last executing test programs: 29m50.866877713s ago: executing program 2 (id=59): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000100)="e02742e8680d85ff9782762f0800e59e20ebb581", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29m49.21825848s ago: executing program 2 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "d61b58"}) 29m49.044341421s ago: executing program 2 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x36ab}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x38}}, 0x0) 29m48.895480511s ago: executing program 2 (id=74): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c80, &(0x7f0000000440)={[{@fmask={'fmask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@dmask={'dmask', 0x3d, 0x8}}, {@errors_continue}, {}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 29m47.233488938s ago: executing program 2 (id=79): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 29m45.714089205s ago: executing program 2 (id=89): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="f697079a", 0x4}], 0x1, 0x0, 0x0) 29m45.655915805s ago: executing program 32 (id=89): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="f697079a", 0x4}], 0x1, 0x0, 0x0) 9m31.549795746s ago: executing program 0 (id=4903): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x38, 0x2}, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23, @local}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) 9m29.945604323s ago: executing program 0 (id=4896): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 9m27.884792041s ago: executing program 0 (id=4902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000008000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80100, 0x20) execveat(r3, 0x0, &(0x7f0000000300), &(0x7f0000000380)={[&(0x7f0000000340)='GPL\x00']}, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="000000000000ba9b100000000c00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00007400bfa200000000000007020000f8ffffffb7030000080000015982000000008200000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000100000000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 9m25.7644473s ago: executing program 0 (id=4904): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) 9m22.091708856s ago: executing program 0 (id=4912): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000010c0)="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", 0xff55}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000dc0)="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", 0x16c}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) ioctl$TCFLSH(r0, 0x540b, 0x2) 9m20.008390884s ago: executing program 0 (id=4918): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r3, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r7, &(0x7f0000000100)='./bus\x00') renameat2(r5, &(0x7f0000000080)='./bus\x00', r5, &(0x7f0000000200)='./file0\x00', 0x0) 9m4.25238338s ago: executing program 33 (id=4918): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r3, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r7, &(0x7f0000000100)='./bus\x00') renameat2(r5, &(0x7f0000000080)='./bus\x00', r5, &(0x7f0000000200)='./file0\x00', 0x0) 8m6.328553816s ago: executing program 5 (id=5039): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 8m4.842854653s ago: executing program 5 (id=5043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000008000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x80100, 0x20) execveat(r4, 0x0, &(0x7f0000000300), &(0x7f0000000380)={[&(0x7f0000000340)='GPL\x00']}, 0x100) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="000000000000ba9b100000000c00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r6, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00007400bfa200000000000007020000f8ffffffb7030000080000015982000000008200000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000100000000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 7m54.732460336s ago: executing program 5 (id=5075): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d"], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 7m53.553088231s ago: executing program 5 (id=5067): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0xc0}, 0x7f}, 0x1c) 7m52.027713057s ago: executing program 5 (id=5070): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 7m49.691587727s ago: executing program 5 (id=5079): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m32.237612002s ago: executing program 34 (id=5079): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m32.587451476s ago: executing program 6 (id=5234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {0x0}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6m32.508678357s ago: executing program 6 (id=5236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m30.945651564s ago: executing program 6 (id=5240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m28.479514334s ago: executing program 6 (id=5246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6m28.251733635s ago: executing program 6 (id=5248): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23, @local}, 0x10) accept4(r3, 0x0, 0x0, 0x0) 6m23.907235383s ago: executing program 6 (id=5262): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23, @local}, 0x10) accept4(r3, 0x0, 0x0, 0x0) 6m8.417132449s ago: executing program 35 (id=5262): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23, @local}, 0x10) accept4(r3, 0x0, 0x0, 0x0) 2m49.10307611s ago: executing program 7 (id=5877): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}}, 0x0) 2m48.93484865s ago: executing program 7 (id=5884): socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00'}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) 2m34.173369133s ago: executing program 7 (id=5895): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=ANY=[], 0x40}, {&(0x7f00000012c0)=ANY=[@ANYBLOB="340f0000240000022abd7000fbdbdf2599004200485873d441573d946d5acf938b678d5e3586be7a175a0b6d7d5bda554742fcc2b34b6f941fc9cd0761c211aa525f09e72910c3553afbfbd7f1b05fe46375b5286ccf42894cb2fc2941bbf01cfa63392d0c37750ee514c1931e7ae1d4dd5c1b3084bb3283b7293c614739f5831a009ad1204121700d5f13664e34786f2d149426b92341043a5710f8f1146beb51ed2607cb4c083a930000000800bd00ac1414bb0f8420b316dd409fcaaa050a1a4e0b4ea06c4d2cf20541c0d4a3dc9c6354be2e2c67fc9d6732739396906fa46a1148e5f53acd061528ab24863327d9a74f020b189f04e9c305a56d8f766ffcae6c30bb0c0d4c03aff38447b41831cb5c686c9a3099b5f7591c15d4ba2b3f3db251c0e7273df294f843823a55576ccda46d5102bff25069ddfd89c0990236adc10f73c4d16a031e4249c9c9e5505d9ad5c3ccdec0d70ecd59c6cf5339faac0bc5a0282b99950ac8163b0be38020c34e5ff8b330fe6f50e57873ee89a7c0d57fd5caabc91fad0254d7b5a63381d26c5df1ca3fb567f1995e965c04ac36c7cd740ceb2c0ef5e322cd02fb29e8caad7cd12a2a9b3fbe7ef641d31aa6b96331ecdb713529bab86fffaa8f5a574f290e7a475c9db74d9dd7df699405738962bd96a671065d1acac32478b1a36c03de3d6e8623f3963b56f18bccc80707afd9a6b1de1e6673477769e37593250d688005002c00000000004d000e00369c633a214244a74a24bd929a0500386985e83c3a4c546f37e61ca04648a6b1f5da447baeb60379848036cf57d91bd3a71e6d2f93deace2e4cf74881b74ee6bea224d16948ff109d100000004003c00586110cf634229906e9f7f153c343485d27a2114f87fbd9d8367ca6bc160e79d67a512233be0859be03bcbe545d891778608c8063773c3d0b2f7c7661112446a1259bf19f3274f160500717d725d8532055ce0418c5881543d1c72c2eff1cfb15b2f481ad0b55a09e603484a075cda14d2aaa0c9623471185533bb6d0ab2811eab26f3e2b27dbe2339810300d7b80335f96b452495df99d44b37e2915099c06cbc58ba7f3652769fcbceb73457a2cf8a0c7052a572f8fa9b93771b3cde772278cff47e2770284cb2bb15f376d527520ed008037b64c9686d20e988980773ad0bf33fb7b7dbea2b561f6c47fd20a6b3f99af562d099eeab0d2919073bda588c741e3feac1da8d466ac5a431b88035382aeb12360c9d65e4856dfdabeae3890506de1b18be609a59b3eb4d14cd6332984b626792a1f42eeefb04a0288e081a9023196b1a1b3d8b5d0f93725e48766373ecf140f5a91b43691d4c90357e29c2a5f452d2b4bd7262fb7856fdc00a7dad75297bf51dcd1fde1b24c16178e1ce5c35a0e17ba9fee78e9430f189a04eefbd0bc70f36b7434fb646a11e9895dcf695e13c0cf17d8c1df116de0da14aa993e6e218e0919a11bccbc0d16e5e5a1fc2b6d856488687adb1e0755575e8bf5e38a12b6ee7641348f4778a0ec366685280bc5162d22642ff773cba19cc054dfe4d2fdf7c4d7c8b6ab3042be7463c66ab364db3ea6fa9da77922d0c25effdf764560adc47a7a2f713fd3bd57f5f49bf31525256794b5b20952003b319fedc2abf7e0a432847e3556fcf598b6d1fd79f02f46afee5549dfb9073bd34de2255b2dd0490e54782f09f2d92a964889da539aa54be7dcc4e010f59eb44d4d7bdcba671b35e48776e74e7ad3c2f007fdf2169826b644addcf8e1859ada479fc5f8c47beba5fd3bba8a982e071aa5e4727b8efb26034281e21ce50aa6a9fcd4ba29015083a7bc8e798ec320ae49e4654fb7f63399b63973d4828ab6bc716d5a7d4b6a9617b9ccaaa00e850eae122f8cb883156c910babfd694db47c6c5b39bc3907f74400a83f24ace184ad7df11110550ae969e970d9c9cd508fbc2bd2aa4f7b5fe71be4e06d8bf5bc14f4d6f8cc8a09d0b39d5db7982ac3b25c9673c4aee909553bf9559a46127814ed7845f8871d403877431322c153667ff9b3159fab0abd967d5bfa8a86499dab76e957f1fcb5df72a908c35900504866cb179bbd8132a2dcf5eb9e08ce869df840eadbfd0ca42d568b58afbb86426938632484796e3eccdf4efcdb5e19fad56622f0d879ba07e9d881b4fd84a83ed26c3c4bf6ccfb9f2b986006615d321195f16776beed4bc19dcd70e3fcbdf701aba4daaa56de0179d52bc8ae1e6108c123366f6cb49e33a96084c9877bdb03cac26a9e737787652ea55297f45871b81ce0d4b1f967d0b54b95b265b6ad6ecbffe3c4ca467c9f6f01ea79a58298479267c2d6f1ab88d7dfb12560f1d3374265c2046e36e012ee5e23d885d69727707e76a114f6dbedec658b1f7fda54051aa07334dc44e4fc11aa13dd95085c26112a963b3f36a4f3685e2f6e740120c0d5b92d343b52e00c28b45ba5aef8ee69612d8aca67d80afb590587373ec00b00b370634c4ff1a2eb173eac81e002734943fe1ac0ae9f502a1d30302c36cf7e437b3e9054940f3a3cabb79c2d34f661fdfbe9205dec6f15768d0575798f330552593a06f1b6f7063b0c2ab7ae58249c19d1356de8ea1fae6d46d60f7bebb3ef54531ed5ca14bbfa370c2e09a234f0b52d7916ce555a88a58e1d7bd7aa245dcdf7aaf3aa29d5df689354b57f649712e96e69ed358ea6e5689060f4aeb9d0bd4f38d1bb76ea5d9dae1cf6224d0c8ff7198d03fd15d0996cd502326b06b6fdf277a2c36dd7c46591633717989e9316b3db0c343f5d54b979c2d60d21ff2ec70ee1dcffdae7e6baeb52779da7d97f459fe6012e61aee9592039d8c8a2be3c693c46a5f19bf14d270e5bcf9a421edc7338159556c5e88839c8479b72247ed5093315a60aa7649aca51a4ffd527fdc69982c9f8c9c4dc4bcb8d672c2951871ed63dc9cb0e5c318729040ac307cfa8526f6ac11e20efc7ff42a1c2f337a0481e29a0c447a023aea64c1e9427cb8592debae89f3faf6de32bed058463f10417d233e9ee39d5b7f93a91a67f6289bc97700a3abf1b39bc999b914c9e45df26433ce58b0f97556b88da59513c3691dac9ca728ecbb04192eead49ba423c50af92c1c60772f490debf706f0cd45c776110594ee24ae96ae05ebc865ef933fc532e50f8dd6139c83423121efff652350f0c78d449a7397f679dbee856743a475ecd3a7128d72876f0660d1049331826ec8b44030063b714784d164402ec382525619eb6c73d3035da0ab4cd1eb45935960213ed555936d0a0d293c16f450d5df48671d7ca539fb1f6f9079ebb898fd075072607c4a73af88926a96f240f53d88f06e7127a7b848e842c17f0e58cda21d4323810acfa1845bae44d35ac38b1680bb1d99e292c0a6e3fb2873b1732301b9d314cd8a5e7ea22f605d599a71d0c780f3616a31f9d085540be5082a787aa7096c49b617194e0dcc34462ea07be831c9146b58e51d32ecf175cf36943f14e6a6a51c7c27b24fc1b5f241a09049af1c84f0b34a70ce9f5ed051a349beef25de97bc7c563e23bcb170db2d9f787906756e3c8ed26137278f4e641eb5c86737a6c845b4d219aa5db259cd10f79e54b75833d9379367aa32724fc4ca2a7a749f3d0c3c8785281d3717f933ec43e8ff4c17b34b4c922df225901b8879d8f23d6e2a52773dc01bddb81f160d05237d89442329ea160625e6aa8c6f9c64da7cae39995e76b7a1f380fc25a670c55d038810f0ea0b93b6b265304cfaa45aeaedaac0dd955d25b6c5821f5df4a8b8e0492336b91a2ac078a9260e646548d3ed9947a24dc2051a581742dbde81d3ff0f2459acf4ac8a4fe4c35c945047b6990818e2f8a18af6001ae1d91828ca2434a08eda7e252723c85b1a0b50aa40489c5b0887714be6fcf057f662813a28690bb713a34c1843cb8bd4073898136afd81c2b33ce223220ae4b6be1c3b41bd3939ba59ec2d419ff562154a48f36a9d51d301c4e41b2d69396e26b81641e1783b8c2f1a0eb46570f14b145b3cbaba592a55db424e239d087bd8902ca0891b09f776fe3f35e2e416261e4f4d8e64282676de09b7ae0bb3ecde2b460c6158f2114000a4083f318cf077612415c6845ac552bd9749481c69510c49690c45d23a5a23e171de3e80a026fd7aa15bff7d3ecd8422a398e2213e0a8d8b3cc31dd697f6cfdfc52d8f842a3e307641ffd08ac32042520e68f2fcca38cf0b5ab465e0efff8b89f4cca3f9795ca890e3ada280fc24f397e514b2dc37f83cf152b999ad7f0b9da236cdd84ff23e48662250c6e7d5460d7135308d4a56858d81a2ee55456548b12b213e9c6eac388e63cad4f1082db68d6fcdf96ed2d3e6bc718ac89909a95ddef1644a7401a01e1d83dff4577511331b844b1e40ed4b22ec488a3817ee2a9686cacd5549c491da964d39c8532fd88028ad3f6676dbaa29cbf938faaa40bdf5376e7d5e6e063f8d237192f13fd4a8b6db6a7b19a87c3dc877fc8a424cdd7d8db295a6969660d0b59d9e775b31d6eec3d3fbd3ae4d68d31764bd967e131f934bd2a89f2cdd064a292093b1236da945335aa95b746729e2a0f6d269c2fcf53133e69f569778e3e7d5cc85bebfe4b1db945a76779e8c818ed6825e5665ccff74a4dcd3e1094b6bf662b8b59a79c8fd13c7de8b3b7d6f2611f759a07e642ba569a9461d968fdc82f6e0d47244ff82a68d1be1b94403373df9a339a845a3ec19d351eb2efea77793faf7af178c95184449f2f93af9ecbcbfe79d0f747a4276929d7b3ed398ee6b583016adc14fc2d12b582717497d0a376de69cbe4c0c550494ed11b9e2072b94b87aa08be14380ed15de0ec83832627a9c6f78fb492aa932214ce4430b8589cd0eed2e148c57c7fd0737a8e28dd8f4b933684b8d2eca17e54de0e639d23a0890317ff936b30b24e33b460a2adb5f4d3891f2295467a0127c5fbb8634ffb29aa5f4195a021ae7304756bb83f17ee99fb3e234f31f359204921f0bfe75cb54b51e2da88b5024b956e30accf9c67f6cc32a897583edf478b7505ff4e2a7a4b9ca019a64426e9ba04eefefc6abfc5485898ca6bac5ec2f26aae072a519a5d585e7fdb09aa1341c55e723e83dc6e9d043b084af8c37e801d12643984fe7943007d23baffe2f0331c5412a4cd9abec74032538c1ddbe9850b0a5083673095338871a78e4a574ff8820fd5e324b7b8187dc75fe679e371215a9dd8a9773bd002d83a7631bba8dfcdb3e811e445468688e2ac5761830d9779ec56fb5289dbd72b0e321b84b0dfe98c7f71d47bdce08937838b1e43b5a4bf26eaeb665a1307d78a73ace54771e159ae759dfe7241597f0b0195b17e3bc90568c5d340dc5e46d1997157f008397d1919691c4da80e2def9497aa11ef1440c49e7a3cd7576569fa165ac49c975b296179e18e66195934f8c021921f3e43b5b14d75d9d442123ad4b52ecfe6c737c864baaef0b5bbb06ff8f1c7412698b86000000000000"], 0xf34}], 0x2, 0x0, 0x0, 0x20000804}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000004540)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900042f00fe8800000000000000000000e3ff0001fe8000000000000000000000000000aa21"], 0x0) 2m33.892242445s ago: executing program 7 (id=5901): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) 2m32.340451141s ago: executing program 7 (id=5902): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) 2m31.075915466s ago: executing program 7 (id=5907): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62040200) 2m15.861870512s ago: executing program 36 (id=5907): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62040200) 19.901671535s ago: executing program 1 (id=6234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) 18.72154314s ago: executing program 1 (id=6237): syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0xd3464, 0x0, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000058ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="080100"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 18.61061671s ago: executing program 1 (id=6241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x121900, 0x8, 0x25}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 15.709629102s ago: executing program 1 (id=6258): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 15.648442843s ago: executing program 1 (id=6260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010003904000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b00010062726964676500"], 0x34}}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) 15.481004124s ago: executing program 1 (id=6262): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 7.418938088s ago: executing program 4 (id=6284): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) 7.207033929s ago: executing program 3 (id=6285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010003904000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b00010062726964676500"], 0x34}}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) 7.206900669s ago: executing program 4 (id=6286): ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000000009040000010300000009210000000122a0000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.413529452s ago: executing program 3 (id=6287): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lremovexattr(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_getattr(0x0, &(0x7f00000011c0)={0x38}, 0x38, 0x0) request_key(&(0x7f0000001300)='asymmetric\x00', &(0x7f0000001340)={'syz', 0x3}, &(0x7f0000001380)=':))!