last executing test programs: 20m28.764253928s ago: executing program 3 (id=398): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00da9de488a4793f0316cb8997baccbe6f0c5f1081000004000000ff0f1200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 20m26.835096592s ago: executing program 3 (id=399): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000280)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0/file0'}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x371f, &(0x7f0000000680)={0x0, 0x0, 0x100, 0x1, 0x32c}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0, 0x0, 0x10}, {0x0}]}, 0x4}, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./bus\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x11, r4, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 20m23.411696108s ago: executing program 3 (id=413): bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000340)=0xc141) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 20m18.969486207s ago: executing program 3 (id=420): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 20m18.552568327s ago: executing program 3 (id=423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r4, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) 20m17.00410205s ago: executing program 3 (id=425): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002080), 0x2cf4cedbf79fe5, 0x832b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20m1.16029573s ago: executing program 32 (id=425): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002080), 0x2cf4cedbf79fe5, 0x832b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 19m27.698725261s ago: executing program 1 (id=508): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000964776ff9746c768310000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x100000, 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0021e500000007ff7f81f38b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19m24.586304957s ago: executing program 1 (id=513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffdcc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 19m24.228000587s ago: executing program 1 (id=514): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r1 = open(0x0, 0x143042, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x0, 0x7, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x1e}}) mkdirat(r1, &(0x7f0000002040)='./file1\x00', 0x145) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) socket$inet(0x2, 0x1, 0x0) 19m20.113152585s ago: executing program 1 (id=519): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) 19m15.409480694s ago: executing program 1 (id=528): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x25b955c816b1236b, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) inotify_init() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ptype\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, 0xc81, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 19m12.762108958s ago: executing program 1 (id=532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000088500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setfsuid(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x78) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 19m11.408325751s ago: executing program 33 (id=532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000088500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setfsuid(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x78) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 18m33.88809892s ago: executing program 4 (id=595): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/62, 0x3e, 0x1) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 18m29.724648298s ago: executing program 4 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 18m27.447892002s ago: executing program 4 (id=614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r4, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) 18m26.243674735s ago: executing program 4 (id=616): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000002440)={0x964, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x10001}, 0xb, 0x10, 0x3ba, 0x10, 0x24, 'syz0\x00', "253ccfb247fa796f4da616c23312ae13cfd685bea6d812c39c787853970301c1", "24dbc78d4468b15aad7510e3363c35b682a07bab79af8d68694cbba2e89cbefb", [{0x3, 0xdaae, {0x1, 0xc35c}}, {0x3a8c, 0xfff, {0x2, 0x4}}, {0xb68, 0x4, {0x1, 0xa}}, {0x1, 0x0, {0x3, 0x1ff}}, {0xa6d, 0x9a5, {0x3, 0x3}}, {0xa1, 0x40, {0x1, 0x7}}, {0xcc, 0x7, {0x2, 0x6}}, {0x702, 0x2, {0x2, 0x42b9}}, {0x10, 0x2, {0x3, 0x86ff}}, {0x0, 0xe, {0x3, 0x800}}, {0x2, 0x4, {0x3, 0x559f}}, {0x9, 0x9e, {0x2, 0x3}}, {0x6, 0x0, {0x2, 0x2}}, {0x80, 0xfffb, {0x0, 0x10000}}, {0x8, 0xdc, {0x3, 0x673}}, {0x1, 0xb0d, {0x0, 0x2}}, {0x8, 0x7, {0x0, 0x3}}, {0x1b, 0x2, {0x2, 0x7f}}, {0x4, 0x7, {0x2, 0x1000}}, {0x2, 0x1, {0x3, 0x7800}}, {0x5, 0x7, {0x3, 0x3}}, {0xd, 0x5, {0x1, 0xcb}}, {0x2, 0x7, {0x3, 0xf}}, {0x7, 0xfff9, {0x0, 0x7fffffff}}, {0x400, 0x400, {0x0, 0x7}}, {0x7, 0x0, {0x2, 0x9}}, {0x3, 0x2, {0x0, 0xfffffff7}}, {0x0, 0x4, {0x2, 0xf54}}, {0xffff, 0xf46, {0x2, 0x4}}, {0xfffc, 0x6, {0xc22e7202ad4bb243, 0x3}}, {0x26, 0x7, {0x1, 0x9e}}, {0x8, 0xfffd, {0x1, 0x1}}, {0x7d, 0x1, {0x1, 0x5}}, {0x94d6, 0x27ff, {0x3, 0xfffffffc}}, {0x0, 0xe2d8, {0x3, 0x100}}, {0x3, 0x5, {0x1, 0x9}}, {0x5, 0x2, {0x6, 0x102000}}, {0x7, 0x81, {0x0, 0x5}}, {0x7, 0x1, {0x38aec6fc941e59a5, 0x9}}, {0x3, 0xfffd, {0x3, 0xfffffc01}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x6, 0x3, 0xfff, 0x4, 0x7, 'syz1\x00', "ced1cd5084cb8065a55a587ad32ee960785a311457e9c3778909bb6f4a0898ae", "1a1ae319766be694755c1683171ace9afcc5f5e7e83262de4393fdc3fe14961e", [{0x0, 0x9, {0x3, 0x2}}, {0x200, 0x4, {0x0, 0x6}}, {0x4, 0x4, {0x0, 0x2}}, {0x7, 0xadf, {0x0, 0x5}}, {0x1, 0x4, {0x1, 0x80000001}}, {0x8001, 0x6, {0x1, 0x8}}, {0xc5, 0x8, {0x2, 0x81}}, {0x5693, 0x7, {0x2, 0x1}}, {0xe15f, 0x0, {0x3, 0xb}}, {0x5, 0x2, {0x0, 0x6}}, {0x7, 0x6, {0x2, 0x9}}, {0x5, 0x6, {0x0, 0x37}}, {0xe, 0xffff, {0x2, 0x2}}, {0x5, 0x8000, {0x3, 0x6}}, {0x48, 0x101, {0x1, 0x6}}, {0x8e, 0x7, {0x0, 0xfffff14c}}, {0x98c0, 0x2, {0x2, 0x8}}, {0x4, 0x5, {0x3, 0x7}}, {0x1, 0x7, {0x0, 0x9}}, {0x1, 0x9, {0x3, 0x4}}, {0x5, 0x9, {0x3, 0x4}}, {0x6, 0xc61, {0x3, 0x8}}, {0x5, 0xff, {0x1, 0x4f}}, {0x79, 0x6, {0x2, 0x9}}, {0x80, 0x5, {0x1}}, {0x80, 0x81, {0x0, 0x14}}, {0x1, 0x4, {0x3, 0x3}}, {0xa3, 0x130, {0x2, 0x8}}, {0x546, 0x8, {0x3, 0x24000000}}, {0x4, 0x1, {0x1, 0x9aeb}}, {0xa, 0x2, {0x3, 0x3a7f5137}}, {0x3255, 0x8, {0x3, 0x4}}, {0x0, 0xff, {0x2, 0x5fa}}, {0x2, 0x3e6, {0x3, 0x2}}, {0x9, 0x9, {0x3, 0x7}}, {0x0, 0x2, {0x2}}, {0x5507, 0xe3b, {0x2, 0x80000001}}, {0x3ff, 0x8, {0x3, 0x7f}}, {0x33, 0x9, {0x1, 0xfffff952}}, {0x6, 0x8000, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0xf, 0xb, 0x100, 0x5, 0x13, 'syz0\x00', "3ffc1a689703f0433814ea9a458f40353dbcc8b41d542c0b943e125c37dadcc7", "4f3c263fe868d66408896c3397b8e3b706a01c74ca3f70d3fb78412dedad1da9", [{0x0, 0x2, {0x2, 0xff}}, {0x1, 0xb183, {0x3, 0x35e9}}, {0x8001, 0x3b, {0x1, 0x2}}, {0x5, 0x7, {0x2, 0xd}}, {0x1, 0x2, {0x1, 0xc7}}, {0x5, 0x755, {0x0, 0xd}}, {0xc0be, 0x8, {0x0, 0x80000000}}, {0x2, 0x3, {0x1, 0x2}}, {0xd1ae, 0x8000, {0x0, 0x11}}, {0x800, 0x7, {0x1, 0x4}}, {0x40, 0x4, {0x0, 0xf2d5}}, {0x4, 0x9, {0x2, 0x3}}, {0x6, 0x7ff, {0x1, 0x1}}, {0x80, 0x9, {0x0, 0x1}}, {0x6, 0x1d, {0x2, 0xa}}, {0x1ff, 0x4, {0x1, 0x10}}, {0x7, 0x9, {0x3, 0x800}}, {0x6, 0xb2, {0x2, 0x9}}, {0x6, 0x770, {0x3, 0x80}}, {0x2, 0x5, {0x2, 0x35}}, {0x8, 0x8, {0x2, 0x5}}, {0x1, 0x5, {0x0, 0x2}}, {0xa, 0xc}, {0x6, 0x6, {0x1, 0x2}}, {0x2, 0x4, {0x3, 0x81}}, {0x6, 0xf293, {0x1, 0x1ff}}, {0x8000, 0x3, {0x2, 0x2}}, {0x9c4, 0x7, {0x3, 0xb951}}, {0xfffd, 0x9, {0x0, 0xc}}, {0x3, 0x7, {0x3, 0x7}}, {0x5, 0xbd2, {0x2, 0x10}}, {0xa, 0x5, {0x3, 0xffff8000}}, {0x7fff, 0x1, {0x0, 0x2dbb}}, {0x7, 0x340, {0x1, 0x6}}, {0x9, 0x7fff, {0x2, 0x9}}, {0x5, 0x8, {0x2, 0x9}}, {0x10, 0x2}, {0xfe, 0x8000, {0x3, 0x5}}, {0x9a, 0x4, {0x0, 0x3}}, {0x5, 0x1, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x0, 0xe, 0x0, 0x6, 0x1e, 'syz0\x00', "f8c58f2f5dd201cfdce401260204da06a3c3952f992ba4b43dbe6a60dfc8858b", "ae51070ad22056836a6fc297557195f44a098453a33e26db7c9266ea4b6f7b2b", [{0x8000, 0x8, {0x1, 0x588}}, {0x1, 0x3, {0x2, 0x4a6}}, {0x4d36, 0x8, {0x1, 0x1000}}, {0x401, 0x6, {0x3, 0x10001}}, {0x0, 0x3, {0x2, 0xf59}}, {0x3, 0x1, {0x2, 0x5}}, {0xff, 0x6, {0x2, 0xd}}, {0xfe70, 0x5, {0x0, 0xcba3}}, {0x2, 0x800, {0x0, 0x4555}}, {0x8001, 0x7, {0x3, 0x97b}}, {0x101, 0x4, {0x3}}, {0x0, 0x400, {0x3, 0x401}}, {0x8, 0x3, {0x0, 0x1}}, {0x1, 0x7, {0x2, 0x5}}, {0x7, 0xa, {0x1}}, {0x1, 0xc01, {0x1, 0x7}}, {0xff, 0x6, {0x1, 0x3}}, {0x9, 0x5, {0x0, 0x5}}, {0x1, 0x0, {0x0, 0x544}}, {0x2, 0x3, {0x0, 0x2}}, {0x9, 0x2, {0x2, 0x2}}, {0xe4, 0x232, {0x3}}, {0x5, 0x2, {0x3, 0x4}}, {0x4, 0xed73, {0x3, 0xffffffff}}, {0xf, 0x0, {0x3, 0x96ae}}, {0x6, 0xf001, {0x2, 0x7}}, {0x200, 0x0, {0x3, 0xfffffffd}}, {0x2, 0x2, {0x3, 0x100}}, {0x8ed, 0x3ff, {0x3, 0x9}}, {0x7f, 0x1000, {0x2, 0xfffffff5}}, {0xfff8, 0x8001, {0x0, 0x8001}}, {0x9, 0x6, {0x1, 0x4}}, {0x4, 0xbfc, {0x0, 0x8}}, {0x0, 0x7fff, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x2}}, {0x0, 0x9, {0x3, 0x95}}, {0x2, 0x6, {0x2}}, {0xfb8e, 0x9, {0x1, 0x5}}, {0x8, 0x1765, {0x1, 0x6}}, {0x2, 0x8, {0x1, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c0d1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x300, 0x1, 0x10, 0x6, r1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 18m24.934136827s ago: executing program 4 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) unshare(0x22020400) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008380)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000180)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18m21.070437954s ago: executing program 4 (id=623): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r7}, 0x18) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 18m5.603228512s ago: executing program 34 (id=623): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r7}, 0x18) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 17m30.866281997s ago: executing program 6 (id=709): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x145142, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8ddab6479a6f1514ce8523c1f80508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x4cf7}], 0x1, 0x10001, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20d000000000001090224"], 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0}, 0x10) 17m26.908174744s ago: executing program 6 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="8000000010000304000000000004000000000300", @ANYRES32=0x0, @ANYBLOB="032e000000000000500012800e0001006970366772657461700000003c000280060011004e22000014000700", @ANYRES8], 0x80}}, 0x0) 17m25.730213416s ago: executing program 6 (id=716): socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000060000000203"], 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001a600)=""/102376, 0x18fe8) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1, 0x0, 0x2000000}, 0x38) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1}) unshare(0x2040400) 17m23.876850789s ago: executing program 6 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000001040108030500010002000000f246c268da1e0d65baac3a455a70d4cc0a569129fac835e3772d00"/56], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40050) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x17, &(0x7f0000000040)=0xf, 0x4) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) io_getevents(r3, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[0x0]) 17m21.817516923s ago: executing program 6 (id=733): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x824c, r5, 0x0}]) 17m19.916445126s ago: executing program 6 (id=725): ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) preadv(r0, 0x0, 0xfffffffffffffddc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x7e, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000e0000000500000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) gettid() capset(0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0x9c, 0x4) 17m4.473798405s ago: executing program 35 (id=725): ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) preadv(r0, 0x0, 0xfffffffffffffddc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x7e, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000e0000000500000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) gettid() capset(0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0x9c, 0x4) 10m2.162383862s ago: executing program 8 (id=2676): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x7a}, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) write(r0, &(0x7f0000000300)='n', 0x1) 10m2.021340442s ago: executing program 8 (id=2678): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x1ff, 0x7, 0x401, 0x7, 0x9}, &(0x7f0000000080)=0x14) 10m1.874253632s ago: executing program 8 (id=2680): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) write$cgroup_type(r1, &(0x7f0000000000), 0x100000) 10m1.830279912s ago: executing program 8 (id=2682): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) 10m1.486337972s ago: executing program 8 (id=2685): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000082c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 10m0.188883094s ago: executing program 8 (id=2692): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) write$cgroup_type(r1, &(0x7f0000000000), 0x100000) 9m59.051182165s ago: executing program 36 (id=2692): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) write$cgroup_type(r1, &(0x7f0000000000), 0x100000) 9.857887129s ago: executing program 2 (id=8163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 9.36316992s ago: executing program 2 (id=8168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.03420889s ago: executing program 2 (id=8172): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mem_connect\x00', 0xffffffffffffffff, 0x0, 0x10000000000ea}, 0x18) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004000) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265", 0x47, 0x880, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 8.705852571s ago: executing program 2 (id=8176): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x218, 0x218, 0x108, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@arp={@broadcast, @loopback, 0x0, 0xff, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xfffe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) 8.433504891s ago: executing program 2 (id=8180): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_batadv\x00', {}, 0xb05e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x6) write(r1, 0x0, 0x0) 8.184621781s ago: executing program 2 (id=8184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24044081}, 0x20008051) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x0, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x7, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0xc, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x3, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0x20a80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.131096501s ago: executing program 5 (id=8186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000540)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x13, 0xe, [@ext_channel_switch={0x1c, 0x4}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8, 0x9}}]}]}, 0x34}}, 0x0) 7.925397871s ago: executing program 5 (id=8190): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 7.485889202s ago: executing program 5 (id=8195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414"], 0x1c) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xd, 0x9, 0x2800000000, 0x2, 0x1]}, &(0x7f0000000080)=0x78) r8 = socket$inet6(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x242000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20044001) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 6.971540772s ago: executing program 7 (id=8200): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@dev, @loopback, 0x90}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x5) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f32"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {0x7, 0x0, 0x0, r5}}, 0x18}}, 0x0) 5.817620003s ago: executing program 5 (id=8206): r0 = socket(0x1, 0x803, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="14000000ec03010000000000000000000000000a14000000e803010000000000000000000000000a043ab54b85896952da23dad00a7878409406e0adcfc9a56c11d2a12d6d847956cf355c6c07b5f0d38422c1d209f11c9e2b4e654d6fe44ed14c853eb5c537027dc9fed1ab8d84a9cae77be6bab9de0078180680d6e27e537dda8214528b76715af25590908cf41a0d939892"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000100), 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="fcffffff", @ANYBLOB="00002abd7000fcdbdf25010000005000028006000e004e230000060002004e20000008000800bc77000014000100fc01000000000000000000000000000006000f000100000005000d00000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000015}, 0x400c0c0) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="9feb010018000000000000000c000000eaff0000020000009600000000000006040000000000"], &(0x7f0000003040)=""/242, 0x26, 0xf2, 0xa, 0x0, 0x0, @void, @value}, 0x1f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000440)=""/100, 0x64}], 0x3, &(0x7f00000018c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x6}, &(0x7f00000014c0)=0xfff, &(0x7f0000001500)=0x4, 0xe92, 0x2, 0xf, 0x1, 