last executing test programs: 9.165428525s ago: executing program 0 (id=562): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xfc9c, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.98330716s ago: executing program 2 (id=569): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000000380)="ec512a07a5be20b98ddcbcd01d94ffd2d44fa833c5e07e83daa7f005c41f484b8d68aaa3e475e224761d37ba63748d433712153262c6131ba1fafd1552a15a26439b6d55810eedbc1d9e9a64f36540345cd426088242d50843221bf832963f93aa80daa9744d0e01618f168690fadb838eb46a7f9a4eb2fd3c7998eb33a1ddc6b1c3bbdf1ef519a82edebc938e110639015489d3c9eb15e1767dcdb7b9be066af7090602e826e911a46fd307aff6627a14567eab82402b6a05be2204041674a84302ecd67cad8301620b6268f2fc0e9b9d292dcbe16396944d8bbb59c3dcb8d2bfa3aa36fbdb2ac66e0e73cc4740620642990856109b73cad5153af44ed1b1b5d310f72d3d26779084a2b4cf4d86d444fde1ee474e49a0cfe8c7480edd7121d6c3cbc28160e684e9b291956c9b09c98fa5c0146833d3ad5df911e9e76bc965c8ddcf6271e18d1046a6117c3b19a24d698baf3a581863e262ff3153a9bb8e7bb8f977eda5c3d481174629563028a2d7a797b3da7f36871439c5f5e470a84334793f92220185aee2a3a35d068b3eebd22b32c20b0d1a747239f6c203b27e6326a4e69119f89ac3cc5c9eab5b5d540b6f57c98d084e25a68a786ccee3e1169733874dedcea306bf75abb47cafff05addaa18345ce7a556869b447cec79d8f9953ea4c373270f1e029fe2d3d99227ef0df9c050946d8a0ce7f57c0f19ba62cf5d3dafa578e70c037503b945898bd1ecd7bafd85d81170737940631fa7822c2b8ff91d67f91de4e2b4ba35c69b9cfd2af50ed9ca029efa36d4b34cbd12a6f235c8db74d9c4e47d8d712d432f36331459718c8ea7eb70709814e85e93e4b2cbd98c13abab5b7df17381c703fbc02713dbb615007a1aab28642585cbe372e1a4f70ed65104257bff518ab8a57fdaf48e535866c8c54c485c798ca849ea172582d991215c7a0178c1c08318fd89126f718bf9882790d999b3a70cb107fb9a38ef4949f19d8a3367d9c33a7ec07825573dcf11bc13cb76d69f1b8bdb2244d68e2a0e3748c643f24ec6f6f119893036156ae96d3543ed60bfc5c07c19f7cfaf452e1855bd6a60b0c2efe8ae024c693f94b9d8f6fe831780311b1eca255fab65c9cd49376bfb2c433fdc48a39f71294626a1fd1549dbb044b7242e5bf982f18c37dac8b810f9046d725cace34b9423e9d72b08563cf5056f25ee34ba1e8e96de7b203f74cebd9e2abf42d8011d3279d0d99b292ddbf1ca9fd0529b707043887cadfe25e91241bca230b990b2b0aed54a3ca231900932524aa8a92a275a59c40e41a124afe633beec6a612d8df71951add8cfa7a039dc501f82feffe6b30c02c3ae185937791fa66b35d70bc871239d5eacc31cc3b36cdb2236d05b06d6de1ecf2fdb7116a5a535eb9f217d45c600f2bd9a7ce720ea64e6f4d3f61e2a8075b96b6dfbad53bb9e657cea5bf2963604bd757495e50dd2463ae5a31d489034cf3aa750fe2d017bcd5001c09d0269756d2aab5624aae34f905803f89662e3f80c5d931f20472bba0d4ee753c526be4ecd6c83a416d8b278619d71f77f34a25f4abdee4ca6783605d27dfc6b39633873640812b06807fa624495af9b22cc28743cda0c0d051b124b43fad884b31745b646ef1579d8e334c2dc544bac778e43ff6db18c3c727b1d04d30736c8362a577a898007229b22a13e8e1f3f5cf27615dc9afe1479a25bcb5be527ce00f670c6fabecc29d779ce6e37e33a41939a0c819464a68ef3a3d1e314c7824711885b03ac46a9135d8333d7df6af18e4808be258fa0282830640e088d54665fc694892718198818ece9e5257b4c780f309158b39e21aef664cdefd69b5c89a2cf6657c750acf481d5100fe92537443690dc28dd8bca43a8d5645be3a9839296daef977c6d3842730e088d7c7fa76e0ead144140b60e6cb1b1cc7c962ce9225061d02d46eec87a429825ad66b92d62af0779f388982ec9c1eff99f63e59e97d58bd3d65b999d82f0ae0a2a54fdfb88a20cb30f00d8b7c316e03281042dc749c6a8595ac9e8234798a744c8a8021a322d24fce048d601680b27521fe16ecca8de8235039358567bd7af92d037cd16750820ac76f11a732b7a280d52e0bff4856afb344cbd3069aee3313533db2567023af04bbfb56d7054eac472231a1b9e575bef7586b53ed15df0e7e81447d4dd73f95ec68b4c232add263136215e4511a7ade63c69d9e73b705bb97181a343768eb0731a7d2e957f7c145d4626b59e6b12d3681e11eeee7e77de25bc8546589088669ce91a17f216a3a06eab5c491ad514585aafaa77556383e15796ca4edc67dec56dba705206196fcb40c5371934193f234c19e368f5b2ca2ff68aecef043d92907beeb7de67e720a220f525d4624cd2dc7733715dce454b773dc8f50965bb493145dcfbba149601944f2f7ade8a8006ad66882563acee2418733f5c7235f47c33f14e5d77d0225278dccab51b7bb7ff09bb37f23d47f99895431b3215bd044031d289884c2af1f5eb55ac4248ae2cadda611aa32a3efd777785e71361983addb45e659b63403cf5c7a343b3702d0cab84efdf9d75faff54a4a00fa469418f634b37e2cdfe3e9dba73ff8b64966ac5cd9048de2e29754e82c9a7812e06108fe96aec1643a19f16a6b84233b512aacee05efb260022217a3f809a53d0d78582d454e9b35348a8f459e8bf376d65ab561a9e3bb571d10efaab44eb50be5c40784fc00f64e76f23396b9f94526e866296d47d80036b2506aa5a3eaabe61a57bc04b7fe0b874275c3af6fd33aa5f21e2881bab116313ea728ee8a9b9ec96240bfd3f0e176a00bd8276b0041212a34210ddda0817d7a9e70553230072f72fa316f469fbbcca38cae51b0088d7d41f5fed06cae88b3d43606f629a9d202e545452e059c2c75153893ba708aed995d8723e31095fe95208e3b9bc04a56a737b8086a204cc2166d0a7e926698cb202e0545dd6ea5e7f849ffe57ed80eba933568a0d7d00bdec08839b99da29573bcaab39a477ebd8d072db8272ed178e90567b99f01eb84f157662335d0ea060c6cbb225f93d20ca81438d4a742940135a30daa0ec2a169db8b8e417507b1f089b12064cb7635ba7ee2153d5edab17814c2998c716fafd71569a2b5d4baa5ac8da06f77c7a9018a62f9b3fd99ae01c5e840df93b99b15d795581c52a03e25a296ef0f5ca4d3b207b17fac306705ca6a69efef1a77fb36e45e6dfa611de360543f5a8db81eff9c0d12f2e18070020924e41dcdd851b263800c576e757f66106d9cc9b0ceed4698db05afcc500676fbf7bde26181e76aa74faae46d9d9161c34d1601f9ee74885abc0041394189171bbbc97e428ad689e08cce7f7c0bae04dc8d697eb7c04b6ab4761d88f32c2890141bf3e5f3c3364722c4a3e6bd62bbf78b4bad253d698969b93a81ea2fc6d32a1a340706b2503a55c7868ad4f31bbe83e9d4faeced74576a9ca5f6be6d26955d344b699b91826dca0ce37ce21c2e2fc845359c5013c33860749f89766cc4cd78b2af52cbade7d0f5ef5025972e3d8ddf4c8cb85f1639491a45f993ec752c424af27357a2d4d46428d0b2fe00f69f64febec3b08fd85644e5420ee595204bccc3864aff2574e57522b79b199a3557432071dd5e8a0fec00d26d14963e96169e6df0ac0c652cf08dc0367951a6bba47871763d19e716828ec50b29cd2583ddf3c391cb7d89fc2a5eba281688a3cee7933a1fa9380b74405a4237683fa3b58202d7aeaf904fc3fdee5007e0ec33c086e6981a01b5506d16a747dc215ac475f9fe7b41e1f3e5dd45d4a9b67c50eef5ae5839c2e654350cf72da8fbae7ed4d4d99a9692a36730548d4b27757b657ef726c338f3a808134f2bc9eb879aeba99b445d00412f3b0309b2c524e566f7f09aa194b87fbf1b0ded0c7aa20197645d6cd57f22e18230c60925fcea832084222dea34f33a7c247806a04a99e24f95143e55791577d385491b4ac5f4bd5778874bf506717014eb6f9d3c8e77ac1995cc97cf0544e55a1d3e1ec88716aa026cb3903654c310879b1bc1d0c43fc7e8f9fed622a942dce02c08028e7dc5aa6997c886a1c15318d0260a411a29fac83a096a243fea9c5f04c606e3c6f3bdc243c0ae1835e912454a78401db043862c0c90b883c7fce290d8e416d155814f978605c761065ac1c958e3edd351ce2e66b6bd89307fc674f58c6496bfe2800e35c92efadf83de7624fc221ff09ff8ff9e920358aa20b7d853e68dfbd78672ecb02b80a90c563ce84cef54786d921c7e5e675126b66dccafed86c5cd5d276242298c6c58792a5968f6db6e1d3a618f99907adff148c348693fa318b6fa736a577d5f32b2426d1ebf4b1324980d54ab3a9346cee44b196db921c2e098566d327ec7d2b1c30925af52d19eb9347768e3cd0f3eeee2dfd281473767296ff025f995f2c6e9f09e3a2168058c6f045f4674c0d48fffb7135264489e18f69aefb63de196e2d53ec2675f5c79bd8fd5f2e49860d2598156c4b7a2dabf51b0a531aa717a007eb34b5dfb38731fa9bffa99601a8c7964ab89a555c9ec8d46e1df17310cf644ef5a8c71c3b9e61d2d98d9d71925b777756ce37de25b8d25b44be51cdef0ffe08bc6c4df91b9d2d90837fb127ecd4f0d0aeff6a20ad27dca40d432be413cd3faaf5546d40ea78f9542bbd2c48bd05df1a760413113c1eb0c5d0bc3aa86890414f6f8d6180cfb3b1148b767e2c45ff1f16808cdf7a06e60ee87162d4bd27890a08a376885e0d1ec783cd0cda5d11034152b301d99884790d40164c359745367ee94601ccd14c6bcc35cdf300f3abedbe488da28461850983c8ad68b4e253a31184c164aac19c3d45d898794d77e2eeafa2bae6d0ec7ac45b696fbad9e79fa43623f0d128d197bb2615a6d7176f6ea3863fa7d896e073d15534bb2c1891726c4f6102c322a67a8e2bcb35023fa412cd5314d5a7ecb5c5f19eae3347c9fcbd7e8fb3723851966f5a0d89ef568965f651d0c7044498bdc7349aabe1f095093ce64d613d151fcfdcc9bd5ad2da7848d70a389b83886c59a839c1bfad97bb5459906261fa240c40f8ae5e82e7cfb62a3852797174fa3f6d0e44e229e438eee55b1101d721115233389ba4f42ff84c06851d7f7f1b1edd55190be723d0a2df5081439c08284a948f2f13d6b431f9f25e80de3e1cd85a9df167d065fdc12daa479913c3a163a1c9664d79bab6023e4e0f95fce78e63061631ad2e5973d22de0109fcf5bdabefb892be1a7ee370cb731581470a815121ece50e61b21a8bc95d976f8cddfe4cea1cc48f7043a1c3501208fdd7fa53f5c83f848eaf47fbb34e40da3822c3b7068c1ce52ab8d8d67ab92660382ca9427d8ee83cbc40b4f18843271307da659bbfbba145c45093f36ab9b86a6b2047c9819c77a6c6e959e1b78c45d99183b592e444aa497f81a0cab4d3b094dafd107b930320221f9daf9a331499da53a266b35edc2e35b0a3be575a99560cbca4bf1a0d68b31ff5b153fa2375bec5fd3b4c864d3886fc7ce026002e10ceb9c66505e020c4b5bd0adefd9b7706ca26aeed21d9daa39eb5db528f4e1743f59f036b82a443e332bd04c4c522c28e6fb7598a0059af4eb64235064a21670bc8b0113e1221edc98840d94eef7f483424e868e8359ee26eef01acca250ffabbd997554b7065d87531341427acce784f9f37422fef466940755948630dd1824726be08231dee65749be492706f6fd22757a05b7b8fe84f901b02b86ea20e5ff9ba1efe403d", 0x1000}], 0x2}, 0x40000) 7.586294716s ago: executing program 1 (id=572): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4}}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000e80)=ANY=[@ANYBLOB="120100006fb68440e11d02c1087d0302030109021b000200000000090400000043da91000904b3"], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x3c}}, 0x0) 6.887885556s ago: executing program 2 (id=573): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x1000000000000, 0x0, 0xffffffffffffffff) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sched_setaffinity(0x0, 0x0, 0x0) 5.654292952s ago: executing program 2 (id=575): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x2, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000180)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write(r1, &(0x7f0000000240), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x1502, &(0x7f0000003fc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(0x0, 0x14927e, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="140406000000", 0xfffffffffffffffd, 0x104000, 0xc, 0x1, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x7000098, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4.768255264s ago: executing program 3 (id=578): syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') fanotify_init(0x1, 0x101000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_open_dev$sndmidi(&(0x7f0000000000), 0x3, 0x40) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.547928417s ago: executing program 0 (id=580): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1}}, 0x18) 3.872023447s ago: executing program 0 (id=581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) 3.868633097s ago: executing program 3 (id=582): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r4, 0x25, 0x2, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[], 0x0) 3.683329759s ago: executing program 1 (id=584): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.61129985s ago: executing program 3 (id=585): ioperm(0x0, 0x2, 0x7e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) 3.531968791s ago: executing program 4 (id=586): r0 = fsopen(&(0x7f00000022c0)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x100, 0x1, &(0x7f0000000440)=[r9], &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}], r10, 0x0, '\x00', 0x3, 0x3}) socket$inet6(0xa, 0x2, 0x0) 3.430123173s ago: executing program 2 (id=587): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000300)={0x440, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) 3.401750853s ago: executing program 3 (id=588): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socket$kcm(0x29, 0x7, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x44f001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) madvise(&(0x7f0000bdf000/0x3000)=nil, 0x3000, 0xb) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103381) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0xd0000, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) 3.047308768s ago: executing program 1 (id=589): r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.307037288s ago: executing program 2 (id=590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000005c0)={0x2, "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"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xc, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES16, @ANYRESOCT=r1], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x6a, 0x10, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYRESDEC=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x5, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x5, 0x3, 0x6}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x71}]}}]}, 0x5c}}, 0x24040084) getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.306363048s ago: executing program 4 (id=591): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1}}, 0x18) 1.604001467s ago: executing program 1 (id=592): syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') fanotify_init(0x1, 0x101000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x3, 0x40) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.603711718s ago: executing program 4 (id=593): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x761c) 1.499988349s ago: executing program 4 (id=594): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={'hmac(sha256)\x00'}}) 1.40896823s ago: executing program 3 (id=595): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r4, 0x25, 0x2, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[], 0x0) 1.324095201s ago: executing program 0 (id=596): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000fc0)='cpuacct.usage_all\x00', 0x26e1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xff, 0xc9}}}, 0x6) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 1.205895163s ago: executing program 2 (id=597): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x2, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000180)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write(r1, &(0x7f0000000240), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x1502, &(0x7f0000003fc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(0x0, 0x14927e, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="140406000000", 0xfffffffffffffffd, 0x104000, 0xc, 0x1, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x7000098, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.192229183s ago: executing program 4 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24014000}, 0x0) 1.101246365s ago: executing program 1 (id=599): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.100539255s ago: executing program 3 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r6, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x12}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x4584, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000540)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac=@broadcast, {0xd}}, @void, @val, @val={0x3, 0x1, 0xa5}, @val={0x2d, 0x1a, {0x800, 0x3, 0x1, 0x0, {0x2, 0x5, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x9, 0x1e}}, @val={0x72, 0x6}}, 0x41) 