835][T12083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2791.251948][T26411] usb 7-1: config 179 has no interface number 0 [ 2791.258833][T26411] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2791.269381][T26411] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2791.283747][T26411] usb 7-1: config 179 interface 65 has no altsetting 0 [ 2791.291233][T26411] usb 7-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2791.301114][T26411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.501032][ T4366] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2791.526909][T31575] usb 7-1: USB disconnect, device number 9 [ 2791.639282][ T4366] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2791.745701][ T4366] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2791.898822][ T4366] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2792.184018][T13248] chnl_net:caif_netlink_parms(): no params data found [ 2792.659089][T13248] bridge0: port 1(bridge_slave_0) entered blocking state [ 2792.696128][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.745203][T13248] device bridge_slave_0 entered promiscuous mode [ 2792.924954][T13248] bridge0: port 2(bridge_slave_1) entered blocking state [ 2792.944939][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 2792.976597][T13248] device bridge_slave_1 entered promiscuous mode [ 2793.193795][T13248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2793.291022][T13248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2793.316369][T12083] Bluetooth: hci3: command 0x0409 tx timeout [ 2793.492647][T13248] team0: Port device team_slave_0 added [ 2793.625636][T13248] team0: Port device team_slave_1 added [ 2793.936934][T13248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2793.964324][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2794.043304][T13248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2794.131410][T13248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2794.147775][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2794.245420][T13248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2794.719262][T13248] device hsr_slave_0 entered promiscuous mode [ 2794.756603][T13248] device hsr_slave_1 entered promiscuous mode [ 2794.768376][T13248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2794.786288][T13248] Cannot create hsr debugfs directory [ 2795.110171][ T4366] device hsr_slave_0 left promiscuous mode [ 2795.126666][ T4366] device hsr_slave_1 left promiscuous mode [ 2795.146163][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2795.171423][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2795.196903][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2795.215198][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2795.244497][ T4366] device bridge_slave_1 left promiscuous mode [ 2795.261186][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.282658][ T4366] device bridge_slave_0 left promiscuous mode [ 2795.299323][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.404989][ T4366] device veth1_macvtap left promiscuous mode [ 2795.411157][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 2795.416403][ T4366] device veth0_macvtap left promiscuous mode [ 2795.434147][ T4366] device veth1_vlan left promiscuous mode [ 2795.444257][ T4366] device veth0_vlan left promiscuous mode [ 2795.456214][ T129] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 2795.650856][ T129] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2795.673306][ T129] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2795.700476][ T129] usb 7-1: config 179 has no interface number 0 [ 2795.748967][ T129] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2795.786001][ T129] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2795.822290][ T129] usb 7-1: config 179 interface 65 has no altsetting 0 [ 2795.836315][ T129] usb 7-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2795.845416][ T129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2796.108253][ T129] usb 7-1: USB disconnect, device number 10 [ 2797.486884][T12083] Bluetooth: hci3: command 0x040f tx timeout [ 2797.592691][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 2797.794937][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 2797.999291][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2798.260085][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2798.304228][ T27] audit: type=1326 audit(1763343219.004:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13325 comm="syz.5.17903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2798.827579][T14056] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 2799.057896][T14056] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2799.072530][T14056] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2799.100465][T14056] usb 6-1: config 179 has no interface number 0 [ 2799.116501][T14056] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2799.136155][T14056] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2799.166087][T14056] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2799.183326][T14056] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2799.203574][T14056] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2799.446121][T14056] usb 6-1: USB disconnect, device number 8 [ 2799.557902][T12083] Bluetooth: hci3: command 0x0419 tx timeout [ 2800.882233][ T4366] bond0 (unregistering): Released all slaves [ 2801.666534][ T6506] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 2801.857826][ T6506] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2801.872040][ T6506] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2801.926657][ T6506] usb 6-1: config 179 has no interface number 0 [ 2801.932996][ T6506] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2801.986236][ T6506] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2802.025999][ T6506] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2802.032946][ T6506] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2802.066194][ T6506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2802.315702][T14056] usb 6-1: USB disconnect, device number 9 [ 2802.474249][T13248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2802.533155][T13248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2802.592444][T13248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2802.613885][T13248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2802.818754][T13248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2802.885520][T20433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2802.905683][T20433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2802.939253][T13248] 8021q: adding VLAN 0 to HW filter on device team0 [ 2803.007680][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2803.047586][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2803.086749][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 2803.093904][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2803.139438][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2803.167605][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2803.206785][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 2803.213976][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2803.263296][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2803.299079][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2803.344234][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2803.399488][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2803.443497][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2803.466914][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2803.496828][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2803.513788][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2803.574386][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2803.593796][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2803.624565][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2803.646803][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2803.669282][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2804.467054][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2804.474585][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2804.508091][T13248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2804.546282][ T129] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 2804.572908][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2804.598229][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2804.640039][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2804.657424][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2804.689028][T13248] device veth0_vlan entered promiscuous mode [ 2804.707366][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2804.727366][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2804.751860][T13248] device veth1_vlan entered promiscuous mode [ 2804.761561][ T129] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2804.780008][ T129] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2804.816229][ T129] usb 6-1: config 179 has no interface number 0 [ 2804.835119][ T129] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2804.878555][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2804.888469][ T129] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2804.894489][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2804.936090][ T129] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2804.944837][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2804.974781][ T129] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2804.990520][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2805.024776][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.026253][T13248] device veth0_macvtap entered promiscuous mode [ 2805.079215][T13248] device veth1_macvtap entered promiscuous mode [ 2805.186472][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.216021][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.270442][ T4379] usb 6-1: USB disconnect, device number 10 [ 