last executing test programs: 12.920976779s ago: executing program 2 (id=514): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @multicast1}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x1, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") 12.575974954s ago: executing program 3 (id=518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x262) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 10.775607099s ago: executing program 3 (id=522): socket$packet(0x11, 0x2, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r0, 0x404c4701, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e041f0204"], 0x7) 10.775291989s ago: executing program 0 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x3, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 10.686429701s ago: executing program 2 (id=524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc-serpent-sse2\x00'}}}]}, 0x138}}, 0x0) 9.502610987s ago: executing program 0 (id=527): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.502103907s ago: executing program 3 (id=528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f000062c000/0x1000)=nil, 0x1000, 0x0) socket$inet6(0xa, 0x3, 0x4) 8.670122229s ago: executing program 2 (id=530): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}, 0x24) 8.669347829s ago: executing program 0 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x2000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x3f20}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}]}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000000)="8eee", 0x2}, 0x68) 7.89663946s ago: executing program 3 (id=532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="870000006100000001000000000000001400000000000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f0000000300)='%+9llu \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x520e854a, 0x0, 0x0, 0x41000, 0x20, '\x00', r1, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xfffffffe, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 7.640959833s ago: executing program 3 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r4, 0x0) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x24ad, &(0x7f0000000300)={0x0, 0x10077f4, 0x10100, 0x3, 0x5c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x22}}) socket$packet(0x11, 0x3, 0x300) 7.587776854s ago: executing program 2 (id=536): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setgroups(0xefff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb4") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x203, &(0x7f0000000100)={0x0, 0x52}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.796603069s ago: executing program 0 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=0x0], 0x3c}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0x0, 0x0, &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r6) dup(r1) r7 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r7, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 4.858770172s ago: executing program 3 (id=540): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x3f20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.858609152s ago: executing program 4 (id=541): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.585432896s ago: executing program 1 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000004000000040000000700"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18090000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.464350251s ago: executing program 2 (id=543): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 3.442557282s ago: executing program 0 (id=544): umount2(0x0, 0x15) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9a38, 0x0, 0x8, 0x5, 0x9, 0x1e3, 0xf900}, 0x20) socket$inet6(0xa, 0x80803, 0x87) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030915800000e600fc000705db224370bf09050b02", @ANYBLOB="4dacb6c8a0f83a681cae0472a5784c0a26f01f26c2aa73ece04f20c1a5cbded093710d939fe7c52cc5df034889a19314d1fb69136fe3963fa4cc7dd7dc01a16a0666af0ad6b55fca"], 0x0) 3.330342084s ago: executing program 2 (id=545): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(0x0, &(0x7f0000000300)=@known='security.selinux\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x20000000) 3.330061584s ago: executing program 1 (id=546): ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) writev(0xffffffffffffffff, 0x0, 0x0) 2.305666338s ago: executing program 4 (id=547): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d4020000100001002abd700001dcdf25ac1e0001000000000000000000000000000000000000000000000000000000004e2100024e2001000a00202089000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fc020000000000000000000040000001000004d63c000000ff010000000000000000000000000001008000000000000004000000000000001d0c00000000000005000000000000002d0d000000000000aa000000000000000100000000000000ff01000000000000020000000000000007000000000000000300000000000000b1eb0000000000000900000007000000050000002bbd7000063500000a00042000000000000000000a00100001000000000000008d0008"], 0x2d4}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 2.304991618s ago: executing program 4 (id=548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, 0x80000}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) 2.028443042s ago: executing program 1 (id=549): syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_clock={{0x40}, {0x0, 0xc8, 0x9, 0xa}}}}, 0xf) 1.199705653s ago: executing program 1 (id=550): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001900), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) 1.116260784s ago: executing program 4 (id=551): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x5, 0x0, &(0x7f00000001c0)=0x5d) 1.011950676s ago: executing program 1 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="48003300d0980700ffffffffffff080211"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x44050) 1.011636686s ago: executing program 4 (id=553): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 903.075228ms ago: executing program 1 (id=554): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 64.817909ms ago: executing program 4 (id=555): syz_io_uring_setup(0x3bc8, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = inotify_init1(0x0) read(r1, 0x0, 0x0) 0s ago: executing program 0 (id=556): r0 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/244, 0xf4}], 0x1, 0x401, 0x2ab) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 40.054463][ T4015] cgroup: Unknown subsys name 'net' [ 40.306807][ T4015] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.645002][ T4015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 42.134541][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 42.187586][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 42.225555][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 42.263839][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.265905][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.268417][ T4026] device bridge_slave_0 entered promiscuous mode [ 42.273046][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 42.299228][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.301552][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.304134][ T4026] device bridge_slave_1 entered promiscuous mode [ 42.339113][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.345994][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.348863][ T4025] device bridge_slave_0 entered promiscuous mode [ 42.374529][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.376461][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.379231][ T4025] device bridge_slave_1 entered promiscuous mode [ 42.393400][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.396245][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.398205][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.400795][ T4032] device bridge_slave_0 entered promiscuous mode [ 42.414718][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 42.427974][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.435888][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.437955][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.440608][ T4032] device bridge_slave_1 entered promiscuous mode [ 42.463171][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.465216][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.467841][ T4035] device bridge_slave_0 entered promiscuous mode [ 42.488065][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.492907][ T4026] team0: Port device team_slave_0 added [ 42.495983][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.497985][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.500867][ T4035] device bridge_slave_1 entered promiscuous mode [ 42.510676][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.515525][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.524841][ T4026] team0: Port device team_slave_1 added [ 42.528074][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.576169][ T4032] team0: Port device team_slave_0 added [ 42.596998][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.606315][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.608340][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.611519][ T4036] device bridge_slave_0 entered promiscuous mode [ 42.615215][ T4032] team0: Port device team_slave_1 added [ 42.617079][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.619053][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.623493][ T4036] device bridge_slave_1 entered promiscuous mode [ 42.628004][ T4025] team0: Port device team_slave_0 added [ 42.630456][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.633158][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.640076][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.646115][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.648961][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.650837][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.658333][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.683907][ T4025] team0: Port device team_slave_1 added [ 42.728111][ T4035] team0: Port device team_slave_0 added [ 42.763427][ T4026] device hsr_slave_0 entered promiscuous mode [ 42.801591][ T4026] device hsr_slave_1 entered promiscuous mode [ 42.871798][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.873827][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.880846][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.885453][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.887404][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.894612][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.900727][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.904048][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.905919][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.913099][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.918784][ T4035] team0: Port device team_slave_1 added [ 42.921759][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.923607][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.930507][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.946205][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.004817][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.006697][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.014120][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.062964][ T4032] device hsr_slave_0 entered promiscuous mode [ 43.101349][ T4032] device hsr_slave_1 entered promiscuous mode [ 43.141142][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.143384][ T4032] Cannot create hsr debugfs directory [ 43.146808][ T4036] team0: Port device team_slave_0 added [ 43.149338][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.151856][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.158775][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.213201][ T4025] device hsr_slave_0 entered promiscuous mode [ 43.261300][ T4025] device hsr_slave_1 entered promiscuous mode [ 43.301159][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.303261][ T4025] Cannot create hsr debugfs directory [ 43.313497][ T4036] team0: Port device team_slave_1 added [ 43.386788][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.388754][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.396096][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.421106][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.423024][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.429903][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.483050][ T4035] device hsr_slave_0 entered promiscuous mode [ 43.541312][ T4035] device hsr_slave_1 entered promiscuous mode [ 43.601227][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.603416][ T4035] Cannot create hsr debugfs directory [ 43.763084][ T4036] device hsr_slave_0 entered promiscuous mode [ 43.811362][ T4036] device hsr_slave_1 entered promiscuous mode [ 43.851261][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.853430][ T4036] Cannot create hsr debugfs directory [ 43.881663][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 43.883810][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 43.885503][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 43.932758][ T4026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.961242][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 43.961297][ T4037] Bluetooth: hci3: command 0x0409 tx timeout [ 43.983492][ T4026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.034403][ T4026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.082877][ T4026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.170291][ T4032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.222042][ T4032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.263533][ T4032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.317030][ T4032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.353150][ T4025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.404334][ T4025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.453072][ T4025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.500672][ T4025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.584783][ T4035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.649709][ T4035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.703116][ T4035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.744247][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.762253][ T4035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.812707][ T4036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.858227][ T4036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.893950][ T4036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.952077][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.955514][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.958612][ T4036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.034696][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.066449][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.070102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.073901][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.075948][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.078694][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.105297][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.118184][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.121348][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.123910][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.125860][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.128153][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.134382][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.145404][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.159542][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.163350][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.166095][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.169454][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.179824][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.183781][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.198926][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.202239][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.207332][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.209964][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.213800][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.216375][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.218860][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.221371][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.224022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.230347][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.239564][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.244210][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.246803][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.248783][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.252361][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.255135][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.257752][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.259738][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.264139][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.267015][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.283806][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.287309][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.289980][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.292006][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.301423][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.317205][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.320237][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.332930][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.335484][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.337384][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.363158][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.366251][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.369300][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.379494][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.384615][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.387445][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.390261][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.395318][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.398491][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.401836][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.404454][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.407344][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.409986][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.416478][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.419190][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.423681][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.426637][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.437562][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.439668][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.444022][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.451570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.454471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.457066][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.458975][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.463143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.466026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.468653][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.470519][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.487487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.490438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.494216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.499104][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.512544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.520315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.525122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.528933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.535201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.547617][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.557599][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.565297][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.579578][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.584590][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.587467][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.603564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.606562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.609398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.620210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.642812][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.645552][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.660884][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.672269][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.686217][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.689039][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.707175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.709438][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.735261][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.737964][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.740686][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.748195][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.759647][ T4026] device veth0_vlan entered promiscuous mode [ 45.769379][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.772816][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.775271][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.779986][ T4026] device veth1_vlan entered promiscuous mode [ 45.793963][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.796548][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.798745][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.817854][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.826947][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.846649][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.849385][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.853331][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.855921][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.857926][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.860333][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.863960][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.866791][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.884996][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.887808][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.890342][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.892396][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.896252][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.898486][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.900654][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.904550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.919603][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.929135][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.942014][ T4026] device veth0_macvtap entered promiscuous mode [ 45.946328][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.949076][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.960225][ T4026] device veth1_macvtap entered promiscuous mode [ 45.961144][ T4069] Bluetooth: hci0: command 0x041b tx timeout [ 45.966344][ T4069] Bluetooth: hci2: command 0x041b tx timeout [ 45.968268][ T4069] Bluetooth: hci1: command 0x041b tx timeout [ 45.970302][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.974484][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.977736][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.980433][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.984475][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.987260][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.990079][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.993603][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.996290][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.999027][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.001748][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.004538][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.012298][ T4032] device veth0_vlan entered promiscuous mode [ 46.028618][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.031717][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.040804][ T4032] device veth1_vlan entered promiscuous mode [ 46.042286][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 46.044198][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 46.055502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.058178][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.060834][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.070694][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.074150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.076834][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.079316][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.092692][ T4025] device veth0_vlan entered promiscuous mode [ 46.099257][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.103164][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.105868][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.108801][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.133047][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.139593][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.143991][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.158723][ T4025] device veth1_vlan entered promiscuous mode [ 46.166405][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.170485][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.173439][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.176187][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.182163][ T4026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.184700][ T4026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.187082][ T4026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.189476][ T4026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.208858][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.211865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.214450][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.219107][ T4035] device veth0_vlan entered promiscuous mode [ 46.232447][ T4032] device veth0_macvtap entered promiscuous mode [ 46.237821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.240362][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.246053][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.249281][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.256955][ T4035] device veth1_vlan entered promiscuous mode [ 46.273607][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.276396][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.279016][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.290746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.295045][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.307907][ T4032] device veth1_macvtap entered promiscuous mode [ 46.344155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.346905][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.349810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.376390][ T4025] device veth0_macvtap entered promiscuous mode [ 46.386988][ T4035] device veth0_macvtap entered promiscuous mode [ 46.389721][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.394088][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.398013][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.408460][ T4025] device veth1_macvtap entered promiscuous mode [ 46.413952][ T4035] device veth1_macvtap entered promiscuous mode [ 46.418414][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.422118][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.424800][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.427497][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.430299][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.439560][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.444872][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.447028][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.464920][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.467219][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.470144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.486115][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.488996][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.495643][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.512738][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.515713][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.518396][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.522865][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.526871][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.528980][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.532065][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.534831][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.537604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.546242][ T4032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.548672][ T4032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.552244][ T4032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.554643][ T4032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.584311][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.590220][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.593830][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.596519][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.599377][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.609246][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.616843][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.627182][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.648030][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.649270][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.653656][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.653915][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.658270][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.662335][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.666145][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.668180][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.670874][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.674594][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.677531][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.680231][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.723944][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.726842][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.729532][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.733802][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.736541][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.739417][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.744944][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.751792][ T4025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.754334][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.756660][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.759020][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.764697][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.767519][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.774339][ T4035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.776804][ T4035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.779207][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.785096][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.789524][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.792647][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.795547][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.931716][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.933922][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.937827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.941742][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.943917][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.955422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.015774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.018738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.028272][ T441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.030499][ T441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.032671][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.032702][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.033576][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.068963][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.128541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.131685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.135517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.137937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.183837][ T4106] Zero length message leads to an empty skb [ 47.185368][ T4036] device veth0_vlan entered promiscuous mode [ 47.204262][ T441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.206455][ T441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.210409][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.225635][ T4106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.227698][ T4106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.242255][ T4106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.249215][ T4106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.216844][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 48.218787][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 48.220506][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 48.222327][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 48.224228][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 48.242720][ T4036] device veth1_vlan entered promiscuous mode [ 48.310770][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.314011][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.347116][ T4036] device veth0_macvtap entered promiscuous mode [ 48.360115][ T4036] device veth1_macvtap entered promiscuous mode [ 48.386059][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.388837][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.426738][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.435149][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.445875][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.449318][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.480060][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.505615][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.508638][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.511332][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.514025][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.516654][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.519565][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.524349][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.529868][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.532971][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.535514][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.538230][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.554027][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.556729][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.599455][ T4036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.603657][ T4036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.606248][ T4036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.608876][ T4036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.867473][ T1717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.870487][ T1717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.877876][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.604825][ T4074] Bluetooth: hci3: command 0x0419 tx timeout [ 51.606632][ T4074] Bluetooth: hci4: command 0x0419 tx timeout [ 51.711159][ T4074] Bluetooth: hci0: command 0x0419 tx timeout [ 51.714962][ T4074] Bluetooth: hci2: command 0x0419 tx timeout [ 51.716668][ T4074] Bluetooth: hci1: command 0x0419 tx timeout [ 51.841342][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.843583][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.853268][ T1717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.953573][ T4153] loop0: detected capacity change from 0 to 1024 [ 55.236785][ T4174] sched: RT throttling activated [ 55.272177][ T4177] loop0: detected capacity change from 0 to 512 [ 56.874105][ T4177] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.198135][ T4193] mmap: syz.1.23 (4193): VmData 26017792 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 59.907364][ T4177] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 60.914239][ T144] Bluetooth: Frame is too long (len 20, expected len 4) [ 61.541989][ T26] audit: type=1400 audit(61.010:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4199 comm="syz.3.26" [ 61.547759][ T4212] binder: 4206:4212 ioctl 4018620d 0 returned -22 [ 61.661265][ T4212] binder: 4206:4212 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 63.648367][ T4212] binder: 4206:4212 got transaction to invalid handle, 1 [ 63.658154][ T4212] binder: 4206:4212 transaction failed 29201/-22, size 0-0 line 2917 [ 63.682798][ T4212] binder: 4206:4212 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.686227][ T4212] binder: 4212 RLIMIT_NICE not set [ 63.905381][ T4213] binder: 4206:4213 ioctl c0306201 0 returned -14 [ 64.909262][ T4212] binder: 4206:4212 ioctl c0306201 20001a80 returned -11 [ 65.769057][ T4073] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.005796][ T26] audit: type=1400 audit(69.400:3): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4257 comm="syz.1.41" [ 70.021845][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.023797][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.051118][ T144] Bluetooth: Frame is too long (len 20, expected len 4) [ 70.962546][ T4266] loop2: detected capacity change from 0 to 8192 [ 74.049511][ T4302] capability: warning: `syz.3.52' uses deprecated v2 capabilities in a way that may be insecure [ 74.159890][ T4305] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 74.432988][ T26] audit: type=1400 audit(74.380:4): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4312 comm="syz.4.56" [ 74.630066][ T4308] loop1: detected capacity change from 0 to 40427 [ 74.638732][ T4308] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 74.640977][ T4308] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.645321][ T4308] F2FS-fs (loop1): invalid crc value [ 74.739875][ T4308] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.775972][ T1533] cfg80211: failed to load regulatory.db [ 75.100510][ T4308] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.102872][ T4308] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 75.368364][ T4328] binder: 4319:4328 ioctl 4018620d 0 returned -22 [ 75.406451][ T4328] binder: 4319:4328 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 75.442678][ T4328] binder: 4319:4328 got transaction to invalid handle, 1 [ 75.444634][ T4328] binder: 4319:4328 transaction failed 29201/-22, size 0-0 line 2917 [ 75.890615][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.110630][ T4339] loop4: detected capacity change from 0 to 32768 [ 77.185920][ T4339] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.65 (4339) [ 77.453138][ T4339] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 77.455643][ T4339] BTRFS info (device loop4): setting nodatacow, compression disabled [ 77.458024][ T4339] BTRFS info (device loop4): turning on sync discard [ 77.459957][ T4339] BTRFS info (device loop4): setting datacow [ 77.461704][ T4339] BTRFS info (device loop4): doing ref verification [ 77.463462][ T4339] BTRFS info (device loop4): turning off barriers [ 77.465196][ T4339] BTRFS info (device loop4): enabling ssd optimizations [ 77.467485][ T4339] BTRFS info (device loop4): using spread ssd allocation scheme [ 77.469530][ T4339] BTRFS info (device loop4): turning on barriers [ 77.471259][ T4339] BTRFS info (device loop4): not using ssd optimizations [ 77.473122][ T4339] BTRFS info (device loop4): not using spread ssd allocation scheme [ 77.475257][ T4339] BTRFS info (device loop4): using free space tree [ 77.476994][ T4339] BTRFS info (device loop4): has skinny extents [ 78.593731][ T4384] binder: 4383:4384 tried to acquire reference to desc 0, got 1 instead [ 78.639452][ T4384] binder: 4383:4384 ioctl c0306201 0 returned -14 [ 78.676220][ T4384] binder: 4383:4384 tried to acquire reference to desc 0, got 1 instead [ 78.689734][ T4384] binder_alloc: 4383: binder_alloc_buf size 12280 failed, no address space [ 78.739541][ T4384] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 78.770603][ T4384] binder: 4383:4384 transaction failed 29201/-28, size 0-0 line 3085 [ 78.813135][ T4386] binder: undelivered TRANSACTION_COMPLETE [ 78.814969][ T4386] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.861073][ T4386] binder: undelivered transaction 13, process died. [ 78.897499][ T26] audit: type=1400 audit(78.840:5): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4390 comm="syz.4.70" [ 78.988502][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 78.992943][ T4385] loop1: detected capacity change from 0 to 40427 [ 79.007039][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 79.043759][ T4396] loop2: detected capacity change from 0 to 512 [ 79.093505][ T4385] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 79.095642][ T4385] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.099851][ T4385] F2FS-fs (loop1): invalid crc value [ 79.122823][ T4396] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.138496][ T4396] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.157390][ T4385] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.187893][ T4396] EXT4-fs (loop2): 1 truncate cleaned up [ 79.189559][ T4396] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.193711][ T4385] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 79.195553][ T4385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.713115][ T4416] loop2: detected capacity change from 0 to 16 [ 79.767998][ T4416] erofs: (device loop2): mounted with root inode @ nid 36. [ 80.782058][ T4426] binder: 4425:4426 tried to acquire