$-\x00', 0xfffffffffffffffb) 5.365489197s ago: executing program 3 (id=6289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r5, 0x40001) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendfile(r4, r5, 0x0, 0xffe3) 5.365229297s ago: executing program 4 (id=6290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) 5.365052347s ago: executing program 8 (id=6291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.389025951s ago: executing program 3 (id=6293): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x55ac, &(0x7f0000006a40)="$eJzs3M2LG/UbAPBnsrvdvv36K+LBWweKsAvN0mxf0JNVW9RiS/Hl4EmzSRrSJpllk6ZrTz14FA/+J6LgyaN/gwc96kEQD4rgQahkZrY0be3SNtm16+cDk2fmyTfPfL+zL/DMQAL4zzqa/vFbEkfiQETMRcThJPL9pNwibkecK8a+EBHHIqJyz5aU+buJfRFxMCKOjIsXNZPyrc9PjI6f+fXi7998tzh/6Iuvv9/VhQO76sWI6K0X+zd7RczaebgzV+bro04ee6dHZVyfqNHLivzN1lpe4WZ9a1w9j6faxfhs/cZgHK92641xbHeu5vn1fnHCwai9VWf8gfRafSM/brbW8tgZZHls3yrOu3mr+N92azAs6jTLeh/n5WM43IpFvrXZKtazfj2Pjf6wzBd1s2ZrcxxHZSxPF42s28znsfakV/nf7+1O/8ZmOmptDDpZPz2zUntppXa2WtvImq1h63S13muePZ0utbvjYdVhq947186ydre10sh6y+lSu9Go1mrp0vnWWqfeT2u1lVMrJ6tnlsu9E+kbl99Pu810aRxf6/RvDDvdSlzNNtLiE8vp6sqpl5fT47X03UtX0ivvXLhw6cp7H57/4PKrl956vRz0wLTSpdWTq6vV2snqam35mVv/IH3S9X9STvox1p+U8eJk+scfnu6yQSHZ7QkAPHse6P/j/v4/9P/A1D2i/49r2/T/vevl8Wz6/3ho/1+Z7P/jMfr/+dim/x+3VPr/7fvfyi70vwuh/5/h+uGpPFn/v2/q8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMf9tPDlm/nO0eL4UJn/X5l6rjxOIqISEXceYi72TdScK+ss/MP4hfvm8G0SeYXxORbL7WBEnCu3v/4/66sAAAAAe9dXt499VnTrxUt5C+C+bp49qvgxVw5/NKV6SUQsHP1lStUq45fnp1Qs//2ej80pVctvYO2fUrHiltv8tKptZzG2/tzvhv33hKQIlZ2aDgAAsHMmO4FHdSG3d2Q+AAAAzMqnj3z3lR2bBzP0588P5pLYepR595H/YhHKB4IHJt4DAAAAnkHJbk8AAAAAmLm8//f9fwAAALC3Fd//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3eTmzgMBQD4JRAY5keDRnOg2cEx5giznC1chSNwg0q9AGegUhc9QlsqEhcpLUhIONCi75NisAPPNmTzbMkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTprlpOR6eHuXnanCbHXAAAAID91tVyWr8ZN/Vvqf1HavqV6kVElBGxL3fvxaAVs5fiVAc+X70Zw21EHWHbPkzX14j4k67Hn13/CgAAAHC9VvPFpMnWmyItAdwf891hpyPjDJpFm/L730zxioioxg+ZopXb4nemYPXz3Y//maLVC1hfMgVrltz6++8NcnXS1mu9vM5kVv+Jda3spl8AAOCS2pnAgSwEAACAK/Dv0gPgHN6n9sWu2O0zpl39tCE4atUAAACAT6i49AAAAACAztX5/0c6/69w/h8AAABk15z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJfW1XK6mi8mh+7PjozzvDlNvhkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ML+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzdkIhEARRsO9T/ZONyPyjkgbFEESoAuEwwwgLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ESv48v7jE9jTfLttPHreCT5d9WYumrMPWgsPRjXf7fbXgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCzb/++bVRxAMC/9tluU0CEgCIRQEXqAAtN3dLSFSFQxMCfgBSlTgm4FNIMtIooWdhQ5i4IRoSQQGHL/9C5kbqUrUOGIDExBN35Lj3HFo0KvUubz0d6fl8/X96vWFG+fmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDU9rvxajOPk/RhchAXbXd2VhfSemtfndpcvzuTljRuVDzvJ8Br5Scnp+ubCAAAAEdHUuT3EXGvvTGX1s3JLP9vF9ekOf8Pzw3iIp/fn/dv7awez1+aKfL/33+7/9LeQJNJNk7a6eJSv3dmdCqtx7TEQ+/5h17RynY+++wlyX4hzQ/XXtxuZ/vZ+O727fc7WXisitkCAI/idFHnQfH/UFp365wYAEdGq5R4F/l/MlnvnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACqsL0WzxRxIyJmWg/i1NbO6sK4+pv1uzObeblw69Z6uc+0i3ZELC71e2cqXMvhVezmjc/m+/3e8rXrVQcnI2LMSzcP9uNJPv1BS2v0mk5EDLWcenlMPx8fYKx9/YwE+dszqt3DiXR9D724MdTSGNnw93YH6ngD9HvLnSq2rpkPUscCH3dQvPf+/54r/FMEAMCR0M5Lmonea2/MpW2NqYjdH4fz/zdKcQzl/bs3By2D55ul/P/+JxfulMcq5//ditb3JJhdufLF7LXrN95aujJ/uXe59/nbZ7vvdM9dPH/+4mz2WcnsYjR9YgIAAMB/0MlLOf9vTo2e/58oxfEv5//l/P/L77tfl8dK5P9jPTj0q3smAAAAR1FnL3rh9b/+bIy5otHpxFfzKyvL3cHj3vOzg8dKp/uIjuWlnP8nU3XPCgAAAKjC9lpj6Pz/UimOA57/P/vTK7+U+0wiYiLiakT0Ti9c7V+qbjmHWhVfVM4G6tS9UgAAAOoykZfy+X87u/+/uXfLQzMi3jwV8Xf+Hf44YP6ffPDtz+Wxyvf/n6t0lYdPc3qwH1k9HdGarntGAAAAPM2O5yVN9v9ob8x9+uuJjzru/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo2j8BAAD//82OLmU=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000004f8ff000000009500000000000000ab9b5c971f5fe9592d8b197cfdc2c5dfbb3f83e5c94b81267520e523d6dea15460b510342cac83855e0c8dcda913db5af3e93469c0fd39d701a552e3612b2ab5f5bc4e0c1247af70fa9d312ba3cb4420160346066b0b16bb044a03199bfdb662f0fd4d6007ce5f5562d3cf203efbef7540059e9b6e185c04456d8f319cb72b287ca8806d67d7f382f2e87ca8a10bfc283536726e51ae62f3468c0bcd2b01e9b624c0895b"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.333303831s ago: executing program 8 (id=6295): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 3.292185986s ago: executing program 9 (id=6296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) timerfd_create(0x7, 0x80000) 3.226009936s ago: executing program 8 (id=6297): r0 = socket(0x11, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0, 0x1308}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c8c4) 3.145516117s ago: executing program 9 (id=6298): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) fadvise64(r2, 0x0, 0x0, 0x3) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r1, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2.991125497s ago: executing program 8 (id=6299): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @main=@item_4={0x3, 0x0, 0x0, "0d34b68a"}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.093316351s ago: executing program 9 (id=6300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.953548002s ago: executing program 9 (id=6301): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_disconnect(r0) 1.224847754s ago: executing program 8 (id=6302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, {0x3, 0x21, "ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.060075535s ago: executing program 3 (id=6303): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 945.493556ms ago: executing program 4 (id=6304): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000, 0x41, 0xc, 0xffc00000, 0x1003, 0x4}}}}]}, 0x4c}}, 0x0) 908.549306ms ago: executing program 4 (id=6305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c00028005000100000000002400028014000180080001007f00000108000200ac1414aa0c000280050001000000000008000740000000002c000e800c00028005000100000000001400018008000100ac1414aa080002798f1fcb0983cda285caac0e79b5ff809d662e1832"], 0x90}}, 0x4004040) 716.168637ms ago: executing program 9 (id=6306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 463.366048ms ago: executing program 37 (id=6262): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 456.516368ms ago: executing program 9 (id=6308): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 447.432898ms ago: executing program 3 (id=6309): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000006b80)="$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") openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c40)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffffe}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}], [{@obj_type}]}, 0x1, 0x5f0, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x800, 0x100) 447.268188ms ago: executing program 8 (id=6317): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 4 (id=6310): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") kernel console output (not intermixed with test programs): netlink: 4 bytes leftover after parsing attributes in process `syz.8.5572'. [ 1550.753640][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5572'. [ 1550.757757][T23099] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5572'. [ 1551.025957][T20188] Bluetooth: hci2: link tx timeout [ 1551.027160][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1552.687834][T20188] Bluetooth: hci2: link tx timeout [ 1552.689067][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1552.691931][T20188] Bluetooth: hci2: link tx timeout [ 1552.692989][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1552.971394][ T27] audit: type=1326 audit(1552.948:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23122 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb4a1a8 code=0x7ffc0000 [ 1553.001920][ T27] audit: type=1326 audit(1552.948:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23122 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb4a1a8 code=0x7ffc0000 [ 1553.702678][T20188] Bluetooth: hci2: link tx timeout [ 1553.703902][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1553.957759][ T27] audit: type=1326 audit(1553.928:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23142 comm="syz.1.5594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb4a1a8 code=0x7ffc0000 [ 1553.992503][ T27] audit: type=1326 audit(1553.928:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23142 comm="syz.1.5594" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb4a1a8 code=0x7ffc0000 [ 1554.558030][T23150] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5585'. [ 1554.602350][T20188] Bluetooth: hci2: link tx timeout [ 1554.603591][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1554.773673][T20188] Bluetooth: hci2: link tx timeout [ 1554.774880][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1554.862225][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5592'. [ 1554.906745][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5592'. [ 1554.915991][T23173] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5592'. [ 1556.677386][ T27] audit: type=1326 audit(1556.498:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23185 comm="syz.7.5597" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1556.681957][ T27] audit: type=1326 audit(1556.498:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23185 comm="syz.7.5597" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1556.791321][T20188] Bluetooth: hci2: link tx timeout [ 1556.792439][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1557.582642][T23219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5608'. [ 1557.597491][T23219] device bridge_slave_1 left promiscuous mode [ 1557.599559][T23219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.989612][ T27] audit: type=1326 audit(1557.968:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23223 comm="syz.7.5611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1559.414333][T23232] tipc: Enabling of bearer rejected, already enabled [ 1559.607822][T23230] netlink: 'syz.1.5610': attribute type 13 has an invalid length. [ 1559.609495][T23230] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5610'. [ 1559.613626][T23230] syz_tun: refused to change device tx_queue_len [ 1559.615083][T23230] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1559.641187][ T27] audit: type=1326 audit(1557.968:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23223 comm="syz.7.5611" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1559.701341][T20188] Bluetooth: hci2: link tx timeout [ 1559.703583][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1559.804470][T20188] Bluetooth: hci2: link tx timeout [ 1559.805565][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1560.797326][T20188] Bluetooth: hci2: link tx timeout [ 1560.798973][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1560.810632][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1560.888177][T23258] tipc: Enabled bearer , priority 0 [ 1560.953296][T23258] tipc: Resetting bearer [ 1561.197775][ T27] audit: type=1326 audit(1561.178:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23264 comm="syz.8.5624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1561.227704][ T27] audit: type=1326 audit(1561.178:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23264 comm="syz.8.5624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1561.761572][T20188] Bluetooth: hci2: link tx timeout [ 1561.762689][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1561.978586][T23257] tipc: Resetting bearer [ 1573.782270][T23257] tipc: Disabling bearer [ 1573.874115][T23297] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5637'. [ 1573.888179][T23299] device bridge_slave_1 left promiscuous mode [ 1573.889640][T23299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.935903][T23301] tipc: Enabling of bearer rejected, already enabled [ 1573.937710][T23300] netlink: 'syz.7.5635': attribute type 13 has an invalid length. [ 1573.939496][T23300] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5635'. [ 1573.943476][T23300] syz_tun: refused to change device tx_queue_len [ 1573.945247][T23300] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1574.384810][ T27] audit: type=1326 audit(1574.298:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23315 comm="syz.7.5641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1574.430087][ T27] audit: type=1326 audit(1574.298:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23315 comm="syz.7.5641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1575.066485][T23335] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5646'. [ 1575.533837][T23361] tipc: Enabling of bearer rejected, already enabled [ 1575.585377][T23361] netlink: 'syz.8.5651': attribute type 13 has an invalid length. [ 1575.587202][T23361] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5651'. [ 1575.593443][T23361] syz_tun: refused to change device tx_queue_len [ 1575.594972][T23361] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1576.139249][T23364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5655'. [ 1577.038260][ T27] audit: type=1326 audit(1576.508:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.7.5658" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1577.108249][ T27] audit: type=1326 audit(1576.508:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.7.5658" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1577.263039][T23388] tipc: Enabled bearer , priority 0 [ 1577.321978][T23388] tipc: Resetting bearer [ 1577.384657][T23386] tipc: Resetting bearer [ 1577.843747][ T27] audit: type=1326 audit(1577.818:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23425 comm="syz.7.5675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1577.860249][ T27] audit: type=1326 audit(1577.818:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23425 comm="syz.7.5675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1589.281784][T23386] tipc: Disabling bearer [ 1590.473395][ T4308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1590.477701][ T4308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1590.484492][ T4308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1590.501970][ T4308] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1590.569214][ T4308] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1590.571736][ T4308] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1590.984190][ T27] audit: type=1326 audit(1590.848:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.5686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1591.016569][ T27] audit: type=1326 audit(1590.848:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.5686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1591.606199][ T4308] Bluetooth: hci2: link tx timeout [ 1591.607381][ T4308] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1591.609372][ T4308] Bluetooth: hci2: link tx timeout [ 1591.610725][ T4308] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1591.653157][T23473] chnl_net:caif_netlink_parms(): no params data found [ 1591.657696][T23503] tipc: Enabled bearer , priority 0 [ 1591.710143][T23503] tipc: Resetting bearer [ 1591.720026][T23508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5691'. [ 1591.986784][T23502] tipc: Resetting bearer [ 1592.216519][ T27] audit: type=1326 audit(1592.188:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23529 comm="syz.4.5698" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1592.270977][ T27] audit: type=1326 audit(1592.188:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23529 comm="syz.4.5698" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1592.766526][ T4308] Bluetooth: hci3: command tx timeout [ 1592.798925][ T47] Bluetooth: hci2: link tx timeout [ 1592.800159][ T47] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1592.801753][ T47] Bluetooth: hci2: link tx timeout [ 1592.802780][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1592.869283][ T47] Bluetooth: hci2: link tx timeout [ 1592.870404][ T47] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1592.872052][ T47] Bluetooth: hci2: link tx timeout [ 1592.873130][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1593.614172][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 1594.814171][T20188] Bluetooth: hci3: command tx timeout [ 1596.894140][T20188] Bluetooth: hci3: command tx timeout [ 1598.974107][ T47] Bluetooth: hci3: command tx timeout [ 1603.542109][T23502] tipc: Disabling bearer [ 1603.638919][ T4892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.874767][ T4892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.224732][ T27] audit: type=1326 audit(1605.138:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23580 comm="syz.7.5710" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1605.232220][ T27] audit: type=1326 audit(1605.138:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23580 comm="syz.7.5710" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1605.404470][T23473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.410529][T23473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.414833][T23473] device bridge_slave_0 entered promiscuous mode [ 1605.430485][T23473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.432473][T23473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.465729][T23473] device bridge_slave_1 entered promiscuous mode [ 1605.477811][T23592] tipc: Enabled bearer , priority 0 [ 1605.554855][T23597] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 1605.570389][T23592] tipc: Resetting bearer [ 1605.587938][T23473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.599679][T23591] tipc: Resetting