2805.271479][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.338475][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.349326][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.376228][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.412859][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.442934][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.476109][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.516108][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.543963][T13248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2805.574595][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2805.585391][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2805.626786][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2805.660381][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2805.700314][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.722959][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.742717][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.762697][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.773308][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.792169][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.804483][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.825720][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.870443][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.891603][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.921564][T13248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2805.950495][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2805.970274][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2806.003708][T13248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.023149][T13248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.050468][T13248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.081717][T13248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.313485][T26785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2806.350098][T26785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2806.401152][T26785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2806.424193][T26785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2806.453910][T26785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2806.512004][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2808.281019][T13511] netlink: 120 bytes leftover after parsing attributes in process `syz.5.17961'. [ 2808.306035][T13511] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17961'. [ 2809.700212][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2809.711679][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2809.721180][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2809.729234][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2809.737903][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2809.747494][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2810.372481][T13537] chnl_net:caif_netlink_parms(): no params data found [ 2810.924731][T13537] bridge0: port 1(bridge_slave_0) entered blocking state [ 2810.942355][T13537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2810.957432][T13537] device bridge_slave_0 entered promiscuous mode [ 2810.988092][T13537] bridge0: port 2(bridge_slave_1) entered blocking state [ 2811.016146][T13537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2811.047226][T13537] device bridge_slave_1 entered promiscuous mode [ 2811.129236][T13537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2811.185586][T13537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2811.404738][ T6593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.560855][T13537] team0: Port device team_slave_0 added [ 2811.650085][ T6593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.705174][T13537] team0: Port device team_slave_1 added [ 2811.800918][T13537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2811.809123][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 2811.833579][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2811.860683][T13537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2811.988020][ T6593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.011982][T13537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2812.026151][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2812.068506][T13537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2812.132778][ T6593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.257745][T13537] device hsr_slave_0 entered promiscuous mode [ 2812.278185][T13537] device hsr_slave_1 entered promiscuous mode [ 2812.296209][T13537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2812.305169][T13537] Cannot create hsr debugfs directory [ 2813.879119][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 2814.423514][ T6593] device hsr_slave_0 left promiscuous mode [ 2814.444453][ T6593] device hsr_slave_1 left promiscuous mode [ 2814.451724][T13614] netlink: 120 bytes leftover after parsing attributes in process `syz.5.17996'. [ 2814.486147][T13614] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17996'. [ 2814.495575][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2814.506046][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2814.520714][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2814.546099][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2814.566962][ T6593] device bridge_slave_1 left promiscuous mode [ 2814.573728][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 2814.607518][ T6593] device bridge_slave_0 left promiscuous mode [ 2814.613805][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 2814.732744][ T6593] device veth1_macvtap left promiscuous mode [ 2814.746128][ T6593] device veth0_macvtap left promiscuous mode [ 2814.754505][ T6593] device veth1_vlan left promiscuous mode [ 2814.760535][ T6593] device veth0_vlan left promiscuous mode [ 2815.274013][ T27] audit: type=1326 audit(1763343235.974:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13623 comm="syz.0.18002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84eb18f6c9 code=0x0 [ 2815.966403][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 2816.147299][ T27] audit: type=1326 audit(1763343236.854:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13647 comm="syz.5.18014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2816.226344][T25122] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 2816.435113][T25122] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2816.463897][T25122] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2816.494845][T25122] usb 8-1: config 179 has no interface number 0 [ 2816.510854][T25122] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2816.525442][T25122] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2816.563101][T25122] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2816.581549][T25122] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2816.602348][T25122] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2816.833125][T25122] usb 8-1: USB disconnect, device number 7 [ 2816.933154][ T6593] team0 (unregistering): Port device team_slave_1 removed [ 2817.097266][ T6593] team0 (unregistering): Port device team_slave_0 removed [ 2817.213849][ T27] audit: type=1326 audit(1763343237.914:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.0.18024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84eb18f6c9 code=0x0 [ 2817.277149][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2817.377288][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18025'. [ 2817.512180][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2818.036072][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 2819.402615][T25122] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 2819.617686][T25122] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2819.633950][T25122] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2819.654160][T25122] usb 7-1: config 179 has no interface number 0 [ 2819.671187][T25122] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2819.692606][T25122] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2819.720662][T25122] usb 7-1: config 179 interface 65 has no altsetting 0 [ 2819.736226][T25122] usb 7-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2819.755646][T25122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.888793][ T27] audit: type=1326 audit(1763343240.584:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.7.18041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7aa78f6c9 code=0x0 [ 2819.994028][T25122] usb 7-1: USB disconnect, device number 11 [ 2820.048036][ T6593] bond0 (unregistering): Released all slaves [ 2820.329732][T13537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2820.411522][T13537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2820.433550][T13537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2820.499351][T13537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2820.797072][T13537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2820.840392][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2820.877220][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2820.917905][T13537] 8021q: adding VLAN 0 to HW filter on device team0 [ 2820.969210][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2820.986778][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2821.026829][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 2821.034074][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2821.107949][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2821.133751][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2821.166380][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2821.196463][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 2821.203643][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2821.243117][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2821.291754][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2821.322773][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2821.375386][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2821.414421][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2821.437392][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2821.473741][T13537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2821.517175][T13537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2821.576638][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2821.585682][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2821.616848][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2821.629622][ T27] audit: type=1326 audit(1763343242.334:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.6.18052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bab8f6c9 code=0x0 [ 2821.637569][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2821.738683][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2821.786396][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2822.613795][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2822.630970][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2822.636141][T25122] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 2822.656716][T13537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2822.719491][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2822.743833][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2822.814197][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2822.830937][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2822.848123][T25122] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2822.872857][T25122] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2822.885564][T13537] device veth0_vlan entered promiscuous mode [ 2822.893509][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2822.908888][T25122] usb 6-1: config 179 has no interface number 0 [ 2822.916469][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2822.931525][T13537] device veth1_vlan entered promiscuous mode [ 