reference to desc 0, got 1 instead [ 80.805749][ T4426] binder: 4425:4426 ioctl c0306201 0 returned -14 [ 80.821291][ T4426] binder: 4425:4426 tried to acquire reference to desc 0, got 1 instead [ 80.844315][ T4426] binder_alloc: 4425: binder_alloc_buf size 12280 failed, no address space [ 80.865563][ T26] audit: type=1400 audit(80.810:6): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4430 comm="syz.4.85" [ 80.871420][ T4426] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 80.892180][ T4426] binder: 4425:4426 transaction failed 29201/-28, size 0-0 line 3085 [ 80.926487][ T4135] binder: undelivered TRANSACTION_COMPLETE [ 80.928306][ T4135] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.990386][ T4135] binder: undelivered transaction 24, process died. [ 81.449160][ T4444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.90'. [ 81.467166][ T4444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.90'. [ 81.564106][ T4444] loop2: detected capacity change from 0 to 512 [ 81.684328][ T4444] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.757829][ T4445] loop0: detected capacity change from 0 to 40427 [ 81.788755][ T4444] EXT4-fs (loop2): 1 truncate cleaned up [ 81.790333][ T4444] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.894168][ T4445] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.896331][ T4445] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.900020][ T4445] F2FS-fs (loop0): invalid crc value [ 81.950610][ T4445] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.985282][ T4445] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.987214][ T4445] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.079258][ T4463] udc-core: couldn't find an available UDC or it's busy [ 82.092935][ T4463] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.011686][ T21] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 84.014207][ T21] Bluetooth: hci2: Injecting HCI hardware error event [ 84.016769][ T4033] Bluetooth: hci2: hardware error 0x00 [ 84.056707][ T4482] binder: BINDER_SET_CONTEXT_MGR already set [ 84.058428][ T4482] binder: 4481:4482 ioctl 4018620d 200000c0 returned -16 [ 84.072784][ T4482] binder: 4481:4482 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 84.077608][ T4482] binder: 4481:4482 got transaction to invalid handle, 1 [ 84.079543][ T4482] binder: 4481:4482 transaction failed 29201/-22, size 0-0 line 2917 [ 84.098894][ T4482] binder: 4481:4482 ioctl c0306201 0 returned -14 [ 84.106806][ T4482] binder: 4481:4482 tried to acquire reference to desc 0, got 1 instead [ 84.204600][ T3607] binder: send failed reply for transaction 33 to 4481:4482 [ 84.230236][ T3607] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.246111][ T3607] binder: undelivered TRANSACTION_COMPLETE [ 84.255794][ T3607] binder: undelivered TRANSACTION_ERROR: 29189 [ 85.220301][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 85.231304][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 86.089253][ T4504] loop2: detected capacity change from 0 to 512 [ 86.117469][ T4503] loop3: detected capacity change from 0 to 512 [ 86.146872][ T4504] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 86.154292][ T4504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 86.170963][ T4503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.187731][ T4503] EXT4-fs (loop3): 1 truncate cleaned up [ 86.189271][ T4503] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.524018][ T4518] udc-core: couldn't find an available UDC or it's busy [ 86.526022][ T4518] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.583297][ T4525] binder: BINDER_SET_CONTEXT_MGR already set [ 87.584956][ T4525] binder: 4524:4525 ioctl 4018620d 200000c0 returned -16 [ 87.618994][ T4525] binder: 4524:4525 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 87.640230][ T4525] binder: 4524:4525 got transaction to invalid handle, 1 [ 87.658847][ T4525] binder: 4524:4525 transaction failed 29201/-22, size 0-0 line 2917 [ 87.678822][ T4525] binder: 4524:4525 tried to acquire reference to desc 0, got 1 instead [ 87.701893][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.703918][ T25] binder: release 4524:4525 transaction 40 out, still active [ 87.706853][ T25] binder: undelivered TRANSACTION_COMPLETE [ 87.718471][ T25] binder: send failed reply for transaction 40, target dead [ 87.723578][ T4530] loop2: detected capacity change from 0 to 128 [ 87.756364][ T4530] ======================================================= [ 87.756364][ T4530] WARNING: The mand mount option has been deprecated and [ 87.756364][ T4530] and is ignored by this kernel. Remove the mand [ 87.756364][ T4530] option from the mount to silence this warning. [ 87.756364][ T4530] ======================================================= [ 87.819116][ T4530] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.821092][ T4530] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.864055][ T4530] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 88.044674][ T4539] loop3: detected capacity change from 0 to 1024 [ 88.298805][ T4546] loop1: detected capacity change from 0 to 512 [ 88.326752][ T4528] loop4: detected capacity change from 0 to 32768 [ 88.332312][ T4530] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 88.391443][ T4550] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 88.886556][ T4528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.112 (4528) [ 89.061699][ T4546] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 89.069008][ T4546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.117'. [ 89.136338][ T4528] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 89.138819][ T4528] BTRFS info (device loop4): setting nodatacow, compression disabled [ 89.189881][ T4528] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 89.454778][ T4528] BTRFS info (device loop4): trying to use backup root at mount time [ 89.492758][ T4528] BTRFS info (device loop4): enabling auto defrag [ 89.840334][ T4528] BTRFS info (device loop4): max_inline at 4096 [ 89.845453][ T4528] BTRFS info (device loop4): using free space tree [ 89.847221][ T4528] BTRFS info (device loop4): has skinny extents [ 91.121962][ T4591] loop3: detected capacity change from 0 to 512 [ 91.149288][ T4528] BTRFS error (device loop4): open_ctree failed: -12 [ 91.992021][ T4591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.016469][ T4591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 92.031363][ T4598] binder: 4596:4598 tried to acquire reference to desc 0, got 1 instead [ 92.034528][ T4598] binder: 4596:4598 tried to acquire reference to desc 0, got 1 instead [ 92.035505][ T4591] System zones: 1-12 [ 92.037439][ T4598] binder_alloc: 4596: binder_alloc_buf size 12280 failed, no address space [ 92.041075][ T4598] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 92.044170][ T4598] binder: 4596:4598 transaction failed 29201/-28, size 0-0 line 3085 [ 92.047788][ T25] binder: undelivered TRANSACTION_COMPLETE [ 92.049554][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.066109][ T25] binder: undelivered transaction 47, process died. [ 92.242156][ T4591] EXT4-fs (loop3): 1 truncate cleaned up [ 92.243865][ T4591] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 94.651452][ T4611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.130'. [ 94.829473][ T4619] loop3: detected capacity change from 0 to 128 [ 94.965992][ T4619] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.968223][ T4619] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.994984][ T4619] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 97.541747][ T4642] binder: 4640:4642 tried to acquire reference to desc 0, got 1 instead [ 97.562695][ T4642] binder: 4640:4642 tried to acquire reference to desc 0, got 1 instead [ 97.583845][ T4642] binder_alloc: 4640: binder_alloc_buf size 12280 failed, no address space [ 97.604517][ T4642] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 97.621029][ T4642] binder: 4640:4642 transaction failed 29201/-28, size 0-0 line 3085 [ 97.629732][ T1533] binder: undelivered TRANSACTION_COMPLETE [ 97.635398][ T1533] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.668272][ T1533] binder: undelivered transaction 56, process died. [ 98.949164][ T4656] loop0: detected capacity change from 0 to 256 [ 99.043996][ T4656] FAT-fs (loop0): Unrecognized mount option "rodą" or missing value [ 99.901139][ T4662] loop3: detected capacity change from 0 to 131072 [ 100.830225][ T4662] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.249493][ T4662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.600059][ T4662] F2FS-fs (loop3): inode (7) has corrupted xattr [ 101.660695][ T4675] loop0: detected capacity change from 0 to 4096 [ 101.718892][ T4682] binder: 4681:4682 tried to acquire reference to desc 0, got 1 instead [ 101.724510][ T4682] binder: 4681:4682 tried to acquire reference to desc 0, got 1 instead [ 101.727032][ T4682] binder_alloc: 4681: binder_alloc_buf size 12280 failed, no address space [ 101.729368][ T4682] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 101.736031][ T4682] binder: 4681:4682 transaction failed 29201/-28, size 0-0 line 3085 [ 101.750138][ T4332] binder: undelivered TRANSACTION_COMPLETE [ 101.754551][ T4332] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.807397][ T4332] binder: undelivered transaction 65, process died. [ 102.226482][ T4698] loop4: detected capacity change from 0 to 512 [ 103.135778][ T4698] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.351099][ T4726] binder: 4725:4726 tried to acquire reference to desc 0, got 1 instead [ 104.364091][ T4726] binder: 4725:4726 tried to acquire reference to desc 0, got 1 instead [ 104.376875][ T4726] binder_alloc: 4725: binder_alloc_buf size 12280 failed, no address space [ 104.384895][ T4726] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 104.393450][ T4726] binder: 4725:4726 transaction failed 29201/-28, size 0-0 line 3085 [ 104.421566][ T4204] binder: undelivered TRANSACTION_COMPLETE [ 104.431258][ T4204] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.447120][ T4204] binder: undelivered transaction 74, process died. [ 104.918736][ T4733] loop4: detected capacity change from 0 to 256 [ 105.017776][ T4733] exfat: Deprecated parameter 'utf8' [ 105.146543][ T4733] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x35d78f5b, utbl_chksum : 0xe619d30d) [ 106.665061][ T4741] udc-core: couldn't find an available UDC or it's busy [ 106.667026][ T4741] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 107.411858][ T4747] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 107.458847][ T4747] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 107.520174][ T4754] process 