1.040047785s ago: executing program 0 (id=601): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000300)={0x440, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) 805.716008ms ago: executing program 1 (id=602): r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) 757.076969ms ago: executing program 4 (id=603): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)=ANY=[], 0x8) 0s ago: executing program 0 (id=604): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r2}}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 73.361197][ T4241] cgroup: Unknown subsys name 'net' [ 73.498037][ T4241] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.042616][ T4241] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.527720][ T4254] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.537653][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.547835][ T4256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.556338][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.565090][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.573083][ T4256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.583414][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.590875][ T4256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.592527][ T4261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.599429][ T4256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.606855][ T4261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.614744][ T4256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.620306][ T4261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.628636][ T4256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.642683][ T4261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.660120][ T4252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.668118][ T4252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.675533][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.683700][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.689960][ T4258] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.692763][ T4256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.698627][ T4258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.714954][ T4258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.720862][ T4256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.723080][ T4258] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.738407][ T4258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.745489][ T4256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.754375][ T4258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.764681][ T4258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.773491][ T4258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.187637][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 77.232876][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 77.325441][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 77.478335][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.486580][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.495863][ T4255] device bridge_slave_0 entered promiscuous mode [ 77.528060][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 77.538637][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.546100][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.554894][ T4255] device bridge_slave_1 entered promiscuous mode [ 77.564347][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.572283][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.581151][ T4265] device bridge_slave_0 entered promiscuous mode [ 77.588992][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 77.621655][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.628824][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.637347][ T4265] device bridge_slave_1 entered promiscuous mode [ 77.660797][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.668057][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.676255][ T4251] device bridge_slave_0 entered promiscuous mode [ 77.724419][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.731680][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.740208][ T4251] device bridge_slave_1 entered promiscuous mode [ 77.749126][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.770182][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.800599][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.811871][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.867491][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.913933][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.926411][ T4255] team0: Port device team_slave_0 added [ 77.935726][ T4265] team0: Port device team_slave_0 added [ 77.951122][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.958291][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.966420][ T4263] device bridge_slave_0 entered promiscuous mode [ 77.983628][ T4255] team0: Port device team_slave_1 added [ 77.992185][ T4265] team0: Port device team_slave_1 added [ 77.998310][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.005715][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.014149][ T4259] device bridge_slave_0 entered promiscuous mode [ 78.022551][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.030016][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.038390][ T4263] device bridge_slave_1 entered promiscuous mode [ 78.075672][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.083032][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.091756][ T4259] device bridge_slave_1 entered promiscuous mode [ 78.119343][ T4251] team0: Port device team_slave_0 added [ 78.127905][ T4251] team0: Port device team_slave_1 added [ 78.148938][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.156498][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.183779][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.216458][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.240215][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.247700][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.275787][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.287876][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.295050][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.321346][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.344692][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.363727][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.370864][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.397180][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.413908][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.438501][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.445587][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.472373][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.491880][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.511515][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.518534][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.545303][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.586374][ T4263] team0: Port device team_slave_0 added [ 78.631532][ T4263] team0: Port device team_slave_1 added [ 78.651250][ T4265] device hsr_slave_0 entered promiscuous mode [ 78.658150][ T4265] device hsr_slave_1 entered promiscuous mode [ 78.664741][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 78.671184][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 78.682011][ T4255] device hsr_slave_0 entered promiscuous mode [ 78.689186][ T4255] device hsr_slave_1 entered promiscuous mode [ 78.696019][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.703926][ T4255] Cannot create hsr debugfs directory [ 78.712505][ T4259] team0: Port device team_slave_0 added [ 78.730408][ T4251] device hsr_slave_0 entered promiscuous mode [ 78.737891][ T4251] device hsr_slave_1 entered promiscuous mode [ 78.745111][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.753035][ T4251] Cannot create hsr debugfs directory [ 78.774082][ T4259] team0: Port device team_slave_1 added [ 78.820594][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 78.827457][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 78.827476][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 78.849998][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.857448][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.887165][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.921378][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.928680][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.956339][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.986221][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.993666][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.020420][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.063102][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.070275][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.097095][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.158144][ T4263] device hsr_slave_0 entered promiscuous mode [ 79.165603][ T4263] device hsr_slave_1 entered promiscuous mode [ 79.173380][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.181142][ T4263] Cannot create hsr debugfs directory [ 79.284361][ T4259] device hsr_slave_0 entered promiscuous mode [ 79.291918][ T4259] device hsr_slave_1 entered promiscuous mode [ 79.299027][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.309169][ T4259] Cannot create hsr debugfs directory [ 79.514579][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.541748][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.567687][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.577085][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.593019][ T4255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.617100][ T4255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.627722][ T4255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.649388][ T4255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.750683][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.761992][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.772207][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.801681][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.879890][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.942097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.955037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.967661][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.977589][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.986139][ T4263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.998348][ T4263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.039425][ T4263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.050387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.061944][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.071741][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.080278][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.092705][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.102050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.112133][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.119702][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.128277][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.138957][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.161781][ T4263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.187122][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.217964][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.231148][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.245186][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.255037][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.264887][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.274502][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.283063][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.323498][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.333172][ T4259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.343956][ T4259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.358383][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.368245][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.380385][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.389821][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.402797][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.419057][ T4259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.430064][ T4259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.445015][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.454614][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.465284][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.472533][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.488978][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.508365][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.528253][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.537991][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.557643][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.574609][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.586060][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.593582][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.619221][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.652401][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.669074][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.679314][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.686947][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.699078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.710418][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.740504][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 80.747671][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 80.757201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.777522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.794194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.805401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.818913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.835132][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.843426][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.856099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.865603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.875280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.899830][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 80.906747][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 