2822.947429][T25122] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2822.975591][T25122] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2823.003803][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2823.021781][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2823.031963][T25122] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2823.044282][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2823.055855][T25122] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2823.072253][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2823.083191][T25122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.098892][T13537] device veth0_macvtap entered promiscuous mode [ 2823.142437][T13537] device veth1_macvtap entered promiscuous mode [ 2823.192411][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.205407][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.220031][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.236406][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.254317][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.265510][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.286870][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.304544][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.315153][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.342399][T31575] usb 6-1: USB disconnect, device number 11 [ 2823.376486][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.388308][T13537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2823.395659][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2823.427424][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2823.456734][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2823.503709][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2823.533639][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.554754][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.595702][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.635979][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.656156][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.680895][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.701778][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.722782][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.743861][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2823.764829][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.797757][T13537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2823.815114][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2823.851351][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2823.888774][T13537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2823.918116][T13537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2823.952586][T13537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2823.998188][T13537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2824.164612][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.203881][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.267958][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2824.302525][ T4777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2824.349469][ T4777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2824.390906][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2825.427591][T25122] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 2825.631337][T25122] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2825.656216][T25122] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2825.695985][T25122] usb 8-1: config 179 has no interface number 0 [ 2825.706367][T25122] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2825.752064][T25122] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2825.806556][T25122] usb 8-1: config 179 interface 65 has no altsetting 0 [ 2825.823837][T25122] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2825.852247][T25122] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2826.090285][T25122] usb 8-1: USB disconnect, device number 8 [ 2835.324737][T13980] netlink: 120 bytes leftover after parsing attributes in process `syz.6.18150'. [ 2835.354473][T13980] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18150'. [ 2836.079644][ T27] audit: type=1326 audit(1763343256.784:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13994 comm="syz.5.18169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f058f6c9 code=0x0 [ 2836.121807][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.830920][T14007] netlink: 120 bytes leftover after parsing attributes in process `syz.6.18175'. [ 2836.881032][T14007] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18175'. [ 2837.499272][ T27] audit: type=1326 audit(1763343258.204:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.6.18180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bab8f6c9 code=0x0 [ 2839.511463][T14050] netlink: 120 bytes leftover after parsing attributes in process `syz.7.18187'. [ 2839.546104][T14050] netlink: 32 bytes leftover after parsing attributes in process `syz.7.18187'. [ 2844.038938][T14120] netlink: 120 bytes leftover after parsing attributes in process `syz.0.18220'. [ 2844.076169][T14120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18220'. [ 2845.932322][T14170] netlink: 68 bytes leftover after parsing attributes in process `syz.7.18253'. [ 2855.123003][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2855.133524][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2855.142846][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2855.167133][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2855.180935][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2855.189309][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2855.407486][T26786] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2855.603992][T26786] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2855.817029][T26786] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.029261][T26786] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.175726][T14305] chnl_net:caif_netlink_parms(): no params data found [ 2856.544658][T14305] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.565114][T14305] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.594479][T14305] device bridge_slave_0 entered promiscuous mode [ 2856.623505][T14305] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.651122][T14305] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.692768][T14305] device bridge_slave_1 entered promiscuous mode [ 2856.930280][T14305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2857.066664][T14305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2857.257394][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 2857.300641][T14305] team0: Port device team_slave_0 added [ 2857.423964][T14305] team0: Port device team_slave_1 added [ 2857.633420][T14305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2857.642781][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.705559][T14305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2857.856748][T14305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2857.866795][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.963982][T14305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2858.047245][T14367] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18341'. [ 2858.280213][T14305] device hsr_slave_0 entered promiscuous mode [ 2858.336408][T14305] device hsr_slave_1 entered promiscuous mode [ 2858.366284][T14305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2858.373901][T14305] Cannot create hsr debugfs directory [ 2859.198286][T14391] 9p: Unknown access argument a: -22 [ 2859.250703][T26786] device hsr_slave_0 left promiscuous mode [ 2859.274210][T26786] device hsr_slave_1 left promiscuous mode [ 2859.304928][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2859.316825][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 2859.337471][T26786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2859.353421][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2859.401210][T26786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2859.448741][T26786] device bridge_slave_1 left promiscuous mode [ 2859.463608][T26786] bridge0: port 2(bridge_slave_1) entered disabled state [ 2859.480310][T26786] device bridge_slave_0 left promiscuous mode [ 2859.496235][T26786] bridge0: port 1(bridge_slave_0) entered disabled state [ 2859.666682][T26786] device veth1_macvtap left promiscuous mode [ 2859.672784][T26786] device veth0_macvtap left promiscuous mode [ 2859.713353][T26786] device veth1_vlan left promiscuous mode [ 2859.739816][T26786] device veth0_vlan left promiscuous mode [ 2860.573305][T14439] netlink: 68 bytes leftover after parsing attributes in process `syz.7.18369'. [ 2861.396719][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 2862.154869][T26786] team0 (unregistering): Port device team_slave_1 removed [ 2862.318586][T26786] team0 (unregistering): Port device team_slave_0 removed [ 2862.464190][T26786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2862.647663][T26786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2863.476299][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 2864.784949][T26786] bond0 (unregistering): Released all slaves [ 2866.103174][T14305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2866.159102][T14305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2866.192247][T14305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2866.274084][T14305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2866.562684][T14305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2866.624482][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2866.636719][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2866.669804][T14305] 8021q: adding VLAN 0 to HW filter on device team0 [ 2866.707074][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2866.724750][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2866.756802][T14561] bridge0: port 1(bridge_slave_0) entered blocking state [ 2866.763978][T14561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2866.805207][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2866.838015][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2866.859145][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2866.896570][T14561] bridge0: port 2(bridge_slave_1) entered blocking state [ 