bearer [ 1610.746310][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.021353][T23591] tipc: Disabling bearer [ 1617.071842][T23473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.104573][T23618] netlink: 'syz.7.5719': attribute type 13 has an invalid length. [ 1617.106283][T23618] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5719'. [ 1617.109615][T23618] syz_tun: refused to change device tx_queue_len [ 1617.110917][T23618] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1617.118413][T23473] team0: Port device team_slave_0 added [ 1617.138108][T23473] team0: Port device team_slave_1 added [ 1617.266080][ T4892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.311784][T23473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.314243][T23473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.327552][T23473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.341610][T23473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.343083][T23473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.370506][T23473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.759736][ T4892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.816330][ T27] audit: type=1326 audit(1618.708:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.3.5727" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1618.835882][ T27] audit: type=1326 audit(1618.708:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.3.5727" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1619.083590][T23473] device hsr_slave_0 entered promiscuous mode [ 1619.167389][T23473] device hsr_slave_1 entered promiscuous mode [ 1619.269278][T23473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1619.270823][T23473] Cannot create hsr debugfs directory [ 1619.290592][T20188] Bluetooth: hci2: link tx timeout [ 1619.291617][T20188] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1619.293160][T20188] Bluetooth: hci2: link tx timeout [ 1619.294398][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1620.105421][T23668] tipc: Enabling of bearer rejected, already enabled [ 1620.107111][T23669] netlink: 'syz.8.5731': attribute type 13 has an invalid length. [ 1620.108772][T23669] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5731'. [ 1620.111402][T23669] syz_tun: refused to change device tx_queue_len [ 1620.112773][T23669] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1620.429212][ T4892] tipc: Disabling bearer [ 1620.430699][ T4892] tipc: Left network mode [ 1620.741118][ T27] audit: type=1326 audit(1620.708:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23693 comm="syz.7.5740" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1620.749106][ T27] audit: type=1326 audit(1620.718:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23693 comm="syz.7.5740" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1621.844112][ T27] audit: type=1326 audit(1621.798:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.8.5750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1623.203600][ T27] audit: type=1326 audit(1621.798:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.8.5750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1624.184621][T23761] tipc: Enabling of bearer rejected, already enabled [ 1624.734315][T23761] netlink: 'syz.4.5756': attribute type 13 has an invalid length. [ 1624.736037][T23761] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5756'. [ 1624.739878][T23761] syz_tun: refused to change device tx_queue_len [ 1624.741235][T23761] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1625.044141][ T27] audit: type=1326 audit(1623.948:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.8.5757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1625.048785][ T27] audit: type=1326 audit(1623.948:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.8.5757" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1625.186634][T20188] Bluetooth: hci2: link tx timeout [ 1625.187889][T20188] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1625.189755][T20188] Bluetooth: hci2: link tx timeout [ 1625.190813][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1625.703222][ T27] audit: type=1326 audit(1625.668:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.7.5768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1625.723467][ T27] audit: type=1326 audit(1625.668:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.7.5768" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1627.726734][T20188] Bluetooth: hci2: link tx timeout [ 1627.727912][T20188] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1627.729489][T20188] Bluetooth: hci2: link tx timeout [ 1627.730537][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1628.888244][ T27] audit: type=1326 audit(1628.858:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.8.5783" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1629.458702][ T27] audit: type=1326 audit(1628.858:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.8.5783" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1629.474086][T20188] Bluetooth: hci2: link tx timeout [ 1629.475291][T20188] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1629.476844][T20188] Bluetooth: hci2: link tx timeout [ 1629.477915][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1630.588365][T23864] tipc: Enabled bearer , priority 0 [ 1630.598829][T23851] tipc: Disabling bearer [ 1630.720222][T23473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1630.785893][T23473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1634.296400][ T27] audit: type=1326 audit(1632.718:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23884 comm="syz.4.5796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1634.302832][ T27] audit: type=1326 audit(1632.718:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23884 comm="syz.4.5796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1635.583002][T23473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1635.625514][T23897] tipc: Enabling of bearer rejected, already enabled [ 1635.627304][T23473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1635.670258][T23899] netlink: 'syz.3.5795': attribute type 13 has an invalid length. [ 1635.672024][T23899] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1635.674920][T23899] syz_tun: refused to change device tx_queue_len [ 1635.676244][T23899] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1635.874642][ T4892] device hsr_slave_0 left promiscuous mode [ 1635.905482][ T4892] device hsr_slave_1 left promiscuous mode [ 1635.984274][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.985983][ T4892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.988222][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.989854][ T4892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.991916][ T4892] device bridge_slave_0 left promiscuous mode [ 1635.993380][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.144385][ T4892] device veth1_macvtap left promiscuous mode [ 1636.145674][ T4892] device veth0_macvtap left promiscuous mode [ 1636.147081][ T4892] device veth1_vlan left promiscuous mode [ 1636.148389][ T4892] device veth0_vlan left promiscuous mode [ 1636.314557][ T4892] bond3 (unregistering): Released all slaves [ 1636.321053][ T4892] bond2 (unregistering): Released all slaves [ 1637.220599][ T4892] bond1 (unregistering): Released all slaves [ 1639.230503][ T4892] team0 (unregistering): Port device team_slave_1 removed [ 1639.445990][ T4892] team0 (unregistering): Port device team_slave_0 removed [ 1639.675967][ T4892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.936506][ T4892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.563100][ T4892] bond0 (unregistering): Released all slaves [ 1642.941164][T23473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1642.950320][T23473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.980954][T23473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1642.983307][T23473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1643.008654][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1643.010694][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1643.012670][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1643.061533][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1643.063618][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.065089][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.264408][ T27] audit: type=1326 audit(1643.208:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.4.5810" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1644.714177][ T27] audit: type=1326 audit(1643.208:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.4.5810" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1644.718961][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1644.724482][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1644.729116][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.730603][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.732463][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1644.794476][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1644.800246][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1644.806913][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1644.811833][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1644.825412][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1644.827744][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1644.829936][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1644.832230][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1644.848882][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1644.858548][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1644.860683][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1644.864775][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1644.876647][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5815'. [ 1645.323934][T23973] tipc: Enabling of bearer rejected, already enabled [ 1645.383505][T23973] netlink: 'syz.7.5817': attribute type 13 has an invalid length. [ 1645.385451][T23973] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5817'. [ 1645.391691][T23973] syz_tun: refused to change device tx_queue_len [ 1645.393125][T23973] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1645.963067][T23473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1646.029338][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1646.031139][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1646.320007][T23990] tipc: Enabled bearer , priority 0 [ 1646.321751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1646.325396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1646.343812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1646.346574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1646.353039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1646.373012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1646.391390][T23982] tipc: Disabling bearer [ 1646.526897][T23473] device veth0_vlan entered promiscuous mode [ 1646.536223][T23473] device veth1_vlan entered promiscuous mode [ 1646.548980][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1646.551250][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1646.553515][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1647.996164][ T27] audit: type=1326 audit(1646.688:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23995 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1648.000646][ T27] audit: type=1326 audit(1646.688:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23995 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1648.054752][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1648.058728][T23473] device veth0_macvtap entered promiscuous mode [ 1648.062459][T23473] device veth1_macvtap entered promiscuous mode [ 1648.080524][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1648.082658][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1648.201953][T24015] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5831'. [ 1648.211854][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.214729][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.216915][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.223687][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.230618][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.260738][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.263868][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.273227][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.287433][T23473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.291360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1648.303981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1648.323772][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.326501][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.328434][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.330654][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.332659][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.335436][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.337707][T23473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.340511][T23473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.343661][T23473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.347138][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1648.349476][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1648.375010][T23473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.376998][T23473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.378880][T23473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.381143][T23473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.349008][ T4612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.353491][ T4612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.368317][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1649.410153][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.412284][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.591711][ T27] audit: type=1326 audit(1651.518:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24041 comm="syz.8.5838" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1651.624100][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1651.627303][T24045] tipc: Enabling of bearer rejected, already enabled [ 1651.629038][T24047] netlink: 'syz.4.5834': attribute type 13 has an invalid length. [ 1651.630778][T24047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5834'. [ 1651.631931][ T27] audit: type=1326 audit(1651.518:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24041 comm="syz.8.5838" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1651.633415][T24047] syz_tun: refused to change device tx_queue_len [ 1651.639099][T24047] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1651.963624][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1651.967284][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1651.969695][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1651.971868][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1651.975049][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1651.977330][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1654.014226][ T47] Bluetooth: hci5: command tx timeout [ 1656.094268][ T47] Bluetooth: hci5: command tx timeout [ 1658.174134][ T47] Bluetooth: hci5: command tx timeout [ 1659.475811][ T47] Bluetooth: hci2: link tx timeout [ 1659.477066][ T47] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1659.478592][ T47] Bluetooth: hci2: link tx timeout [ 1659.479646][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1660.254144][ T47] Bluetooth: hci5: command tx timeout [ 1664.841789][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5847'. [ 1665.195537][ T27] audit: type=1326 audit(1665.168:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.8.5850" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1666.798306][ T27] audit: type=1326 audit(1665.168:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.8.5850" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1668.756103][ T27] audit: type=1326 audit(1668.218:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24120 comm="syz.8.5866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1668.760884][ T27] audit: type=1326 audit(1668.228:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24120 comm="syz.8.5866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1669.239676][ T27] audit: type=1326 audit(1669.188:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.7.5861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1669.354520][ T27] audit: type=1326 audit(1669.188:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.7.5861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1669.527547][ T27] audit: type=1326 