'syz.0.171' launched '/dev/fd/-1' with NULL argv: empty string added [ 108.592722][ T4760] binder: 4759:4760 tried to acquire reference to desc 0, got 1 instead [ 108.597482][ T4760] binder: 4759:4760 tried to acquire reference to desc 0, got 1 instead [ 108.600084][ T4760] binder_alloc: 4759: binder_alloc_buf size 12280 failed, no address space [ 108.603216][ T4760] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 108.605927][ T4760] binder: 4759:4760 transaction failed 29201/-28, size 0-0 line 3085 [ 108.608852][ T4070] binder: undelivered TRANSACTION_COMPLETE [ 108.610687][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.619448][ T4070] binder: undelivered transaction 83, process died. [ 109.712191][ T4766] binder: 4765:4766 Acquire 1 refcount change on invalid ref 2 ret -22 [ 110.228217][ T4778] Cannot find add_set index 0 as target [ 111.044839][ T4781] loop3: detected capacity change from 0 to 128 [ 111.091884][ T4781] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.093907][ T4781] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.120127][ T4781] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 111.389737][ T4794] binder: 4792:4794 tried to acquire reference to desc 0, got 1 instead [ 111.440685][ T4794] binder: 4792:4794 ioctl c0306201 0 returned -14 [ 111.461972][ T4794] binder: 4792:4794 got transaction to invalid handle, 1 [ 111.464392][ T4794] binder: 4792:4794 transaction failed 29201/-22, size 0-0 line 2917 [ 111.486324][ T3607] binder: undelivered TRANSACTION_COMPLETE [ 111.487943][ T3607] binder: undelivered TRANSACTION_COMPLETE [ 111.489901][ T3607] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.524721][ T3607] binder: undelivered transaction 95, process died. [ 111.526542][ T3607] binder: undelivered transaction 94, process died. [ 112.755965][ T4804] syz.0.188 uses obsolete (PF_INET,SOCK_PACKET) [ 113.037290][ T4810] binder: 4809:4810 tried to acquire reference to desc 0, got 1 instead [ 113.082064][ T4332] binder: undelivered transaction 101, process died. [ 113.152214][ T4812] loop0: detected capacity change from 0 to 1024 [ 113.216937][ T4812] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.650485][ T4818] loop0: detected capacity change from 0 to 40427 [ 113.703332][ T4818] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 113.705478][ T4818] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.713856][ T4818] F2FS-fs (loop0): invalid crc value [ 113.752738][ T4818] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.783675][ T4818] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.785709][ T4818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.208568][ T4824] attempt to access beyond end of device [ 114.208568][ T4824] loop0: rw=2049, want=78344, limit=40427 [ 116.055834][ T4832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.196'. [ 116.058304][ T4832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.196'. [ 116.125647][ T4838] loop4: detected capacity change from 0 to 512 [ 116.167382][ T4840] binder: 4839:4840 tried to acquire reference to desc 0, got 1 instead [ 116.186480][ T4838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.190329][ T4840] binder: 4839:4840 ioctl c0306201 0 returned -14 [ 116.208117][ T4840] binder: 4839:4840 got transaction to invalid handle, 1 [ 116.226084][ T4840] binder: 4839:4840 transaction failed 29201/-22, size 0-0 line 2917 [ 116.229108][ T4595] binder: undelivered TRANSACTION_COMPLETE [ 116.230678][ T4595] binder: undelivered TRANSACTION_COMPLETE [ 116.232769][ T4595] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.248211][ T4838] EXT4-fs (loop4): 1 truncate cleaned up [ 116.249766][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.279129][ T4595] binder: undelivered transaction 109, process died. [ 116.287271][ T4595] binder: undelivered transaction 108, process died. [ 116.375124][ T4844] loop2: detected capacity change from 0 to 256 [ 116.437843][ T4844] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.440755][ T4844] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 116.558844][ T4844] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 117.229712][ T4851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.200'. [ 120.407936][ T4887] loop3: detected capacity change from 0 to 512 [ 120.423133][ T4889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 120.425973][ T4889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 120.445179][ T4889] loop1: detected capacity change from 0 to 512 [ 120.496186][ T4889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.508948][ T4889] EXT4-fs (loop1): 1 truncate cleaned up [ 120.510805][ T4889] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.532785][ T4887] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 120.565420][ T4887] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 120.855112][ T4899] udc-core: couldn't find an available UDC or it's busy [ 120.857167][ T4899] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.270212][ T4918] udc-core: couldn't find an available UDC or it's busy [ 123.279886][ T4918] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.357941][ T4920] loop4: detected capacity change from 0 to 256 [ 123.380425][ T4920] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.391205][ T4920] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 123.419742][ T4920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 124.601972][ T4930] binder: 4929:4930 ioctl 4018620d 0 returned -22 [ 124.620235][ T4930] binder: 4929:4930 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 124.635856][ T4930] binder: 4929:4930 got transaction to invalid handle, 1 [ 124.637728][ T4930] binder: 4929:4930 transaction failed 29201/-22, size 0-0 line 2917 [ 124.655145][ T4930] binder: 4929:4930 ioctl c0306201 0 returned -14 [ 124.656454][ T4934] loop4: detected capacity change from 0 to 64 [ 124.662511][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.446442][ T4925] loop0: detected capacity change from 0 to 40427 [ 126.483796][ T4925] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 126.485911][ T4925] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 126.488127][ T4925] F2FS-fs (loop0): Unrecognized mount option "memory=low" or missing value [ 126.798360][ T4955] loop4: detected capacity change from 0 to 256 [ 126.841505][ T4955] exfat: Deprecated parameter 'utf8' [ 127.057657][ T4955] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x35d78f5b, utbl_chksum : 0xe619d30d) [ 127.239668][ T4957] loop0: detected capacity change from 0 to 1024 [ 127.722732][ T4957] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.231: Invalid block bitmap block 0 in block_group 0 [ 127.730969][ T4957] Quota error (device loop0): write_blk: dquota write failed [ 127.733304][ T4957] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 127.736363][ T4957] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.231: Failed to acquire dquot type 0 [ 127.776467][ T4957] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.231: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.789706][ T4957] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.231: Invalid inode bitmap blk 0 in block_group 0 [ 127.795556][ T4957] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 127.799398][ T4957] EXT4-fs (loop0): 1 orphan inode deleted [ 127.801061][ T4957] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 127.802409][ T148] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 127.853281][ T148] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:2: Failed to release dquot type 0 [ 127.858665][ T4956] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.231: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 128.094154][ T4158] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 128.096651][ T4158] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:10: Failed to release dquot type 0 [ 128.206169][ T4963] loop0: detected capacity change from 0 to 2048 [ 128.239328][ T4965] loop2: detected capacity change from 0 to 128 [ 128.300412][ T4965] EXT4-fs (loop2): Test dummy encryption mode enabled [ 128.307472][ T4965] EXT4-fs (loop2): Test dummy encryption mode enabled [ 128.314961][ T4963] NILFS (loop0): invalid segment: Sequence number mismatch [ 128.317120][ T4963] NILFS (loop0): trying rollback from an earlier position [ 128.349541][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 128.351217][ T4963] NILFS (loop0): recovery complete [ 128.391592][ T4967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.485492][ T4963] overlayfs: failed to resolve './file2': -2 [ 129.318034][ T4979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 129.320521][ T4979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 129.366239][ T4979] loop0: detected capacity change from 0 to 512 [ 129.381729][ T4979] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.432690][ T4979] EXT4-fs (loop0): 1 truncate cleaned up [ 129.434185][ T4979] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.778572][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 130.790416][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 130.812990][ T5011] loop0: detected capacity change from 0 to 512 [ 130.875129][ T5011] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.921711][ T5011] EXT4-fs (loop0): 1 truncate cleaned up [ 130.923385][ T5011] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.082672][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.084424][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.119186][ T5025] device syzkaller0 entered promiscuous mode [ 132.298686][ T5059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 132.310711][ T5059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 132.370203][ T5057] loop4: detected capacity change from 0 to 512 [ 132.521713][ T26] audit: type=1400 audit(132.430:7): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5051 comm="syz.1.265" [ 133.258784][ T5064] loop0: detected capacity change from 0 to 40427 [ 133.818377][ T5064] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.820454][ T5064] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.833084][ T5057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.850194][ T5057] EXT4-fs (loop4): 1 truncate cleaned up [ 133.852410][ T5057] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.860434][ T5064] F2FS-fs (loop0): invalid crc value [ 133.895960][ T5064] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.927950][ T5064] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.929893][ T5064] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.325533][ T5102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 135.327955][ T5102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 135.359879][ T5102] loop2: detected capacity change from 0 to 512 [ 135.426598][ T5102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.496671][ T5102] EXT4-fs (loop2): 1 truncate cleaned up [ 135.498366][ T5102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.956852][ T5129] loop0: detected capacity change from 0 to 40427 [ 137.022116][ T5129] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 137.024354][ T5129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 137.032649][ T5129] F2FS-fs (loop0): invalid crc value [ 137.077172][ T5129] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.099182][ T5129] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.101183][ T5129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.170456][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 137.189596][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 137.235661][ T5146] loop2: detected capacity change from 0 to 512 [ 137.411247][ T5146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.586496][ T5146] EXT4-fs (loop2): 1 truncate cleaned up [ 137.588378][ T5146] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.694021][ T5153] device pim6reg1 entered promiscuous mode [ 139.299465][ T5185] loop0: detected capacity change from 0 to 512 [ 139.335917][ T5184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 139.359225][ T5184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 139.598873][ T5178] loop2: detected capacity change from 0 to 40427 [ 139.702640][ T5185] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.743992][ T5178] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 139.746309][ T5178] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.750220][ T5178] F2FS-fs (loop2): invalid crc value [ 139.783312][ T5185] EXT4-fs (loop0): 1 truncate cleaned up [ 139.784856][ T5185] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.796397][ T5178] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.822443][ T5178] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.824360][ T5178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.393741][ T5225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'. [ 141.396289][ T5225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'. [ 141.481396][ T5225] loop1: detected capacity change from 0 to 512 [ 141.551013][ T5225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.574457][ T5225] EXT4-fs (loop1): 1 truncate cleaned up [ 141.576121][ T5225] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.864337][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.867552][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.930351][ T5269] device bridge_slave_1 left promiscuous mode [ 142.950123][ T5269] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.068707][ T5269] device bridge_slave_0 left promiscuous mode [ 143.070608][ T5269] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.093131][ T5279] loop1: detected capacity change from 0 to 512 [ 143.108622][ T5279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.154098][ T5279] EXT4-fs (loop1): 1 truncate cleaned up [ 143.160315][ T5279] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.291764][ T5278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 143.294489][ T5278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 144.915516][ T5315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 144.918038][ T5315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 144.941659][ T5314] device pim6reg1 entered promiscuous mode [ 144.949401][ T5315] loop4: detected capacity change from 0 to 512 [ 145.042816][ T5315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.079783][ T5315] EXT4-fs (loop4): 1 truncate cleaned up [ 145.083502][ T5315] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.322742][ T5409] device pim6reg1 entered promiscuous mode [ 150.610184][ T5424] loop3: detected capacity change from 0 to 128 [ 150.666829][ T5424] EXT4-fs (loop3): Test dummy encryption mode enabled [ 150.668730][ T5424] EXT4-fs (loop3): Test dummy encryption mode enabled [ 150.682435][ T5426] udc-core: couldn't find an available UDC or it's busy [ 150.684306][ T5426] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.707047][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 151.777523][ T5439] binder: 5436:5439 tried to acquire reference to desc 0, got 1 instead [ 151.793945][ T5439] binder: 5436:5439 tried to acquire reference to desc 0, got 1 instead [ 151.797009][ T3607] binder: undelivered TRANSACTION_COMPLETE [ 151.798515][ T3607] binder: undelivered TRANSACTION_COMPLETE [ 151.837950][ T3607] binder: undelivered transaction 119, process died. [ 151.839806][ T3607] binder: undelivered transaction 118, process died. [ 154.401417][ T5456] loop2: detected capacity change from 0 to 40427 [ 154.486126][ T5456] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 154.488447][ T5456] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 154.506417][ T5456] F2FS-fs (loop2): invalid crc value [ 154.719815][ T5456] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.767280][ T5456] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.769420][ T5456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 155.259302][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 155.281266][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 155.315327][ T5477] loop1: detected capacity change from 0 to 512 [ 155.318454][ T5479] binder: 5478:5479 tried to acquire reference to desc 0, got 1 instead [ 155.322479][ T5479] binder: 5478:5479 tried to acquire reference to desc 0, got 1 instead [ 155.331675][ T3607] binder: undelivered TRANSACTION_COMPLETE [ 155.333305][ T3607] binder: undelivered TRANSACTION_COMPLETE [ 155.362144][ T3607] binder: undelivered transaction 128, process died. [ 155.364000][ T3607] binder: undelivered transaction 127, process died. [ 155.487924][ T5477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.515557][ T5477] EXT4-fs (loop1): 1 truncate cleaned up [ 155.517112][ T5477] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.872487][ T5495] sctp: failed to load transform for md5: -2 [ 158.129786][ T5509] udc-core: couldn't find an available UDC or it's busy [ 158.157932][ T5509] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 158.187448][ T5511] udc-core: couldn't find an available UDC or it's busy [ 158.193145][ T5511] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 158.444720][ T5517] loop0: detected capacity change from 0 to 128 [ 158.543591][ T5517] EXT4-fs (loop0): Test dummy encryption mode enabled [ 158.545527][ T5517] EXT4-fs (loop0): Test dummy encryption mode enabled [ 158.577769][ T5517] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 158.862311][ T5523] binder: 5522:5523 tried to acquire reference to desc 0, got 1 instead [ 158.875220][ T5523] binder: 5522:5523 tried to acquire reference to desc 0, got 1 instead [ 158.896015][ T4204] binder: undelivered TRANSACTION_COMPLETE [ 158.897661][ T4204] binder: undelivered TRANSACTION_COMPLETE [ 158.955068][ T4204] binder: undelivered transaction 137, process died. [ 158.957034][ T4204] binder: undelivered transaction 136, process died. [ 159.033757][ T5531] capability: warning: `syz.3.427' uses 32-bit capabilities (legacy support in use) [ 160.115692][ T5537] udc-core: couldn't find an available UDC or it's busy [ 160.117596][ T5537] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 162.436037][ T5562] binder: 5561:5562 tried to acquire reference to desc 0, got 1 instead [ 162.439039][ T5562] binder: 5561:5562 got transaction with too large buffer [ 162.451263][ T5562] binder: 5561:5562 transaction failed 29201/-22, size 96-24 line 3349 [ 162.454162][ T4332] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.539262][ T5565] syz.4.434 uses old SIOCAX25GETINFO [ 163.110707][ T5583] tipc: Started in network mode [ 163.112409][ T5583] tipc: Node identity 9ef4d21ce63a, cluster identity 4711 [ 163.114566][ T5583] tipc: Enabled bearer , priority 0 [ 163.178961][ T5583] device syzkaller0 entered promiscuous mode [ 163.210511][ T5582] tipc: Resetting bearer [ 163.307862][ T5582] tipc: Disabling bearer [ 163.362318][ T5588] binder: 5587:5588 tried to acquire reference to desc 0, got 1 instead [ 163.372761][ T5588] binder: 5587:5588 tried to acquire reference to desc 0, got 1 instead [ 163.378070][ T4593] binder: undelivered TRANSACTION_COMPLETE [ 163.381975][ T4593] binder: undelivered TRANSACTION_COMPLETE [ 163.406100][ T4593] binder: undelivered transaction 151, process died. [ 163.407950][ T4593] binder: undelivered transaction 150, process died. [ 163.458490][ T5594] udc-core: couldn't find an available UDC or it's busy [ 163.470855][ T5594] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.552024][ T4070] Bluetooth: hci4: command 0x0405 tx timeout [ 165.566428][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 169.009390][ T1533] Bluetooth: hci0: command 0x0406 tx timeout [ 169.107538][ T1533] Bluetooth: hci4: command 0x0406 tx timeout [ 169.325014][ T1533] Bluetooth: hci1: command 0x0406 tx timeout [ 169.337043][ T1533] Bluetooth: hci3: command 0x0406 tx timeout [ 169.649810][ T5652] udc-core: couldn't find an available UDC or it's busy [ 169.661101][ T5652] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.991178][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.465'. [ 173.071362][ T5664] netlink: 'syz.4.465': attribute type 7 has an invalid length. [ 173.081770][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 173.145427][ T5677] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.468'. [ 173.983143][ T5682] udc-core: couldn't find an available UDC or it's busy [ 173.987355][ T5682] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 176.320533][ T5704] udc-core: couldn't find an available UDC or it's busy [ 176.330226][ T5704] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.532337][ T5716] netlink: 196 bytes leftover after parsing attributes in process `syz.3.478'. [ 178.587986][ T227] block nbd3: Attempted send on invalid socket [ 178.593889][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.598603][ T5716] hpfs: hpfs_map_sector(): read error [ 180.596709][ T5727] binder: 5726:5727 got transaction to invalid handle, 1 [ 180.598653][ T5727] binder: 5726:5727 transaction failed 29201/-22, size 0-0 line 2917 [ 180.601734][ T5727] binder: 5726:5727 ioctl c0306201 0 returned -14 [ 180.604033][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.511084][ T5753] udc-core: couldn't find an available UDC or it's busy [ 182.512973][ T5753] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.515989][ T5755] udc-core: couldn't find an available UDC or it's