2866.903760][T14561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2866.956428][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2866.993862][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2867.034327][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2867.072256][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2867.097024][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2867.124768][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2867.225596][T14305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2867.257564][T14305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2867.302118][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2867.320474][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2867.356722][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2867.382832][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2867.412423][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2867.432036][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2868.310775][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2868.321891][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2868.368060][T14305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2869.590656][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2869.616954][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2869.692638][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2869.724921][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2869.763871][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2869.801068][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2869.842054][T14305] device veth0_vlan entered promiscuous mode [ 2869.889504][T14305] device veth1_vlan entered promiscuous mode [ 2869.996830][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2870.005875][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2870.015507][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2870.077547][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2870.100589][T14305] device veth0_macvtap entered promiscuous mode [ 2870.121209][T14305] device veth1_macvtap entered promiscuous mode [ 2870.177757][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2870.218446][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.248812][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2870.282752][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.313176][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2870.344220][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.374663][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2870.416541][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.446321][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2870.486075][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.520301][T14305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2870.547442][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2870.566330][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2870.596114][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2870.654838][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2870.694841][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.729374][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.786317][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.825958][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.835832][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.881868][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.919253][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2870.952444][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2870.993017][T14305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2871.024111][T14305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2871.056898][T14305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2871.067475][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2871.096764][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2871.178444][T14305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2871.205500][T14305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2871.234934][T14305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2871.245047][T14305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2871.504200][T26786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2871.572280][T26786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2871.644051][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2871.654309][T14561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2871.679735][T14561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2871.748034][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2878.486497][T14840] netlink: 120 bytes leftover after parsing attributes in process `syz.2.18475'. [ 2878.516253][T14840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18475'. [ 2882.743891][T14906] netlink: 120 bytes leftover after parsing attributes in process `syz.5.18513'. [ 2882.776154][T14906] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18513'. [ 2883.322447][ T4379] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 2883.496311][ T4379] usb 6-1: device descriptor read/64, error -71 [ 2883.765991][ T4379] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 2883.932090][ T4379] usb 6-1: device descriptor read/64, error -71 [ 2884.056394][ T4379] usb usb6-port1: attempt power cycle [ 2884.476161][ T4379] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 2884.526819][ T4379] usb 6-1: device descriptor read/8, error -71 [ 2884.796289][ T4379] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 2884.838288][ T4379] usb 6-1: device descriptor read/8, error -71 [ 2884.956377][ T4379] usb usb6-port1: unable to enumerate USB device [ 2885.118945][T14931] netlink: 120 bytes leftover after parsing attributes in process `syz.6.18526'. [ 2885.163932][T14931] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18526'. [ 2888.358424][ T4379] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 2888.564675][ T4379] usb 8-1: config 0 has no interfaces? [ 2888.594298][ T4379] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2888.625083][ T4379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.665577][ T4379] usb 8-1: config 0 descriptor?? [ 2888.837038][T14967] netlink: 120 bytes leftover after parsing attributes in process `syz.0.18542'. [ 2888.856112][T14967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18542'. [ 2888.875669][ T4379] usb 8-1: USB disconnect, device number 9 [ 2889.799396][T14992] netlink: 120 bytes leftover after parsing attributes in process `syz.6.18556'. [ 2889.836613][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18556'. [ 2890.243254][T15007] binder: 15006:15007 ioctl 4018620d 0 returned -22 [ 2890.952796][T15023] netlink: 120 bytes leftover after parsing attributes in process `syz.7.18572'. [ 2890.994467][T15023] netlink: 32 bytes leftover after parsing attributes in process `syz.7.18572'. [ 2892.172893][T15055] netlink: 120 bytes leftover after parsing attributes in process `syz.6.18587'. [ 2892.210245][T15055] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18587'. [ 2893.302803][T15078] netlink: 120 bytes leftover after parsing attributes in process `syz.5.18599'. [ 2893.353018][T15078] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18599'. [ 2897.561186][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.177509][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2898.188566][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2898.197664][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2898.207143][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2898.215645][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2898.223216][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2898.646053][T31574] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 2898.819241][T15158] chnl_net:caif_netlink_parms(): no params data found [ 2898.853776][T31574] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2898.876033][T31574] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2898.913246][T31574] usb 6-1: config 179 has no interface number 0 [ 2898.921054][T31574] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2898.956701][T31574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2899.190924][T31574] usb 6-1: USB disconnect, device number 16 [ 2899.211285][T15158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2899.240194][T15158] bridge0: port 1(bridge_slave_0) entered disabled state [ 2899.256109][T15158] device bridge_slave_0 entered promiscuous mode [ 2899.390431][T15158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2899.398965][T15158] bridge0: port 2(bridge_slave_1) entered disabled state [ 2899.416074][T15158] device bridge_slave_1 entered promiscuous mode [ 2899.480261][T15158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2899.534380][T15158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2899.653497][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.838855][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.902529][T15158] team0: Port device team_slave_0 added [ 2899.909207][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18643'. [ 2899.962449][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2900.022165][T15158] team0: Port device team_slave_1 added [ 2900.188813][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2900.219220][T15158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2900.230879][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2900.286083][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 2900.372658][T15158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2900.428241][T15158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2900.445616][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2900.573639][T15158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2900.824349][T15158] device hsr_slave_0 entered promiscuous mode [ 2900.847135][T15158] device hsr_slave_1 entered promiscuous mode [ 2900.861379][T15158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2900.876163][T15158] Cannot create hsr debugfs directory [ 2901.357285][T15203] netlink: 120 bytes leftover after parsing attributes in process `syz.0.18656'. [ 2901.377656][T15203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18656'. [ 2902.125792][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18662'. [ 2902.367531][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 2902.536027][T31575] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 2902.738151][T31575] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2902.756868][T31575] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2902.812950][T31575] usb 8-1: config 179 has no interface number 0 [ 2902.836424][T31575] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2902.883097][T31575] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.908769][T15158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2903.121292][T31575] usb 8-1: USB disconnect, device number 10 [ 2903.296180][T15158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2903.323991][T15158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2903.399091][T15158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2903.469515][ T51] device hsr_slave_0 left promiscuous mode [ 2903.496333][ T51] device hsr_slave_1 left promiscuous mode [ 2903.516266][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2903.523752][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2903.605134][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2903.618191][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2903.644041][ T51] device bridge_slave_1 left promiscuous