audit(1669.208:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.7.5861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=232 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1669.768277][ T27] audit: type=1326 audit(1669.208:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.7.5861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1669.772605][ T27] audit: type=1326 audit(1669.208:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.7.5861" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e94a1a8 code=0x7ffc0000 [ 1670.000367][T24079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.018146][ T27] audit: type=1326 audit(1670.998:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.8.5869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1671.023956][ T27] audit: type=1326 audit(1670.998:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.8.5869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1672.794645][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1672.837075][T24079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.900286][T24060] chnl_net:caif_netlink_parms(): no params data found [ 1676.088847][ T27] audit: type=1326 audit(1675.638:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.8.5881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1676.102045][ T27] audit: type=1326 audit(1675.638:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24176 comm="syz.8.5881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1676.138870][T24079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.143216][ T27] audit: type=1326 audit(1676.058:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.3.5873" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1676.147896][ T27] audit: type=1326 audit(1676.058:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.3.5873" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1676.360633][T24079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.389167][T24060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.391511][T24060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.405736][T24060] device bridge_slave_0 entered promiscuous mode [ 1676.413647][T24060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.421512][T24060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.425312][T24060] device bridge_slave_1 entered promiscuous mode [ 1676.493505][T24060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.513261][T24060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.577901][T24060] team0: Port device team_slave_0 added [ 1678.402325][ T27] audit: type=1326 audit(1677.648:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24215 comm="syz.8.5886" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1678.562189][ T27] audit: type=1326 audit(1677.648:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24215 comm="syz.8.5886" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1680.323292][ T27] audit: type=1326 audit(1680.258:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.8.5891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1680.332719][ T27] audit: type=1326 audit(1680.258:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.8.5891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1680.561179][ T27] audit: type=1326 audit(1680.288:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.8.5891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=232 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1680.668284][ T27] audit: type=1326 audit(1680.288:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.8.5891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1691.149480][T24060] team0: Port device team_slave_1 added [ 1691.275239][T24060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.276664][T24060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.281680][T24060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.428107][T24060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.429571][T24060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.445614][T24060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.669585][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1691.669686][ T27] audit: type=1326 audit(1691.648:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24253 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1692.966643][ T27] audit: type=1326 audit(1691.648:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24253 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1693.195560][T24060] device hsr_slave_0 entered promiscuous mode [ 1693.274800][T24060] device hsr_slave_1 entered promiscuous mode [ 1695.889835][ T27] audit: type=1326 audit(1695.868:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24332 comm="syz.4.5913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1695.911621][ T27] audit: type=1326 audit(1695.868:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24332 comm="syz.4.5913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1698.782219][ T27] audit: type=1326 audit(1698.758:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24381 comm="syz.4.5927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1698.791176][ T27] audit: type=1326 audit(1698.758:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24381 comm="syz.4.5927" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1709.652210][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1709.658493][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1709.660890][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1709.663197][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1709.666188][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1709.667985][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1711.189181][ T27] audit: type=1326 audit(1711.168:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24413 comm="syz.4.5934" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x0 [ 1712.178388][ T27] audit: type=1326 audit(1711.348:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24421 comm="syz.3.5937" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1712.195408][ T47] Bluetooth: hci3: command tx timeout [ 1712.214193][ T27] audit: type=1326 audit(1711.348:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24421 comm="syz.3.5937" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1712.411674][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1712.421607][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1712.427951][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1712.430211][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1712.432281][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1712.434660][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1714.254273][ T47] Bluetooth: hci3: command tx timeout [ 1714.504288][T20188] Bluetooth: hci6: command tx timeout [ 1716.334437][T20188] Bluetooth: hci3: command tx timeout [ 1716.574156][ T47] Bluetooth: hci6: command tx timeout [ 1718.414418][T20188] Bluetooth: hci3: command tx timeout [ 1718.654125][ T47] Bluetooth: hci6: command tx timeout [ 1720.734103][ T47] Bluetooth: hci6: command tx timeout [ 1725.075005][ T27] audit: type=1326 audit(1725.028:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24456 comm="syz.4.5946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1725.081644][ T27] audit: type=1326 audit(1725.028:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24456 comm="syz.4.5946" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1725.806421][T20188] Bluetooth: hci2: link tx timeout [ 1725.807569][T20188] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1725.809643][T20188] Bluetooth: hci2: link tx timeout [ 1725.811014][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1727.048919][ T27] audit: type=1326 audit(1726.348:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24464 comm="syz.3.5956" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1727.053477][ T27] audit: type=1326 audit(1726.348:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24464 comm="syz.3.5956" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x7ffc0000 [ 1727.571640][T24432] chnl_net:caif_netlink_parms(): no params data found [ 1727.683016][T24079] device hsr_slave_0 left promiscuous mode [ 1727.734833][T24079] device hsr_slave_1 left promiscuous mode [ 1727.824335][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1727.825957][T24079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.829591][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1727.831175][T24079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.833198][T24079] device bridge_slave_1 left promiscuous mode [ 1727.835836][T24079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.897311][T24079] device bridge_slave_0 left promiscuous mode [ 1727.898643][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.054329][T24079] device veth1_macvtap left promiscuous mode [ 1728.055690][T24079] device veth0_macvtap left promiscuous mode [ 1728.056892][T24079] device veth1_vlan left promiscuous mode [ 1728.058293][T24079] device veth0_vlan left promiscuous mode [ 1730.160851][T24079] team0 (unregistering): Port device team_slave_1 removed [ 1730.357487][T24079] team0 (unregistering): Port device team_slave_0 removed [ 1730.561801][T24079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.756247][T24079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1733.372878][T24079] bond0 (unregistering): Released all slaves [ 1733.626157][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1733.649015][T24432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.650567][T24432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.652704][T24432] device bridge_slave_0 entered promiscuous mode [ 1733.657746][T24432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.659341][T24432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.661664][T24432] device bridge_slave_1 entered promiscuous mode [ 1733.686861][T24399] chnl_net:caif_netlink_parms(): no params data found [ 1733.692354][T24432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.717961][T24432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.747565][T24432] team0: Port device team_slave_0 added [ 1733.767796][T24432] team0: Port device team_slave_1 added [ 1733.859889][T24432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.861347][T24432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.866985][T24432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.869855][T24399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.871379][T24399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.873761][T24399] device bridge_slave_0 entered promiscuous mode [ 1733.878284][T24399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.879900][T24399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.881930][T24399] device bridge_slave_1 entered promiscuous mode [ 1733.884618][T24432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.886127][T24432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.891204][T24432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.986165][T24432] device hsr_slave_0 entered promiscuous mode [ 1734.015630][T24432] device hsr_slave_1 entered promiscuous mode [ 1734.044592][T24432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1734.046315][T24432] Cannot create hsr debugfs directory [ 1734.049988][T24399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.145925][T24399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.174911][T24399] team0: Port device team_slave_0 added [ 1734.187397][T24399] team0: Port device team_slave_1 added [ 1734.221599][T24399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.223258][T24399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.229707][T24399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.243894][T24399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1734.245910][T24399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.251094][T24399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.385911][T24399] device hsr_slave_0 entered promiscuous mode [ 1734.425555][T24399] device hsr_slave_1 entered promiscuous mode [ 1734.464132][T24399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1734.465801][T24399] Cannot create hsr debugfs directory [ 1734.517238][T24432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1734.570960][T24432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1734.611261][T24432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1734.637926][T24432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1735.047608][T24399] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1735.080879][T24399] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1735.107720][T24399] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1735.145899][T24399] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1735.258196][T24079] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.273419][T24432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.283325][T24432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1735.285837][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1735.287940][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1735.306918][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1735.309262][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1735.311893][T14469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.313380][T14469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1735.355685][T24079] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.359423][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1735.361561][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1735.363655][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1735.365955][T14469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.367446][T14469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.370379][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1735.390197][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1735.405693][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1735.410273][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1735.412620][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1735.415938][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1735.418096][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1735.420163][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1735.486865][T24079] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.502102][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1735.511134][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1735.513389][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1735.521315][T24399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.526151][T24432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1735.576667][T24079] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.589529][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1735.591517][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1735.603908][T24399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1735.608513][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1735.610705][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1735.612685][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.614269][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1735.628078][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1735.633956][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1735.636411][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1735.638413][T14469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.639900][T14469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.650316][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1735.656133][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1735.661083][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1735.668333][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1735.674764][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1735.679019][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1735.681324][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1735.695265][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1735.697818][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1735.702627][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1735.705735][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1735.710197][T24399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1735.717910][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1735.719620][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1735.726091][T24432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.768454][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1735.770761][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1735.803822][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1735.814969][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1735.817331][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1735.821240][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1735.825851][T24432] device