80.906955][ T4255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.919561][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 80.932228][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.956145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.966480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.977309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.988777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.999912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.012797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.051262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.062576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.075022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.086584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.096146][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.122438][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.134350][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.161356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.172812][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.185074][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.195850][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.206172][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.216730][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.226034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.252570][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.265782][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.274884][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.313665][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.342401][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.367170][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.382533][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.393428][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.426326][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.445748][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.453080][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.462091][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.508282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.520493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.529156][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.536506][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.545329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.580846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.588634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.599321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.617549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.627634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.637232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.647297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.660794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.670008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.681501][ T4265] device veth0_vlan entered promiscuous mode [ 81.697883][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.717927][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.729408][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.745681][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.755329][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.765497][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.777698][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.798914][ T4265] device veth1_vlan entered promiscuous mode [ 81.812906][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.822598][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.832865][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.843837][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.851403][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.859426][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.868532][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.877494][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.893852][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.905994][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.926064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.936105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.945999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.955145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.964686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.973615][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980838][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.989716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.007061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.018007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.036139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.045527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.113167][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.133091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.147046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.158091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.167867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.177937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.187758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.198304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.207701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.217302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.226381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.236872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.246398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.262447][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.277410][ T4265] device veth0_macvtap entered promiscuous mode [ 82.305298][ T4255] device veth0_vlan entered promiscuous mode [ 82.325469][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.334987][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.355017][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.369281][ T4265] device veth1_macvtap entered promiscuous mode [ 82.401987][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.413817][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.425145][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.451713][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.471159][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.503376][ T4255] device veth1_vlan entered promiscuous mode [ 82.556083][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.590606][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.598732][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.609161][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.619208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.628594][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.639257][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.652881][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.688872][ T4251] device veth0_vlan entered promiscuous mode [ 82.706830][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.718612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.744612][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.758576][ T4251] device veth1_vlan entered promiscuous mode [ 82.787750][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.797159][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.806201][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.818956][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.820436][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 82.829521][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 82.846638][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.855129][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.868481][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.878073][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.887979][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.897219][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.926902][ T4255] device veth0_macvtap entered promiscuous mode [ 82.935540][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.953132][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.979673][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 82.990274][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 82.996551][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 83.005261][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.022891][ T4255] device veth1_macvtap entered promiscuous mode [ 83.035552][ T4251] device veth0_macvtap entered promiscuous mode [ 83.046884][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.058179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.075529][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.087009][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.095924][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.109041][ T4251] device veth1_macvtap entered promiscuous mode [ 83.164941][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.178048][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.193111][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.220891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.230715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.253101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.275752][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.309296][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.325267][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.340931][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.352946][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.362224][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.373272][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.386200][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.419904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.428822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.441820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.451080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.461351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.471121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.483404][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.494344][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.505020][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.516516][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.529293][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.581995][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.586349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.590307][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.602215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.617399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.631692][ T4255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.646997][ T4255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.656516][ T4255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.665877][ T4255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.694095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.704854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.717340][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.727046][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.737396][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.746600][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.786455][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.796962][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.823085][ T4259] device veth0_vlan entered promiscuous mode [ 83.856929][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.871484][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.906524][ T4259] device veth1_vlan entered promiscuous mode [ 83.922980][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.936860][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.939086][ T4263] device veth0_vlan entered promiscuous mode [ 83.957091][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.967712][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.976147][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.987139][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.996997][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.005757][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.055567][ T4263] device veth1_vlan entered promiscuous mode [ 84.125005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.133251][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.147152][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.147436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.163594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.172689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.182001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.192791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.207827][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.216623][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.222970][ T4259] device veth0_macvtap entered promiscuous mode [ 84.239781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.248374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.310161][ T4259] device veth1_macvtap entered promiscuous mode [ 84.342312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.351006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.364940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.384605][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.386339][ T4263] device veth0_macvtap entered promiscuous mode [ 84.394013][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.431862][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.450170][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.487096][ T4263] device veth1_macvtap entered promiscuous mode [ 84.524088][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.550469][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.561566][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.574371][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.575590][ T4334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.587733][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.620559][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.631293][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.642977][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.663050][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.687827][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.705607][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.741416][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.752740][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.763701][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.775139][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.818169][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.890112][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.919992][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 