mode [ 2903.669717][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.713487][ T51] device bridge_slave_0 left promiscuous mode [ 2903.736186][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 2903.848701][ T51] device veth1_macvtap left promiscuous mode [ 2903.854814][ T51] device veth0_macvtap left promiscuous mode [ 2903.896102][ T51] device veth1_vlan left promiscuous mode [ 2903.902007][ T51] device veth0_vlan left promiscuous mode [ 2904.446431][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 2904.956092][T26411] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 2905.178179][T26411] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2905.209966][T26411] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2905.225002][T26411] usb 8-1: config 179 has no interface number 0 [ 2905.231760][T26411] usb 8-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2905.252346][T26411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2905.310850][ T51] team0 (unregistering): Port device team_slave_1 removed [ 2905.410722][ T51] team0 (unregistering): Port device team_slave_0 removed [ 2905.423602][T15280] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18686'. [ 2905.495259][T26411] usb 8-1: USB disconnect, device number 11 [ 2905.527255][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2905.584522][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2906.154139][T15290] netlink: 120 bytes leftover after parsing attributes in process `syz.0.18691'. [ 2906.170893][T15290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18691'. [ 2906.455177][ T51] bond0 (unregistering): Released all slaves [ 2906.524805][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 2907.030528][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2907.101662][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2907.130509][T26786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2907.170249][T15158] 8021q: adding VLAN 0 to HW filter on device team0 [ 2907.209133][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2907.260070][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2907.289429][T14553] bridge0: port 1(bridge_slave_0) entered blocking state [ 2907.296667][T14553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2907.336555][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2907.362464][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2907.422779][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2907.451418][T14553] bridge0: port 2(bridge_slave_1) entered blocking state [ 2907.458687][T14553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2907.516043][ T14] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 2907.537402][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2907.577775][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2907.614139][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2907.651891][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2907.677320][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2907.704729][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2907.727642][ T14] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2907.756612][ T14] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2907.783925][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2907.792236][ T14] usb 6-1: config 179 has no interface number 0 [ 2907.835779][ T14] usb 6-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2907.871155][ T14] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2907.907214][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2907.915672][ T14] usb 6-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2907.946465][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2907.962228][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2907.976755][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2908.027847][T14553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2908.050424][T15158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2908.256665][T25122] usb 6-1: USB disconnect, device number 17 [ 2909.196271][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2909.204216][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2909.254988][T15158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2909.623308][T15360] netlink: 120 bytes leftover after parsing attributes in process `syz.5.18712'. [ 2909.674381][T15360] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18712'. [ 2910.389533][T14577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2910.417346][T14577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2910.480968][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2910.497076][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2910.529589][T15158] device veth0_vlan entered promiscuous mode [ 2910.553112][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2910.566737][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2910.601074][T15158] device veth1_vlan entered promiscuous mode [ 2910.679690][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2910.710101][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2910.749385][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2910.767227][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2910.809412][T15158] device veth0_macvtap entered promiscuous mode [ 2910.843475][T15158] device veth1_macvtap entered promiscuous mode [ 2910.898413][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2910.935939][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2910.945825][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2910.996274][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.026322][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2911.065982][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.075857][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2911.125936][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.156303][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2911.195968][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.230940][T15158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2911.249358][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2911.287066][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2911.305781][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2911.331725][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2911.354296][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2911.396053][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.439615][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2911.475943][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.485827][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2911.536003][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.575967][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2911.605938][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.615849][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2911.665981][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2911.706251][T15158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2911.714318][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2911.733230][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2911.770475][T15158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2911.796975][T15158] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2911.805735][T15158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2911.848824][T15158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2912.030701][T14540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2912.049223][T14540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2912.102661][T14553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2912.109613][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2912.123885][T14553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2912.156483][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2912.781502][T15402] netlink: 120 bytes leftover after parsing attributes in process `syz.6.18730'. [ 2912.825274][T15402] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18730'. [ 2914.996226][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 2918.225578][T15477] netlink: 120 bytes leftover after parsing attributes in process `syz.7.18768'. [ 2918.263596][T15477] netlink: 32 bytes leftover after parsing attributes in process `syz.7.18768'. [ 2918.584379][T15487] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18773'. [ 2924.295230][T15564] netlink: 120 bytes leftover after parsing attributes in process `syz.5.18810'. [ 2924.325052][T15564] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18810'. [ 2927.584571][T15609] netlink: 120 bytes leftover after parsing attributes in process `syz.5.18835'. [ 2927.606230][T15609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18835'. [ 2929.378540][T15641] netlink: 120 bytes leftover after parsing attributes in process `syz.0.18848'. [ 2929.408594][T15641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18848'. [ 2935.476013][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 2937.389021][T15788] netlink: 68 bytes leftover after parsing attributes in process `syz.6.18916'. [ 2938.880218][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18932'. [ 2939.858348][T15838] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18941'. [ 2941.099663][T15864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18955'. [ 2942.527481][T15891] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18968'. [ 2947.174016][T15982] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19012'. [ 2952.905296][T16040] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19039'. [ 2958.847015][T16129] netlink: 156 bytes leftover after parsing attributes in process `syz.5.19082'. [ 2959.016235][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2966.608366][T16218] netlink: 156 bytes leftover after parsing attributes in process `syz.7.19124'. [ 2968.887190][T16262] netlink: 156 bytes leftover after parsing attributes in process `syz.0.19146'. [ 2971.679816][T16302] netlink: 68 bytes leftover after parsing attributes in process `syz.7.19165'. [ 2973.746407][T16322] netlink: 120 bytes leftover after parsing attributes in process `syz.5.19174'. [ 2976.165380][T16359] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19193'. [ 2976.422447][T16366] netlink: 120 bytes leftover after parsing attributes in process `syz.0.19194'. [ 2981.189797][T16433] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19231'. [ 2981.555999][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 2982.542803][T16456] tap0: tun_chr_ioctl cmd 1074025672 [ 2982.565237][T16456] tap0: ignored: set checksum enabled [ 2982.566570][T16458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19240'. [ 2983.168372][T16472] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19247'. [ 2985.540544][T16503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19263'. [ 2985.771050][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19264'. [ 