veth0_vlan entered promiscuous mode [ 1735.831957][T24432] device veth1_vlan entered promiscuous mode [ 1735.853331][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1735.863255][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1735.884645][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1735.886819][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1735.891913][T24432] device veth0_macvtap entered promiscuous mode [ 1735.904451][T24432] device veth1_macvtap entered promiscuous mode [ 1735.924782][T24079] tipc: Disabling bearer [ 1735.926415][T24079] tipc: Left network mode [ 1735.941342][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.943636][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.956762][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.958839][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.960796][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.962822][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.972732][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.975038][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.978311][T24432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.981771][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1735.983951][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1735.999016][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1736.002476][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1736.011994][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1736.013793][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1736.016961][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.019146][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.021193][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.023328][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.027049][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.029169][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.031166][T24432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.033247][T24432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.039021][T24432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1736.041513][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1736.043752][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1736.049406][T24399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1736.053512][T24432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.056383][T24432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.058199][T24432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.065400][T24432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.312219][ T4612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.315211][ T4612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.319945][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1736.333207][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.337292][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.380527][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1736.391877][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1736.395065][T14469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1736.473393][T24399] device veth0_vlan entered promiscuous mode [ 1736.489377][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1736.491586][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1736.493941][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1736.499495][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1736.700829][T24399] device veth1_vlan entered promiscuous mode [ 1736.749480][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1736.751646][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1737.613353][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1737.616832][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1737.699101][T24399] device veth0_macvtap entered promiscuous mode [ 1737.717404][T24399] device veth1_macvtap entered promiscuous mode [ 1738.079661][ T27] audit: type=1326 audit(1738.008:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.1.5959" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad14a1a8 code=0x7ffc0000 [ 1738.894225][ T27] audit: type=1326 audit(1738.008:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.1.5959" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad14a1a8 code=0x7ffc0000 [ 1738.908964][ T27] audit: type=1326 audit(1738.038:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24600 comm="syz.8.5958" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x0 [ 1739.156361][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.158670][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.160712][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.162877][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.174182][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.176429][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.180340][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.182650][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.225897][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1739.228295][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1739.918994][T24399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1739.920777][T19443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1739.923193][T19443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1739.926111][T19443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1739.933506][T19443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1739.964412][T24079] device gretap0 left promiscuous mode [ 1739.967495][T24079] bridge0: port 3(vlan2) entered disabled state [ 1740.076171][T24079] device vlan2 left promiscuous mode [ 1740.077644][T24079] bridge0: port 3(vlan2) entered disabled state [ 1740.135571][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.137705][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.139611][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.150065][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.152259][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.155728][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.157719][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.159929][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.162042][T24399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.170972][T24399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.179873][T24399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1740.192017][T24399] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.196518][T24399] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.198350][T24399] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.200338][T24399] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.232305][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1740.234782][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1740.585011][ T27] audit: type=1326 audit(1740.578:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24638 comm="syz.4.5972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1741.923205][ T27] audit: type=1326 audit(1740.578:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24638 comm="syz.4.5972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1742.253928][T16334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.256669][T16334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.262005][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1742.293002][T13720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.297051][T13720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.504933][ T27] audit: type=1326 audit(1742.448:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.3.5977" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x0 [ 1743.855141][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1745.012742][ T27] audit: type=1326 audit(1744.608:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24701 comm="syz.4.5985" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1745.099298][ T27] audit: type=1326 audit(1744.608:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24701 comm="syz.4.5985" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f14a1a8 code=0x7ffc0000 [ 1746.319395][T24720] tipc: Enabled bearer , priority 0 [ 1746.355808][T24719] tipc: Disabling bearer [ 1746.585815][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1746.590252][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1746.592742][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1746.601253][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1746.604109][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1746.606168][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1746.791531][T24079] device hsr_slave_0 left promiscuous mode [ 1748.047963][ T27] audit: type=1326 audit(1748.018:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24745 comm="syz.9.5997" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb4a1a8 code=0x7ffc0000 [ 1748.187126][ T27] audit: type=1326 audit(1748.018:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24745 comm="syz.9.5997" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb4a1a8 code=0x7ffc0000 [ 1748.256716][T24079] device hsr_slave_1 left promiscuous mode [ 1748.464283][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.466049][T24079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.468451][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.470139][T24079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.483122][T24079] device bridge_slave_0 left promiscuous mode [ 1748.485044][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.543243][T24079] device hsr_slave_0 left promiscuous mode [ 1748.598235][T24079] device hsr_slave_1 left promiscuous mode [ 1748.644768][T24079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.647219][T24079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.649815][T24079] device bridge_slave_1 left promiscuous mode [ 1748.651638][T24079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.654392][ T47] Bluetooth: hci0: command tx timeout [ 1748.705325][T24079] device bridge_slave_0 left promiscuous mode [ 1748.706847][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.854355][T24079] device veth1_macvtap left promiscuous mode [ 1748.855650][T24079] device veth0_macvtap left promiscuous mode [ 1748.856981][T24079] device veth1_vlan left promiscuous mode [ 1748.858207][T24079] device veth0_vlan left promiscuous mode [ 1749.286850][T24079] bond2 (unregistering): Released all slaves [ 1749.293522][T24079] bond1 (unregistering): Released all slaves [ 1750.734225][ T47] Bluetooth: hci0: command tx timeout [ 1751.400508][T24079] team0 (unregistering): Port device team_slave_1 removed [ 1751.587466][T24079] team0 (unregistering): Port device team_slave_0 removed [ 1751.807656][T24079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.067492][T24079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.814851][ T47] Bluetooth: hci0: command tx timeout [ 1754.694552][T24079] bond0 (unregistering): Released all slaves [ 1754.894108][T20188] Bluetooth: hci0: command tx timeout [ 1755.279441][T24079] team0 (unregistering): Port device team_slave_1 removed [ 1755.398277][T24079] team0 (unregistering): Port device team_slave_0 removed [ 1755.496364][T24079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1755.636192][T24079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1755.971215][T24079] bond0 (unregistering): Released all slaves [ 1756.324674][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1757.925216][ T27] audit: type=1326 audit(1756.798:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24798 comm="syz.8.6008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1757.930921][ T27] audit: type=1326 audit(1756.798:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24798 comm="syz.8.6008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1758.469114][T24736] chnl_net:caif_netlink_parms(): no params data found [ 1758.493430][T24827] tipc: Started in network mode [ 1758.494640][T24827] tipc: Node identity b2cc09020a23, cluster identity 4711 [ 1758.496189][T24827] tipc: Enabled bearer , priority 0 [ 1758.641501][T24826] tipc: Disabling bearer [ 1759.485010][T24736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.486713][T24736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.490725][T24736] device bridge_slave_0 entered promiscuous mode [ 1759.545406][T24736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.547301][T24736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.585271][T24736] device bridge_slave_1 entered promiscuous mode [ 1759.635489][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1759.654627][T24736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.695477][T24736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1759.897137][T24736] team0: Port device team_slave_0 added [ 1759.949878][T24736] team0: Port device team_slave_1 added [ 1760.326330][ T27] audit: type=1326 audit(1760.288:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24863 comm="syz.9.6023" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb4a1a8 code=0x7ffc0000 [ 1760.364637][ T27] audit: type=1326 audit(1760.288:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24863 comm="syz.9.6023" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb4a1a8 code=0x7ffc0000 [ 1760.845352][T24736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.846868][T24736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.908039][T24736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.939746][T24736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.941315][T24736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.961411][T24736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1761.166043][T24736] device hsr_slave_0 entered promiscuous mode [ 1761.205568][T24736] device hsr_slave_1 entered promiscuous mode [ 1761.965908][T24887] tipc: Started in network mode [ 1761.966993][T24887] tipc: Node identity da090a0852cf, cluster identity 4711 [ 1761.968509][T24887] tipc: Enabled bearer , priority 0 [ 1762.044599][T24885] tipc: Disabling bearer [ 1762.912342][T24736] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.957198][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1763.127297][T24736] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.381929][T24736] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.495226][ T27] audit: type=1326 audit(1763.468:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.9.6034" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb4a1a8 code=0x7ffc0000 [ 1763.521242][ T27] audit: type=1326 audit(1763.468:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.9.6034" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb4a1a8 code=0x7ffc0000 [ 1764.226096][T24736] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.251559][T24936] tipc: Enabled bearer , priority 0 [ 1764.262349][T24935] tipc: Disabling bearer [ 1766.244451][ T27] audit: type=1326 audit(1766.208:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24962 comm="syz.3.6043" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff86d4a1a8 code=0x0 [ 1767.144273][T24079] tipc: Disabling bearer [ 1767.145845][T24079] tipc: Left network mode [ 1767.232192][T24736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1767.545802][ T27] audit: type=1326 audit(1767.468:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24998 comm="syz.8.6048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1767.552388][T24736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1767.606456][ T27] audit: type=1326 audit(1767.468:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24998 comm="syz.8.6048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf4a1a8 code=0x7ffc0000 [ 1768.055039][T24736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1768.302537][T25014] tipc: Enabled bearer , priority 0 [ 1768.304628][T24736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1769.357575][ T27] audit: type=1326 audit(1768.858:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25021 comm="syz.1.6058" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffad14a1a8 code=0x0 [ 1769.460379][T25009] tipc: Disabling bearer [ 1769.990777][T24736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.010105][T24736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.095857][T24736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1770.098227][T24736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1770.326177][ T27] audit: type=1326 audit(1770.168:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25046 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad14a1a8 code=0x7ffc0000 [ 1770.572445][ T27] audit: type=1326 audit(1770.168:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25046 