0x3e, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x5}, {&(0x7f0000001540)=""/119, 0x77}, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/79, 0x4f}, {&(0x7f0000001740)=""/199, 0xc7}, {&(0x7f0000001840)=""/18, 0x12}], 0x4, 0x40, 0xd}}], 0xa0, 0x44004}, 0x2000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.796498975s ago: executing program 0 (id=8219): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x37, 0x0, 0x1, @batadv={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x40}}, 0x0) 3.764099445s ago: executing program 7 (id=8220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 3.537651246s ago: executing program 0 (id=8221): r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae46463208004500001c00000000000290"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.457776386s ago: executing program 9 (id=8222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 3.445640786s ago: executing program 7 (id=8223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x143ffc, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x20000400) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) 3.350153396s ago: executing program 0 (id=8224): syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000d96a001c2c00fec000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 3.271620206s ago: executing program 9 (id=8225): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000084000000070000000a"], 0x18}], 0x1, 0x0) 3.208754066s ago: executing program 0 (id=8226): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.094101546s ago: executing program 7 (id=8227): bpf$TOKEN_CREATE(0x24, &(0x7f0000000600), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x1, 0x70bd2c, 0x84, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1d7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00'}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) 3.044561586s ago: executing program 9 (id=8228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x30}]}, 0x34}}, 0x0) 2.802994617s ago: executing program 0 (id=8229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2], 0x34}}, 0x0) 2.802719947s ago: executing program 9 (id=8230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2.598136227s ago: executing program 9 (id=8231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 2.597705947s ago: executing program 5 (id=8232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c00028006000100000000", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2.468143707s ago: executing program 9 (id=8233): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x44}}, 0x40000) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608024c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e30000000000000000000000008000a00", @ANYBLOB="14001680100001"], 0x50}}, 0x0) 1.621102008s ago: executing program 7 (id=8234): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="440910bc996c0e1c8107070400", 0xd) 1.486177968s ago: executing program 7 (id=8235): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x2, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 51.15392ms ago: executing program 0 (id=8236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x80000000000008, 0x4, 0xfffffffffffffa9f, 0x2, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) socket$inet_udplite(0x2, 0x2, 0x88) 0s ago: executing program 5 (id=8237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0004000000010000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000014008100"], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) kernel console output (not intermixed with test programs): t [1, 0] type 2 family 0 port 6081 - 0 [ 1262.764115][ T4819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.785513][ T4819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.832757][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1262.901461][ T4819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.910590][ T4819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.970009][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1263.423370][T23087] device vlan2 entered promiscuous mode [ 1263.429459][T23087] device syz_tun entered promiscuous mode [ 1263.491986][T23087] device syz_tun left promiscuous mode [ 1264.938295][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e65000: rx timeout, send abort [ 1264.949140][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e65c00: rx timeout, send abort [ 1264.957979][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e65000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1264.974776][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e65c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1266.156900][T23171] fuse: Bad value for 'fd' [ 1266.207500][ T8177] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 1266.207608][ T8177] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 1266.313271][T23060] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1266.532688][T23060] usb 6-1: Using ep0 maxpacket: 8 [ 1266.539653][T23060] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1266.561079][T23060] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1266.574594][T23060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.598870][T23060] usb 6-1: config 0 descriptor?? [ 1266.814852][T23060] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1266.892713][ T27] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1267.072803][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 1267.079709][ T27] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 1267.088943][ T27] usb 1-1: config 8 has no interface number 0 [ 1267.095474][ T27] usb 1-1: config 8 interface 206 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 1267.106771][ T27] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1267.120768][ T27] usb 1-1: config 8 interface 206 has no altsetting 0 [ 1267.130318][ T27] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1267.139630][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.147727][ T27] usb 1-1: Product: syz [ 1267.152136][ T27] usb 1-1: Manufacturer: syz [ 1267.156870][ T27] usb 1-1: SerialNumber: syz [ 1267.332723][T23204] fuse: Bad value for 'fd' [ 1269.104491][ T4297] usb 6-1: USB disconnect, device number 34 [ 1269.150550][ T4297] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 1269.261336][T23253] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1269.666963][ T27] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 1269.713846][ T27] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1269.721075][ T27] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1269.776912][ T27] usb 1-1: USB disconnect, device number 41 [ 1269.795930][ T27] garmin_gps 1-1:8.206: device disconnected [ 1269.828413][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5949'. [ 1270.584128][T23268] team0 (unregistering): Port device team_slave_0 removed [ 1270.712494][T23268] team0 (unregistering): Port device team_slave_1 removed [ 1272.418729][T23333] fuse: Bad value for 'fd' [ 1272.848541][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5974'. [ 1272.875441][T23337] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1273.021332][ T4359] device hsr_slave_0 left promiscuous mode [ 1273.062132][ T4359] device hsr_slave_1 left promiscuous mode [ 1273.092149][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.106549][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.137269][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.154160][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.251289][ T4359] device veth1_macvtap left promiscuous mode [ 1273.262080][ T4359] device veth0_macvtap left promiscuous mode [ 1273.275735][ T4359] device veth1_vlan left promiscuous mode [ 1273.290295][ T4359] device veth0_vlan left promiscuous mode [ 1273.684518][T23363] fuse: Bad value for 'fd' [ 1274.176852][ T4359] team0 (unregistering): Port device bond1 removed [ 1274.195565][ T4359] bond1 (unregistering): Released all slaves [ 1274.684645][ T4297] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1274.938926][ T4297] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1274.959972][ T4297] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x93, skipping [ 1274.985669][ T4297] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1275.047939][ T4297] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1275.060779][ T4297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.075461][ T4297] usb 10-1: Product: syz [ 1275.083577][ T4297] usb 10-1: Manufacturer: syz [ 1275.088320][ T4297] usb 10-1: SerialNumber: syz [ 1275.116698][ T4297] usb 10-1: config 0 descriptor?? [ 1275.128297][ T4297] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1275.136833][ T4297] imon 10-1:0.0: unable to initialize intf0, err -19 [ 1275.143923][ T4297] imon:imon_probe: failed to initialize context! [ 1275.150696][ T4297] imon 10-1:0.0: unable to register, err -19 [ 1275.330831][ T4299] usb 10-1: USB disconnect, device number 16 [ 1275.950202][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 1276.325510][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 1276.629855][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.225801][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.456125][ T4359] bond0 (unregistering): Released all slaves [ 1280.557874][T23344] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5978'. [ 1281.614534][T23533] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1282.409936][T23562] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1283.029075][T23587] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6078'. [ 1284.052048][T23619] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6090'. [ 1284.758189][T23646] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1285.041346][T23656] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6104'. [ 1288.886402][ T4301] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1289.083067][ T4301] usb 8-1: Using ep0 maxpacket: 32 [ 1289.093890][ T4301] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1289.104948][ T4301] usb 8-1: config 0 has no interface number 0 [ 1289.111159][ T4301] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1289.128303][ T4301] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1289.146341][ T4301] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.172920][ T4301] usb 8-1: Product: syz [ 1289.177160][ T4301] usb 8-1: Manufacturer: syz [ 1289.182129][ T4301] usb 8-1: SerialNumber: syz [ 1289.220247][ T4301] usb 8-1: config 0 descriptor?? [ 1289.857206][ T4301] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1289.875349][ T4301] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1289.899337][ T4301] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1289.926591][ T4301] f81534: probe of 8-1:0.12 failed with error -71 [ 1289.981163][ T4301] usb 8-1: USB disconnect, device number 23 [ 1292.973285][T14600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1292.987555][T14600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1293.001410][T14600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1293.016037][T14600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1293.026196][T14600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1293.034400][T14600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1293.224572][ T4819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.456253][ T4819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.605340][ T4819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.787003][ T4819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.907572][T23959] chnl_net:caif_netlink_parms(): no params data found [ 1294.152804][ T4299] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1294.317250][T23959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.379269][ T4299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.413750][T23959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.421346][ T4299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.437323][T23959] device bridge_slave_0 entered promiscuous mode [ 1294.447422][ T4299] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1294.477896][ T4299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.494390][ T4299] usb 10-1: config 0 descriptor?? [ 1294.533640][T23959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.544517][T23959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.566400][T23959] device bridge_slave_1 entered promiscuous mode [ 1294.708714][ T4299] usbhid 10-1:0.0: can't add hid device: -71 [ 1294.722077][ T4299] usbhid: probe of 10-1:0.0 failed with error -71 [ 1294.778475][ T4299] usb 10-1: USB disconnect, device number 17 [ 1294.897985][ T4819] tipc: Disabling bearer [ 1294.908809][ T4819] tipc: Left network mode [ 1294.956080][T23959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.025239][T23959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.122855][T14600] Bluetooth: hci1: command 0x0409 tx timeout [ 1295.389983][T23959] team0: Port device team_slave_0 added [ 1295.475152][T23959] team0: Port device team_slave_1 added [ 1295.616626][T23959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.638817][T23959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.713236][T23959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.875271][T23959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.923049][T23959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.992865][T23959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.496991][T23959] device hsr_slave_0 entered promiscuous mode [ 1296.566258][T23959] device hsr_slave_1 entered promiscuous mode [ 1296.640180][T23959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.684734][T23959] Cannot create hsr debugfs directory [ 1297.202897][T14600] Bluetooth: hci1: command 0x041b tx timeout [ 1297.327673][T24093] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1298.044531][ T4819] device hsr_slave_0 left promiscuous mode [ 1298.106830][ T4819] device hsr_slave_1 left promiscuous mode [ 1298.127717][ T4819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.151376][ T4819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.185345][ T4819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.200317][ T4819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.243565][ T4819] device bridge_slave_1 left promiscuous mode [ 1298.249878][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.291510][ T4819] device bridge_slave_0 left promiscuous mode [ 1298.316527][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.443326][ T4819] device veth1_macvtap left promiscuous mode [ 1298.449426][ T4819] device veth0_macvtap left promiscuous mode [ 1298.472927][ T4819] device veth1_vlan left promiscuous mode [ 1298.478801][ T4819] device veth0_vlan left promiscuous mode [ 1298.884848][ T4819] bond1 (unregistering): Released all slaves [ 1299.283081][T14600] Bluetooth: hci1: command 0x040f tx timeout [ 1299.996761][ T4819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.089257][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.095941][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.104218][ T4819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.118840][T24168] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1301.058123][ T4819] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1301.070972][ T4819] bond0 (unregistering): Released all slaves [ 1301.372425][T14600] Bluetooth: hci1: command 0x0419 tx timeout [ 1301.487197][T24185] kvm [24184]: vcpu0, guest rIP: 0x5f disabled perfctr wrmsr: 0xc1 data 0x400 [ 1301.496463][T24185] kvm [24184]: vcpu0, guest rIP: 0x5f disabled perfctr wrmsr: 0xc2 data 0x0 [ 1301.508748][T24185] kvm [24184]: vcpu0, guest rIP: 0x5f ignored wrmsr: 0x11e data 0x0 [ 1301.521100][T24185] kvm [24184]: vcpu0, guest rIP: 0x5f disabled perfctr wrmsr: 0x187 data 0x400 [ 1302.970110][T23959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1303.013989][T23959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1303.033870][T23959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1303.047004][T23959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1303.572414][ T4493] udevd[4493]: setting mode of /dev/loop11 to 060660 failed: Read-only file system [ 1303.598871][ T4493] udevd[4493]: setting owner of /dev/loop11 to uid=0, gid=6 failed: Read-only file system [ 1303.717261][T23959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.787793][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1303.806626][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1303.831776][T23959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.855960][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1303.871491][T24243] bond0: option resend_igmp: invalid value (7540) [ 1303.886006][T24243] bond0: option resend_igmp: allowed values 0 - 255 [ 1303.915707][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1303.931765][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1303.960499][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.967686][ T6256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.004050][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1304.031620][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1304.081597][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.088783][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.102442][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1304.205396][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1304.233563][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1304.294066][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1304.374015][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1304.431945][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1304.476918][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1304.501540][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1304.544479][T23959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1304.574809][T23959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1304.590860][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1304.606481][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1304.619704][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1304.637043][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1304.666594][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1305.465934][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1305.493328][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1305.507815][T23959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.566680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1305.603987][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1305.674184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1305.699727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1305.723706][T23959] device veth0_vlan entered promiscuous mode [ 1305.737684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1305.750873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1305.769727][T23959] device veth1_vlan entered promiscuous mode [ 1305.817266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1305.835616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1305.854811][T23959] device veth0_macvtap entered promiscuous mode [ 1305.877588][T23959] device veth1_macvtap entered promiscuous mode [ 1305.929583][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.953006][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.976165][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.998409][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.018415][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.030412][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.046623][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.058327][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.076339][T23959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.089578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1306.104176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1306.124687][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1306.143916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1306.171518][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.191948][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.216981][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.282445][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.299277][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.324163][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.337801][T23959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.359991][T23959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.386213][T23959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.402348][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1306.422007][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1306.479617][T23959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.490460][T23959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.500157][T23959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.510349][T23959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.690128][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.711805][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.777510][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1306.799458][ T4819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.829206][ T4819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.855696][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1307.675871][T15209] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1307.882659][T15209] usb 8-1: Using ep0 maxpacket: 32 [ 1307.896104][T15209] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1307.923432][T15209] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1307.942710][T15209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.963789][T15209] usb 8-1: config 0 descriptor?? [ 1307.988637][T24334] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1308.009845][T15209] hub 8-1:0.0: bad descriptor, ignoring hub [ 1308.019638][T15209] hub: probe of 8-1:0.0 failed with error -5 [ 1308.036179][T15209] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1308.070517][T14600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1308.085262][T14600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1308.094758][T14600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1308.111038][T14600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1308.119361][T14600] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1308.144839][T14600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1308.380730][ T7769] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.542289][ T7769] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.659763][ T7769] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.825106][ T7769] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.888448][ T46] tipc: Resetting bearer [ 1309.091015][T24348] chnl_net:caif_netlink_parms(): no params data found [ 1309.459378][ T7769] tipc: Disabling bearer [ 1309.464945][ T7769] tipc: Disabling bearer [ 1309.484468][T24348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.491776][ T7769] tipc: Left network mode [ 1309.504488][T24348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.532436][T24348] device bridge_slave_0 entered promiscuous mode [ 1309.679661][T24348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.698363][T24348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.729095][T24348] device bridge_slave_1 entered promiscuous mode [ 1309.944155][T24348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.998289][T24348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.215588][T24348] team0: Port device team_slave_0 added [ 1310.242836][ T8177] Bluetooth: hci3: command 0x0409 tx timeout [ 1310.306274][T24348] team0: Port device team_slave_1 added [ 1310.316099][T24419] netlink: 'syz.0.6362': attribute type 10 has an invalid length. [ 1310.440548][T24419] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1310.542916][T15369] usb 8-1: USB disconnect, device number 24 [ 1310.815425][T24348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.837321][T24348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.960617][T24348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.979509][T24434] netlink: 'syz.0.6367': attribute type 1 has an invalid length. [ 1311.081760][T24348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.092442][T24348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.170087][T24348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.520392][ T7769] team0: Port device wlan1 removed [ 1311.547653][T24348] device hsr_slave_0 entered promiscuous mode [ 1311.558740][T24348] device hsr_slave_1 entered promiscuous mode [ 1311.568844][T24348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.581023][T24348] Cannot create hsr debugfs directory [ 1311.870994][ T7769] device hsr_slave_0 left promiscuous mode [ 1311.879619][ T7769] device hsr_slave_1 left promiscuous mode [ 1311.906972][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.923533][ T7769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.932854][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.940635][ T7769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.962328][ T7769] device bridge_slave_1 left promiscuous mode [ 1311.972732][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.998570][ T7769] device bridge_slave_0 left promiscuous mode [ 1312.020000][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.097316][ T7769] device veth1_macvtap left promiscuous mode [ 1312.109901][ T7769] device veth0_macvtap left promiscuous mode [ 1312.117749][ T7769] device veth1_vlan left promiscuous mode [ 1312.129633][ T7769] device veth0_vlan left promiscuous mode [ 1312.322771][ T8177] Bluetooth: hci3: command 0x041b tx timeout [ 1312.751303][ T7769] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1312.859291][ T4297] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1313.054502][ T4297] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1313.100164][ T4297] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1313.167838][ T4297] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1313.215467][ T4297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.255785][T24460] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1313.490270][ T4297] usb 8-1: USB disconnect, device number 25 [ 1313.598291][T24483] netlink: 'syz.9.6379': attribute type 1 has an invalid length. [ 1314.415673][ T8177] Bluetooth: hci3: command 0x040f tx timeout [ 1314.753371][ T7769] team0 (unregistering): Port device team_slave_1 removed [ 1314.890252][ T7769] team0 (unregistering): Port device team_slave_0 removed [ 1314.987161][ T7769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.091741][ T7769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.492857][ T8177] Bluetooth: hci3: command 0x0419 tx timeout [ 1316.698324][ T7769] bond0 (unregistering): Released all slaves [ 1318.216879][T24348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1318.256075][T24348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1318.291075][T24348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1318.337859][T24348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1318.651795][T24348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.681631][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1318.693721][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1318.734464][T24348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.772813][T15369] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1318.820466][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1318.830412][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1318.861064][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.868324][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.911139][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1318.930428][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1318.959283][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1318.973164][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.980384][ T4819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.988806][T15369] usb 1-1: Using ep0 maxpacket: 32 [ 1318.996401][T15369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.016721][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1319.028513][T15369] usb 1-1: config 0 has no interfaces? [ 1319.062421][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1319.073336][T15369] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1319.097942][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1319.106408][T15369] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1319.122918][T15369] usb 1-1: Product: syz [ 1319.127152][T15369] usb 1-1: Manufacturer: syz [ 1319.131656][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1319.151511][T15369] usb 1-1: config 0 descriptor?? [ 1319.154629][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1319.177816][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1319.192369][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1319.213340][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1319.231703][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1319.254212][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1319.275521][T24348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1319.297233][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1319.695148][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1319.714123][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1319.762001][T24348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.109084][ T4301] usb 1-1: USB disconnect, device number 42 [ 1320.697395][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1320.717010][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1320.795363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1320.813763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1320.865899][T24348] device veth0_vlan entered promiscuous mode [ 1320.903136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1320.921509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1320.967939][T24348] device veth1_vlan entered promiscuous mode [ 1321.053846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1321.063966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1321.075670][T24348] device veth0_macvtap entered promiscuous mode [ 1321.110169][T24348] device veth1_macvtap entered promiscuous mode [ 1321.142766][T15209] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1321.147997][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.204526][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.230651][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.242594][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.262800][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.297689][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.309922][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.332891][T15209] usb 10-1: Using ep0 maxpacket: 16 [ 1321.340088][T15209] usb 10-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 1321.372570][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.382552][T15209] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1321.404420][T24348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.413520][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1321.432719][T15209] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1321.446819][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1321.462995][T15209] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1321.472432][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1321.486828][T15209] usb 10-1: Manufacturer: syz [ 1321.492912][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1321.514065][T15209] usb 10-1: config 0 descriptor?? [ 1321.525884][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.544059][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.573533][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.584299][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.594404][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.606840][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.616961][T24348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.627704][T24348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.679580][T24348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.704039][T24348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.723577][T24348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.732360][T24348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.792375][T24348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.835491][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1321.845765][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1321.892271][T15209] usb 10-1: USB disconnect, device number 18 [ 1322.109955][ T4819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.140425][ T4819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.171537][T18029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.182378][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1322.205668][T18029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.235790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1323.052725][ T4299] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1323.074523][T24774] program syz.5.6470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1323.262782][ T4299] usb 10-1: Using ep0 maxpacket: 32 [ 1323.273841][ T4299] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1323.283777][ C1] sd 0:0:1:0: [sda] tag#552 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1323.294283][ C1] sd 0:0:1:0: [sda] tag#552 CDB: Read(6) 08 05 00 00 00 00 [ 1323.319526][ T4299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.344324][ T4299] usb 10-1: config 0 descriptor?? [ 1323.353318][ T4299] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1323.868406][T24808] program syz.5.6484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1324.104090][T23060] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1324.299361][T23060] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.311132][T23060] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 1324.323301][T23060] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1324.343610][T23060] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1324.353798][T23060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.362763][T23060] usb 1-1: Product: syz [ 1324.367109][T23060] usb 1-1: Manufacturer: syz [ 1324.371806][T23060] usb 1-1: SerialNumber: syz [ 1324.380106][T23060] usb 1-1: config 0 descriptor?? [ 1324.389550][T24803] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1324.641194][T23060] usb 1-1: USB disconnect, device number 43 [ 