2986.355179][T16515] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19269'. [ 2987.647433][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19274'. [ 2990.484894][T16558] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19289'. [ 2990.966120][T31575] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2991.169000][T31575] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2991.199519][T31575] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2991.231326][T31575] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2991.265195][T31575] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2991.284803][T31575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.306334][T31575] usb 3-1: Product: syz [ 2991.315161][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19296'. [ 2991.334783][T31575] usb 3-1: Manufacturer: syz [ 2991.339811][T31575] usb 3-1: SerialNumber: syz [ 2991.782546][T31575] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 2991.804821][T31575] usb 3-1: No valid video chain found. [ 2991.845210][T31575] usb 3-1: USB disconnect, device number 13 [ 2992.708494][T16589] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19302'. [ 2993.285114][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19307'. [ 2993.573153][T16605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19309'. [ 2994.314539][T16620] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19316'. [ 2994.812837][T16626] tap0: tun_chr_ioctl cmd 1074025672 [ 2994.831662][T16626] tap0: ignored: set checksum enabled [ 2994.914032][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19321'. [ 2995.996000][T31574] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2996.195197][T31574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2996.233778][T31574] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2996.271955][T31574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.299526][T31574] usb 7-1: config 0 descriptor?? [ 2996.515346][T31574] usbhid 7-1:0.0: can't add hid device: -71 [ 2996.526106][T31574] usbhid: probe of 7-1:0.0 failed with error -71 [ 2996.567061][T31574] usb 7-1: USB disconnect, device number 12 [ 2996.878716][T16662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19336'. [ 2997.089993][T16664] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19337'. [ 3003.873251][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19407'. [ 3007.297192][T16866] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19435'. [ 3008.960937][T16901] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19452'. [ 3010.406099][ T14] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 3010.597935][ T14] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3010.629644][ T14] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3010.666084][ T14] usb 8-1: config 220 interface 0 has no altsetting 0 [ 3010.697188][ T14] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3010.725956][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3010.756308][ T14] usb 8-1: Product: syz [ 3010.760541][ T14] usb 8-1: Manufacturer: syz [ 3010.776016][ T14] usb 8-1: SerialNumber: syz [ 3010.832555][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19481'. [ 3011.016830][ T14] usb 8-1: Found UVC 0.00 device syz (8086:0b07) [ 3011.023276][ T14] usb 8-1: No valid video chain found. [ 3011.062743][ T14] usb 8-1: USB disconnect, device number 12 [ 3011.095244][T16962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19482'. [ 3014.705312][T17060] netlink: 68 bytes leftover after parsing attributes in process `syz.7.19531'. [ 3015.499305][T17080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19541'. [ 3015.743135][T17086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19544'. [ 3016.210665][T17096] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19550'. [ 3020.439708][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.743313][T17174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19589'. [ 3020.951325][T17181] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19593'. [ 3021.594407][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19601'. [ 3022.393998][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19616'. [ 3022.531075][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 3023.281891][T17258] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19630'. [ 3023.877415][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19640'. [ 3025.996104][ T4379] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3026.189786][ T4379] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3026.211956][ T4379] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3026.248319][ T4379] usb 3-1: config 220 interface 0 has no altsetting 0 [ 3026.278323][ T4379] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3026.308062][ T4379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3026.340286][ T4379] usb 3-1: Product: syz [ 3026.364963][ T4379] usb 3-1: Manufacturer: syz [ 3026.369952][ T4379] usb 3-1: SerialNumber: syz [ 3026.600368][ T4379] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 3026.621095][ T4379] usb 3-1: No valid video chain found. [ 3026.653228][ T4379] usb 3-1: USB disconnect, device number 14 [ 3030.469355][ T129] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 3030.511848][T17429] netlink: 68 bytes leftover after parsing attributes in process `syz.5.19714'. [ 3030.680139][ T129] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3030.706097][ T129] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3030.735751][ T129] usb 8-1: config 220 interface 0 has no altsetting 0 [ 3030.784024][ T129] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3030.819470][ T129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3030.842294][ T129] usb 8-1: Product: syz [ 3030.858638][ T129] usb 8-1: Manufacturer: syz [ 3030.863304][ T129] usb 8-1: SerialNumber: syz [ 3031.148197][ T129] usb 8-1: Found UVC 0.00 device syz (8086:0b07) [ 3031.154624][ T129] usb 8-1: No valid video chain found. [ 3031.211220][ T129] usb 8-1: USB disconnect, device number 13 [ 3031.306229][T31575] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 3031.497762][T31575] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3031.515980][T31575] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3031.535350][T31575] usb 7-1: config 220 interface 0 has no altsetting 0 [ 3031.568316][T31575] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3031.597947][T31575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3031.615924][T31575] usb 7-1: Product: syz [ 3031.626179][T31575] usb 7-1: Manufacturer: syz [ 3031.636205][T31575] usb 7-1: SerialNumber: syz [ 3031.874835][T31575] usb 7-1: Found UVC 0.00 device syz (8086:0b07) [ 3031.882595][T31575] usb 7-1: No valid video chain found. [ 3031.918125][T31575] usb 7-1: USB disconnect, device number 13 [ 3032.624177][T17449] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19726'. [ 3032.713252][T17453] 9pnet_fd: Insufficient options for proto=fd [ 3041.105120][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19776'. [ 3043.342880][T17596] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19797'. [ 3043.476080][T14056] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3043.667732][T14056] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3043.688420][T14056] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3043.718839][T14056] usb 3-1: config 220 interface 0 has no altsetting 0 [ 3043.742399][T14056] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3043.768206][T14056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3043.797490][T14056] usb 3-1: Product: syz [ 3043.801750][T14056] usb 3-1: Manufacturer: syz [ 3043.825916][T14056] usb 3-1: SerialNumber: syz [ 3044.260832][T14056] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 3044.285908][T14056] usb 3-1: No valid video chain found. [ 3044.312114][T14056] usb 3-1: USB disconnect, device number 15 [ 3044.890979][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19809'. [ 3050.614908][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3050.632665][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3050.652581][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3050.661044][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3050.669675][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3050.685381][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3050.826829][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3050.990499][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.104581][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.295015][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.428243][T17692] netlink: 'syz.2.19841': attribute type 16 has an invalid length. [ 3051.478828][T17692] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.19841'. [ 3051.755188][T17676] chnl_net:caif_netlink_parms(): no params data found [ 3052.268564][T17676] bridge0: port 1(bridge_slave_0) entered blocking state [ 3052.275790][T17676] bridge0: port 1(bridge_slave_0) entered disabled state [ 3052.311592][T17676] device bridge_slave_0 entered promiscuous mode [ 3052.416498][T17676] bridge0: port 2(bridge_slave_1) entered blocking state [ 3052.426063][T17676] bridge0: port 2(bridge_slave_1) entered disabled state [ 3052.475652][T17676] device bridge_slave_1 entered promiscuous mode [ 3052.741830][T17676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3052.756159][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 3052.914715][T17676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3053.152603][T17676] team0: Port device team_slave_0 added [ 3053.297753][T17676] team0: Port device team_slave_1 added [ 3053.521092][T17676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3053.528921][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3053.622482][T17676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3053.717515][T17676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3053.724545][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3053.823194][T17676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3054.168919][T17676] device hsr_slave_0 entered promiscuous mode [ 3054.188784][T17676] device hsr_slave_1 entered promiscuous mode [ 3054.680699][ T51] device hsr_slave_0 left promiscuous mode [ 3054.733677][ T51] device hsr_slave_1 left promiscuous mode [ 3054.756740][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3054.784386][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3054.813119][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3054.842719][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3054.852976][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 3054.902411][ T51] device bridge_slave_1 left promiscuous mode [ 3054.933512][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 3055.021792][ T51] device bridge_slave_0 left promiscuous mode [ 3055.037675][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 3055.201391][ T51] device veth1_macvtap left promiscuous mode [ 3055.226002][ T51] device