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad14a1a8 code=0x7ffc0000 [ 1770.889567][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1770.891763][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1770.893829][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1770.914198][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1770.916635][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.918185][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.920194][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1770.922346][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1770.927812][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.929399][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.934700][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1770.938234][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1770.940539][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1770.946379][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1770.952747][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1770.964855][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1770.969093][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1770.983931][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1770.986841][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1770.989951][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1771.055289][T25066] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1771.074336][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1771.076578][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1771.078750][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1771.247620][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1771.249356][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1771.264917][T24736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.337363][T25091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.339317][T25091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.371068][T25094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.373039][T25094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.429678][T24079] device gretap0 left promiscuous mode [ 1771.432689][T24079] bridge0: port 3(vlan2) entered disabled state [ 1771.547900][T24079] device vlan2 left promiscuous mode [ 1771.550127][T24079] bridge0: port 3(vlan2) entered disabled state [ 1771.688945][T25103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.690950][T25103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.725605][T25106] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6071'. [ 1771.798207][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1771.800485][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1771.823177][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1771.825862][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1771.828345][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1771.833205][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1771.839741][T24736] device veth0_vlan entered promiscuous mode [ 1771.856774][T24736] device veth1_vlan entered promiscuous mode [ 1772.249111][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1772.251970][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1772.255026][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1772.262299][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1772.268502][T24736] device veth0_macvtap entered promiscuous mode [ 1772.272534][T24736] device veth1_macvtap entered promiscuous mode [ 1772.442516][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.445571][ T4517] Bluetooth: hci1: Frame reassembly failed (-84) [ 1772.463829][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.466134][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.471925][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.480270][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.482547][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.501257][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.503499][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.530522][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.532761][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.537624][T24736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1772.543277][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1772.574429][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1772.582769][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1773.527262][T25144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.529218][T25144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.662998][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.665796][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.667792][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.673731][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.677824][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.680029][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.682259][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.685149][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.687259][T24736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.689295][T24736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.697971][T24736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.705469][T24736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.709813][T24736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.714444][T24736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.716204][T24736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.720197][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1773.722470][T12563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1773.816450][T24079] device hsr_slave_0 left promiscuous mode [ 1773.849935][T24079] device hsr_slave_1 left promiscuous mode [ 1773.934375][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1773.936090][T24079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1773.938405][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1773.939970][T24079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.970367][T24079] device bridge_slave_0 left promiscuous mode [ 1773.971755][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.235856][T24079] device veth1_macvtap left promiscuous mode [ 1774.237328][T24079] device veth0_macvtap left promiscuous mode [ 1774.238651][T24079] device veth1_vlan left promiscuous mode [ 1774.240120][T24079] device veth0_vlan left promiscuous mode [ 1774.827883][T20188] Bluetooth: hci1: command 0x1003 tx timeout [ 1774.831186][ T47] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1774.861920][T25159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.863842][T25159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.920898][T24079] bond2 (unregistering): Released all slaves [ 1774.927905][T24079] bond1 (unregistering): Released all slaves [ 1775.937857][T25169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.941415][T25169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.489665][T25171] input: syz0 as /devices/virtual/input/input10 [ 1777.898303][T24079] team0 (unregistering): Port device team_slave_1 removed [ 1778.157540][T24079] team0 (unregistering): Port device team_slave_0 removed [ 1778.488783][T24079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1778.735266][T24079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.169226][T25194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.171868][T25194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.696029][T24079] bond0 (unregistering): Released all slaves [ 1784.180306][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.182481][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.193458][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1784.276949][T14523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.278747][T14523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.290070][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1784.361155][T25213] bridge0: port 2(gretap0) entered blocking state [ 1784.371331][T25213] bridge0: port 2(gretap0) entered disabled state [ 1784.611735][T25213] device gretap0 entered promiscuous mode [ 1784.697483][T25213] bridge0: port 2(gretap0) entered blocking state [ 1784.699792][T25213] bridge0: port 2(gretap0) entered forwarding state [ 1785.729706][T25235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6112'. [ 1785.731780][T25235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6112'. [ 1785.733702][T25235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6112'. [ 1786.881220][ T4308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1786.885909][ T4308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1786.888727][ T4308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1786.891755][ T4308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1786.894425][ T4308] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1786.896932][T20188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1788.733798][T25258] chnl_net:caif_netlink_parms(): no params data found [ 1788.974344][ T47] Bluetooth: hci1: command tx timeout [ 1789.032386][T25293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.034424][T25293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.042284][T25258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.053045][T25258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.056330][T25258] device bridge_slave_0 entered promiscuous mode [ 1789.149503][T25258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.151141][T25258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.153449][T25258] device bridge_slave_1 entered promiscuous mode [ 1789.236470][T25258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.257380][T25258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.330371][T25258] team0: Port device team_slave_0 added [ 1789.350152][T25258] team0: Port device team_slave_1 added [ 1789.403528][T25258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1789.409928][T25258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.427823][T25258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.436777][T25258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.439540][T25258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.447403][T25258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.545924][T25258] device hsr_slave_0 entered promiscuous mode [ 1789.575507][T25258] device hsr_slave_1 entered promiscuous mode [ 1789.604423][T25258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1789.605975][T25258] Cannot create hsr debugfs directory [ 1789.664451][T20188] Bluetooth: hci2: link tx timeout [ 1789.665568][T20188] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1789.667113][T20188] Bluetooth: hci2: link tx timeout [ 1789.668131][T20188] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1789.889270][T25311] bridge0: port 3(gretap0) entered blocking state [ 1789.890785][T25311] bridge0: port 3(gretap0) entered disabled state [ 1789.893746][T25311] device gretap0 entered promiscuous mode [ 1789.902818][T25311] bridge0: port 3(gretap0) entered blocking state [ 1789.904276][T25311] bridge0: port 3(gretap0) entered forwarding state [ 1790.019581][T24079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.177689][T24079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.187500][T25314] device pim6reg1 entered promiscuous mode [ 1790.323101][T24079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.498253][T24079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.504111][T20188] Bluetooth: hci1: command tx timeout [ 1792.908525][T24079] tipc: Disabling bearer [ 1792.910094][T24079] tipc: Left network mode [ 1793.534460][ T47] Bluetooth: hci1: command tx timeout [ 1795.069816][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1795.086971][T25387] bridge0: port 3(gretap0) entered blocking state [ 1795.088376][T25387] bridge0: port 3(gretap0) entered disabled state [ 1795.091343][T25387] device gretap0 entered promiscuous mode [ 1795.092825][T25387] bridge0: port 3(gretap0) entered blocking state [ 1795.094260][T25387] bridge0: port 3(gretap0) entered forwarding state [ 1795.625727][ T47] Bluetooth: hci1: command tx timeout [ 1797.185814][T25258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1797.237405][T25258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1797.354763][T25258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1797.395840][T25258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1797.603193][T24079] device gretap0 left promiscuous mode [ 1797.606253][T24079] bridge0: port 3(vlan2) entered disabled state [ 1797.765931][T24079] device vlan2 left promiscuous mode [ 1797.767104][T24079] bridge0: port 3(vlan2) entered disabled state [ 1797.945367][T25258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.388151][T25258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.389844][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1799.391815][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1799.405462][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1799.407815][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1799.409716][T22495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.411109][T22495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.430985][T25445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.437989][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1799.440021][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1799.441907][T25445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.448949][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1799.452169][T22495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.453710][T22495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.460957][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1799.463548][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1799.489963][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1799.505047][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1799.515237][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1799.521360][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1799.531779][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1799.540329][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1799.560664][T25258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1799.563905][T25258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1799.708255][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1799.710617][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1799.712755][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1801.883631][T24079] device hsr_slave_0 left promiscuous mode [ 1801.955667][T24079] device hsr_slave_1 left promiscuous mode [ 1802.074242][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.076078][T24079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.078159][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.079859][T24079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.081815][T24079] device bridge_slave_0 left promiscuous mode [ 1802.083262][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.244399][T24079] device veth1_macvtap left promiscuous mode [ 1802.245753][T24079] device veth0_macvtap left promiscuous mode [ 1802.247683][T24079] device veth1_vlan left promiscuous mode [ 1802.248957][T24079] device veth0_vlan left promiscuous mode [ 1804.830434][T24079] team0 (unregistering): Port device team_slave_1 removed [ 1804.997945][T24079] team0 (unregistering): Port device team_slave_0 removed [ 1805.196615][T24079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.445744][T24079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1808.084431][T24079] bond0 (unregistering): Released all slaves [ 1808.324713][T20853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1808.326487][T20853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1808.332757][T25258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1808.360628][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1808.362937][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1808.380800][T20853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1808.383119][T20853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1808.387455][T20853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1808.389579][T20853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1808.394790][T25258] device veth0_vlan entered promiscuous mode [ 1808.400511][T25258] device veth1_vlan entered promiscuous mode [ 1808.430617][T25258] device veth0_macvtap entered promiscuous mode [ 1808.434943][T25258] device veth1_macvtap entered promiscuous mode [ 