84.926632][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 84.970193][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.042458][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.060132][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 85.067932][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 85.074666][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 85.112153][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.173489][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.234996][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.246696][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.258535][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.271369][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.279788][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.289198][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.298625][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.317616][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.327776][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.339650][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.348906][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.363623][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.375356][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.387322][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.399249][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.410643][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.422535][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.436142][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.453287][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.468453][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.501644][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.511023][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.525606][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.537725][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.566757][ T4259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.578426][ T4259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588396][ T4259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.599184][ T4259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.622860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.640504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.663252][ T4344] tipc: Enabling of bearer rejected, failed to enable media [ 86.148666][ T4350] process 'syz.1.2' launched '/dev/fd/5' with NULL argv: empty string added [ 86.619773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.667085][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.684957][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.726714][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.741816][ T1170] cfg80211: failed to load regulatory.db [ 86.803625][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.856301][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.895747][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.924771][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.945337][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.968269][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.059503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.068491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.077372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.087419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.096658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.105665][ T4356] Zero length message leads to an empty skb [ 87.105691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.123339][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.252582][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.803764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 87.812584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 87.821435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.065113][ T4360] mkiss: ax0: crc mode is auto. [ 88.343634][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.417293][ T4378] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 90.529100][ T4375] sched: RT throttling activated [ 93.534754][ T4391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15'. [ 93.641587][ T4402] raw_sendmsg: syz.4.18 forgot to set AF_INET. Fix it! [ 93.899093][ T4410] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 93.980047][ T4410] team0: Device ipvlan1 failed to register rx_handler [ 94.103356][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 95.425275][ T4410] syz.0.21 (4410) used greatest stack depth: 20672 bytes left [ 95.519969][ T4254] Bluetooth: hci2: Unknown advertising packet type: 0x18 [ 95.520038][ T4254] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 95.527437][ T4254] Bluetooth: hci2: Unknown advertising packet type: 0x30 [ 95.535751][ T4254] Bluetooth: hci2: Malformed LE Event: 0x0d [ 95.645846][ T4422] loop3: detected capacity change from 0 to 40427 [ 95.785651][ T4422] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.888546][ T4422] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.908943][ T4440] syz.3.25: attempt to access beyond end of device [ 96.908943][ T4440] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.462153][ T4255] syz-executor: attempt to access beyond end of device [ 97.462153][ T4255] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 97.622909][ T4442] sp0: Synchronizing with TNC [ 99.021476][ T4254] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 99.032367][ T4254] CPU: 1 PID: 4254 Comm: kworker/u5:2 Not tainted 6.1.137-syzkaller #0 [ 99.040750][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.051017][ T4254] Workqueue: hci0 hci_rx_work [ 99.055781][ T4254] Call Trace: [ 99.059095][ T4254] [ 99.062058][ T4254] dump_stack_lvl+0x168/0x22e [ 99.066798][ T4254] ? show_regs_print_info+0x12/0x12 [ 99.072045][ T4254] ? load_image+0x3b0/0x3b0 [ 99.076618][ T4254] sysfs_create_dir_ns+0x252/0x280 [ 99.081807][ T4254] ? hci_rx_work+0x3eb/0xd40 [ 99.086454][ T4254] ? sysfs_warn_dup+0xa0/0xa0 [ 99.091189][ T4254] ? do_raw_spin_unlock+0x11d/0x230 [ 99.096457][ T4254] kobject_add_internal+0x6b8/0xc80 [ 99.101726][ T4254] kobject_add+0x152/0x210 [ 99.106183][ T4254] ? kobject_init+0x1d0/0x1d0 [ 99.110892][ T4254] ? klist_children_get+0x50/0x50 [ 99.116033][ T4254] ? get_device_parent+0x121/0x3f0 [ 99.121175][ T4254] device_add+0x483/0xfb0 [ 99.125550][ T4254] ? kmem_cache_free+0xf7/0x290 [ 99.130447][ T4254] hci_conn_add_sysfs+0xd1/0x1e0 [ 99.135441][ T4254] le_conn_complete_evt+0xd1d/0x1320 [ 99.140792][ T4254] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 99.147078][ T4254] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 99.152848][ T4254] ? skb_pull_data+0xf7/0x200 [ 99.157591][ T4254] hci_le_conn_complete_evt+0x183/0x440 [ 99.163177][ T4254] ? hci_remote_host_features_evt+0x270/0x270 [ 99.169376][ T4254] hci_event_packet+0x791/0x1210 [ 99.174508][ T4254] ? bis_list+0x280/0x280 [ 99.178890][ T4254] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 99.184911][ T4254] ? kcov_remote_start+0x4c7/0x7e0 [ 99.190041][ T4254] ? mce_start+0x130/0x140 [ 99.194511][ T4254] ? hci_send_to_monitor+0x9c/0x4a0 [ 99.199731][ T4254] hci_rx_work+0x3eb/0xd40 [ 99.204160][ T4254] ? _raw_spin_unlock+0x40/0x40 [ 99.209044][ T4254] ? process_one_work+0x7a1/0x1160 [ 99.214168][ T4254] process_one_work+0x898/0x1160 [ 99.219148][ T4254] ? worker_detach_from_pool+0x240/0x240 [ 99.224801][ T4254] ? _raw_spin_lock_irq+0xab/0xe0 [ 99.230197][ T4254] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 99.235586][ T4254] ? kthread_data+0x4b/0xc0 [ 99.240111][ T4254] worker_thread+0xaa2/0x1250 [ 99.244833][ T4254] kthread+0x29d/0x330 [ 99.248923][ T4254] ? worker_clr_flags+0x1a0/0x1a0 [ 99.253958][ T4254] ? kthread_blkcg+0xd0/0xd0 [ 99.258582][ T4254] ret_from_fork+0x1f/0x30 [ 99.263028][ T4254] [ 99.269162][ T4254] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 99.288866][ T4254] Bluetooth: hci0: failed to register connection device [ 100.444013][ T4474] loop1: detected capacity change from 0 to 40427 [ 100.485750][ T4472] fuse: root generation should be zero [ 100.897384][ T4474] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.037822][ T4474] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.139645][ T4299] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.417577][ T4489] syz.1.40: attempt to access beyond end of device [ 101.417577][ T4489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.499239][ T4299] usb 4-1: device descriptor read/all, error -71 [ 103.563074][ T4251] syz-executor: attempt to access beyond end of device [ 103.563074][ T4251] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 104.852808][ T4505] loop2: detected capacity change from 0 to 512 [ 106.190686][ T4505] EXT4-fs: Ignoring removed i_version option [ 106.328610][ T4505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.858361][ T4505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.177852][ T4516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 107.182826][ T4505] EXT4-fs: failed to create workqueue [ 107.182861][ T4505] EXT4-fs (loop2): mount failed [ 107.471694][ T4519] syz.2.51 uses obsolete (PF_INET,SOCK_PACKET) [ 109.500810][ T4535] loop1: detected capacity change from 0 to 40427 [ 109.582788][ T4535] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.639548][ T4535] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.961384][ T4546] syz.1.55: attempt to access beyond end of device [ 109.961384][ T4546] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.694659][ T4251] syz-executor: attempt to access beyond end of device [ 110.694659][ T4251] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 112.071442][ T4545] sctp: failed to load transform for md5: -2 [ 112.408008][ T4567] loop3: detected capacity change from 0 to 512 [ 112.418254][ T4567] EXT4-fs: Ignoring removed i_version option [ 112.599913][ T4567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.982030][ T4567] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.015015][ T4567] EXT4-fs (loop3): 1 truncate cleaned up [ 114.021427][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.053960][ T4567] EXT4-fs (loop3): unmounting filesystem. [ 115.135019][ T4577] vivid-000: kernel_thread() failed [ 117.496731][ T26] audit: type=1326 audit(1746674542.307:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6efd8e969 code=0x7ffc0000 [ 117.578357][ T26] audit: type=1326 audit(1746674542.337:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6efd8e969 code=0x7ffc0000 [ 117.606959][ T26] audit: type=1326 audit(1746674542.387:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc6efd8e969 code=0x7ffc0000 [ 117.638965][ T26] audit: type=1326 audit(1746674542.387:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6efd85927 code=0x7ffc0000 [ 117.669007][ T26] audit: type=1326 audit(1746674542.387:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6efd2ab39 code=0x7ffc0000 [ 117.751948][ T26] audit: type=1326 audit(1746674542.387:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6efd8e969 code=0x7ffc0000 [ 117.790948][ T26] audit: type=1326 audit(1746674542.387:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6efd8e969 code=0x7ffc0000 [ 119.192849][ T26] audit: type=1326 audit(1746674542.387:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc6efd8e969 code=0x7ffc0000 [ 119.306326][ T26] audit: type=1326 audit(1746674542.597:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6efd85927 code=0x7ffc0000 [ 119.373183][ T26] audit: type=1326 audit(1746674542.597:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6efd2ab39 code=0x7ffc0000 [ 122.057249][ T4630] loop0: detected capacity change from 0 to 40427 [ 123.320915][ T4630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.384317][ T4630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.597772][ T4641] syz.0.77: attempt to access beyond end of device [ 123.597772][ T4641] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.890136][ T4265] syz-executor: attempt to access beyond end of device [ 123.890136][ T4265] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 126.540350][ T4302] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.798867][ T4302] usb 4-1: device descriptor read/all, error -71 [ 126.990771][ T4548] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.694261][ T4673] vivid-000: kernel_thread() failed [ 128.007477][ T4548] usb 2-1: Using ep0 maxpacket: 16 [ 128.017064][ T4548] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 128.029664][ T4548] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 128.049908][ T4548] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.089631][ T4548] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 128.116515][ T4548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.132776][ T4679] loop0: detected capacity change from 0 to 128 [ 128.132999][ T4548] usb 2-1: Product: syz [ 128.158744][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 128.158760][ T26] audit: type=1800 audit(1746674552.967:43): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.91" name="bus" dev="loop0" ino=1048595 res=0 errno=0 [ 128.300682][ T4548] usb 2-1: Manufacturer: syz [ 128.305443][ T4548] usb 2-1: SerialNumber: syz [ 128.308383][ T4679] syz.0.91: attempt to access beyond end of device [ 128.308383][ T4679] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 128.321243][ T4548] usb 2-1: config 0 descriptor?? [ 128.381672][ T4548] appledisplay 2-1:0.0: Could not find int-in endpoint [ 128.443996][ T4548] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 128.631430][ T4681] loop4: detected capacity change from 0 to 40427 [ 128.743079][ T22] usb 2-1: USB disconnect, device number 2 [ 129.002244][ T4681] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.061841][ T4681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.621695][ T4696] loop0: detected capacity change from 0 to 128 [ 131.834299][ T4697] syz.4.92: attempt to access beyond end of device [ 131.834299][ T4697] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.873667][ T26] audit: type=1800 audit(1746674556.597:44): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.94" name="bus" dev="loop0" ino=1048596 res=0 errno=0 [ 132.563836][ T4263] syz-executor: attempt to access beyond end of device [ 132.563836][ T4263] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 132.823144][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829954][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.841243][ T4699] netlink: 'syz.3.98': attribute type 4 has an invalid length. [ 134.655163][ T4711] loop0: detected capacity change from 0 to 1024 [ 134.663217][ T4711] EXT4-fs: Ignoring removed bh option [ 134.937771][ T4711] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.369217][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 135.983617][ T4728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'. [ 136.187003][ T4548] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.766319][ T4736] loop2: detected capacity change from 0 to 40427 [ 136.980113][ T4299] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.171431][ T4736] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.216424][ T4736] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.278704][ T4548] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.432815][ T4299] usb 1-1: config 0 has no interfaces? [ 137.448842][ T4299] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 137.468040][ T4548] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.480148][ T4548] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.495206][ T4548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.503568][ T4548] usb 2-1: SerialNumber: syz [ 137.508681][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.537915][ T4299] usb 1-1: config 0 descriptor?? [ 137.549971][ T4744] syz.2.106: attempt to access beyond end of device [ 137.549971][ T4744] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.628122][ T4748] loop3: detected capacity change from 0 to 128 [ 137.804707][ T26] audit: type=1800 audit(1746674562.487:45): pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.107" name="bus" dev="loop3" ino=1048598 res=0 errno=0 [ 137.968116][ T4299] usb 1-1: USB disconnect, device number 2 [ 138.377336][ T4259] syz-executor: attempt to access beyond end of device [ 138.377336][ T4259] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 139.539084][ T4548] usb 2-1: 0:2 : does not exist [ 139.813946][ T4548] usb 2-1: USB disconnect, device number 3 [ 139.830623][ T4299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.924932][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.590411][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.846949][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.904029][ T4299] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.259703][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 141.267381][ T126] usb 5-1: can't read configurations, error -71 [ 141.294915][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.339646][ T4299] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 141.390683][ T4764] lo speed is unknown, defaulting to 1000 [ 141.404791][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.414599][ T4764] lo speed is unknown, defaulting to 1000 [ 141.434536][ T4764] lo speed is unknown, defaulting to 1000 [ 141.567070][ T4299] usb 3-1: config 0 descriptor?? [ 141.590629][ T4764] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.641875][ T4771] loop1: detected capacity change from 0 to 1024 [ 141.650032][ T4771] EXT4-fs: Ignoring removed bh option [ 142.309746][ T4764] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.389200][ T4764] lo speed is unknown, defaulting to 1000 [ 142.398313][ T4764] lo speed is unknown, defaulting to 1000 [ 142.406284][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.459357][ T4764] lo speed is unknown, defaulting to 1000 [ 142.472472][ T4764] lo speed is unknown, defaulting to 1000 [ 142.484995][ T4764] lo speed is unknown, defaulting to 1000 [ 142.745594][ T4299] apple 0003:05AC:027A.0001: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 143.022978][ T4299] usb 3-1: USB disconnect, device number 2 [ 143.048264][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 143.602043][ T4789] loop0: detected capacity change from 0 to 256 [ 143.726821][ T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.798849][ T4789] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 144.005823][ T126] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 144.071257][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.269969][ T126] usb 5-1: Product: syz [ 144.286224][ T126] usb 5-1: Manufacturer: syz [ 144.309330][ T126] usb 5-1: SerialNumber: syz [ 146.662489][ T126] usb 5-1: config 0 descriptor?? [ 146.693725][ T126] usb 5-1: can't set config #0, error -71 [ 146.728196][ T126] usb 5-1: USB disconnect, device number 4 [ 148.893602][ T4821] loop3: detected capacity change from 0 to 1024 [ 148.901965][ T4821] EXT4-fs: Ignoring removed bh option [ 149.176107][ T4821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.548336][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 149.600376][ T26] audit: type=1326 audit(1746674574.417:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 149.919561][ T26] audit: type=1326 audit(1746674574.437:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 151.265449][ T26] audit: type=1326 audit(1746674574.437:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 151.398961][ T26] audit: type=1326 audit(1746674574.437:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 151.479031][ T26] audit: type=1326 audit(1746674574.437:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 151.507775][ T4295] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.589293][ T26] audit: type=1326 audit(1746674574.447:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 152.149409][ T26] audit: type=1326 audit(1746674574.447:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 152.371330][ T4295] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.385529][ T4295] usb 4-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 152.395933][ T4295] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.405173][ T4295] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.440874][ T4295] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.450154][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.458189][ T4295] usb 4-1: Product: syz [ 152.462533][ T26] audit: type=1326 audit(1746674574.447:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 152.488076][ T4295] usb 4-1: Manufacturer: syz [ 152.516950][ T4295] cdc_wdm 4-1:1.0: skipping garbage [ 152.522489][ T26] audit: type=1326 audit(1746674574.487:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 152.544929][ T4295] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 152.589531][ T26] audit: type=1326 audit(1746674574.487:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabe18e969 code=0x7ffc0000 [ 152.614343][ T4853] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 152.629870][ T4853] netlink: 'syz.1.136': attribute type 2 has an invalid length. [ 153.284508][ T14] usb 4-1: USB disconnect, device number 6 [ 153.376563][ T4860] loop1: detected capacity change from 0 to 256 [ 153.441451][ T4860] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 154.823523][ T4865] capability: warning: `syz.0.139' uses deprecated v2 capabilities in a way that may be insecure [ 159.079792][ T4295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.319971][ T4295] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 159.388548][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.484332][ T4295] usb 3-1: Product: syz [ 159.537335][ T4295] usb 3-1: Manufacturer: syz [ 159.649585][ T4295] usb 3-1: SerialNumber: syz [ 159.693069][ T4295] usb 3-1: config 0 descriptor?? [ 159.756764][ T4302] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.935341][ T4295] usb-storage 3-1:0.0: USB Mass Storage device detected [ 161.166581][ T4919] loop1: detected capacity change from 0 to 256 [ 161.267456][ T4919] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 161.376000][ T4925] loop3: detected capacity change from 0 to 128 [ 161.558953][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 161.558972][ T26] audit: type=1800 audit(1746674586.247:87): pid=4925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.154" name="bus" dev="loop3" ino=1048604 res=0 errno=0 [ 161.585824][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.671761][ T4902] usb 3-1: USB disconnect, device number 3 [ 165.308520][ T4929] sctp: failed to load transform for md5: -2 [ 167.100257][ T4956] loop2: detected capacity change from 0 to 40427 [ 167.328012][ T4956] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.375397][ T4956] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.408228][ T4956] syz.2.161: attempt to access beyond end of device [ 167.408228][ T4956] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.642206][ T4259] syz-executor: attempt to access beyond end of device [ 167.642206][ T4259] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 168.171051][ T4978] capability: warning: `syz.3.167' uses 32-bit capabilities (legacy support in use) [ 168.259685][ T4302] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.582028][ T4302] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.620892][ T4302] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.682266][ T4302] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 169.415854][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.466533][ T4302] usb 2-1: config 0 descriptor?? [ 169.970807][ T4302] usbhid 2-1:0.0: can't add hid device: -71 [ 170.394682][ T4302] usbhid: probe of 2-1:0.0 failed with error -71 [ 170.425667][ T4302] usb 2-1: USB disconnect, device number 4 [ 170.753980][ T4300] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.779628][ T4300] usb 1-1: Using ep0 maxpacket: 16 [ 171.864863][ T4300] usb 1-1: device descriptor read/all, error -71 [ 171.962918][ T5000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 172.402300][ T5004] loop3: detected capacity change from 0 to 40427 [ 172.484856][ T5004] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.131136][ T5017] vivid-000: kernel_thread() failed [ 173.523326][ T5004] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 173.567042][ T5004] syz.3.176: attempt to access beyond end of device [ 173.567042][ T5004] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.602005][ T5009] netlink: 3 bytes leftover after parsing attributes in process `syz.0.179'. [ 173.896842][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 173.988257][ T4255] syz-executor: attempt to access beyond end of device [ 173.988257][ T4255] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 174.007199][ T5032] loop4: detected capacity change from 0 to 128 [ 174.419488][ T26] audit: type=1800 audit(1746674598.907:88): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.183" name="bus" dev="loop4" ino=1048608 res=0 errno=0 [ 174.939570][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.981523][ T126] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.029517][ T126] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.070848][ T126] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 176.119739][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.304866][ T126] usb 3-1: config 0 descriptor?? [ 177.044834][ T126] usbhid 3-1:0.0: can't add hid device: -71 [ 177.075761][ T126] usbhid: probe of 3-1:0.0 failed with error -71 [ 177.091456][ T126] usb 3-1: USB disconnect, device number 4 [ 177.601689][ T4302] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.939542][ T4302] usb 4-1: Using ep0 maxpacket: 32 [ 177.946557][ T4302] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 178.379707][ T4548] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 178.565545][ T4302] usb 4-1: config 0 has no interface number 0 [ 178.571902][ T4302] usb 4-1: config 0 interface 193 has no altsetting 0 [ 178.652449][ T4302] usb 4-1: New USB device found, idVendor=058b, idProduct=0043, bcdDevice=1e.d8 [ 178.679568][ T4548] usb 3-1: Using ep0 maxpacket: 16 [ 178.685552][ T4302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.714073][ T4548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.726376][ T4548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.930147][ T4548] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.965177][ T4548] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.135590][ T4548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.229920][ T4548] usb 3-1: config 0 descriptor?? [ 179.349657][ T4302] usb 4-1: Product: syz [ 179.353908][ T4302] usb 4-1: Manufacturer: syz [ 179.358853][ T4302] usb 4-1: SerialNumber: syz [ 179.366210][ T4302] usb 4-1: config 0 descriptor?? [ 179.371303][ T4302] usb 4-1: Interface #193 referenced by multiple IADs [ 179.630816][ T4302] usb 4-1: USB disconnect, device number 8 [ 180.749153][ T4548] usbhid 3-1:0.0: can't add hid device: -71 [ 180.769605][ T4548] usbhid: probe of 3-1:0.0 failed with error -71 [ 180.851346][ T4548] usb 3-1: USB disconnect, device number 5 [ 180.878396][ T5084] loop1: detected capacity change from 0 to 128 [ 180.899319][ T26] audit: type=1800 audit(1746674605.707:89): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.196" name="bus" dev="loop1" ino=1048610 res=0 errno=0 [ 180.946824][ T5088] Bluetooth: MGMT ver 1.22 [ 180.983643][ T5084] syz.1.196: attempt to access beyond end of device [ 180.983643][ T5084] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 181.030215][ T5086] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 183.069679][ T4254] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 183.506221][ T5107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.202'. [ 184.674898][ T5115] vivid-000: kernel_thread() failed [ 185.293929][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 186.993115][ T5135] loop1: detected capacity change from 0 to 128 [ 187.159689][ T4300] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 187.290290][ T26] audit: type=1800 audit(1746674612.097:90): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.209" name="bus" dev="loop1" ino=1048611 res=0 errno=0 [ 187.319786][ T4254] Bluetooth: hci4: command 0x0405 tx timeout [ 187.379930][ T4300] usb 1-1: Using ep0 maxpacket: 16 [ 187.386599][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.437842][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.493076][ T5144] syz.1.209: attempt to access beyond end of device [ 187.493076][ T5144] loop1: rw=2049, sector=377, nr_sectors = 