1325.169558][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1325.250702][T24843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6498'. [ 1325.972036][ T4299] gspca_vc032x: reg_w err -71 [ 1325.977714][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.016889][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.023126][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.028769][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.047625][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.069423][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.086580][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.105470][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.120064][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.145831][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.159492][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.174296][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.201263][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.221182][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.261813][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.301962][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.315315][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.320633][ T4299] gspca_vc032x: Unknown sensor... [ 1326.332425][ T4299] vc032x: probe of 10-1:0.0 failed with error -22 [ 1326.351926][ T4299] usb 10-1: USB disconnect, device number 19 [ 1328.043574][T24931] netlink: 1320 bytes leftover after parsing attributes in process `syz.7.6531'. [ 1329.010242][T24967] netlink: 'syz.9.6547': attribute type 2 has an invalid length. [ 1329.422698][ T4297] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1329.616874][ T4297] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.650045][ T4297] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1329.665717][ T4297] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1329.675405][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.692631][ T4297] usb 6-1: Product: syz [ 1329.703165][ T4297] usb 6-1: Manufacturer: syz [ 1329.708668][ T4297] usb 6-1: SerialNumber: syz [ 1329.815427][T24997] netlink: 'syz.2.6558': attribute type 4 has an invalid length. [ 1329.940634][T24972] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1330.144552][T25006] binder: 25005:25006 unknown command 0 [ 1330.150327][T25006] binder: 25005:25006 ioctl c0306201 20000080 returned -22 [ 1330.566539][T24972] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1330.786760][ T4297] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1330.794211][T25028] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1330.804438][ T4297] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1330.811993][ T4297] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 1330.906322][T25032] rdma_op ffff8880594999f0 conn xmit_rdma 0000000000000000 [ 1330.987690][ T4297] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 1331.000336][ T4297] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1331.122814][ T4297] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 1331.212322][ T4297] usb 6-1: USB disconnect, device number 35 [ 1331.251339][ T4297] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1333.121427][T25109] xt_hashlimit: size too large, truncated to 1048576 [ 1333.729427][T25129] rdma_op ffff888054d361f0 conn xmit_rdma 0000000000000000 [ 1334.855878][T25162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1334.882350][T25162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1334.891418][T25162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1336.124120][ T4297] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1336.322758][ T4297] usb 10-1: Using ep0 maxpacket: 8 [ 1336.333147][ T4297] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.359488][ T4297] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1336.387102][ T4297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.462889][ T4297] usb 10-1: config 0 descriptor?? [ 1336.521852][ T4297] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1337.373097][T25212] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6632'. [ 1337.905787][ T4297] gspca_vc032x: reg_w err -71 [ 1337.910579][ T4297] vc032x: probe of 10-1:0.0 failed with error -71 [ 1337.932378][ T4297] usb 10-1: USB disconnect, device number 20 [ 1338.246462][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6638'. [ 1338.570294][T25236] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6641'. [ 1339.322772][T15209] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1339.384410][ T8177] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1339.442772][T25274] input: syz1 as /devices/virtual/input/input37 [ 1339.561614][T15209] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.612667][T15209] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1339.657220][T15209] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1339.683063][T15209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.705184][T15209] usb 8-1: Product: syz [ 1339.709534][T15209] usb 8-1: Manufacturer: syz [ 1339.715147][T15209] usb 8-1: SerialNumber: syz [ 1339.781967][ T26] audit: type=1326 audit(1733906824.793:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1339.849559][ T26] audit: type=1326 audit(1733906824.833:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1339.936878][T25256] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1339.951811][ T26] audit: type=1326 audit(1733906824.833:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1339.990354][ T26] audit: type=1326 audit(1733906824.833:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1340.085180][ T26] audit: type=1326 audit(1733906824.833:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1340.159126][ T26] audit: type=1326 audit(1733906824.833:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1340.249805][ T26] audit: type=1326 audit(1733906824.843:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1340.303950][ T26] audit: type=1326 audit(1733906824.843:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1340.334286][ T8177] Bluetooth: hci0: link tx timeout [ 1340.340204][ T8177] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1340.348976][ T26] audit: type=1326 audit(1733906824.843:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1340.468686][ T26] audit: type=1326 audit(1733906824.843:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25285 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1340.601101][T25256] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1340.818803][T15209] cdc_mbim 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1340.834882][T15209] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1340.893269][T15209] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 1341.019941][T15209] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 1341.050260][T15209] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 1341.072880][T15209] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 42:42:42:42:42:42 [ 1341.132755][T15209] usb 8-1: USB disconnect, device number 26 [ 1341.167023][T15209] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 1341.721139][T25342] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1342.131106][T25360] sctp: [Deprecated]: syz.7.6695 (pid 25360) Use of int in max_burst socket option deprecated. [ 1342.131106][T25360] Use struct sctp_assoc_value instead [ 1342.402869][ T8177] Bluetooth: hci0: command 0x0406 tx timeout [ 1343.643501][T25401] binder: 25389:25401 ioctl c0306201 0 returned -14 [ 1344.847168][T25444] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1346.189538][T25492] random: crng reseeded on system resumption [ 1347.675899][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 1347.675919][ T26] audit: type=1326 audit(1733906832.693:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db97ff19 code=0x7ffc0000 [ 1347.732326][ T26] audit: type=1326 audit(1733906832.693:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f82db97ff19 code=0x7ffc0000 [ 1347.802373][ T26] audit: type=1326 audit(1733906832.693:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db97ff19 code=0x7ffc0000 [ 1347.838680][ T26] audit: type=1326 audit(1733906832.693:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.7.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82db97ff19 code=0x7ffc0000 [ 1348.311676][T25567] netlink: 'syz.5.6777': attribute type 10 has an invalid length. [ 1348.321747][T25567] device hsr0 entered promiscuous mode [ 1348.342795][T25567] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1348.371650][T25567] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1348.399155][T25567] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1348.426269][T25567] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1349.443463][ T26] audit: type=1326 audit(1733906834.463:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25619 comm="syz.0.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dacb7ff19 code=0x7ffc0000 [ 1349.487568][ T26] audit: type=1326 audit(1733906834.503:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25619 comm="syz.0.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dacb7ff19 code=0x7ffc0000 [ 1349.529752][ T26] audit: type=1326 audit(1733906834.533:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25619 comm="syz.0.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dacb7e880 code=0x7ffc0000 [ 1349.594684][ T26] audit: type=1326 audit(1733906834.533:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25619 comm="syz.0.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dacb7fb1b code=0x7ffc0000 [ 1349.619297][ T26] audit: type=1326 audit(1733906834.533:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25619 comm="syz.0.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dacb7fb1b code=0x7ffc0000 [ 1349.650777][ T26] audit: type=1326 audit(1733906834.543:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25619 comm="syz.0.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dacb7fb1b code=0x7ffc0000 [ 1349.793308][ T4301] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1349.995684][ T4301] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 1350.010563][T25644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 1350.012622][ T4301] usb 1-1: config 0 has no interface number 0 [ 1350.035159][ T4301] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 1350.052911][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.074311][ T4301] usb 1-1: Product: syz [ 1350.078546][ T4301] usb 1-1: Manufacturer: syz [ 1350.101773][ T4301] usb 1-1: SerialNumber: syz [ 1350.120000][ T4301] usb 1-1: config 0 descriptor?? [ 1350.342237][ T4301] asix 1-1:0.195 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1350.360072][ T4301] asix: probe of 1-1:0.195 failed with error -71 [ 1350.388592][ T4301] usb 1-1: USB disconnect, device number 44 [ 1351.254297][T14600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1351.265609][T14600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1351.275177][T14600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1351.298472][T14600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1351.313648][T14600] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1351.323462][T14600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1351.718714][ T4359] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.936404][ T4359] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.081609][ T4359] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.364290][ T4359] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.430825][T25674] chnl_net:caif_netlink_parms(): no params data found [ 1352.608128][ T46] tipc: Resetting bearer [ 1352.776950][T25731] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6839'. [ 1352.888498][T25674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.912441][T25674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.933346][T25674] device bridge_slave_0 entered promiscuous mode [ 1352.975429][T25674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.011539][T25674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.034659][T25674] device bridge_slave_1 entered promiscuous mode [ 1353.121206][T25674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.175185][T25674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.234125][ T4359] tipc: Disabling bearer [ 1353.239929][ T4359] tipc: Disabling bearer [ 1353.263445][ T4359] tipc: Left network mode [ 1353.339047][T25674] team0: Port device team_slave_0 added [ 1353.352019][T25674] team0: Port device team_slave_1 added [ 1353.363136][T14600] Bluetooth: hci2: command 0x0409 tx timeout [ 1353.666605][T25674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.686795][T25674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.770813][T25674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.838988][T25674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.853082][T25674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.959466][T25674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.137213][T25674] device hsr_slave_0 entered promiscuous mode [ 1354.201432][T25674] device hsr_slave_1 entered promiscuous mode [ 1354.223120][T25674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1354.230752][T25674] Cannot create hsr debugfs directory [ 1354.637274][T25793] bridge0: port 3(syz_tun) entered blocking state [ 1354.654672][T25793] bridge0: port 3(syz_tun) entered disabled state [ 1354.678476][T25793] device syz_tun entered promiscuous mode [ 1354.693609][T25793] bridge0: port 3(syz_tun) entered blocking state [ 1354.700234][T25793] bridge0: port 3(syz_tun) entered forwarding state [ 1355.448762][T14600] Bluetooth: hci2: command 0x041b tx timeout [ 1355.836750][ T4359] device hsr_slave_0 left promiscuous mode [ 1355.860515][ T4359] device hsr_slave_1 left promiscuous mode [ 1355.880652][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.905717][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.949905][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.960264][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.982130][ T4359] device bridge_slave_1 left promiscuous mode [ 1355.989339][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.002793][ T4299] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1356.013062][ T4359] device bridge_slave_0 left promiscuous mode [ 1356.024711][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.101131][ T4359] device veth1_macvtap left promiscuous mode [ 1356.107936][ T4359] device veth0_macvtap left promiscuous mode [ 1356.114976][ T4359] device veth1_vlan left promiscuous mode [ 1356.120931][ T4359] device veth0_vlan left promiscuous mode [ 1356.192725][ T4299] usb 10-1: Using ep0 maxpacket: 32 [ 1356.217067][ T4299] usb 10-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 16 [ 1356.241602][ T4299] usb 10-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1356.285256][ T4299] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1356.303840][ T4299] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1356.320008][ T4299] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.335010][ T4299] usb 10-1: Product: syz [ 1356.339420][ T4299] usb 10-1: Manufacturer: syz [ 1356.351807][ T4299] usb 10-1: SerialNumber: syz [ 1356.359940][T25835] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1356.438939][ T4359] bond3 (unregistering): Released all slaves [ 1356.544844][ T4359] bond2 (unregistering): Released all slaves [ 1356.626004][ T4299] usb 10-1: USB disconnect, device number 21 [ 1356.712804][ T27] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1356.723540][ T4359] bond1 (unregistering): (slave veth3): Releasing active interface [ 1356.952231][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 1356.959589][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1356.977891][ T27] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1356.988403][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.997264][ T27] usb 6-1: Product: syz [ 1357.001668][ T27] usb 6-1: Manufacturer: syz [ 1357.015739][ T27] usb 6-1: SerialNumber: syz [ 1357.039294][ T27] usb 6-1: config 0 descriptor?? [ 1357.090580][T25872] program syz.0.6889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.133758][ T27] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1357.236042][ T4359] bond1 (unregistering): Released all slaves [ 1357.287353][ T46] usb 6-1: Failed to submit usb control message: -71 [ 1357.287426][ T27] usb 6-1: USB disconnect, device number 36 [ 1357.308565][ T46] usb 6-1: unable to send the bmi data to the device: -71 [ 1357.321828][ T46] usb 6-1: unable to get target info from device [ 1357.334572][ T46] usb 6-1: could not get target info (-71) [ 1357.345104][ T46] usb 6-1: could not probe fw (-71) [ 1357.454738][ T4359] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1357.526313][ T8177] Bluetooth: hci2: command 0x040f tx timeout [ 1358.482990][T14600] Bluetooth: hci0: command 0x0406 tx timeout [ 1358.800737][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 1358.926317][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 1359.016593][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.142049][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.618215][ T8177] Bluetooth: hci2: command 0x0419 tx timeout [ 1360.360557][T25942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.650599][T25942] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1361.526302][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.532728][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.574656][ T4359] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1361.591819][ T4359] bond0 (unregistering): Released all slaves [ 1361.795140][T25895] device ipip0 entered promiscuous mode [ 1362.520318][T25674] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1362.559044][ T4297] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1362.612856][T25674] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1362.652366][T25674] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1362.691094][T25674] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1362.772799][ T4297] usb 1-1: Using ep0 maxpacket: 8 [ 1362.786018][ T4297] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1362.840812][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.892597][ T4297] usb 1-1: Product: syz [ 1362.900879][ T4297] usb 1-1: Manufacturer: syz [ 1362.920581][ T4297] usb 1-1: SerialNumber: syz [ 1362.951507][ T4297] usb 1-1: config 0 descriptor?? [ 1363.163359][ T4297] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1363.178603][T25674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.266990][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1363.332159][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1363.370984][T25674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.402828][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1363.417437][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1363.426523][T18029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.433706][T18029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.452392][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1363.461904][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1363.480475][T18029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.487680][T18029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.531512][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1363.540997][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1363.552911][ T4365] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1363.566549][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1363.578850][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1363.598485][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1363.631360][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1363.646353][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1363.661583][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1363.675076][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1363.684474][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1363.699153][T26008] device ipip0 entered promiscuous mode [ 1363.718052][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1363.731381][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1363.742606][ T4365] usb 6-1: Using ep0 maxpacket: 16 [ 1363.752215][T25674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1363.763411][ T4365] usb 6-1: config 6 has an invalid interface number: 4 but max is 0 [ 1363.771750][ T4365] usb 6-1: config 6 has no interface number 0 [ 1363.779195][ T4365] usb 6-1: config 6 interface 4 has no altsetting 0 [ 1363.790124][ T4365] usb 6-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=44.03 [ 1363.801183][ T4365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.811695][ T4365] usb 6-1: Product: syz [ 1363.823821][ T4365] usb 6-1: Manufacturer: syz [ 1363.828585][ T4365] usb 6-1: SerialNumber: syz [ 1364.045914][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1364.055432][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1364.067102][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1364.080215][T25674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.396195][ T4297] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1364.417237][ T4297] usb 1-1: USB disconnect, device number 45 [ 1364.570110][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1364.585811][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1364.630244][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1364.649517][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1364.671559][T25674] device veth0_vlan entered promiscuous mode [ 1364.681610][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1364.696962][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1364.717665][T25674] device veth1_vlan entered promiscuous mode [ 1364.762009][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1364.781308][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1364.790473][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1364.800005][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1364.815896][T25674] device veth0_macvtap entered promiscuous mode [ 1364.828247][T25674] device veth1_macvtap entered promiscuous mode [ 1364.849049][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.860120][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.870844][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.881403][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.891936][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.904895][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.933042][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.955098][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.974318][T25674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.017098][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1365.043381][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1365.083430][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1365.105801][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1365.125458][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.162344][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.191578][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.241806][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.281645][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.307046][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.318270][T25674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.318326][T25674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.338095][T25674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.348739][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1365.349537][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1365.394767][T25674] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.394906][T25674] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.394940][T25674] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.394971][T25674] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.650995][ T6256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.651099][ T6256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.713560][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1365.732938][T18029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.733046][T18029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.739828][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1366.333152][ T4365] keyspan 6-1:6.4: Keyspan 1 port adapter converter detected [ 1366.340759][ T4365] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 87 [ 1366.350126][ T4365] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 7 [ 1366.378293][ T4365] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 81 [ 1366.394939][ T4365] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 1 [ 1366.419873][ T4365] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 2 [ 1366.432828][T15209] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1366.445198][ T4365] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 85 [ 1366.462688][ T4365] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 5 [ 1366.485562][ T4365] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1366.505775][ T4365] usb 6-1: USB disconnect, device number 37 [ 1366.531064][ T4365] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1366.580651][ T6201] tipc: Subscription rejected, illegal request [ 1366.584163][ T4365] keyspan 6-1:6.4: device disconnected [ 1366.647358][T15209] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1366.678988][T15209] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1366.720023][T15209] usb 10-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1366.747289][T15209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.763927][T15209] usb 10-1: config 0 descriptor?? [ 1367.203684][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x6 [ 1367.243554][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.251182][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.268992][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.289237][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.308908][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.324708][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.339336][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.355715][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.463416][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.470640][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.482318][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.494173][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.501385][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.509023][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.517963][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.525744][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.556824][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.572543][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.595134][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.602415][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.609971][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.634658][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.641876][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.682775][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.690111][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.698282][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.708411][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.722916][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.730207][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.754096][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.761381][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.782609][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.789919][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.797264][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.804526][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.811727][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.823492][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.830695][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.839344][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.848624][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.859114][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.868636][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.879255][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.890066][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.901189][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.915916][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.924140][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.933372][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.941773][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.954752][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.962065][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.972119][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.979428][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.986709][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1367.995822][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.011115][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.030665][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.039285][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.048740][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.056076][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.069327][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.077575][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.085910][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.093314][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.100860][T15209] monterey 0003:0566:3004.0014: unknown main item tag 0x0 [ 1368.115964][T15209] monterey 0003:0566:3004.0014: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.9-1/input0 [ 1368.143098][T15209] usb 10-1: USB disconnect, device number 22 [ 1368.622911][T26155] loop2: detected capacity change from 0 to 7 [ 1368.680948][T26155] Dev loop2: unable to read RDB block 7 [ 1368.697343][T26155] loop2: AHDI p1 p2 [ 1368.701324][T26155] loop2: partition table partially beyond EOD, truncated [ 1368.719392][T26155] loop2: p1 start 1852863860 is beyond EOD, truncated [ 1370.031125][T26199] loop2: detected capacity change from 0 to 7 [ 1370.056911][T26199] Dev loop2: unable to read RDB block 7 [ 1370.082687][T26199] loop2: AHDI p1 p2 [ 1370.097614][T26199] loop2: partition table partially beyond EOD, truncated [ 1370.131412][T26199] loop2: p1 start 1852863860 is beyond EOD, truncated [ 1370.346549][T26172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.353968][T26172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.518433][T26172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.676294][T26172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1372.462834][ T27] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1372.585954][T26172] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.595428][T26172] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.610178][T26172] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.620279][T26172] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.661280][T26241] binder: BINDER_SET_CONTEXT_MGR already set [ 1372.667779][T26241] binder: 26240:26241 ioctl 4018620d 20000040 returned -16 [ 1372.684864][ T27] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1372.701469][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.719107][ T27] usb 10-1: config 0 descriptor?? [ 1372.732485][ T27] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1372.930926][ T27] gp8psk: usb in 128 operation failed. [ 1372.950968][ T27] gp8psk: usb in 137 operation failed. [ 1372.992588][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1373.036250][ T27] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1373.046986][ T27] usb 10-1: media controller created [ 1373.067886][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.134940][ T27] gp8psk_fe: Frontend attached [ 1373.139815][ T27] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1373.157361][ T27] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1373.298806][ T27] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1373.313665][ T27] gp8psk: found Genpix USB device pID = 203 (hex) [ 1373.509928][ T4365] usb 10-1: USB disconnect, device number 23 [ 1373.660362][ T4365] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1373.842582][T14600] Bluetooth: hci4: command 0x0406 tx timeout [ 1374.862426][T26297] fuse: Bad value for 'fd' [ 1375.946325][T26333] fuse: Bad value for 'fd' [ 1376.313968][T26348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.612033][T26353] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1376.803166][ T27] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1377.094801][ T27] usb 8-1: config index 0 descriptor too short (expected 5292, got 77) [ 1377.157699][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.295698][ T27] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 1377.513921][ T27] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1377.592189][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.658285][ T27] usb 8-1: Product: syz [ 1377.679459][ T27] usb 8-1: Manufacturer: syz [ 1377.738840][ T27] usb 8-1: SerialNumber: syz [ 1377.869423][ T27] usb 8-1: config 0 descriptor?? [ 1378.630141][T26375] fuse: Bad value for 'fd' [ 1378.832302][T26366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1378.861104][T26366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1378.897530][T26366] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1378.916248][T26366] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1378.928440][T26366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1378.937943][T26366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1378.948041][T26366] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1378.972952][T26366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1378.980888][T26366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1378.996456][T26366] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1379.029355][T26366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1379.072824][T26366] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1379.137275][T26366] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1379.827333][T26394] netlink: 'syz.2.7066': attribute type 10 has an invalid length. [ 1379.911217][T26394] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1380.162675][ T8177] Bluetooth: hci0: command 0x0c1a tx timeout [ 1380.884115][ T8177] Bluetooth: hci4: command 0x0c1a tx timeout [ 1380.962920][ T8177] Bluetooth: hci1: command 