1808.441309][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1808.443435][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1808.447186][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1808.449951][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1808.452248][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1808.461083][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.463277][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.465880][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.468037][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.470106][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.472194][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.476582][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.478925][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.482321][T25258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.487742][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.490251][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.492230][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.500718][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.502947][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.505872][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.507947][T25258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.510104][T25258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.513350][T25258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.520759][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1808.522977][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1808.526325][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1808.530202][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1808.532441][T14164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1808.543295][T25258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.547346][T25258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.549064][T25258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.550874][T25258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.641181][ T4730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.643156][ T4730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.657853][T19443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1808.668720][T14164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.670705][T14164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.681447][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1808.758508][T25489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.771226][T25489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.985783][T25509] bridge0: port 3(gretap0) entered blocking state [ 1808.985906][T25509] bridge0: port 3(gretap0) entered disabled state [ 1808.986712][T25509] device gretap0 entered promiscuous mode [ 1808.987002][T25509] bridge0: port 3(gretap0) entered blocking state [ 1808.987066][T25509] bridge0: port 3(gretap0) entered forwarding state [ 1809.209245][T25516] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6171'. [ 1809.280845][ T27] audit: type=1326 audit(1809.178:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.568243][ T27] audit: type=1326 audit(1809.178:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.814938][ T27] audit: type=1326 audit(1809.188:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.836985][ T27] audit: type=1326 audit(1809.188:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.858399][ T27] audit: type=1326 audit(1809.188:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.862920][ T27] audit: type=1326 audit(1809.198:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.892832][ T27] audit: type=1326 audit(1809.198:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.912181][ T27] audit: type=1326 audit(1809.198:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.921608][ T27] audit: type=1326 audit(1809.208:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1809.948088][T25523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.950191][T25523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.959278][ T27] audit: type=1326 audit(1809.208:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25496 comm="syz.4.6171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1814.284403][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1814.284418][ T27] audit: type=1326 audit(1814.258:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.1.6175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad14a1a8 code=0x7ffc0000 [ 1816.002891][T25596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.017780][T25596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.922794][T25622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.925064][T25622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.368563][T25669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.370624][T25669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.296049][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.298991][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.316771][T25676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.321249][T25676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.307632][T25713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.309618][T25713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.701053][T25743] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6238'. [ 1826.759801][T25745] input: syz0 as /devices/virtual/input/input11 [ 1827.102255][T25758] xt_bpf: check failed: parse error [ 1827.818118][T25765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6249'. [ 1827.841264][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6249'. [ 1828.407269][ T27] audit: type=1326 audit(1828.378:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25771 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa434a1a8 code=0x7ffc0000 [ 1828.417393][ T27] audit: type=1326 audit(1828.378:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25771 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa434a1a8 code=0x7ffc0000 [ 1829.333191][T25767] fuse: Bad value for 'fd' [ 1829.810676][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6260'. [ 1829.873130][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'. [ 1829.948105][T25799] xt_hashlimit: size too large, truncated to 1048576 [ 1830.554551][T25808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1830.556070][T25808] IPv6: NLM_F_CREATE should be set when creating new route [ 1830.557598][T25808] IPv6: NLM_F_CREATE should be set when creating new route [ 1831.885135][T25819] device batadv_slave_1 entered promiscuous mode [ 1832.004659][T25819] device batadv_slave_1 left promiscuous mode [ 1832.984146][T20188] Bluetooth: hci3: command 0x0406 tx timeout [ 1834.171495][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6273'. [ 1834.202271][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6273'. [ 1835.413039][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6278'. [ 1835.442671][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6278'. [ 1835.453476][T25850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6278'. [ 1838.094127][ T47] Bluetooth: hci6: command 0x0406 tx timeout [ 1838.903486][T25870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6285'. [ 1838.909674][T25870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6285'. [ 1838.945495][T25872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.002999][T25872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.063062][T25884] device pim6reg1 entered promiscuous mode [ 1843.201145][T25911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.206428][T25911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.458708][T25916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.462004][T25916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.223069][T25920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.232272][T25920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.372983][T25922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.389566][T25922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.692315][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6305'. [ 1844.972793][T25936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.979953][T25936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.048062][ T4308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1845.062433][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1845.067389][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1845.069728][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1845.071792][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1845.073657][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1845.346933][T25938] chnl_net:caif_netlink_parms(): no params data found [ 1845.439838][T25938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.444419][T25938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.446857][T25938] device bridge_slave_0 entered promiscuous mode [ 1845.450327][T25938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.454601][T25938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.458536][ T27] audit: type=1326 audit(1845.438:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1845.469743][T25938] device bridge_slave_1 entered promiscuous mode [ 1845.472377][ T27] audit: type=1326 audit(1845.448:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1845.487403][ T27] audit: type=1326 audit(1845.448:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff82d4a1dc code=0x7ffc0000 [ 1845.526435][ T27] audit: type=1326 audit(1845.478:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff82d488e0 code=0x7ffc0000 [ 1845.554168][ T27] audit: type=1326 audit(1845.528:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff82d4a24c code=0x7ffc0000 [ 1845.580908][T25938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.586390][ T27] audit: type=1326 audit(1845.548:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff82d48744 code=0x7ffc0000 [ 1845.597034][T25938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.606008][ T27] audit: type=1326 audit(1845.548:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff82d48b1c code=0x7ffc0000 [ 1845.628493][ T27] audit: type=1326 audit(1845.568:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25944 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d4a1a8 code=0x7ffc0000 [ 1845.638414][T25938] team0: Port device team_slave_0 added [ 1845.646743][T25938] team0: Port device team_slave_1 added [ 1845.672227][T25938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.673733][T25938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.691102][T25938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.694975][T25938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.696515][T25938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.712151][T25938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1845.785979][T25938] device hsr_slave_0 entered promiscuous mode [ 1845.824355][T25938] device hsr_slave_1 entered promiscuous mode [ 1845.854109][T25938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1845.855728][T25938] Cannot create hsr debugfs directory [ 1846.571945][T25967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.574457][T25967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.185747][ T47] Bluetooth: hci4: command tx timeout [ 1849.214352][T20188] Bluetooth: hci4: command tx timeout [ 1850.520851][T25938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1850.572218][T25938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1850.606003][T25938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1850.655326][T25938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1850.797830][T25938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.807781][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1850.811503][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1850.823685][T25938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.828593][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1850.831843][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1850.841362][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.842854][T12356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.851991][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1850.870893][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1850.873179][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1850.877767][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.879275][T12356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.884557][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1850.892725][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1850.900653][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1850.913397][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1850.920416][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1850.939935][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1850.942327][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1850.956071][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1850.964540][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1850.966916][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1850.974608][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1850.979392][T25938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1851.124637][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1851.126483][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1851.144561][T25938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1851.171459][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1851.173795][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1851.191943][T13412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1851.198788][T13412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1851.201185][T13412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1851.203319][T13412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1851.211340][T25938] device veth0_vlan entered promiscuous mode [ 1851.218574][T25938] device veth1_vlan entered promiscuous mode [ 1851.233404][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1851.238390][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1851.240729][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1851.242928][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1851.258555][T25938] device veth0_macvtap entered promiscuous mode [ 1851.262298][T25938] device veth1_macvtap entered promiscuous mode [ 1851.294147][T20188] Bluetooth: hci4: command tx timeout [ 1851.297594][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1851.299894][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.301963][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1851.303926][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.314117][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1851.316352][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.318455][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1851.320591][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.322653][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1851.325494][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.328898][T25938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1851.332869][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.336028][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.338194][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.340367][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.342335][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.344647][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.346799][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.349048][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.351502][T25938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1851.353756][T25938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1851.361875][T25938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.363624][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1851.368173][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1851.370296][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1851.372710][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1851.400384][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1851.410098][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1851.415851][T25938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.417704][T25938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.419529][T25938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.421516][T25938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.499811][T24224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.502163][T24224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.528876][T24224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1851.550420][ T4552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.552262][ T4552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.558564][T22495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1853.100205][ T47] Bluetooth: hci2: link tx timeout [ 1853.101406][ T47] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1853.102946][ T47] Bluetooth: hci2: link tx timeout [ 1853.104493][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1853.374730][ T47] Bluetooth: hci4: command tx timeout [ 1853.788532][T12356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.906066][T12356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.010902][T12356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.096093][T12356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.324840][T12356] tipc: Left network mode [ 1855.198247][T12356] bridge0: port 3(gretap0) entered disabled state [ 1855.266143][T12356] device gretap0 left promiscuous mode [ 1855.267505][T12356] bridge0: port 3(gretap0) entered disabled state [ 1856.498891][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1856.643125][T12356] device hsr_slave_0 left promiscuous mode [ 1856.694841][T12356] device hsr_slave_1 left promiscuous mode [ 1856.792460][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1856.794211][T12356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1856.797034][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1856.798649][T12356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1856.811920][T12356] device bridge_slave_1 left promiscuous mode [ 1856.813310][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.880743][T12356] device bridge_slave_0 left promiscuous mode [ 1856.882239][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.044848][T12356] device veth1_macvtap left promiscuous mode [ 1857.046205][T12356] device veth0_macvtap left promiscuous mode [ 1857.047549][T12356] device veth1_vlan left promiscuous mode [ 1857.048913][T12356] device veth0_vlan left promiscuous mode [ 1859.428594][T12356] team0 (unregistering): Port device team_slave_1 removed [ 1859.645336][T12356] team0 (unregistering): Port device team_slave_0 removed [ 1859.837589][T12356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1860.065018][T12356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1862.773730][T12356] bond0 (unregistering): Released all slaves [ 1868.814154][T20188] Bluetooth: hci0: command 0x0406 tx timeout [ 1914.894193][T20188] Bluetooth: hci1: command 0x0406 tx timeout [ 1917.412621][ T4308] Bluetooth: hci2: link tx timeout [ 1917.413698][ T4308] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1917.415366][ T4308] Bluetooth: hci2: link tx timeout [ 1917.416439][ T4308] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1917.936776][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1971.224183][ T4308] Bluetooth: hci4: command 0x0406 tx timeout [ 1979.376250][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.472724][ T47] Bluetooth: hci2: link tx timeout [ 1980.473847][ T47] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1980.475474][ T47] Bluetooth: hci2: link tx timeout [ 1980.476500][ T47] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1997.668601][T22598] ------------[ cut here ]------------ [ 1997.669955][T22598] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 1997.671645][T22598] WARNING: CPU: 1 PID: 22598 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 [ 1997.673461][T22598] Modules linked in: [ 1997.674221][T22598] CPU: 1 PID: 22598 Comm: kbnepd bnep0 Not tainted 6.1.116-syzkaller #0 [ 1997.675946][T22598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1997.678039][T22598] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1997.679626][T22598] pc : sysfs_remove_group+0x174/0x288 [ 1997.680727][T22598] lr : sysfs_remove_group+0x174/0x288 [ 1997.681797][T22598] sp : ffff800021a77840 [ 1997.682638][T22598] x29: ffff800021a77840 x28: 1fffe0001b34e0ca x27: 1fffe0001b34e088 [ 1997.684346][T22598] x26: 0000000000000000 x25: 00000000ffffffff x24: 1ffff00002860bdc [ 1997.686186][T22598] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000cfc58020 [ 1997.687824][T22598] x20: ffff0000eedfd910 x19: ffff8000143065c0 x18: ffff800021a76c40 [ 1997.689416][T22598] x17: 0000000000000000 x16: ffff8000122986bc x15: 0000000000000000 [ 1997.690975][T22598] x14: 00000000ffffffff x13: fffffffffffc3658 x12: 0000000000000001 [ 1997.692662][T22598] x11: 0000000000ff0100 x10: 0000000000000000 x9 : d00dca1dd1266800 [ 1997.694473][T22598] x8 : d00dca1dd1266800 x7 : fffffffffffc3658 x6 : fffffffffffc3610 [ 1997.696350][T22598] x5 : ffff800021a77138 x4 : ffff800015a94b50 x3 : ffff80000858aa4c [ 1997.697959][T22598] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 1997.699563][T22598] Call trace: [ 1997.700239][T22598] sysfs_remove_group+0x174/0x288 [ 1997.701269][T22598] netdev_queue_update_kobjects+0x3d4/0x470 [ 1997.702477][T22598] netdev_unregister_kobject+0x100/0x204 [ 1997.703671][T22598] unregister_netdevice_many+0x11b8/0x175c [ 1997.704894][T22598] unregister_netdev+0x178/0x1f0 [ 1997.705895][T22598] bnep_session+0x23c4/0x2584 [ 1997.706847][T22598] kthread+0x250/0x2d8 [ 1997.707659][T22598] ret_from_fork+0x10/0x20 [ 1997.708534][T22598] irq event stamp: 7334 [ 1997.709351][T22598] hardirqs last enabled at (7333): [] __up_console_sem+0xb4/0x100 [ 1997.711364][T22598] hardirqs last disabled at (7334): [] el1_dbg+0x24/0x80 [ 1997.713320][T22598] softirqs last enabled at (7250): [] dev_mc_flush+0x1b4/0x1f8 [ 1997.715108][T22598] softirqs last disabled at (7248): [] local_bh_disable+0x10/0x34 [ 1997.716968][T22598] ---[ end trace 0000000000000000 ]--- [ 1997.719938][T22598] ================================================================== [ 1997.721693][T22598] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174 [ 1997.723211][T22598] Read of size 8 at addr ffff0000e61e14c0 by task kbnepd bnep0/22598 [ 1997.724781][T22598] [ 1997.725244][T22598] CPU: 1 PID: 22598 Comm: kbnepd bnep0 Tainted: G W 6.1.116-syzkaller #0 [ 1997.727169][T22598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1997.729171][T22598] Call trace: [ 1997.729848][T22598] dump_backtrace+0x1c8/0x1f4 [ 1997.730792][T22598] show_stack+0x2c/0x3c [ 1997.731721][T22598] dump_stack_lvl+0x108/0x170 [ 1997.732741][T22598] print_report+0x174/0x4c0 [ 1997.733704][T22598] kasan_report+0xd4/0x130 [ 1997.734641][T22598] __asan_report_load8_noabort+0x2c/0x38 [ 1997.735730][T22598] device_for_each_child+0xa8/0x174 [ 1997.736743][T22598] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 1997.737910][T22598] netdev_unregister_kobject+0x144/0x204 [ 1997.739141][T22598] unregister_netdevice_many+0x11b8/0x175c [ 1997.740508][T22598] unregister_netdev+0x178/0x1f0 [ 1997.741560][T22598] bnep_session+0x23c4/0x2584 [ 1997.742574][T22598] kthread+0x250/0x2d8 [ 1997.743412][T22598] ret_from_fork+0x10/0x20 [ 1997.744330][T22598] [ 1997.744791][T22598] Allocated by task 21936: [ 1997.745675][T22598] kasan_set_track+0x4c/0x80 [ 1997.746592][T22598] kasan_save_alloc_info+0x24/0x30 [ 1997.747619][T22598] __kasan_kmalloc+0xac/0xc4 [ 1997.748666][T22598] __kmalloc+0xd8/0x1c4 [ 1997.749534][T22598] hci_alloc_dev_priv+0x30/0x18a8 [ 1997.750657][T22598] vhci_create_device+0xf8/0x6d0 [ 1997.751631][T22598] vhci_write+0x318/0x3b8 [ 1997.752581][T22598] vfs_write+0x610/0x91c [ 1997.753441][T22598] ksys_write+0x15c/0x26c [ 1997.754302][T22598] __arm64_sys_write+0x7c/0x90 [ 1997.755246][T22598] invoke_syscall+0x98/0x2c0 [ 1997.756152][T22598] el0_svc_common+0x138/0x258 [ 1997.757196][T22598] do_el0_svc+0x64/0x218 [ 1997.758136][T22598] el0_svc+0x58/0x168 [ 1997.758952][T22598] el0t_64_sync_handler+0x84/0xf0 [ 1997.760026][T22598] el0t_64_sync+0x18c/0x190 [ 1997.760925][T22598] [ 1997.761389][T22598] Freed by task 21936: [ 1997.762180][T22598] kasan_set_track+0x4c/0x80 [ 1997.763110][T22598] kasan_save_free_info+0x38/0x5c [ 1997.764107][T22598] ____kasan_slab_free+0x144/0x1c0 [ 1997.765270][T22598] __kasan_slab_free+0x18/0x28 [ 1997.766265][T22598] __kmem_cache_free+0x2c0/0x4b4 [ 1997.767385][T22598] kfree+0xcc/0x1b8 [ 1997.768190][T22598] hci_release_dev+0x1064/0x11cc [ 1997.769257][T22598] bt_host_release+0x70/0x88 [ 1997.770195][T22598] device_release+0x8c/0x1ac [ 1997.771143][T22598] kobject_put+0x2a8/0x41c [ 1997.772005][T22598] put_device+0x28/0x40 [ 1997.772818][T22598] hci_free_dev+0x24/0x34 [ 1997.773654][T22598] vhci_release+0x84/0xcc [ 1997.774486][T22598] __fput+0x1c8/0x7c8 [ 1997.775345][T22598] ____fput+0x20/0x30 [ 1997.776238][T22598] task_work_run+0x240/0x2f0 [ 1997.777212][T22598] do_exit+0x554/0x1a88 [ 1997.778066][T22598] do_group_exit+0x194/0x22c [ 1997.779005][T22598] __wake_up_parent+0x0/0x60 [ 1997.779917][T22598] invoke_syscall+0x98/0x2c0 [ 1997.780840][T22598] el0_svc_common+0x138/0x258 [ 1997.781825][T22598] do_el0_svc+0x64/0x218 [ 1997.782760][T22598] el0_svc+0x58/0x168 [ 1997.783603][T22598] el0t_64_sync_handler+0x84/0xf0 [ 1997.784641][T22598] el0t_64_sync+0x18c/0x190 [ 1997.785613][T22598] [ 1997.786071][T22598] Last potentially related work creation: [ 1997.787297][T22598] kasan_save_stack+0x40/0x70 [ 1997.788233][T22598] __kasan_record_aux_stack+0xcc/0xe8 [ 1997.789307][T22598] kasan_record_aux_stack_noalloc+0x14/0x20 [ 1997.790484][T22598] insert_work+0x64/0x384 [ 1997.791314][T22598] __queue_work+0xd48/0x136c [ 1997.792259][T22598] queue_work_on+0xc0/0x16c [ 1997.793234][T22598] hci_send_acl+0x904/0xc48 [ 1997.794278][T22598] l2cap_do_send+0x238/0x350 [ 1997.795273][T22598] l2cap_chan_send+0x190c/0x1e5c [ 1997.796283][T22598] l2cap_sock_sendmsg+0x184/0x2a8 [ 1997.797270][T22598] kernel_sendmsg+0x1c8/0x2a0 [ 1997.798207][T22598] bnep_session+0x1f28/0x2584 [ 1997.799216][T22598] kthread+0x250/0x2d8 [ 1997.800099][T22598] ret_from_fork+0x10/0x20 [ 1997.800983][T22598] [ 1997.801430][T22598] Second to last potentially related work creation: [ 1997.802954][T22598] kasan_save_stack+0x40/0x70 [ 1997.804075][T22598] __kasan_record_aux_stack+0xcc/0xe8 [ 1997.805163][T22598] kasan_record_aux_stack_noalloc+0x14/0x20 [ 1997.806381][T22598] insert_work+0x64/0x384 [ 1997.807232][T22598] __queue_work+0xd48/0x136c [ 1997.808186][T22598] queue_work_on+0xc0/0x16c [ 1997.809099][T22598] hci_send_acl+0x904/0xc48 [ 1997.810117][T22598] l2cap_do_send+0x238/0x350 [ 1997.811143][T22598] l2cap_chan_send+0x190c/0x1e5c [ 1997.812129][T22598] l2cap_sock_sendmsg+0x184/0x2a8 [ 1997.813238][T22598] kernel_sendmsg+0x1c8/0x2a0 [ 1997.814162][T22598] bnep_session+0x1f28/0x2584 [ 1997.815107][T22598] kthread+0x250/0x2d8 [ 1997.815920][T22598] ret_from_fork+0x10/0x20 [ 1997.816818][T22598] [ 1997.817336][T22598] The buggy address belongs to the object at ffff0000e61e0000 [ 1997.817336][T22598] which belongs to the cache kmalloc-8k of size 8192 [ 1997.820389][T22598] The buggy address is located 5312 bytes inside of [ 1997.820389][T22598] 8192-byte region [ffff0000e61e0000, ffff0000e61e2000) [ 1997.823155][T22598] [ 1997.823623][T22598] The buggy address belongs to the physical page: [ 1997.824874][T22598] page:00000000b228d78f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1261e0 [ 1997.826985][T22598] head:00000000b228d78f order:3 compound_mapcount:0 compound_pincount:0 [ 1997.828803][T22598] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 1997.830521][T22598] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002c00 [ 1997.832273][T22598] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1997.834031][T22598] page dumped because: kasan: bad access detected [ 1997.835296][T22598] [ 1997.835745][T22598] Memory state around the buggy address: [ 1997.837015][T22598] ffff0000e61e1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1997.838862][T22598] ffff0000e61e1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1997.840516][T22598] >ffff0000e61e1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1997.842123][T22598] ^ [ 1997.843348][T22598] ffff0000e61e1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1997.845028][T22598] ffff0000e61e1580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1997.846607][T22598] ================================================================== [ 1997.849435][T22598] Disabling lock debugging due to kernel taint [ 1997.850938][T22598] ================================================================================ [ 1997.852839][T22598] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 1997.854556][T22598] index 13217 is out of range for type 'unsigned long[8]' [ 1997.855962][T22598] CPU: 1 PID: 22598 Comm: kbnepd bnep0 Tainted: G B W 6.1.116-syzkaller #0 [ 1997.857945][T22598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1997.859936][T22598] Call trace: [ 1997.860626][T22598] dump_backtrace+0x1c8/0x1f4 [ 1997.861656][T22598] show_stack+0x2c/0x3c [ 1997.862581][T22598] dump_stack_lvl+0x108/0x170 [ 1997.863585][T22598] dump_stack+0x1c/0x58 [ 1997.864474][T22598] __ubsan_handle_out_of_bounds+0xfc/0x148 [ 1997.865824][T22598] queued_spin_lock_slowpath+0x9fc/0xe48 [ 1997.866976][T22598] do_raw_spin_lock+0x330/0x358 [ 1997.867956][T22598] _raw_spin_lock_irqsave+0x74/0xb4 [ 1997.869007][T22598] klist_next+0x8c/0x2e4 [ 1997.869887][T22598] device_for_each_child+0xc0/0x174 [ 1997.870955][T22598] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 1997.872194][T22598] netdev_unregister_kobject+0x144/0x204 [ 1997.873503][T22598] unregister_netdevice_many+0x11b8/0x175c [ 1997.874715][T22598] unregister_netdev+0x178/0x1f0 [ 1997.875704][T22598] bnep_session+0x23c4/0x2584 [ 1997.876626][T22598] kthread+0x250/0x2d8 [ 1997.877482][T22598] ret_from_fork+0x10/0x20 [ 1997.878400][T22598] ================================================================================ [ 1997.880287][T22598] Unable to handle kernel paging request at virtual address ffff800015947f41 [ 1997.882110][T22598] KASAN: probably user-memory-access in range [0x00000000aca3fa08-0x00000000aca3fa0f] [ 1997.883970][T22598] Mem abort info: [ 1997.884643][T22598] ESR = 0x0000000096000047 [ 1997.885639][T22598] EC = 0x25: DABT (current EL), IL = 32 bits [ 1997.886997][T22598] SET = 0, FnV = 0 [ 1997.887892][T22598] EA = 0, S1PTW = 0 [ 1997.888770][T22598] FSC = 0x07: level 3 translation fault [ 1997.890028][T22598] Data abort info: [ 1997.890765][T22598] ISV = 0, ISS = 0x00000047 [ 1997.891666][T22598] CM = 0, WnR = 1 [ 1997.892580][T22598] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ab36f000 [ 1997.894271][T22598] [ffff800015947f41] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fffa003, pte=0000000000000000 [ 1997.897186][T22598] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 1997.898821][T22598] Modules linked in: [ 1997.899679][T22598] CPU: 1 PID: 22598 Comm: kbnepd bnep0 Tainted: G B W 6.1.116-syzkaller #0 [ 1997.901718][T22598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1997.904002][T22598] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1997.905735][T22598] pc : queued_spin_lock_slowpath+0x3f4/0xe48 [ 1997.907112][T22598] lr : queued_spin_lock_slowpath+0x9fc/0xe48 [ 1997.908277][T22598] sp : ffff800021a775a0 [ 1997.909113][T22598] x29: ffff800021a77640 x28: 000000000000ce88 x27: 1ffff0000434eec0 [ 1997.910717][T22598] x26: dfff800000000000 x25: 1fffe0001de74600 x24: 0000000000080000 [ 1997.912491][T22598] x23: ffff0001b3d2bf48 x22: ffff800015947f41 x21: ffff0001b3d2bf40 [ 1997.914185][T22598] x20: 1fffe000367a57e8 x19: ffff0000ef3a3000 x18: 1fffe000367a2f76 [ 1997.915851][T22598] x17: 3d3d3d3d3d3d3d3d x16: ffff8000122986bc x15: 0000000000000000 [ 1997.917783][T22598] x14: 00000000ffffffff x13: fffffffffffc5f70 x12: ffff7000030adeb0 [ 1997.919569][T22598] x11: 0000000000ff0100 x10: ffff800015947f40 x9 : 0000000000000000 [ 1997.921332][T22598] x8 : 0000000000000000 x7 : fffffffffffc5f70 x6 : fffffffffffc5f48 [ 1997.923237][T22598] x5 : ffff800021a76e58 x4 : ffff800015a95bd0 x3 : ffff8000081adabc [ 1997.924958][T22598] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b3d2bf48 [ 1997.926626][T22598] Call trace: [ 1997.927398][T22598] queued_spin_lock_slowpath+0x3f4/0xe48 [ 1997.928696][T22598] do_raw_spin_lock+0x330/0x358 [ 1997.929775][T22598] _raw_spin_lock_irqsave+0x74/0xb4 [ 1997.930921][T22598] klist_next+0x8c/0x2e4 [ 1997.931895][T22598] device_for_each_child+0xc0/0x174 [ 1997.933039][T22598] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 1997.934431][T22598] netdev_unregister_kobject+0x144/0x204 [ 1997.935601][T22598] unregister_netdevice_many+0x11b8/0x175c [ 1997.936887][T22598] unregister_netdev+0x178/0x1f0 [ 1997.937955][T22598] bnep_session+0x23c4/0x2584 [ 1997.938979][T22598] kthread+0x250/0x2d8 [ 1997.939856][T22598] ret_from_fork+0x10/0x20 [ 1997.940838][T22598] Code: aa1603e0 976e1855 aa1703e0 52800081 (f90002d5) [ 1997.942428][T22598] ---[ end trace 0000000000000000 ]--- [ 1998.563109][T22598] Kernel panic - not syncing: Oops: Fatal exception [ 1998.564506][T22598] SMP: stopping secondary CPUs [ 1998.565475][T22598] Kernel Offset: disabled [ 1998.566386][T22598] CPU features: 0x080000,02070084,26017203 [ 1998.567532][T22598] Memory Limit: none [ 1999.157026][T22598] Rebooting in 86400 seconds..