664 limit=128 [ 187.507790][ T4300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.559352][ T4300] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.585621][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.613478][ T4300] usb 1-1: config 0 descriptor?? [ 189.580289][ T5155] syz.4.215 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 189.683355][ T5155] mmap: syz.4.215 (5155) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.950911][ T4300] usbhid 1-1:0.0: can't add hid device: -71 [ 189.962753][ T4300] usbhid: probe of 1-1:0.0 failed with error -71 [ 189.977240][ T4300] usb 1-1: USB disconnect, device number 5 [ 191.621344][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 192.308732][ T5177] loop3: detected capacity change from 0 to 40427 [ 192.394789][ T5177] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.447935][ T5177] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.742102][ T5190] syz.3.220: attempt to access beyond end of device [ 192.742102][ T5190] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.095508][ T4255] syz-executor: attempt to access beyond end of device [ 193.095508][ T4255] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 193.643371][ T4298] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.859860][ T4298] usb 1-1: device descriptor read/64, error -71 [ 194.180263][ T4298] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.365616][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379864][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.059999][ T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.299858][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 195.310914][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.460223][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.471374][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.559518][ T22] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.597357][ T5208] binder: 5207:5208 ioctl c0306201 0 returned -14 [ 195.614112][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.775624][ T22] usb 5-1: config 0 descriptor?? [ 197.510443][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 197.516866][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 197.560780][ T22] usb 5-1: USB disconnect, device number 5 [ 197.961171][ T5233] loop4: detected capacity change from 0 to 40427 [ 198.058672][ T4262] Bluetooth: hci0: unexpected event for opcode 0x203d [ 198.178272][ T5233] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.239279][ T5233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.459615][ T5233] syz.4.235: attempt to access beyond end of device [ 198.459615][ T5233] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.575448][ T4263] syz-executor: attempt to access beyond end of device [ 198.575448][ T4263] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 199.631211][ T5248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.698653][ T5248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.729690][ T5248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 199.756544][ T5248] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 199.885406][ T5248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.009816][ T5248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.147371][ T5248] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 200.281858][ T5248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.290979][ T5248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.307407][ T5248] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 200.315506][ T5248] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 200.456681][ T5247] block nbd1: shutting down sockets [ 201.699771][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.779829][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.940980][ T4258] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.999573][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 202.017763][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.159606][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.176495][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.199193][ T22] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.209020][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.235908][ T22] usb 4-1: config 0 descriptor?? [ 202.339647][ T4258] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.345833][ T4258] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.756130][ T5285] device geneve2 entered promiscuous mode [ 202.869278][ T5281] loop0: detected capacity change from 0 to 40427 [ 202.942629][ T5281] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.994661][ T5281] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.059757][ T4254] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.189793][ T4300] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 203.213053][ T5281] syz.0.248: attempt to access beyond end of device [ 203.213053][ T5281] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.329766][ T4265] syz-executor: attempt to access beyond end of device [ 203.329766][ T4265] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 203.420241][ T4300] usb 5-1: Using ep0 maxpacket: 16 [ 203.489911][ T4300] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 203.664034][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.757171][ T4300] usb 5-1: Product: syz [ 203.779547][ T4258] Bluetooth: hci1: command 0x0406 tx timeout [ 203.812002][ T4300] usb 5-1: Manufacturer: syz [ 203.860788][ T4300] usb 5-1: SerialNumber: syz [ 204.019763][ T4258] Bluetooth: hci2: command 0x0406 tx timeout [ 204.052931][ T4300] usb 5-1: config 0 descriptor?? [ 204.089655][ T4300] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 204.287250][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 204.292676][ T4300] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 204.293601][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 204.311275][ T22] usb 4-1: USB disconnect, device number 9 [ 204.360120][ T4300] visor: probe of 5-1:0.0 failed with error -5 [ 204.419604][ T4258] Bluetooth: hci4: command 0x0406 tx timeout [ 205.156193][ T5304] vivid-000: kernel_thread() failed [ 205.711190][ T5315] loop0: detected capacity change from 0 to 256 [ 205.738287][ T5315] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 205.951532][ T4300] usb 5-1: USB disconnect, device number 6 [ 206.100106][ T4258] Bluetooth: hci2: command 0x0406 tx timeout [ 207.322055][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 207.455156][ T5335] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 210.055899][ T5356] loop1: detected capacity change from 0 to 128 [ 210.132135][ T26] audit: type=1800 audit(1746674634.947:91): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.271" name="bus" dev="loop1" ino=1048614 res=0 errno=0 [ 210.223054][ T5356] syz.1.271: attempt to access beyond end of device [ 210.223054][ T5356] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 210.307556][ T5360] loop3: detected capacity change from 0 to 256 [ 210.353307][ T5360] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 213.049577][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.354553][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 213.371632][ T27] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 213.382947][ T27] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 213.394833][ T27] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 213.409928][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.417881][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 213.469531][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.509134][ T27] usb 2-1: config 0 descriptor?? [ 214.183889][ T5392] vivid-000: kernel_thread() failed [ 214.448962][ T27] logitech-hidpp-device 0003:046D:C081.0002: hidraw0: USB HID v0.07 Device [HID 046d:c081] on usb-dummy_hcd.1-1/input0 [ 214.480494][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.683933][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.222420][ T27] usb 2-1: USB disconnect, device number 5 [ 216.917828][ T1170] kernel write not supported for file /sg0 (pid: 1170 comm: kworker/0:2) [ 217.156154][ T5419] loop3: detected capacity change from 0 to 256 [ 217.217500][ T5419] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 217.311204][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 221.338313][ T5441] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 221.501094][ T5454] 9pnet_fd: Insufficient options for proto=fd [ 223.809837][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 224.173803][ T5492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.310'. [ 224.749870][ T4300] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 224.788458][ T5497] loop4: detected capacity change from 0 to 128 [ 224.837169][ T26] audit: type=1800 audit(1746674649.647:92): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.311" name="bus" dev="loop4" ino=1048619 res=0 errno=0 [ 225.009967][ T4300] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.028046][ T4300] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 225.036516][ T4300] usb 2-1: can't read configurations, error -71 [ 225.325232][ T5504] 9pnet_fd: Insufficient options for proto=fd [ 226.810474][ T5511] vivid-000: kernel_thread() failed [ 227.163147][ T5520] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 227.431517][ T5520] device veth0_macvtap left promiscuous mode [ 228.419518][ T5520] batman_adv: batadv0: Adding interface: macvtap0 [ 228.434653][ T5520] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.460770][ T5520] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 228.574834][ T5533] loop3: detected capacity change from 0 to 256 [ 228.591817][ T26] audit: type=1326 audit(1746674653.407:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a98b8e969 code=0x7ffc0000 [ 229.079545][ T5533] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 229.099592][ T5537] loop2: detected capacity change from 0 to 128 [ 229.117167][ T26] audit: type=1326 audit(1746674653.427:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a98b8e969 code=0x7ffc0000 [ 229.539689][ T26] audit: type=1326 audit(1746674653.427:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3a98b8e969 code=0x7ffc0000 [ 229.568023][ T26] audit: type=1326 audit(1746674653.857:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a98b8e969 code=0x7ffc0000 [ 229.591238][ T26] audit: type=1326 audit(1746674653.857:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5516 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a98b8e969 code=0x7ffc0000 [ 229.907816][ T5542] 9pnet_fd: Insufficient options for proto=fd [ 232.149540][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.335948][ T14] usb 2-1: device descriptor read/64, error -71 [ 232.362983][ T1170] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.559605][ T1170] usb 1-1: Using ep0 maxpacket: 32 [ 232.571257][ T1170] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 232.596937][ T1170] usb 1-1: config 0 has no interface number 0 [ 232.623767][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 232.638210][ T1170] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 232.665570][ T1170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.679098][ T1170] usb 1-1: Product: syz [ 232.687136][ T1170] usb 1-1: Manufacturer: syz [ 232.695601][ T1170] usb 1-1: SerialNumber: syz [ 232.725400][ T1170] usb 1-1: config 0 descriptor?? [ 232.753465][ T1170] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 232.779942][ T14] usb 2-1: device descriptor read/64, error -71 [ 232.910713][ T14] usb usb2-port1: attempt power cycle [ 233.329743][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 233.373083][ T14] usb 2-1: device descriptor read/8, error -71 [ 233.649577][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.690605][ T14] usb 2-1: device descriptor read/8, error -71 [ 233.820025][ T14] usb usb2-port1: unable to enumerate USB device [ 234.278592][ T1170] gspca_topro: Sensor cx0342 [ 234.288394][ T5581] loop2: detected capacity change from 0 to 256 [ 234.332887][ T5581] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 234.483244][ T1170] usb 1-1: USB disconnect, device number 8 [ 235.955670][ T4437] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 236.389803][ T4437] usb 4-1: Using ep0 maxpacket: 16 [ 236.400354][ T4437] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 236.449557][ T4437] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.491562][ T4437] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.566574][ T5595] loop1: detected capacity change from 0 to 128 [ 237.366914][ T4437] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 237.381159][ T4437] usb 4-1: config 7 interface 0 has no altsetting 0 [ 237.387827][ T4437] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 237.397440][ T4437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.650173][ T5602] 9pnet_fd: Insufficient options for proto=fd [ 237.660171][ T4437] usb 4-1: can't set config #7, error -71 [ 237.689694][ T4437] usb 4-1: USB disconnect, device number 10 [ 238.135224][ T5298] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 238.331779][ T5298] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.385716][ T5298] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.409559][ T5298] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.416330][ T5298] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 238.449743][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.483116][ T5298] usb 5-1: config 0 descriptor?? [ 238.641643][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 238.840547][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 238.851008][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 238.889473][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.906795][ T14] usb 1-1: Product: syz [ 238.907454][ T5298] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 238.921710][ T14] usb 1-1: Manufacturer: syz [ 238.926484][ T14] usb 1-1: SerialNumber: syz [ 238.929691][ T5298] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 238.938393][ T5298] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 238.969006][ T14] usb 1-1: config 0 descriptor?? [ 238.985912][ T5298] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 239.008722][ T5298] hid-alps 0003:044E:120C.0003: unknown main item tag 0x0 [ 239.041284][ T5298] hid-alps 0003:044E:120C.0003: hidraw0: USB HID v0.03 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 239.108762][ T5298] usb 5-1: USB disconnect, device number 7 [ 239.198156][ T14] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 239.410343][ T14] usb write operation failed. (-71) [ 239.452271][ T14] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.504694][ T14] dvbdev: DVB: registering new adapter (Terratec H7) [ 239.517346][ T14] usb 1-1: media controller created [ 239.528182][ T14] usb read operation failed. (-71) [ 240.398337][ T14] usb write operation failed. (-71) [ 240.423640][ T14] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 240.441906][ T14] usb 1-1: USB disconnect, device number 9 [ 240.596546][ T5638] loop4: detected capacity change from 0 to 256 [ 241.031835][ T5638] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 242.035409][ T5651] loop1: detected capacity change from 0 to 128 [ 243.039605][ T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 244.322204][ T14] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.409590][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 244.560627][ T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 244.666527][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.863792][ T14] usb 5-1: config 0 descriptor?? [ 245.283955][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 245.897345][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 245.905627][ T14] usb 5-1: USB disconnect, device number 8 [ 245.919463][ T4298] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 246.139602][ T4298] usb 1-1: Using ep0 maxpacket: 16 [ 246.152268][ T4298] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 246.184358][ T4298] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.222780][ T4298] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.254355][ T4298] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 246.304665][ T4298] usb 1-1: config 7 interface 0 has no altsetting 0 [ 246.360893][ T4298] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 246.396015][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.471549][ T5700] xt_hashlimit: size too large, truncated to 1048576 [ 246.742072][ T5701] xt_HMARK: proto mask must be zero with L3 mode [ 247.075574][ T5697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.358088][ T5705] loop4: detected capacity change from 0 to 256 [ 247.406127][ T5705] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 252.514851][ T4298] usbhid 1-1:7.0: can't add hid device: -32 [ 252.573201][ T4298] usbhid: probe of 1-1:7.0 failed with error -32 [ 252.590072][ T4298] usb 1-1: USB disconnect, device number 10 [ 252.645042][ T5720] loop3: detected capacity change from 0 to 128 [ 252.723992][ T26] audit: type=1800 audit(1746674677.537:98): pid=5720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.373" name="bus" dev="loop3" ino=1048630 res=0 errno=0 [ 253.580569][ T5725] loop2: detected capacity change from 0 to 256 [ 253.844593][ T5725] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 254.229634][ T5738] netlink: 56 bytes leftover after parsing attributes in process `syz.3.376'. [ 255.711346][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.759638][ T4300] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 256.835893][ T5759] loop2: detected capacity change from 0 to 7 [ 256.865099][ T5759] Dev loop2: unable to read RDB block 7 [ 256.871582][ T5759] loop2: AHDI p1 p2 p3 [ 256.876167][ T5759] loop2: partition table partially beyond EOD, truncated [ 256.887848][ T5759] loop2: p1 start 1601398130 is beyond EOD, truncated [ 256.895252][ T5759] loop2: p2 start 1702059890 is beyond EOD, truncated [ 258.475363][ T5767] loop1: detected capacity change from 0 to 128 [ 258.511258][ T4300] usb 4-1: Using ep0 maxpacket: 8 [ 258.534531][ T4300] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 258.690704][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.827392][ T26] audit: type=1800 audit(1746674683.637:99): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.387" name="bus" dev="loop1" ino=1048632 res=0 errno=0 [ 258.897752][ T4300] pvrusb2: Hardware description: Terratec Grabster AV400 [ 258.956413][ T4300] pvrusb2: ********** [ 258.967317][ T4300] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 259.011835][ T4300] pvrusb2: Important functionality might not be entirely working. [ 259.054702][ T4300] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 259.104880][ T4300] pvrusb2: ********** [ 259.161662][ T2311] pvrusb2: Invalid write control endpoint [ 259.361168][ T4300] usb 4-1: USB disconnect, device number 11 [ 259.535474][ T2311] pvrusb2: Invalid write control endpoint [ 259.549490][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 259.559360][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 259.577830][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 259.612829][ T2311] pvrusb2: Device being rendered inoperable [ 259.622023][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 259.629774][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 259.655004][ T2311] pvrusb2: Attached sub-driver cx25840 [ 259.661496][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 259.674385][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 259.897257][ T126] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 260.293379][ T126] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.373386][ T126] usb 2-1: config 0 interface 0 has no altsetting 0 [ 260.380873][ T126] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 260.392572][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.405921][ T126] usb 2-1: config 0 descriptor?? [ 260.883461][ T126] usbhid 2-1:0.0: can't add hid device: -71 [ 260.892450][ T126] usbhid: probe of 2-1:0.0 failed with error -71 [ 260.919662][ T126] usb 2-1: USB disconnect, device number 12 [ 261.794296][ T5798] loop3: detected capacity change from 0 to 256 [ 261.835222][ T5798] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 263.243581][ T5812] loop4: detected capacity change from 0 to 128 [ 263.391808][ T26] audit: type=1800 audit(1746674688.207:100): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.401" name="bus" dev="loop4" ino=1048634 res=0 errno=0 [ 263.859681][ T4300] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 264.061154][ T4300] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 264.081423][ T4300] usb 2-1: config 0 has no interface number 0 [ 264.116409][ T4300] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.193365][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.208848][ T4300] usb 2-1: config 0 descriptor?? [ 264.349808][ T4294] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 264.421987][ T4300] cp210x 2-1:0.35: cp210x converter detected [ 264.569238][ T4294] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.581167][ T4294] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.591825][ T4294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.598681][ T4294] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 264.608622][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.635960][ T4294] usb 5-1: config 0 descriptor?? [ 264.789683][ T4300] cp210x 2-1:0.35: failed to get vendor val 0x000e size 3: -71 [ 264.924170][ T4300] usb 2-1: cp210x converter now attached to ttyUSB0 [ 265.013273][ T4300] usb 2-1: USB disconnect, device number 13 [ 265.079756][ T4300] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 265.095337][ T4294] usbhid 5-1:0.0: can't add hid device: -71 [ 265.104151][ T4294] usbhid: probe of 5-1:0.0 failed with error -71 [ 265.129131][ T4300] cp210x 2-1:0.35: device disconnected [ 265.131446][ T4294] usb 5-1: USB disconnect, device number 9 [ 266.818166][ T5843] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 267.084040][ T5843] team0: Device ipvlan1 failed to register rx_handler [ 268.088482][ T5853] loop4: detected capacity change from 0 to 256 [ 268.138618][ T5853] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 269.643851][ T5861] loop0: detected capacity change from 0 to 128 [ 269.779160][ T26] audit: type=1800 audit(1746674694.587:101): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.414" name="bus" dev="loop0" ino=1048638 res=0 errno=0 [ 273.464025][ T4300] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 273.653428][ T5904] loop2: detected capacity change from 0 to 128 [ 273.669743][ T4258] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 273.679987][ T4258] CPU: 0 PID: 4258 Comm: kworker/u5:4 Not tainted 6.1.137-syzkaller #0 [ 273.688396][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 273.698505][ T4258] Workqueue: hci1 hci_rx_work [ 273.703224][ T4258] Call Trace: [ 273.706608][ T4258] [ 273.709659][ T4258] dump_stack_lvl+0x168/0x22e [ 273.714373][ T4258] ? show_regs_print_info+0x12/0x12 [ 273.719795][ T4258] ? load_image+0x3b0/0x3b0 [ 273.724341][ T4258] sysfs_create_dir_ns+0x252/0x280 [ 273.729495][ T4258] ? hci_rx_work+0x3eb/0xd40 [ 273.734198][ T4258] ? sysfs_warn_dup+0xa0/0xa0 [ 273.738910][ T4258] ? do_raw_spin_unlock+0x11d/0x230 [ 273.744155][ T4258] kobject_add_internal+0x6b8/0xc80 [ 273.749422][ T4258] kobject_add+0x152/0x210 [ 273.753873][ T4258] ? kobject_init+0x1d0/0x1d0 [ 273.758574][ T4258] ? klist_children_get+0x50/0x50 [ 273.763623][ T4258] ? get_device_parent+0x121/0x3f0 [ 273.768862][ T4258] device_add+0x483/0xfb0 [ 273.773246][ T4258] ? kmem_cache_free+0xf7/0x290 [ 273.778135][ T4258] hci_conn_add_sysfs+0xd1/0x1e0 [ 273.783120][ T4258] le_conn_complete_evt+0xd1d/0x1320 [ 273.788443][ T4258] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 273.794850][ T4258] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 273.800509][ T4258] ? skb_pull_data+0xf7/0x200 [ 273.805221][ T4258] hci_le_conn_complete_evt+0x183/0x440 [ 273.810885][ T4258] ? hci_remote_host_features_evt+0x270/0x270 [ 273.816979][ T4258] hci_event_packet+0x791/0x1210 [ 273.821950][ T4258] ? bis_list+0x280/0x280 [ 273.826336][ T4258] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 273.832700][ T4258] ? kcov_remote_start+0x4c7/0x7e0 [ 273.837829][ T4258] ? mce_start+0x130/0x140 [ 273.842277][ T4258] ? hci_send_to_monitor+0x9c/0x4a0 [ 273.847511][ T4258] hci_rx_work+0x3eb/0xd40 [ 273.851946][ T4258] ? _raw_spin_unlock+0x40/0x40 [ 273.856820][ T4258] ? process_one_work+0x7a1/0x1160 [ 273.861949][ T4258] process_one_work+0x898/0x1160 [ 273.866917][ T4258] ? worker_detach_from_pool+0x240/0x240 [ 273.872603][ T4258] ? _raw_spin_lock_irq+0xab/0xe0 [ 273.877735][ T4258] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 273.883142][ T4258] ? kthread_data+0x4b/0xc0 [ 273.887670][ T4258] worker_thread+0xaa2/0x1250 [ 273.892386][ T4258] kthread+0x29d/0x330 [ 273.896648][ T4258] ? worker_clr_flags+0x1a0/0x1a0 [ 273.901695][ T4258] ? kthread_blkcg+0xd0/0xd0 [ 273.906309][ T4258] ret_from_fork+0x1f/0x30 [ 273.910755][ T4258] [ 273.915144][ T4258] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 273.928993][ T4258] Bluetooth: hci1: failed to register connection device [ 273.938386][ T4300] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.950096][ T4300] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.960033][ T4300] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.966695][ T4300] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 273.975865][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.988111][ T4300] usb 5-1: config 0 descriptor?? [ 274.005077][ T26] audit: type=1800 audit(1746674698.817:102): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.428" name="bus" dev="loop2" ino=1048639 res=0 errno=0 [ 275.074762][ T4300] usbhid 5-1:0.0: can't add hid device: -71 [ 275.080901][ T4300] usbhid: probe of 5-1:0.0 failed with error -71 [ 275.091443][ T4300] usb 5-1: USB disconnect, device number 10 [ 275.969563][ T4300] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 277.979541][ T4300] usb 4-1: Using ep0 maxpacket: 16 [ 277.988972][ T4300] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 278.102965][ T4300] usb 4-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 278.313358][ T4300] usb 4-1: config 0 has no interface number 0 [ 278.588806][ T4300] usb 4-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 279.069541][ T4300] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 279.078659][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.394308][ T4300] usb 4-1: config 0 descriptor?? [ 279.458782][ T4300] usb 4-1: can't set config #0, error -71 [ 279.580435][ T4300] usb 4-1: USB disconnect, device number 12 [ 279.613756][ T5943] loop3: detected capacity change from 0 to 128 [ 279.703318][ T26] audit: type=1800 audit(1746674704.517:103): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.441" name="bus" dev="loop3" ino=1048640 res=0 errno=0 [ 281.976390][ T5967] overlayfs: missing 'lowerdir' [ 282.959621][ T5989] xt_CT: No such helper "snmp" [ 283.244744][ T5993] loop4: detected capacity change from 0 to 40427 [ 283.276482][ T5998] loop2: detected capacity change from 0 to 128 [ 283.310833][ T26] audit: type=1800 audit(1746674708.127:104): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.457" name="bus" dev="loop2" ino=1048641 res=0 errno=0 [ 283.374209][ T5993] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.433481][ T5993] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.489695][ T4300] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 283.689566][ T4300] usb 4-1: Using ep0 maxpacket: 8 [ 283.697184][ T4300] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.782072][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 283.833532][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 283.888682][ T6012] syz.4.455: attempt to access beyond end of device [ 283.888682][ T6012] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.893858][ T4300] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 283.952144][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 283.978513][ T4300] usb 4-1: Product: syz [ 283.995792][ T4300] usb 4-1: Manufacturer: syz [ 284.014686][ T4300] usb 4-1: SerialNumber: syz [ 284.047910][ T4300] usb 4-1: config 0 descriptor?? [ 284.110711][ T4300] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 284.130207][ T4300] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 284.137472][ T4300] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 287.551705][ T4548] usb 4-1: USB disconnect, device number 13 [ 287.674871][ T4263] syz-executor: attempt to access beyond end of device [ 287.674871][ T4263] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 288.059504][ T4548] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 288.259730][ T4548] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.295950][ T6055] loop4: detected capacity change from 0 to 128 [ 288.299560][ T4548] usb 4-1: config 0 interface 0 has no altsetting 0 [ 288.356702][ T4548] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 288.399006][ T4548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.502459][ T4548] usb 4-1: config 0 descriptor?? [ 288.723204][ T26] audit: type=1800 audit(1746674713.537:105): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.470" name="bus" dev="loop4" ino=1048642 res=0 errno=0 [ 289.138277][ T4548] usbhid 4-1:0.0: can't add hid device: -71 [ 289.156776][ T4548] usbhid: probe of 4-1:0.0 failed with error -71 [ 289.195611][ T4548] usb 4-1: USB disconnect, device number 14 [ 290.223837][ T4548] kernel write not supported for file /dsp (pid: 4548 comm: kworker/1:8) [ 290.727217][ T6085] loop3: detected capacity change from 0 to 40427 [ 290.769284][ T6085] F2FS-fs (loop3): Found nat_bits in checkpoint [ 290.809585][ T6085] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 291.130059][ T6097] device veth0 entered promiscuous mode [ 291.168374][ T6101] syz.3.481: attempt to access beyond end of device [ 291.168374][ T6101] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 291.174013][ T6097] device veth0 left promiscuous mode [ 292.372267][ T6110] loop1: detected capacity change from 0 to 128 [ 292.471194][ T26] audit: type=1800 audit(1746674717.287:106): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.485" name="bus" dev="loop1" ino=1048643 res=0 errno=0 [ 292.491911][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.380252][ T4255] syz-executor: attempt to access beyond end of device [ 294.380252][ T4255] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 294.829599][ T4295] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 294.907143][ T6144] 9pnet_fd: Insufficient options for proto=fd [ 295.022076][ T4295] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.059519][ T4295] usb 3-1: config 0 interface 0 has no altsetting 0 [ 295.106882][ T4295] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 295.141739][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.179995][ T4295] usb 3-1: config 0 descriptor?? [ 295.895649][ T4295] usbhid 3-1:0.0: can't add hid device: -71 [ 295.905833][ T4295] usbhid: probe of 3-1:0.0 failed with error -71 [ 295.964067][ T4295] usb 3-1: USB disconnect, device number 6 [ 296.039522][ T4300] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 296.252809][ T4300] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.556305][ T4300] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.697122][ T4300] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.719518][ T4300] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 296.729272][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.820640][ T4300] usb 5-1: config 0 descriptor?? [ 297.288848][ T4300] usbhid 5-1:0.0: can't add hid device: -71 [ 297.390295][ T4300] usbhid: probe of 5-1:0.0 failed with error -71 [ 297.636631][ T4300] usb 5-1: USB disconnect, device number 11 [ 297.988087][ T6172] loop3: detected capacity change from 0 to 40427 [ 298.038657][ T6172] F2FS-fs (loop3): Found nat_bits in checkpoint [ 298.089683][ T6172] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 298.312463][ T6181] 9pnet_fd: Insufficient options for proto=fd [ 298.468805][ T6186] syz.3.502: attempt to access beyond end of device [ 298.468805][ T6186] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.039529][ T1170] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 299.239519][ T1170] usb 5-1: Using ep0 maxpacket: 16 [ 299.246985][ T1170] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.278657][ T1170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.299238][ T1170] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 299.330800][ T1170] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 299.360190][ T1170] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 299.399878][ T1170] usb 5-1: Manufacturer: syz [ 299.419522][ T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 299.426763][ T1170] usb 5-1: config 0 descriptor?? [ 299.621294][ T27] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.639513][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.649880][ T27] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 299.659203][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.685821][ T27] usb 2-1: config 0 descriptor?? [ 299.769952][ T4255] syz-executor: attempt to access beyond end of device [ 299.769952][ T4255] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 300.077470][ T6213] 9pnet_fd: Insufficient options for proto=fd [ 300.163483][ T6214] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 300.198265][ T6214] usb usb8: usbfs: process 6214 (syz.0.512) did not claim interface 0 before use [ 301.026167][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 301.034831][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 301.082127][ T27] usb 2-1: USB disconnect, device number 14 [ 302.004534][ T4902] usb 5-1: USB disconnect, device number 12 [ 302.252381][ T6229] block device autoloading is deprecated and will be removed. [ 303.488714][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'. [ 303.830969][ T6249] loop3: detected capacity change from 0 to 40427 [ 304.029280][ T6249] F2FS-fs (loop3): Found nat_bits in checkpoint [ 304.073593][ T6249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 304.139576][ T1170] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.352956][ T1170] usb 5-1: Using ep0 maxpacket: 32 [ 304.440248][ T6260] syz.3.524: attempt to access beyond end of device [ 304.440248][ T6260] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.688397][ T1170] usb 5-1: config 5 has no interfaces? [ 304.695619][ T4255] syz-executor: attempt to access beyond end of device [ 304.695619][ T4255] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 304.857538][ T1170] usb 5-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=76.d1 [ 304.900935][ T1170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.239425][ T1170] usb 5-1: Product: syz [ 305.243654][ T1170] usb 5-1: Manufacturer: syz [ 305.248275][ T1170] usb 5-1: SerialNumber: syz [ 305.738805][ T6266] 9pnet_fd: Insufficient options for proto=fd [ 305.772561][ T6267] bridge_slave_0: default FDB implementation only supports local addresses [ 306.646687][ T1170] usb 5-1: USB disconnect, device number 13 [ 306.850085][ T6272] overlayfs: missing 'lowerdir' [ 307.159670][ T4297] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 307.425326][ T4297] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.507813][ T4297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 307.588825][ T4297] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 307.660483][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.740442][ T4297] usb 3-1: config 0 descriptor?? [ 308.521418][ T4297] usbhid 3-1:0.0: can't add hid device: -71 [ 308.542360][ T4297] usbhid: probe of 3-1:0.0 failed with error -71 [ 308.702299][ T4297] usb 3-1: USB disconnect, device number 7 [ 308.917406][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.535'. [ 309.370162][ T6299] 9pnet_fd: Insufficient options for proto=fd [ 311.561125][ T6315] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.539'. [ 311.854452][ T6318] loop2: detected capacity change from 0 to 256 [ 312.162353][ T6318] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 312.533911][ T6308] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.539'. [ 315.272609][ T1170] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 315.639452][ T1170] usb 2-1: Using ep0 maxpacket: 16 [ 315.646810][ T1170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.664715][ T1170] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 315.674004][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.689185][ T1170] usb 2-1: config 0 descriptor?? [ 316.961645][ T6365] loop2: detected capacity change from 0 to 256 [ 317.050805][ T1170] usbhid 2-1:0.0: can't add hid device: -71 [ 317.056868][ T1170] usbhid: probe of 2-1:0.0 failed with error -71 [ 317.128444][ T1170] usb 2-1: USB disconnect, device number 15 [ 317.159893][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.688503][ T6365] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 321.344746][ T6408] loop2: detected capacity change from 0 to 40427 [ 321.465451][ T6408] F2FS-fs (loop2): Found nat_bits in checkpoint [ 321.549636][ T6408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 321.811371][ T6416] syz.2.573: attempt to access beyond end of device [ 321.811371][ T6416] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 322.003612][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 322.079615][ T4548] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 322.321215][ T4259] syz-executor: attempt to access beyond end of device [ 322.321215][ T4259] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 322.488983][ T4548] usb 2-1: config 0 has an invalid interface number: 179 but max is 1 [ 322.513289][ T4548] usb 2-1: config 0 has no interface number 1 [ 322.532686][ T4548] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 322.554798][ T4548] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 322.590344][ T4548] usb 2-1: Product: syz [ 322.608191][ T4548] usb 2-1: Manufacturer: syz [ 322.627703][ T4548] usb 2-1: SerialNumber: syz [ 322.657430][ T4548] usb 2-1: config 0 descriptor?? [ 322.681512][ T4548] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 322.699516][ T4548] gm12u320: probe of 2-1:0.0 failed with error -5 [ 322.710767][ T4548] usb-storage 2-1:0.0: USB Mass Storage device detected [ 322.771520][ T4548] usb-storage 2-1:0.0: device ignored [ 322.821533][ T4548] usb-storage 2-1:0.179: USB Mass Storage device detected [ 323.194013][ T4548] usb-storage 2-1:0.179: device ignored [ 323.270493][ T4548] usb 2-1: USB disconnect, device number 16 [ 324.242990][ T6444] loop2: detected capacity change from 0 to 256 [ 324.295341][ T6444] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 326.845093][ T6485] loop2: detected capacity change from 0 to 256 [ 326.918355][ T6485] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 327.907143][ T6497] [ 327.909787][ T6497] ============================= [ 327.914664][ T6497] WARNING: suspicious RCU usage [ 327.920027][ T6497] 6.1.137-syzkaller #0 Not tainted [ 327.925269][ T6497] ----------------------------- [ 327.930214][ T6497] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! [ 327.938967][ T6497] [ 327.938967][ T6497] other info that might help us debug this: [ 327.938967][ T6497] [ 327.949383][ T6497] [ 327.949383][ T6497] rcu_scheduler_active = 2, debug_locks = 1 [ 327.957603][ T6497] 3 locks held by syz.3.600/6497: [ 327.962740][ T6497] #0: ffffffff8db93cb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 327.971042][ T6497] #1: ffff8880794107c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x27d/0x930 [ 327.980986][ T6497] #2: ffff888072a18d40 (&wdev->mtx){+.+.}-{3:3}, at: nl80211_new_station+0x150b/0x1a00 [ 327.990974][ T6497] [ 327.990974][ T6497] stack backtrace: [ 327.996883][ T6497] CPU: 1 PID: 6497 Comm: syz.3.600 Not tainted 6.1.137-syzkaller #0 [ 328.004882][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 328.014957][ T6497] Call Trace: [ 328.018245][ T6497] [ 328.021182][ T6497] dump_stack_lvl+0x168/0x22e [ 328.025876][ T6497] ? show_regs_print_info+0x12/0x12 [ 328.031086][ T6497] ? load_image+0x3b0/0x3b0 [ 328.035727][ T6497] lockdep_rcu_suspicious+0x1dd/0x300 [ 328.041120][ T6497] sta_remove_link+0x356/0x4b0 [ 328.045904][ T6497] sta_info_free+0x50/0x670 [ 328.050435][ T6497] ? ieee80211_add_station+0x3ae/0x5d0 [ 328.055937][ T6497] ieee80211_add_station+0x3b9/0x5d0 [ 328.061252][ T6497] rdev_add_station+0x10c/0x2d0 [ 328.066117][ T6497] ? mutex_unlock+0x10/0x10 [ 328.070633][ T6497] nl80211_new_station+0x15ef/0x1a00 [ 328.075952][ T6497] ? nl80211_set_station+0x1700/0x1700 [ 328.081434][ T6497] ? netdev_run_todo+0xd1e/0xd80 [ 328.086411][ T6497] ? nl80211_pre_doit+0x4ed/0x930 [ 328.091544][ T6497] genl_family_rcv_msg_doit+0x22e/0x320 [ 328.097106][ T6497] ? end_current_label_crit_section+0x170/0x170 [ 328.103367][ T6497] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 328.109277][ T6497] ? bpf_lsm_capable+0x5/0x10 [ 328.113976][ T6497] ? security_capable+0x85/0xb0 [ 328.118848][ T6497] genl_rcv_msg+0x5f2/0x780 [ 328.123371][ T6497] ? genl_bind+0x350/0x350 [ 328.127797][ T6497] ? nl80211_set_station+0x1700/0x1700 [ 328.133318][ T6497] netlink_rcv_skb+0x1de/0x420 [ 328.138102][ T6497] ? genl_bind+0x350/0x350 [ 328.142618][ T6497] ? netlink_ack+0x1100/0x1100 [ 328.147497][ T6497] ? down_read+0x1a8/0x2d0 [ 328.151930][ T6497] genl_rcv+0x24/0x40 [ 328.155923][ T6497] netlink_unicast+0x74c/0x8c0 [ 328.160727][ T6497] netlink_sendmsg+0x89e/0xbc0 [ 328.165517][ T6497] ? netlink_getsockopt+0x540/0x540 [ 328.170824][ T6497] ? aa_sock_msg_perm+0x94/0x150 [ 328.175783][ T6497] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.181079][ T6497] ? security_socket_sendmsg+0x7c/0xa0 [ 328.186669][ T6497] ? netlink_getsockopt+0x540/0x540 [ 328.191992][ T6497] ____sys_sendmsg+0x59b/0x970 [ 328.196909][ T6497] ? __sys_sendmsg_sock+0x30/0x30 [ 328.201974][ T6497] ? __import_iovec+0x315/0x500 [ 328.206855][ T6497] ? import_iovec+0x6f/0xa0 [ 328.211373][ T6497] ___sys_sendmsg+0x21c/0x290 [ 328.216158][ T6497] ? __sys_sendmsg+0x270/0x270 [ 328.220986][ T6497] ? put_user_ifreq+0x81/0xb0 [ 328.225698][ T6497] ? __fdget+0x17c/0x200 [ 328.229965][ T6497] __se_sys_sendmsg+0x19e/0x270 [ 328.234836][ T6497] ? __se_sys_futex+0x14a/0x440 [ 328.239745][ T6497] ? __x64_sys_sendmsg+0x80/0x80 [ 328.244717][ T6497] ? lockdep_hardirqs_on+0x94/0x140 [ 328.249964][ T6497] do_syscall_64+0x4c/0xa0 [ 328.254419][ T6497] ? clear_bhb_loop+0x45/0xa0 [ 328.259120][ T6497] ? clear_bhb_loop+0x45/0xa0 [ 328.263817][ T6497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.269728][ T6497] RIP: 0033:0x7fd55bb8e969 [ 328.274176][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.293804][ T6497] RSP: 002b:00007fd55c91d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.302318][ T6497] RAX: ffffffffffffffda RBX: 00007fd55bdb6160 RCX: 00007fd55bb8e969 [ 328.310323][ T6497] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 328.318322][ T6497] RBP: 00007fd55bc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 328.326313][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.334288][ T6497] R13: 0000000000000000 R14: 00007fd55bdb6160 R15: 00007ffe7cb81cf8 [ 328.342280][ T6497] [ 328.345318][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.548055][ T6491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.739530][ T4258] Bluetooth: hci4: command 0x0406 tx timeout