0x0c1a tx timeout [ 1381.042591][ T8177] Bluetooth: hci2: command 0x0c1a tx timeout [ 1381.048989][ T8177] Bluetooth: hci3: command 0x0c1a tx timeout [ 1381.298509][T15369] usb 8-1: USB disconnect, device number 27 [ 1382.963087][ T8177] Bluetooth: hci4: command 0x0406 tx timeout [ 1383.042618][ T8177] Bluetooth: hci1: command 0x0406 tx timeout [ 1383.123291][ T8177] Bluetooth: hci3: command 0x0406 tx timeout [ 1383.129441][ T8177] Bluetooth: hci2: command 0x0406 tx timeout [ 1383.397804][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 1383.397820][ T26] audit: type=1326 audit(1733906868.414:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26488 comm="syz.5.7102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa48477ff19 code=0x0 [ 1383.645484][T26468] syz.9.7093 (26468): drop_caches: 2 [ 1384.083550][T26512] netlink: 'syz.0.7110': attribute type 11 has an invalid length. [ 1384.411085][T26522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.511947][T26525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7117'. [ 1384.541914][T26522] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1385.374449][T26547] netlink: 'syz.9.7123': attribute type 11 has an invalid length. [ 1385.552562][ T27] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1385.753031][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 1385.760537][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1385.831603][ T27] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1385.902631][ T4345] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1385.935711][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.012513][ T27] usb 1-1: Product: syz [ 1386.030094][ T27] usb 1-1: Manufacturer: syz [ 1386.100680][ T27] usb 1-1: SerialNumber: syz [ 1386.105265][ T4345] usb 10-1: Using ep0 maxpacket: 8 [ 1386.163730][ T27] usb 1-1: config 0 descriptor?? [ 1386.195777][ T4345] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1386.219218][ T4345] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1386.259465][ T4345] usb 10-1: can't read configurations, error -71 [ 1386.299965][T26563] fuse: Bad value for 'fd' [ 1386.428472][ T4301] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1386.621039][ T4301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.639073][ T4301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.659442][ T4301] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1386.693027][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.750746][ T4301] usb 6-1: config 0 descriptor?? [ 1387.214938][ T4301] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 1387.544013][ T8177] Bluetooth: hci2: unexpected cc 0x042e length: 1 < 7 [ 1387.550999][ T8177] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1387.613372][ T4301] hid-led: probe of 0003:0FC5:B080.0015 failed with error -71 [ 1387.623847][ T4301] usb 6-1: USB disconnect, device number 38 [ 1387.676343][T26594] loop2: detected capacity change from 0 to 7 [ 1387.684614][T26594] Dev loop2: unable to read RDB block 7 [ 1387.690352][T26594] loop2: unable to read partition table [ 1387.697880][T26594] loop2: partition table beyond EOD, truncated [ 1387.704820][T26594] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 1388.287517][ T27] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1388.332100][ T4301] usb 1-1: USB disconnect, device number 46 [ 1388.503214][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 1388.512021][ T27] usb 8-1: config 7 has an invalid interface number: 31 but max is 0 [ 1388.543983][ T27] usb 8-1: config 7 has no interface number 0 [ 1388.570950][ T27] usb 8-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=5f.f5 [ 1388.588708][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.597199][ T27] usb 8-1: Product: syz [ 1388.601420][ T27] usb 8-1: Manufacturer: syz [ 1388.613326][ T27] usb 8-1: SerialNumber: syz [ 1388.764639][ T4345] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1388.790037][T26628] loop2: detected capacity change from 0 to 7 [ 1388.798919][T26628] Dev loop2: unable to read RDB block 7 [ 1388.807349][T26628] loop2: unable to read partition table [ 1388.813894][T26628] loop2: partition table beyond EOD, truncated [ 1388.820354][T26628] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 1388.849052][ T27] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1388.906115][ T27] usb 8-1: USB disconnect, device number 28 [ 1388.955394][ T4345] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1388.996462][ T4345] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1389.032296][ T4345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.062928][ T4345] usb 6-1: Product: syz [ 1389.067152][ T4345] usb 6-1: Manufacturer: syz [ 1389.082097][ T4345] usb 6-1: SerialNumber: syz [ 1389.099116][T26620] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1389.327145][ T4345] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1389.535244][ T4365] usb 6-1: USB disconnect, device number 39 [ 1389.548386][ T4365] usblp0: removed [ 1389.717503][ T4345] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1389.809930][T26661] loop2: detected capacity change from 0 to 7 [ 1389.817577][T26661] Dev loop2: unable to read RDB block 7 [ 1389.823348][T26661] loop2: unable to read partition table [ 1389.829451][T26661] loop2: partition table beyond EOD, truncated [ 1389.836723][T26661] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 1389.902963][ T4345] usb 1-1: Using ep0 maxpacket: 16 [ 1389.910172][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1389.936883][ T4345] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1389.960133][ T4345] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1389.971853][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.988885][ T4345] usb 1-1: config 0 descriptor?? [ 1390.380395][T26681] fuse: Bad value for 'fd' [ 1390.424197][ T4345] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 1390.431501][ T4345] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 1390.465622][ T4345] kovaplus 0003:1E7D:2D50.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1390.632560][ T4345] kovaplus 0003:1E7D:2D50.0016: couldn't init struct kovaplus_device [ 1390.650820][ T4345] kovaplus 0003:1E7D:2D50.0016: couldn't install mouse [ 1390.669610][ T4345] kovaplus: probe of 0003:1E7D:2D50.0016 failed with error -71 [ 1390.705035][ T4345] usb 1-1: USB disconnect, device number 47 [ 1390.987799][T26701] xt_TCPMSS: Only works on TCP SYN packets [ 1391.246012][ T4345] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1391.444463][T26716] loop2: detected capacity change from 0 to 7 [ 1391.452683][ T4345] usb 10-1: Using ep0 maxpacket: 32 [ 1391.459888][ T4345] usb 10-1: config 0 has an invalid interface number: 43 but max is 0 [ 1391.466575][T26716] Dev loop2: unable to read RDB block 7 [ 1391.480445][T26716] loop2: unable to read partition table [ 1391.487650][T26716] loop2: partition table beyond EOD, truncated [ 1391.491913][ T4345] usb 10-1: config 0 has no interface number 0 [ 1391.495162][T26716] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 1391.510605][ T4345] usb 10-1: config 0 interface 43 has no altsetting 0 [ 1391.535118][ T4345] usb 10-1: New USB device found, idVendor=1bbb, idProduct=0052, bcdDevice=75.b4 [ 1391.559304][ T4345] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.577809][ T4345] usb 10-1: Product: syz [ 1391.582166][ T4345] usb 10-1: Manufacturer: syz [ 1391.599070][ T4345] usb 10-1: SerialNumber: syz [ 1391.635737][ T4345] usb 10-1: config 0 descriptor?? [ 1391.872772][ T4345] usb 10-1: USB disconnect, device number 26 [ 1392.312560][T15369] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1392.421097][ T27] hid-generic 8FC0:10000:0001.0017: unknown main item tag 0x1 [ 1392.436747][ T27] hid-generic 8FC0:10000:0001.0017: item fetching failed at offset 10/14 [ 1392.463618][ T27] hid-generic: probe of 8FC0:10000:0001.0017 failed with error -22 [ 1392.512603][T15369] usb 8-1: Using ep0 maxpacket: 32 [ 1392.525743][T15369] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 213, changing to 7 [ 1392.553212][T15369] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 42437, setting to 1024 [ 1392.591621][T15369] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1392.614065][T15369] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.632667][T15369] usb 8-1: Product: syz [ 1392.636898][T15369] usb 8-1: Manufacturer: syz [ 1392.641527][T15369] usb 8-1: SerialNumber: syz [ 1392.661189][T15369] usb 8-1: config 0 descriptor?? [ 1392.713421][T15369] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1393.020604][ T46] usb 8-1: Failed to submit usb control message: -71 [ 1393.029919][T15369] usb 8-1: USB disconnect, device number 29 [ 1393.053775][ T46] usb 8-1: unable to send the bmi data to the device: -71 [ 1393.060962][ T46] usb 8-1: unable to get target info from device [ 1393.102863][ T46] usb 8-1: could not get target info (-71) [ 1393.108825][ T46] usb 8-1: could not probe fw (-71) [ 1395.210067][T26806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7232'. [ 1395.747303][T26823] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1395.972704][ T27] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1396.178069][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1396.186062][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.222559][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.254801][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1396.274206][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.315586][ T27] usb 1-1: config 0 descriptor?? [ 1396.344246][ T27] hub 1-1:0.0: USB hub found [ 1396.546336][ T27] hub 1-1:0.0: 1 port detected [ 1396.779100][ T27] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1396.796748][ T27] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1396.824111][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 1396.830908][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 1396.881687][ T27] usb 1-1: USB disconnect, device number 48 [ 1396.928572][T26821] syz.2.7243 (26821): drop_caches: 2 [ 1398.544098][T26883] syz.2.7265 (26883): drop_caches: 2 [ 1399.145866][T26920] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1399.518600][T26933] syz.0.7285 (26933): drop_caches: 2 [ 1399.722767][T15209] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1399.954191][T15209] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1399.985280][T15209] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1400.019209][T15209] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1400.063868][T15209] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1400.075918][T15209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.102513][T15209] usb 10-1: Product: syz [ 1400.113362][T15209] usb 10-1: Manufacturer: syz [ 1400.123966][T15209] usb 10-1: SerialNumber: syz [ 1400.145027][T15209] usb 10-1: config 0 descriptor?? [ 1400.150913][T26929] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1400.164192][T15209] imon_raw 10-1:0.0: IR endpoint missing [ 1400.370774][ T4365] usb 10-1: USB disconnect, device number 27 [ 1401.560229][T26987] binder: 26981:26987 ioctl c0306201 20000680 returned -14 [ 1402.068234][T27000] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1402.105705][T27000] syzkaller0: Linktype set failed because interface is up [ 1402.132147][T15270] syzkaller0: tun_net_xmit 76 [ 1402.138504][T15270] syzkaller0: tun_net_xmit 48 [ 1402.945132][ T26] audit: type=1326 audit(1733906887.964:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.2.7323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1402.968758][ T26] audit: type=1326 audit(1733906887.964:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.2.7323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1402.998174][ T26] audit: type=1326 audit(1733906887.974:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.2.7323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1403.032738][ T26] audit: type=1326 audit(1733906887.974:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.2.7323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031517ff19 code=0x7ffc0000 [ 1407.565354][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1407.607290][T27075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1407.737840][T27075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1407.925386][T27075] bond0: (slave bond_slave_0): Releasing backup interface [ 1408.010003][T27090] bridge0: port 3(vlan2) entered blocking state [ 1408.023971][T27090] bridge0: port 3(vlan2) entered disabled state [ 1408.050448][T27090] device vlan2 entered promiscuous mode [ 1409.072818][T27126] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7362'. [ 1409.123160][T15209] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1409.332638][T15209] usb 1-1: Using ep0 maxpacket: 8 [ 1409.339748][T15209] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1409.362961][T15209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.375031][T15209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.402587][T15209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1409.450059][T15209] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 1409.452623][ T4345] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1409.470037][T15209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.497130][T15209] usb 1-1: config 0 descriptor?? [ 1409.555905][ T4365] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1409.715100][ T4345] usb 10-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1409.731369][ T4345] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.752054][ T4345] usb 10-1: config 0 descriptor?? [ 1409.758712][ T4365] usb 6-1: Using ep0 maxpacket: 16 [ 1409.768907][ T4365] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1409.777627][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1409.789486][ T4365] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1409.800216][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.811809][ T4365] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1409.833142][ T4365] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1409.849686][ T4365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.859348][ T4365] usb 6-1: Product: syz [ 1409.870608][ T4365] usb 6-1: Manufacturer: syz [ 1409.875963][ T4365] usb 6-1: SerialNumber: syz [ 1409.893336][ T4365] usb 6-1: config 0 descriptor?? [ 1409.899520][T27132] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1409.914864][T15209] thrustmaster 0003:044F:B65A.0018: report_id 0 is invalid [ 1409.922129][T15209] thrustmaster 0003:044F:B65A.0018: item 0 1 1 8 parsing failed [ 1409.938526][ T4365] mcba_usb 6-1:0.0 can0: couldn't setup read URBs [ 1409.950543][T15209] thrustmaster 0003:044F:B65A.0018: parse failed [ 1409.956150][ T4365] mcba_usb 6-1:0.0 can0: couldn't start device: -90 [ 1409.967821][T15209] thrustmaster: probe of 0003:044F:B65A.0018 failed with error -22 [ 1410.037255][ T4365] mcba_usb: probe of 6-1:0.0 failed with error -90 [ 1410.119722][ T4365] usb 1-1: USB disconnect, device number 49 [ 1410.159036][ T4301] usb 6-1: USB disconnect, device number 40 [ 1410.196496][ T4345] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1410.213549][ T4345] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1410.237944][ T4345] pac7311: probe of 10-1:0.0 failed with error -71 [ 1410.262717][ T4345] usb 10-1: USB disconnect, device number 28 [ 1410.891102][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 1411.672751][ T4301] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1411.906323][ T4301] usb 10-1: config index 0 descriptor too short (expected 5292, got 77) [ 1411.946219][ T4301] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.020463][ T4301] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 1412.165556][ T4301] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1412.233546][ T4301] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.251597][ T4301] usb 10-1: Product: syz [ 1412.308617][ T4301] usb 10-1: Manufacturer: syz [ 1412.403772][ T4301] usb 10-1: SerialNumber: syz [ 1412.439082][ T4301] usb 10-1: config 0 descriptor?? [ 1412.602548][ T4345] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1412.804803][ T4345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.832073][ T4345] usb 6-1: config 0 has no interfaces? [ 1412.855524][ T4345] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1412.885380][ T4345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.908101][ T4345] usb 6-1: Product: syz [ 1412.915619][ T4345] usb 6-1: Manufacturer: syz [ 1412.920360][ T4345] usb 6-1: SerialNumber: syz [ 1412.942550][ T4345] usb 6-1: config 0 descriptor?? [ 1413.038385][T27191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.074987][T27191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.177406][ T4345] usb 6-1: USB disconnect, device number 41 [ 1415.337748][ T4365] usb 10-1: USB disconnect, device number 29 [ 1415.997027][ T27] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1416.188093][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 1416.204041][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.232858][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.267305][ T27] usb 6-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 1416.285722][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.333284][ T27] usb 6-1: config 0 descriptor?? [ 1416.758314][ T27] sony 0003:054C:0002.0019: unknown