busy [ 182.517996][ T5755] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 184.748140][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.751668][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.753885][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.784265][ T5760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 185.154555][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 189.153643][ T5791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 189.176948][ T5791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 191.360441][ T5811] netlink: 72 bytes leftover after parsing attributes in process `syz.4.504'. [ 193.119269][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.122766][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.201132][ T1533] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 193.520976][ T1533] usb 1-1: Using ep0 maxpacket: 32 [ 194.523955][ T5845] loop2: detected capacity change from 0 to 40427 [ 194.526079][ T1533] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 194.528738][ T1533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.549431][ T1533] usb 1-1: config 0 descriptor?? [ 194.766599][ T5845] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 194.768824][ T5845] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 195.162348][ T5845] F2FS-fs (loop2): invalid crc value [ 195.174077][ T5859] binder: 5858:5859 got reply transaction with no transaction stack [ 195.176235][ T5859] binder: 5858:5859 transaction failed 29201/-71, size 0-0 line 2822 [ 195.178427][ T5859] binder: 5858:5859 ioctl c0306201 20000ac0 returned -14 [ 195.215707][ T5845] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.255338][ T5845] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 195.257310][ T5845] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.335741][ T1533] gspca_main: sq930x-2.14.0 probing 041e:403c [ 195.351082][ T1533] gspca_sq930x: reg_r 001f failed -71 [ 195.353168][ T1533] sq930x: probe of 1-1:0.0 failed with error -71 [ 195.360724][ T1533] usb 1-1: USB disconnect, device number 2 [ 195.489505][ T5871] udc-core: couldn't find an available UDC or it's busy [ 196.458488][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'. [ 196.611563][ T5871] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.542403][ T5906] lo speed is unknown, defaulting to 1000 [ 199.544287][ T5906] lo speed is unknown, defaulting to 1000 [ 199.547474][ T5906] lo speed is unknown, defaulting to 1000 [ 199.551742][ T5906] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.556887][ T5906] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 200.208436][ T5906] lo speed is unknown, defaulting to 1000 [ 200.211570][ T5906] lo speed is unknown, defaulting to 1000 [ 200.213542][ T5906] lo speed is unknown, defaulting to 1000 [ 200.215543][ T5906] lo speed is unknown, defaulting to 1000 [ 200.217538][ T5906] lo speed is unknown, defaulting to 1000 [ 202.686514][ T5941] siw: device registration error -23 [ 203.789457][ T5954] netlink: 328 bytes leftover after parsing attributes in process `syz.4.547'. [ 204.479918][ T4586] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 205.181002][ T4586] usb 1-1: Using ep0 maxpacket: 32 [ 205.305690][ T4586] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 205.308070][ T4586] usb 1-1: config 0 has no interface number 0 [ 205.309850][ T4586] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 205.316598][ T5972] input: syz0 as /devices/virtual/input/input2 [ 205.333317][ T4586] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 44109, setting to 1024 [ 205.340187][ T4586] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 206.134183][ T4586] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 206.136732][ T4586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.147004][ T4586] usb 1-1: config 0 descriptor?? [ 206.161207][ T4586] usb 1-1: can't set config #0, error -71 [ 206.168967][ T4593] [ 206.169602][ T4593] ====================================================== [ 206.171481][ T4593] WARNING: possible circular locking dependency detected [ 206.173367][ T4593] 5.15.185-syzkaller #0 Not tainted [ 206.174815][ T4593] ------------------------------------------------------ [ 206.176690][ T4593] kworker/1:10/4593 is trying to acquire lock: [ 206.178300][ T4593] ffff0000c1450c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 206.181345][ T4593] [ 206.181345][ T4593] but task is already holding lock: [ 206.183267][ T4593] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 206.185730][ T4593] [ 206.185730][ T4593] which lock already depends on the new lock. [ 206.185730][ T4593] [ 206.188517][ T4593] [ 206.188517][ T4593] the existing dependency chain (in reverse order) is: [ 206.190901][ T4593] [ 206.190901][ T4593] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 206.193033][ T4593] __mutex_lock_common+0x194/0x1edc [ 206.194548][ T4593] mutex_lock_nested+0xac/0x11c [ 206.195960][ T4593] rfkill_register+0x44/0x77c [ 206.197353][ T4593] hci_register_dev+0x3d8/0x854 [ 206.198774][ T4593] vhci_create_device+0x2bc/0x564 [ 206.200302][ T4593] vhci_write+0x30c/0x3ac [ 206.201546][ T4593] vfs_write+0x7c8/0xa2c [ 206.202819][ T4593] ksys_write+0x120/0x210 [ 206.204088][ T4593] __arm64_sys_write+0x7c/0x90 [ 206.205529][ T4593] invoke_syscall+0x98/0x2b8 [ 206.206903][ T4593] el0_svc_common+0x138/0x258 [ 206.208456][ T4593] do_el0_svc+0x58/0x14c [ 206.209783][ T4593] el0_svc+0x78/0x1e0 [ 206.210963][ T4593] el0t_64_sync_handler+0xcc/0xe4 [ 206.212416][ T4593] el0t_64_sync+0x1a0/0x1a4 [ 206.213747][ T4593] [ 206.213747][ T4593] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 206.215878][ T4593] __mutex_lock_common+0x194/0x1edc [ 206.217417][ T4593] mutex_lock_nested+0xac/0x11c [ 206.218909][ T4593] vhci_send_frame+0x88/0x118 [ 206.220286][ T4593] hci_send_frame+0x194/0x2f0 [ 206.221673][ T4593] hci_tx_work+0x7e4/0x1394 [ 206.223068][ T4593] process_one_work+0x79c/0x1140 [ 206.224537][ T4593] worker_thread+0x8f4/0x101c [ 206.225943][ T4593] kthread+0x374/0x454 [ 206.227187][ T4593] ret_from_fork+0x10/0x20 [ 206.228532][ T4593] [ 206.228532][ T4593] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 206.230987][ T4593] __flush_work+0xf4/0x1bc [ 206.232279][ T4593] flush_work+0x24/0x38 [ 206.233536][ T4593] hci_dev_do_close+0x164/0x105c [ 206.235041][ T4593] hci_error_reset+0xe8/0x2a4 [ 206.236468][ T4593] process_one_work+0x79c/0x1140 [ 206.237974][ T4593] worker_thread+0x8f4/0x101c [ 206.239400][ T4593] kthread+0x374/0x454 [ 206.240588][ T4593] ret_from_fork+0x10/0x20 [ 206.241937][ T4593] [ 206.241937][ T4593] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 206.244009][ T4593] __mutex_lock_common+0x194/0x1edc [ 206.245502][ T4593] mutex_lock_nested+0xac/0x11c [ 206.246963][ T4593] bg_scan_update+0x48/0x3d0 [ 206.248348][ T4593] process_one_work+0x79c/0x1140 [ 206.249789][ T4593] worker_thread+0x8f4/0x101c [ 206.251179][ T4593] kthread+0x374/0x454 [ 206.252371][ T4593] ret_from_fork+0x10/0x20 [ 206.253715][ T4593] [ 206.253715][ T4593] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 206.256304][ T4593] __lock_acquire+0x2928/0x651c [ 206.257744][ T4593] lock_acquire+0x1f4/0x620 [ 206.259103][ T4593] __flush_work+0xf4/0x1bc [ 206.260385][ T4593] __cancel_work_timer+0x2ec/0x448 [ 206.261842][ T4593] cancel_work_sync+0x24/0x38 [ 206.263223][ T4593] hci_request_cancel_all+0xbc/0x2d0 [ 206.264766][ T4593] hci_dev_do_close+0x54/0x105c [ 206.266217][ T4593] hci_rfkill_set_block+0xdc/0x1d0 [ 206.267757][ T4593] rfkill_set_block+0x18c/0x374 [ 206.269195][ T4593] rfkill_epo+0x8c/0x158 [ 206.270474][ T4593] rfkill_op_handler+0x150/0x248 [ 206.271909][ T4593] process_one_work+0x79c/0x1140 [ 206.273396][ T4593] worker_thread+0x8f4/0x101c [ 206.274803][ T4593] kthread+0x374/0x454 [ 206.276077][ T4593] ret_from_fork+0x10/0x20 [ 206.277387][ T4593] [ 206.277387][ T4593] other info that might help us debug this: [ 206.277387][ T4593] [ 206.280134][ T4593] Chain exists of: [ 206.280134][ T4593] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 206.280134][ T4593] [ 206.284366][ T4593] Possible unsafe locking scenario: [ 206.284366][ T4593] [ 206.286368][ T4593] CPU0 CPU1 [ 206.287829][ T4593] ---- ---- [ 206.289265][ T4593] lock(rfkill_global_mutex); [ 206.290504][ T4593] lock(&data->open_mutex); [ 206.292509][ T4593] lock(rfkill_global_mutex); [ 206.294447][ T4593] lock((work_completion)(&hdev->bg_scan_update)); [ 206.296246][ T4593] [ 206.296246][ T4593] *** DEADLOCK *** [ 206.296246][ T4593] [ 206.298392][ T4593] 3 locks held by kworker/1:10/4593: [ 206.299755][ T4593] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 206.302676][ T4593] #1: ffff80001fa07c00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 206.305461][ T4593] #2: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 206.308018][ T4593] [ 206.308018][ T4593] stack backtrace: [ 206.309569][ T4593] CPU: 1 PID: 4593 Comm: kworker/1:10 Not tainted 5.15.185-syzkaller #0 [ 206.311793][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.314434][ T4593] Workqueue: events rfkill_op_handler [ 206.315867][ T4593] Call trace: [ 206.316752][ T4593] dump_backtrace+0x0/0x43c [ 206.317970][ T4593] show_stack+0x2c/0x3c [ 206.319071][ T4593] __dump_stack+0x30/0x40 [ 206.320218][ T4593] dump_stack_lvl+0xf8/0x160 [ 206.321451][ T4593] dump_stack+0x1c/0x5c [ 206.322583][ T4593] print_circular_bug+0x148/0x1b0 [ 206.323894][ T4593] check_noncircular+0x240/0x2d4 [ 206.325223][ T4593] __lock_acquire+0x2928/0x651c [ 206.326542][ T4593] lock_acquire+0x1f4/0x620 [ 206.327729][ T4593] __flush_work+0xf4/0x1bc [ 206.328892][ T4593] __cancel_work_timer+0x2ec/0x448 [ 206.330257][ T4593] cancel_work_sync+0x24/0x38 [ 206.331506][ T4593] hci_request_cancel_all+0xbc/0x2d0 [ 206.332965][ T4593] hci_dev_do_close+0x54/0x105c [ 206.334237][ T4593] hci_rfkill_set_block+0xdc/0x1d0 [ 206.335653][ T4593] rfkill_set_block+0x18c/0x374 [ 206.336993][ T4593] rfkill_epo+0x8c/0x158 [ 206.338138][ T4593] rfkill_op_handler+0x150/0x248 [ 206.339455][ T4593] process_one_work+0x79c/0x1140 [ 206.340759][ T4593] worker_thread+0x8f4/0x101c [ 206.341966][ T4593] kthread+0x374/0x454 [ 206.343065][ T4593] ret_from_fork+0x10/0x20 [ 206.346309][ T4586] usb 1-1: USB disconnect, device number 3 [ 206.701064][ T4586] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 206.940983][ T4586] usb 1-1: Using ep0 maxpacket: 8 [ 207.061027][ T4586] usb 1-1: config 0 has no interfaces? [ 207.062585][ T4586] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 207.065015][ T4586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.069117][ T4586] usb 1-1: config 0 descriptor?? [ 207.307939][ T4586] usb 1-1: USB disconnect, device number 4