veth0_macvtap left promiscuous mode [ 3055.246048][ T51] device veth1_vlan left promiscuous mode [ 3055.251941][ T51] device veth0_vlan left promiscuous mode [ 3056.916241][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 3057.346078][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19869'. [ 3058.141466][ T51] team0 (unregistering): Port device team_slave_1 removed [ 3058.404242][ T51] team0 (unregistering): Port device team_slave_0 removed [ 3058.728322][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3058.947967][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3059.004711][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 3061.738156][ T51] bond0 (unregistering): Released all slaves [ 3062.361853][T31575] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3062.561222][T31575] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3062.595437][T31575] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3062.645537][T31575] usb 6-1: config 220 interface 0 has no altsetting 0 [ 3062.679387][T31575] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3062.716264][T31575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3062.752252][T31575] usb 6-1: Product: syz [ 3062.770999][T31575] usb 6-1: Manufacturer: syz [ 3062.787911][T31575] usb 6-1: SerialNumber: syz [ 3063.030623][T31575] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 3063.039386][T31575] usb 6-1: No valid video chain found. [ 3063.064399][T31575] usb 6-1: USB disconnect, device number 18 [ 3063.403438][T17676] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3063.444217][T17676] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3063.474326][T17676] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3063.505512][T17676] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3063.855860][T17676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3063.920675][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3063.932986][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3063.957246][T17676] 8021q: adding VLAN 0 to HW filter on device team0 [ 3064.026075][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3064.066883][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3064.093847][T14561] bridge0: port 1(bridge_slave_0) entered blocking state [ 3064.101126][T14561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3064.146423][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3064.168959][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3064.216978][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3064.236921][T14561] bridge0: port 2(bridge_slave_1) entered blocking state [ 3064.244165][T14561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3064.316228][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3064.342382][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3064.386752][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3064.418611][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3064.455108][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3064.485450][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3064.505185][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3064.514722][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3064.549304][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3064.576307][ T6506] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 3064.592523][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3064.617430][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3064.655038][T17676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3064.779046][ T6506] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3064.819458][ T6506] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3064.866357][ T6506] usb 7-1: config 220 interface 0 has no altsetting 0 [ 3064.890748][ T6506] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3064.916272][ T6506] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3064.924342][ T6506] usb 7-1: Product: syz [ 3064.949927][ T6506] usb 7-1: Manufacturer: syz [ 3064.954599][ T6506] usb 7-1: SerialNumber: syz [ 3065.517580][ T6506] usb 7-1: Found UVC 0.00 device syz (8086:0b07) [ 3065.524012][ T6506] usb 7-1: No valid video chain found. [ 3065.584514][ T6506] usb 7-1: USB disconnect, device number 14 [ 3065.628846][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3065.640126][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3065.664236][T17676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3066.975617][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3066.999801][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3067.054048][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3067.070054][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3067.103367][T17676] device veth0_vlan entered promiscuous mode [ 3067.118789][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3067.164124][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3067.209893][T17676] device veth1_vlan entered promiscuous mode [ 3067.303906][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3067.326980][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3067.355467][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3067.406986][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3067.439505][T17676] device veth0_macvtap entered promiscuous mode [ 3067.462168][T17676] device veth1_macvtap entered promiscuous mode [ 3067.540903][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.585899][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.595784][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.661865][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.693378][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.735325][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.775944][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.796967][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.845969][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.886070][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.915281][T17676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3067.957382][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3067.986233][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3068.015810][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3068.065233][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3068.105048][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3068.135963][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.181231][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3068.235902][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.276008][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3068.315867][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.363581][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3068.386015][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.433644][T17676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3068.454746][T17676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.496003][T17676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3068.504670][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3068.527870][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3068.557762][T17676] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.582699][T17676] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.617501][T17676] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.636112][T17676] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.860739][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3068.912565][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3068.940037][T18005] mmap: syz.5.19949 (18005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3068.961077][T14540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3068.976002][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3068.998872][T18005] [ 3069.001259][T18005] ====================================================== [ 3069.003259][T14540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3069.008283][T18005] WARNING: possible circular locking dependency detected [ 3069.008300][T18005] syzkaller #0 Not tainted [ 3069.008311][T18005] ------------------------------------------------------ [ 3069.008317][T18005] syz.5.19949/18005 is trying to acquire lock: [ 3069.008329][T18005] ffff88805c721bd0 [ 3069.026067][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3069.027055][T18005] (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 3069.060888][T18005] [ 3069.060888][T18005] but task is already holding lock: [ 3069.068355][T18005] ffff88807e117958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 3069.078528][T18005] [ 3069.078528][T18005] which lock already depends on the new lock. [ 3069.078528][T18005] [ 3069.088957][T18005] [ 3069.088957][T18005] the existing dependency chain (in reverse order) is: [ 3069.097976][T18005] [ 3069.097976][T18005] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 3069.105733][T18005] down_read_killable+0x4c/0x340 [ 3069.111300][T18005] mmap_read_lock_killable+0x1d/0x60 [ 3069.117237][T18005] lock_mm_and_find_vma+0x2b1/0x2f0 [ 3069.123045][T18005] do_user_addr_fault+0x2db/0xb10 [ 3069.128722][T18005] exc_page_fault+0x60/0x100 [ 3069.133956][T18005] asm_exc_page_fault+0x22/0x30 [ 3069.139396][T18005] fault_in_readable+0x13e/0x1f0 [ 3069.144874][T18005] fault_in_iov_iter_readable+0xbb/0x2e0 [ 3069.151057][T18005] generic_perform_write+0x1d2/0x560 [ 3069.156941][T18005] __generic_file_write_iter+0x172/0x430 [ 3069.163114][T18005] generic_file_write_iter+0xab/0x2e0 [ 3069.169114][T18005] vfs_write+0x44c/0x960 [ 3069.173965][T18005] ksys_write+0x143/0x240 [ 3069.178830][T18005] do_syscall_64+0x4c/0xa0 [ 3069.183784][T18005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3069.190209][T18005] [ 3069.190209][T18005] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 3069.198913][T18005] __lock_acquire+0x2cf8/0x7c50 [ 3069.204409][T18005] lock_acquire+0x1b4/0x490 [ 3069.209446][T18005] down_write+0x36/0x60 [ 3069.214139][T18005] process_measurement+0x33c/0x1a10 [ 3069.219960][T18005] ima_file_mmap+0x104/0x150 [ 3069.225088][T18005] __se_sys_remap_file_pages+0x53e/0x770 [ 3069.231259][T18005] do_syscall_64+0x4c/0xa0 [ 3069.236204][T18005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3069.242628][T18005] [ 3069.242628][T18005] other info that might help us debug this: [ 3069.242628][T18005] [ 3069.252861][T18005] Possible unsafe locking scenario: [ 3069.252861][T18005] [ 3069.260318][T18005] CPU0 CPU1 [ 3069.266070][T18005] ---- ---- [ 3069.271440][T18005] lock(&mm->mmap_lock); [ 3069.275786][T18005] lock(&sb->s_type->i_mutex_key#12); [ 3069.283786][T18005] lock(&mm->mmap_lock); [ 3069.290650][T18005] lock(&sb->s_type->i_mutex_key#12); [ 3069.296214][T18005] [ 3069.296214][T18005] *** DEADLOCK *** [ 3069.296214][T18005] [ 3069.304451][T18005] 1 lock held by syz.5.19949/18005: [ 3069.309656][T18005] #0: ffff88807e117958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 3069.320126][T18005] [ 