main item tag 0x0 [ 1416.772547][ T27] sony 0003:054C:0002.0019: unknown main item tag 0x0 [ 1416.779402][ T27] sony 0003:054C:0002.0019: unknown main item tag 0x0 [ 1416.802574][ T27] sony 0003:054C:0002.0019: unknown main item tag 0x0 [ 1416.819169][ T27] sony 0003:054C:0002.0019: unknown main item tag 0x0 [ 1416.842572][ T27] sony 0003:054C:0002.0019: hidraw0: USB HID v0.00 Device [HID 054c:0002] on usb-dummy_hcd.5-1/input0 [ 1416.867097][ T27] sony 0003:054C:0002.0019: failed to claim input [ 1416.970867][ T27] usb 6-1: USB disconnect, device number 42 [ 1417.692982][T27395] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1417.811711][T27400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7482'. [ 1417.928597][T27400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7482'. [ 1418.590941][T27431] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.7497'. [ 1418.601585][T27431] netlink: get zone limit has 8 unknown bytes [ 1418.750223][T27438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7500'. [ 1419.562927][T27475] Cannot find set identified by id 0 to match [ 1419.923809][ T8177] Bluetooth: hci1: command 0x0406 tx timeout [ 1421.151639][T27537] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7538'. [ 1421.724751][T27562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7550'. [ 1421.980115][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7554'. [ 1422.708955][T27606] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1422.824691][T27612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7572'. [ 1422.966040][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.974335][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.386539][T27637] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1424.213711][T27673] sctp: [Deprecated]: syz.9.7600 (pid 27673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1424.213711][T27673] Use struct sctp_sack_info instead [ 1424.288134][T27673] netlink: 1264 bytes leftover after parsing attributes in process `syz.9.7600'. [ 1424.306362][T27673] netlink: set zone limit has 8 unknown bytes [ 1425.048641][T27703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7610'. [ 1426.081232][T27746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7624'. [ 1426.099765][T27746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7624'. [ 1426.115204][T27746] device bond0 entered promiscuous mode [ 1426.121566][T27746] device bond_slave_0 entered promiscuous mode [ 1426.128753][T27746] device bond_slave_1 entered promiscuous mode [ 1426.135960][T27746] device netdevsim0 entered promiscuous mode [ 1426.146386][T27746] device bond0 left promiscuous mode [ 1426.151931][T27746] device bond_slave_0 left promiscuous mode [ 1426.159488][T27746] device bond_slave_1 left promiscuous mode [ 1426.176757][T27746] device netdevsim0 left promiscuous mode [ 1426.607210][T27768] Cannot find del_set index 4 as target [ 1427.088634][T27790] netlink: 'syz.9.7636': attribute type 10 has an invalid length. [ 1427.146472][T27790] bridge0: port 3(syz_tun) entered disabled state [ 1427.186764][T27790] bridge0: port 3(syz_tun) entered disabled state [ 1427.283917][T27790] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1427.619087][T27810] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7641'. [ 1427.642564][T27810] netlink: 228 bytes leftover after parsing attributes in process `syz.9.7641'. [ 1427.651797][T27810] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7641'. [ 1428.316359][T27838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7656'. [ 1428.462059][T27840] tipc: Enabling of bearer rejected, failed to enable media [ 1428.512933][T27838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7656'. [ 1428.916348][T27857] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7663'. [ 1429.209827][T27867] bridge0: port 3(gretap0) entered blocking state [ 1429.231679][T27867] bridge0: port 3(gretap0) entered disabled state [ 1429.263266][T27867] device gretap0 entered promiscuous mode [ 1429.295572][T27867] bridge0: port 3(gretap0) entered blocking state [ 1429.302172][T27867] bridge0: port 3(gretap0) entered forwarding state [ 1429.751326][T27891] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1430.240422][T27903] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7682'. [ 1430.286382][T27909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7683'. [ 1430.356331][T27909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1430.373123][T27909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1430.418818][T27909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1430.718599][T27926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7692'. [ 1430.742600][T27926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7692'. [ 1430.751633][T27926] netlink: 'syz.0.7692': attribute type 6 has an invalid length. [ 1431.060975][T27940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7697'. [ 1431.230326][T27949] netlink: 'syz.0.7699': attribute type 11 has an invalid length. [ 1431.250447][T27947] tipc: Started in network mode [ 1431.257516][T27947] tipc: Node identity e67e85cdbbb1, cluster identity 4711 [ 1431.269934][T27947] tipc: Enabled bearer , priority 0 [ 1431.335799][T27947] device syzkaller0 entered promiscuous mode [ 1431.345038][T27947] tipc: Resetting bearer [ 1431.359057][T27946] tipc: Resetting bearer [ 1432.376320][T15369] tipc: Node number set to 1573881293 [ 1435.290771][ T8177] Bluetooth: hci3: command 0x0406 tx timeout [ 1435.643089][T27946] tipc: Disabling bearer [ 1435.662745][T27961] netlink: 'syz.5.7704': attribute type 9 has an invalid length. [ 1436.876172][T28026] bridge0: port 4(gretap0) entered blocking state [ 1436.891499][T28026] bridge0: port 4(gretap0) entered disabled state [ 1436.911160][T28026] device gretap0 entered promiscuous mode [ 1437.382309][T28048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7743'. [ 1437.435043][T28050] Bluetooth: MGMT ver 1.22 [ 1437.705718][T28056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7748'. [ 1437.835733][T28063] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7749'. [ 1437.863525][T28063] device wlan0 entered promiscuous mode [ 1438.354300][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7759'. [ 1438.403178][T28087] IPv6: Can't replace route, no match found [ 1438.718381][T28099] netlink: 'syz.7.7765': attribute type 1 has an invalid length. [ 1438.818638][T28099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1438.937155][T28104] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1439.126142][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7773'. [ 1439.247323][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7774'. [ 1439.556009][T28129] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7777'. [ 1440.134909][T28157] netlink: 'syz.5.7788': attribute type 5 has an invalid length. [ 1440.515833][T28175] Illegal XDP return value 4294967294 on prog (id 697) dev N/A, expect packet loss! [ 1440.590742][T28178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7799'. [ 1440.618133][T28178] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1440.789666][T28190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7804'. [ 1445.759350][T28213] netlink: 'syz.0.7813': attribute type 4 has an invalid length. [ 1445.782718][T28218] netlink: 'syz.0.7813': attribute type 4 has an invalid length. [ 1445.795770][T28228] device team_slave_0 entered promiscuous mode [ 1445.802863][T28228] device team_slave_1 entered promiscuous mode [ 1445.820352][T28228] device vlan2 entered promiscuous mode [ 1445.826641][T28228] device team0 entered promiscuous mode [ 1445.859083][T28228] team0: Device vlan2 is already an upper device of the team interface [ 1445.879142][T28228] device team0 left promiscuous mode [ 1445.885523][T28228] device team_slave_0 left promiscuous mode [ 1445.891535][T28228] device team_slave_1 left promiscuous mode [ 1446.053561][T28236] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7823'. [ 1446.170116][T28240] netlink: set zone limit has 8 unknown bytes [ 1446.518108][T28256] Bluetooth: MGMT ver 1.22 [ 1446.560499][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7832'. [ 1446.960617][T28277] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1447.100090][T28280] device vlan0 entered promiscuous mode [ 1447.186800][T28280] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1447.249475][T28285] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7843'. [ 1447.301676][T28285] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1447.438461][T28298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7851'. [ 1447.650728][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7854'. [ 1447.960591][T28317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7860'. [ 1447.998475][T28317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1448.005858][T28317] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.013210][T28317] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.045705][T28318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7860'. [ 1448.060408][T28318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.069867][T28318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.087356][T28318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.098499][T28318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.336702][T28324] netlink: 'syz.7.7863': attribute type 1 has an invalid length. [ 1448.360094][T28324] netlink: 'syz.7.7863': attribute type 4 has an invalid length. [ 1448.370612][T28324] netlink: 15363 bytes leftover after parsing attributes in process `syz.7.7863'. [ 1448.380825][T28328] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7864'. [ 1448.512510][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7868'. [ 1448.585591][T28341] netlink: 'syz.5.7870': attribute type 1 has an invalid length. [ 1448.628681][T28343] bond0: (slave syz_tun): Releasing backup interface [ 1448.685697][T28343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1448.739251][T28343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1448.773120][T28343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1448.783924][T28343] device bridge_slave_0 left promiscuous mode [ 1448.790311][T28343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.836888][T28343] device bridge_slave_1 left promiscuous mode [ 1448.876414][T28343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.916889][T28343] bond0: (slave bond_slave_0): Releasing backup interface [ 1448.974678][T28343] bond0: (slave bond_slave_1): Releasing backup interface [ 1449.094179][T28343] team0: Port device team_slave_0 removed [ 1449.185664][T28343] team0: Port device team_slave_1 removed [ 1449.211004][T28343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.239425][T28343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.274624][T28343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.308324][T28343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.917817][T28403] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1450.996064][T28425] team0: Port device wg2 added [ 1451.021722][T28432] netlink: 'syz.9.7902': attribute type 10 has an invalid length. [ 1451.062638][T28432] __nla_validate_parse: 5 callbacks suppressed [ 1451.062657][T28432] netlink: 2 bytes leftover after parsing attributes in process `syz.9.7902'. [ 1451.126341][T28432] device team0 entered promiscuous mode [ 1451.132585][T28432] device wg2 entered promiscuous mode [ 1451.437480][T28447] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7910'. [ 1451.469811][T28448] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7911'. [ 1451.514027][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7911'. [ 1451.935603][T28467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7921'. [ 1452.130142][T28471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7923'. [ 1452.163882][T28476] device ip6tnl2 entered promiscuous mode [ 1452.378075][T28485] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input38 [ 1452.518651][T28493] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1452.549827][T28494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7930'. [ 1452.672133][T28500] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 1452.677265][T28494] netlink: 'syz.0.7930': attribute type 1 has an invalid length. [ 1452.683975][T28499] IPVS: stopping backup sync thread 28500 ... [ 1452.732810][T28494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7930'. [ 1453.422336][T28530] netlink: 88 bytes leftover after parsing attributes in process `syz.9.7946'. [ 1454.191089][T28561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7958'. [ 1454.913157][T28587] netlink: 'syz.5.7969': attribute type 4 has an invalid length. [ 1455.278383][T28603] team0: No ports can be present during mode change [ 1456.550609][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1456.561937][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1456.974324][T28661] bridge_slave_0: default FDB implementation only supports local addresses [ 1456.999821][T28659] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1457.087887][T28665] tipc: Started in network mode [ 1457.099467][T28665] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 1457.113865][T28665] tipc: Enabling of bearer rejected, failed to enable media [ 1457.197033][T28669] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8004'. [ 1457.475552][T28681] device syz_tun entered promiscuous mode [ 1457.490076][T28681] device macsec1 entered promiscuous mode [ 1457.500176][T28681] device syz_tun left promiscuous mode [ 1457.903455][T28695] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8015'. [ 1458.180032][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8020'. [ 1458.248770][T28707] netlink: 'syz.5.8021': attribute type 10 has an invalid length. [ 1458.259178][T28707] device syz_tun entered promiscuous mode [ 1458.290508][T28713] netlink: 'syz.9.8024': attribute type 32 has an invalid length. [ 1458.312832][T28707] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1458.336119][T28711] IPv6: Can't replace route, no match found [ 1458.343056][T28714] device gretap0 left promiscuous mode [ 1458.348767][T28714] bridge0: port 4(gretap0) entered disabled state [ 1458.812859][T28732] device gretap0 entered promiscuous mode [ 1458.819541][T28732] device vlan1 entered promiscuous mode [ 1458.876623][T28731] sctp: [Deprecated]: syz.7.8032 (pid 28731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1458.876623][T28731] Use struct sctp_sack_info instead [ 1458.994688][T28740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8035'. [ 1459.261681][T28753] xt_TCPMSS: Only works on TCP SYN packets [ 1460.042531][T28788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8049'. [ 1460.330201][T28802] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8056'. [ 1460.608286][T28818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8062'. [ 1461.031909][T28818] team0 (unregistering): Port device team_slave_0 removed [ 1461.052339][T28818] team0 (unregistering): Port device team_slave_1 removed [ 1461.092355][T28825] tipc: Enabled bearer , priority 10 [ 1461.403553][T28833] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8067'. [ 1461.681587][T28843] netlink: 164 bytes leftover after parsing attributes in process `syz.7.8071'. [ 1462.039830][T28858] netlink: 52 bytes leftover after parsing attributes in process `syz.9.8077'. [ 1462.058737][T28858] netlink: 'syz.9.8077': attribute type 1 has an invalid length. [ 1462.213055][T15209] tipc: Node number set to 4269801642 [ 1462.292912][T28870] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8081'. [ 1463.204014][T28898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8094'. [ 1463.249499][T28902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8095'. [ 1463.268295][T28902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8095'. [ 1463.826699][T28929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8105'. [ 1464.048243][T28939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8109'. [ 1464.611603][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8116'. [ 1464.759592][T28956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.339942][T28976] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8123'. [ 1466.657204][T29022] netlink: 'syz.5.8143': attribute type 1 has an invalid length. [ 1466.902795][T29028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.959543][T29033] __nla_validate_parse: 3 callbacks suppressed [ 1466.959567][T29033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8149'. [ 1466.996388][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8149'. [ 1467.370060][T29049] Bluetooth: MGMT ver 1.22 [ 1467.597184][T29056] device netdevsim0 entered promiscuous mode [ 1467.637941][T29053] device netdevsim0 left promiscuous mode [ 1467.935292][T29067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8163'. [ 1467.971768][T29067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8163'. [ 1469.020385][T29105] device bridge_slave_0 entered promiscuous mode [ 1469.061194][T29107] x_tables: unsorted underflow at hook 3 [ 1469.291709][T29117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8179'. [ 1469.311171][T29117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8179'. [ 1469.468910][T29126] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8183'. [ 1469.874472][T29137] device hsr_slave_0 left promiscuous mode [ 1469.892842][T29137] device hsr_slave_1 left promiscuous mode [ 1470.241942][T29149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.374329][T29155] netlink: 'syz.9.8196': attribute type 13 has an invalid length. [ 1470.382722][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8196'. [ 1470.427816][T14600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1470.441173][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1470.451392][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1470.461645][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1470.471391][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1470.479122][T14600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1470.958699][T29171] netlink: 'syz.0.8199': attribute type 10 has an invalid length. [ 1471.007926][T29171] device macvlan0 entered promiscuous mode [ 1471.050090][T29171] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1471.082629][T29175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1471.122961][T29151] chnl_net:caif_netlink_parms(): no params data found [ 1471.189895][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1471.463131][ T6201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.720304][ T6201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.071141][T29151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.090867][T29151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.110210][T29151] device bridge_slave_0 entered promiscuous mode [ 1472.197838][ T6201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.218357][T29151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.226414][T29151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.235607][T29151] device bridge_slave_1 entered promiscuous mode [ 1472.286546][ T6201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.363324][T29151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.404781][T29151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.540021][T29151] team0: Port device team_slave_0 added [ 1472.562918][ T8177] Bluetooth: hci5: command 0x0409 tx timeout [ 1472.613622][T29151] team0: Port device team_slave_1 added [ 1472.733304][T29204] netlink: 'syz.9.8210': attribute type 13 has an invalid length. [ 1472.742487][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8210'. [ 1472.765740][T29151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.773105][T29151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.800943][T29151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.916985][T29151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.927360][T29151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.962132][T29151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.005394][T29208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8212'. [ 1473.187039][T29208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8212'. [ 1473.230840][T29151] device hsr_slave_0 entered promiscuous mode [ 1473.250928][T29151] device hsr_slave_1 entered promiscuous mode [ 1473.279877][T29151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1473.309039][T29151] Cannot create hsr debugfs directory [ 1473.494283][T29208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8212'. [ 1473.996699][T29236] netlink: 'syz.0.8219': attribute type 1 has an invalid length. [ 1474.022802][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8219'. [ 1474.042096][T29238] netlink: 'syz.7.8220': attribute type 13 has an invalid length. [ 1474.067584][T29238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8220'. [ 1474.642532][ T8177] Bluetooth: hci5: command 0x041b tx timeout [ 1474.675370][ T6201] bond0: (slave wlan1): Releasing backup interface [ 1474.779093][ T6201] device hsr_slave_0 left promiscuous mode [ 1474.789351][ T6201] device hsr_slave_1 left promiscuous mode [ 1474.797190][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.813090][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.821212][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.836316][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.874062][ T6201] device bridge_slave_1 left promiscuous mode [ 1474.880381][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.900462][ T6201] device bridge_slave_0 left promiscuous mode [ 1474.909232][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.960982][T29264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8229'. [ 1475.040964][ T6201] device veth1_macvtap left promiscuous mode [ 1475.065489][ T6201] device veth0_macvtap left promiscuous mode [ 1475.078629][ T6201] device veth1_vlan left promiscuous mode [ 1475.091407][ T6201] device veth0_vlan left promiscuous mode [ 1475.385853][ T6201] bond1 (unregistering): Released all slaves [ 1476.355230][ T6201] team0 (unregistering): Port device team_slave_1 removed [ 1476.416594][ T6201] team0 (unregistering): Port device team_slave_0 removed [ 1476.498659][ T6201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.722742][ T8177] Bluetooth: hci5: command 0x040f tx timeout [ 1477.450569][ T6201] bond0 (unregistering): Released all slaves [ 1477.570387][T29269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8232'. [ 1477.592145][T29271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8233'. [ 1477.660320][T29271] device vlan0 entered promiscuous mode [ 1477.677911][T29271] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1477.716386][T29275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8235'. [ 1477.735146][T29275] ------------[ cut here ]------------ [ 1477.741523][T29275] WARNING: CPU: 1 PID: 29275 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x162/0x190 [ 1477.751961][T29275] Modules linked in: [ 1477.755957][T29275] CPU: 1 PID: 29275 Comm: syz.7.8235 Not tainted 6.1.119-syzkaller #0 [ 1477.764194][T29275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1477.774353][T29275] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 1477.780493][T29275] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 62 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e d8 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 1477.781355][T29279] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8237'. [ 1477.800202][T29275] RSP: 0018:ffffc90003216dc0 EFLAGS: 00010283 [ 1477.800317][T29275] RAX: ffffffff88dac392 RBX: 0000000000000000 RCX: 0000000000080000 [ 1477.800337][T29275] RDX: ffffc9000da58000 RSI: 0000000000003a15 RDI: 0000000000003a16 [ 1477.800354][T29275] RBP: ffff8880268c72d4 R08: ffffffff88dac33f R09: fffffbfff2249888 [ 1477.800373][T29275] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1477.800389][T29275] R13: 181013322d0ebee2 R14: dffffc0000000000 R15: 0000000000000000 [ 1477.800407][T29275] FS: 00007f396b9d16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1477.800436][T29275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1477.871473][T29275] CR2: 00007fa484947bac CR3: 000000007307a000 CR4: 00000000003506e0 [ 1477.879588][T29275] Call Trace: [ 1477.882947][T29275] [ 1477.885910][T29275] ? __warn+0x15a/0x520 [ 1477.890110][T29275] ? taprio_get_start_time+0x162/0x190 [ 1477.895681][T29275] ? report_bug+0x2af/0x500 [ 1477.900252][T29275] ? taprio_get_start_time+0x162/0x190 [ 1477.905823][T29275] ? handle_bug+0x3d/0x70 [ 1477.910213][T29275] ? exc_invalid_op+0x16/0x40 [ 1477.915031][T29275] ? asm_exc_invalid_op+0x16/0x20 [ 1477.920130][T29275] ? taprio_get_start_time+0x10f/0x190 [ 1477.925694][T29275] ? taprio_get_start_time+0x162/0x190 [ 1477.931210][T29275] ? taprio_get_start_time+0x162/0x190 [ 1477.936773][T29275] taprio_change+0x4319/0x5600 [ 1477.941595][T29275] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1477.947631][T29275] ? taprio_destroy+0x4a0/0x4a0 [ 1477.952656][T29275] ? lockdep_init_map_type+0x9d/0x900 [ 1477.958093][T29275] ? rtnetlink_rcv_msg+0x818/0xff0 [ 1477.963304][T29275] ? netlink_rcv_skb+0x1cd/0x410 [ 1477.968291][T29275] ? netlink_unicast+0x7d8/0x970 [ 1477.973402][T29275] ? netlink_sendmsg+0xa26/0xd60 [ 1477.978400][T29275] ? ____sys_sendmsg+0x5a5/0x8f0 [ 1477.983432][T29275] ? __sys_sendmsg+0x2a9/0x390 [ 1477.988254][T29275] ? memset+0x1f/0x40 [ 1477.992291][T29275] ? fifo_init+0x41e/0x760 [ 1477.996899][T29275] ? qdisc_peek_head+0x40/0x40 [ 1478.001764][T29275] ? taprio_peek+0x590/0x590 [ 1478.006458][T29275] qdisc_create+0x8a1/0x1220 [ 1478.011123][T29275] ? qdisc_notify+0x390/0x390 [ 1478.015931][T29275] tc_modify_qdisc+0xa0a/0x1d70 [ 1478.020869][T29275] ? qdisc_offload_query_caps+0x170/0x170 [ 1478.026726][T29275] ? qdisc_offload_query_caps+0x170/0x170 [ 1478.032627][T29275] rtnetlink_rcv_msg+0x818/0xff0 [ 1478.037637][T29275] ? rtnetlink_bind+0x80/0x80 [ 1478.042415][T29275] ? __local_bh_enable_ip+0x164/0x1f0 [ 1478.047839][T29275] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1478.053034][T29275] ? _local_bh_enable+0xa0/0xa0 [ 1478.057949][T29275] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1478.063149][T29275] ? __dev_queue_xmit+0x173c/0x3d50 [ 1478.068404][T29275] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1478.073607][T29275] ? netdev_core_pick_tx+0x320/0x320 [ 1478.078944][T29275] ? ref_tracker_free+0x638/0x7d0 [ 1478.084058][T29275] ? memcpy+0x3c/0x60 [ 1478.088172][T29275] ? refcount_inc+0x80/0x80 [ 1478.092837][T29275] ? __copy_skb_header+0x47b/0x600 [ 1478.098018][T29275] netlink_rcv_skb+0x1cd/0x410 [ 1478.102875][T29275] ? rtnetlink_bind+0x80/0x80 [ 1478.107603][T29275] ? netlink_ack+0x1290/0x1290 [ 1478.112439][T29275] ? __netlink_deliver_tap+0x73e/0x770 [ 1478.117970][T29275] ? netlink_deliver_tap+0x2e/0x1b0 [ 1478.123268][T29275] netlink_unicast+0x7d8/0x970 [ 1478.128092][T29275] ? netlink_detachskb+0x90/0x90 [ 1478.133112][T29275] ? __virt_addr_valid+0x45b/0x530 [ 1478.138279][T29275] ? __phys_addr_symbol+0x2b/0x70 [ 1478.143394][T29275] ? __check_object_size+0x4dd/0xa30 [ 1478.148724][T29275] ? bpf_lsm_netlink_send+0x5/0x10 [ 1478.153927][T29275] netlink_sendmsg+0xa26/0xd60 [ 1478.158767][T29275] ? netlink_getsockopt+0x580/0x580 [ 1478.164066][T29275] ? aa_sock_msg_perm+0x91/0x150 [ 1478.169053][T29275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1478.174427][T29275] ? security_socket_sendmsg+0x7d/0xa0 [ 1478.179938][T29275] ? netlink_getsockopt+0x580/0x580 [ 1478.185239][T29275] ____sys_sendmsg+0x5a5/0x8f0 [ 1478.190063][T29275] ? __sys_sendmsg_sock+0x30/0x30 [ 1478.195208][T29275] __sys_sendmsg+0x2a9/0x390 [ 1478.199860][T29275] ? ____sys_sendmsg+0x8f0/0x8f0 [ 1478.204935][T29275] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1478.210991][T29275] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1478.217060][T29275] ? lockdep_hardirqs_on+0x94/0x130 [ 1478.222310][T29275] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1478.228385][T29275] do_syscall_64+0x3b/0xb0 [ 1478.232886][T29275] ? clear_bhb_loop+0x45/0xa0 [ 1478.237627][T29275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1478.243617][T29275] RIP: 0033:0x7f396ab7ff19 [ 1478.248075][T29275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1478.267769][T29275] RSP: 002b:00007f396b9d1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1478.276277][T29275] RAX: ffffffffffffffda RBX: 00007f396ad45fa0 RCX: 00007f396ab7ff19 [ 1478.284337][T29275] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 1478.292398][T29275] RBP: 00007f396abf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1478.300412][T29275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.308483][T29275] R13: 0000000000000000 R14: 00007f396ad45fa0 R15: 00007fff4322b708 [ 1478.316570][T29275] [ 1478.319628][T29275] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1478.326935][T29275] CPU: 1 PID: 29275 Comm: syz.7.8235 Not tainted 6.1.119-syzkaller #0 [ 1478.335123][T29275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1478.345211][T29275] Call Trace: [ 1478.348512][T29275] [ 1478.351477][T29275] dump_stack_lvl+0x1e3/0x2cb [ 1478.356207][T29275] ? nf_tcp_handle_invalid+0x642/0x642 [ 1478.361724][T29275] ? panic+0x764/0x764 [ 1478.365834][T29275] ? 0xffffffffa000095c [ 1478.370019][T29275] ? vscnprintf+0x59/0x80 [ 1478.374392][T29275] panic+0x318/0x764 [ 1478.378331][T29275] ? __warn+0x169/0x520 [ 1478.382528][T29275] ? memcpy_page_flushcache+0xfc/0xfc [ 1478.387953][T29275] __warn+0x348/0x520 [ 1478.391995][T29275] ? taprio_get_start_time+0x162/0x190 [ 1478.397495][T29275] report_bug+0x2af/0x500 [ 1478.401841][T29275] ? taprio_get_start_time+0x162/0x190 [ 1478.407335][T29275] handle_bug+0x3d/0x70 [ 1478.411540][T29275] exc_invalid_op+0x16/0x40 [ 1478.416082][T29275] asm_exc_invalid_op+0x16/0x20 [ 1478.420955][T29275] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 1478.427047][T29275] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 62 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e d8 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 1478.446691][T29275] RSP: 0018:ffffc90003216dc0 EFLAGS: 00010283 [ 1478.452788][T29275] RAX: ffffffff88dac392 RBX: 0000000000000000 RCX: 0000000000080000 [ 1478.460765][T29275] RDX: ffffc9000da58000 RSI: 0000000000003a15 RDI: 0000000000003a16 [ 1478.468769][T29275] RBP: ffff8880268c72d4 R08: ffffffff88dac33f R09: fffffbfff2249888 [ 1478.476767][T29275] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1478.484757][T29275] R13: 181013322d0ebee2 R14: dffffc0000000000 R15: 0000000000000000 [ 1478.492774][T29275] ? taprio_get_start_time+0x10f/0x190 [ 1478.498266][T29275] ? taprio_get_start_time+0x162/0x190 [ 1478.503764][T29275] taprio_change+0x4319/0x5600 [ 1478.508567][T29275] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1478.514522][T29275] ? taprio_destroy+0x4a0/0x4a0 [ 1478.519409][T29275] ? lockdep_init_map_type+0x9d/0x900 [ 1478.524810][T29275] ? rtnetlink_rcv_msg+0x818/0xff0 [ 1478.529945][T29275] ? netlink_rcv_skb+0x1cd/0x410 [ 1478.534926][T29275] ? netlink_unicast+0x7d8/0x970 [ 1478.539895][T29275] ? netlink_sendmsg+0xa26/0xd60 [ 1478.544852][T29275] ? ____sys_sendmsg+0x5a5/0x8f0 [ 1478.549807][T29275] ? __sys_sendmsg+0x2a9/0x390 [ 1478.554682][T29275] ? memset+0x1f/0x40 [ 1478.558682][T29275] ? fifo_init+0x41e/0x760 [ 1478.563118][T29275] ? qdisc_peek_head+0x40/0x40 [ 1478.567929][T29275] ? taprio_peek+0x590/0x590 [ 1478.572532][T29275] qdisc_create+0x8a1/0x1220 [ 1478.577152][T29275] ? qdisc_notify+0x390/0x390 [ 1478.581858][T29275] tc_modify_qdisc+0xa0a/0x1d70 [ 1478.586745][T29275] ? qdisc_offload_query_caps+0x170/0x170 [ 1478.592503][T29275] ? qdisc_offload_query_caps+0x170/0x170 [ 1478.598241][T29275] rtnetlink_rcv_msg+0x818/0xff0 [ 1478.603207][T29275] ? rtnetlink_bind+0x80/0x80 [ 1478.607905][T29275] ? __local_bh_enable_ip+0x164/0x1f0 [ 1478.613317][T29275] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1478.618451][T29275] ? _local_bh_enable+0xa0/0xa0 [ 1478.623337][T29275] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1478.628466][T29275] ? __dev_queue_xmit+0x173c/0x3d50 [ 1478.633702][T29275] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1478.638847][T29275] ? netdev_core_pick_tx+0x320/0x320 [ 1478.644158][T29275] ? ref_tracker_free+0x638/0x7d0 [ 1478.649225][T29275] ? memcpy+0x3c/0x60 [ 1478.653222][T29275] ? refcount_inc+0x80/0x80 [ 1478.657733][T29275] ? __copy_skb_header+0x47b/0x600 [ 1478.662871][T29275] netlink_rcv_skb+0x1cd/0x410 [ 1478.667669][T29275] ? rtnetlink_bind+0x80/0x80 [ 1478.672365][T29275] ? netlink_ack+0x1290/0x1290 [ 1478.677144][T29275] ? __netlink_deliver_tap+0x73e/0x770 [ 1478.682629][T29275] ? netlink_deliver_tap+0x2e/0x1b0 [ 1478.687846][T29275] netlink_unicast+0x7d8/0x970 [ 1478.692634][T29275] ? netlink_detachskb+0x90/0x90 [ 1478.697584][T29275] ? __virt_addr_valid+0x45b/0x530 [ 1478.702712][T29275] ? __phys_addr_symbol+0x2b/0x70 [ 1478.707756][T29275] ? __check_object_size+0x4dd/0xa30 [ 1478.713056][T29275] ? bpf_lsm_netlink_send+0x5/0x10 [ 1478.718191][T29275] netlink_sendmsg+0xa26/0xd60 [ 1478.722988][T29275] ? netlink_getsockopt+0x580/0x580 [ 1478.728219][T29275] ? aa_sock_msg_perm+0x91/0x150 [ 1478.733174][T29275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1478.738517][T29275] ? security_socket_sendmsg+0x7d/0xa0 [ 1478.744077][T29275] ? netlink_getsockopt+0x580/0x580 [ 1478.749385][T29275] ____sys_sendmsg+0x5a5/0x8f0 [ 1478.754180][T29275] ? __sys_sendmsg_sock+0x30/0x30 [ 1478.759243][T29275] __sys_sendmsg+0x2a9/0x390 [ 1478.763942][T29275] ? ____sys_sendmsg+0x8f0/0x8f0 [ 1478.768928][T29275] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1478.774941][T29275] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1478.780942][T29275] ? lockdep_hardirqs_on+0x94/0x130 [ 1478.786159][T29275] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1478.792158][T29275] do_syscall_64+0x3b/0xb0 [ 1478.796599][T29275] ? clear_bhb_loop+0x45/0xa0 [ 1478.801390][T29275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1478.807308][T29275] RIP: 0033:0x7f396ab7ff19 [ 1478.811768][T29275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1478.831431][T29275] RSP: 002b:00007f396b9d1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1478.839862][T29275] RAX: ffffffffffffffda RBX: 00007f396ad45fa0 RCX: 00007f396ab7ff19 [ 1478.847847][T29275] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 1478.855839][T29275] RBP: 00007f396abf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1478.863826][T29275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.871856][T29275] R13: 0000000000000000 R14: 00007f396ad45fa0 R15: 00007fff4322b708 [ 1478.879957][T29275] [ 1478.883283][T29275] Kernel Offset: disabled [ 1478.887755][T29275] Rebooting in 86400 seconds..