3069.320126][T18005] stack backtrace: [ 3069.326035][T18005] CPU: 0 PID: 18005 Comm: syz.5.19949 Not tainted syzkaller #0 [ 3069.333583][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3069.343659][T18005] Call Trace: [ 3069.346960][T18005] [ 3069.349902][T18005] dump_stack_lvl+0x168/0x22e [ 3069.354597][T18005] ? load_image+0x3b0/0x3b0 [ 3069.359140][T18005] ? show_regs_print_info+0x12/0x12 [ 3069.364353][T18005] ? print_circular_bug+0x12b/0x1a0 [ 3069.370267][T18005] check_noncircular+0x274/0x310 [ 3069.375229][T18005] ? add_chain_block+0x940/0x940 [ 3069.380366][T18005] ? lockdep_lock+0x141/0x1e0 [ 3069.385089][T18005] ? _find_first_zero_bit+0xcf/0x100 [ 3069.390464][T18005] __lock_acquire+0x2cf8/0x7c50 [ 3069.395375][T18005] ? ima_match_policy+0x104/0x2100 [ 3069.400504][T18005] ? verify_lock_unused+0x140/0x140 [ 3069.405722][T18005] ? ima_match_policy+0x207a/0x2100 [ 3069.410934][T18005] lock_acquire+0x1b4/0x490 [ 3069.415463][T18005] ? process_measurement+0x33c/0x1a10 [ 3069.420852][T18005] ? __might_sleep+0xd0/0xd0 [ 3069.425525][T18005] ? read_lock_is_recursive+0x10/0x10 [ 3069.430924][T18005] ? ima_get_action+0x71/0xa0 [ 3069.435619][T18005] down_write+0x36/0x60 [ 3069.439913][T18005] ? process_measurement+0x33c/0x1a10 [ 3069.445303][T18005] process_measurement+0x33c/0x1a10 [ 3069.450528][T18005] ? ima_file_mmap+0x150/0x150 [ 3069.455326][T18005] ? aa_file_perm+0x117/0xec0 [ 3069.460023][T18005] ? mtree_load+0xeb/0xa40 [ 3069.464476][T18005] ? mtree_load+0x90a/0xa40 [ 3069.468988][T18005] ? aa_get_current_label+0x110/0x1d0 [ 3069.474425][T18005] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 3069.480608][T18005] ima_file_mmap+0x104/0x150 [ 3069.485225][T18005] ? ima_file_free+0x3e0/0x3e0 [ 3069.490040][T18005] ? common_file_perm+0x171/0x1c0 [ 3069.495517][T18005] ? bpf_lsm_mmap_file+0x5/0x10 [ 3069.500455][T18005] ? security_mmap_file+0x11b/0x180 [ 3069.505731][T18005] __se_sys_remap_file_pages+0x53e/0x770 [ 3069.511390][T18005] ? __se_sys_futex+0x14a/0x440 [ 3069.516334][T18005] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 3069.522086][T18005] ? lock_chain_count+0x20/0x20 [ 3069.526960][T18005] ? lockdep_hardirqs_on+0x94/0x140 [ 3069.532178][T18005] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 3069.537927][T18005] do_syscall_64+0x4c/0xa0 [ 3069.542355][T18005] ? clear_bhb_loop+0x60/0xb0 [ 3069.547046][T18005] ? clear_bhb_loop+0x60/0xb0 [ 3069.551734][T18005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3069.557636][T18005] RIP: 0033:0x7fbf31f8f6c9 [ 3069.562080][T18005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3069.581705][T18005] RSP: 002b:00007fbf32eff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 3069.590167][T18005] RAX: ffffffffffffffda RBX: 00007fbf321e5fa0 RCX: 00007fbf31f8f6c9 [ 3069.598158][T18005] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000002000 [ 3069.606173][T18005] RBP: 00007fbf32011f91 R08: 0000000000000020 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3069.614153][T18005] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 3069.622138][T18005] R13: 00007fbf321e6038 R14: 00007fbf321e5fa0 R15: 00007fff2ef2f378 [ 3069.630167][T18005] [ 3070.604210][T14553] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3070.703585][T14553] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3071.040837][T14553] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3071.110819][T14553] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3071.989709][T14553] device hsr_slave_0 left promiscuous mode [ 3071.996376][T14553] device hsr_slave_1 left promiscuous mode [ 3072.003184][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3072.010714][T14553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3072.019963][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3072.027464][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3072.035187][T14553] device bridge_slave_1 left promiscuous mode [ 3072.041641][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3072.050254][T14553] device bridge_slave_0 left promiscuous mode [ 3072.057710][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3072.070205][T14553] device veth1_macvtap left promiscuous mode [ 3072.077431][T14553] device veth0_macvtap left promiscuous mode [ 3072.083626][T14553] device veth1_vlan left promiscuous mode [ 3072.090797][T14553] device veth0_vlan left promiscuous mode [ 3072.360482][T14553] team0 (unregistering): Port device team_slave_1 removed [ 3072.397516][T14553] team0 (unregistering): Port device team_slave_0 removed [ 3072.432342][T14553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3072.445678][T14553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3072.499626][T14553] bond0 (unregistering): Released all slaves [ 3072.988607][T14553] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.041014][T14553] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.080181][T14553] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.132629][T14553] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.216772][T14553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.270149][T14553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.311847][T14553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.361751][T14553] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.461605][T14553] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.510132][T14553] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.571139][T14553] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.632282][T14553] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.737376][T14553] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.780405][T14553] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.840466][T14553] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.882858][T14553] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3075.197526][T14553] device hsr_slave_0 left promiscuous mode [ 3075.203902][T14553] device hsr_slave_1 left promiscuous mode [ 3075.212838][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3075.221027][T14553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3075.230400][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3075.240473][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3075.249232][T14553] device bridge_slave_1 left promiscuous mode [ 3075.258024][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3075.266854][T14553] device bridge_slave_0 left promiscuous mode [ 3075.273101][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3075.286863][T14553] device hsr_slave_0 left promiscuous mode [ 3075.293198][T14553] device hsr_slave_1 left promiscuous mode [ 3075.301732][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3075.309440][T14553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3075.320072][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3075.328922][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3075.338672][T14553] device bridge_slave_1 left promiscuous mode [ 3075.344937][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3075.353866][T14553] device bridge_slave_0 left promiscuous mode [ 3075.361937][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3075.373523][T14553] device hsr_slave_0 left promiscuous mode [ 3075.381916][T14553] device hsr_slave_1 left promiscuous mode [ 3075.388615][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3075.398240][T14553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3075.406402][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3075.413844][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3075.423841][T14553] device bridge_slave_1 left promiscuous mode [ 3075.431116][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3075.443054][T14553] device bridge_slave_0 left promiscuous mode [ 3075.449528][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3075.464987][T14553] device hsr_slave_0 left promiscuous mode [ 3075.471650][T14553] device hsr_slave_1 left promiscuous mode [ 3075.480248][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3075.488019][T14553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3075.498338][T14553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3075.505792][T14553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3075.513860][T14553] device bridge_slave_1 left promiscuous mode [ 3075.522435][T14553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3075.531105][T14553] device bridge_slave_0 left promiscuous mode [ 3075.540329][T14553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3075.560524][T14553] device veth1_macvtap left promiscuous mode [ 3075.567282][T14553] device veth0_macvtap left promiscuous mode [ 3075.573401][T14553] device veth1_vlan left promiscuous mode [ 3075.581332][T14553] device veth0_vlan left promiscuous mode [ 3075.588455][T14553] device veth1_macvtap left promiscuous mode [ 3075.594516][T14553] device veth0_macvtap left promiscuous mode [ 3075.601310][T14553] device veth1_vlan left promiscuous mode [ 3075.607314][T14553] device veth0_vlan left promiscuous mode [ 3075.614173][T14553] device veth1_macvtap left promiscuous mode [ 3075.620532][T14553] device veth0_macvtap left promiscuous mode [ 3075.626641][T14553] device veth1_vlan left promiscuous mode [ 3075.632401][T14553] device veth0_vlan left promiscuous mode [ 3075.639474][T14553] device veth1_macvtap left promiscuous mode [ 3075.645487][T14553] device veth0_macvtap left promiscuous mode [ 3075.651918][T14553] device veth1_vlan left promiscuous mode [ 3075.657874][T14553] device veth0_vlan left promiscuous mode [ 3075.969406][T14553] team0 (unregistering): Port device team_slave_1 removed [ 3075.983354][T14553] team0 (unregistering): Port device team_slave_0 removed [ 3076.013839][T14553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3076.047045][T14553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3076.103236][T14553] bond0 (unregistering): Released all slaves [ 3076.186428][T14553] team0 (unregistering): Port device team_slave_1 removed [ 3076.225092][T14553] team0 (unregistering): Port device team_slave_0 removed [ 3076.254734][T14553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3076.289380][T14553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3076.344565][T14553] bond0 (unregistering): Released all slaves [ 3076.490796][T14553] team0 (unregistering): Port device team_slave_1 removed [ 3076.521524][T14553] team0 (unregistering): Port device team_slave_0 removed [ 3076.554029][T14553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3076.585321][T14553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3076.640510][T14553] bond0 (unregistering): Released all slaves [ 3076.744837][T14553] team0 (unregistering): Port device team_slave_1 removed [ 3076.756512][T14553] team0 (unregistering): Port device team_slave_0 removed [ 3076.786897][T14553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3076.820615][T14553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3076.873689][T14553] bond0 (unregistering): Released all slaves