last executing test programs: 43.223087203s ago: executing program 4 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x30) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) syz_io_uring_setup(0x592a, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001980)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f00)={{}, 0x0, &(0x7f0000002ec0)}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086200, &(0x7f00000001c0)='\a\x00\x00\x00\x00\x00\x00\x00-control\x00') 42.474438811s ago: executing program 4 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}]}, 0x2c}}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x381, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000100)="fd53", 0x2}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x2c}}, 0x0) 34.782756866s ago: executing program 4 (id=740): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20004800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe803}}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 33.526038361s ago: executing program 4 (id=744): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) 25.558170311s ago: executing program 4 (id=752): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 21.387162212s ago: executing program 4 (id=758): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000810000000400000022bf000000000000bb21f7e0e0478a01b11181900ed5261e99d096de8e930303fd21a1c056b7a0510c981ecdd163ab2337e49570a61675fc77be3b7d379b7a0b7e2cea485bb8976bc3679549fc29999961f85aad0b841678cac39b66a6e413593eb0158e23a70d9be9687ac6797e07f834c79303fc887f71b3eb4ad10a8512052cc89b81665e8214b39f36cd669e916cc51ec02d3d3cee2c8e1a48782f55dc985e792a4d42cfe200add787957261a1a707a757b6732c2654631d62c0ce7f4c2478b531fc57ad1ecc9723aefbdd271034f1eb7024185434c4", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_open_dev$video(&(0x7f0000000540), 0x6, 0x3) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000580)={0x4, "e3b5153eea6ca194116e9f4c7610b27689261426058cf322565ffd27a4e79120", 0x3, 0x4, 0x4, 0x40, 0x5040000, 0x2}) creat(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0x40000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_create1(0x0) close(r2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r4, 0x8910, 0x0) listen(r3, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 19.802356647s ago: executing program 0 (id=759): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000000007010400000000000000000500000014000780080001400000000408000140000000090c00064000000000000000030c00034000000000000000070c00034000000000000000040c00034000000000000000000c00034000000000000000090c0006550000000000000007"], 0x70}}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000701010000000000000000000000000900010073797a30000000006783c0c21eaa79438c4fca2162fdff3e7971784d53e69a58692fd726e3b0ee44da9efd450121db2911d2b6926a6643457235fffc0d195fe6573f723727a271b16017c12c19554d3a"], 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x40}}, 0x24000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x4) pipe(&(0x7f0000000340)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x97) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000000020000000000500000028000180080003000200000008000100", @ANYBLOB="140002006970766c616e30000000000000000000"], 0x3c}}, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 18.782681371s ago: executing program 3 (id=760): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20004800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xcb, 0x96, 0x2a, 0x10, 0xa2c, 0x8, 0xe8cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0x2, 0xf4}}]}}]}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, &(0x7f0000000280)=""/118, &(0x7f0000000440), &(0x7f00000003c0), 0x7d, r2, 0x0, 0x7}, 0x38) 17.474276701s ago: executing program 1 (id=761): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xc, &(0x7f0000000100)={0xe9dc, 0xa2300}) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) syz_open_dev$dri(0x0, 0x8010000000001, 0x242041) r5 = io_uring_setup(0x55f0, &(0x7f0000000480)={0x0, 0xfffffffd, 0x100, 0x8000002, 0xffffffff}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x4011}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13.732787093s ago: executing program 3 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd19, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x0, 0xfffffffffffffe88}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = getpid() getpriority(0x2, r5) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 13.43935216s ago: executing program 0 (id=764): syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000001100)='./file0\x00', 0x306449c, &(0x7f0000000480)={[], [{@subj_type={'subj_type', 0x3d, '\'^'}}]}, 0x1, 0x7c1, &(0x7f0000007a00)="$eJzs3ctrXNcZAPDvzoyedpEKhdZdCQqtwXhkuardQqEqXZRCDYFklUVsMRoLRyON0YyMJURiEwLZBJKQXbLxOs9NyDaPRTbJ/xFsnEQ2cfAiKNx5WCNpRtYo0iiOfj+40jlzz73nfPfcx9Hcq5kAjqyx9Ecm4kREvJZEjDReTyKir5bKRUzVyz1YWy2kUxLr609/m9TK3F9bLTxsWSZ1rJH5Q0R89nLEqcz2eivLK3PTpVJxsZEfr85fHa8sr5y+Mj89W5wtLpybmJw8e/5v58/tX6zff7Vy/M7r//3L+1MPX/r9B69+nsRUHG/MS+PYv5rqxmKssU360k24yX/2u7JD89ELuyjUsgfkDrIxdCntmGyjV07ESGR36p+hXrYMADgoL0bEeifZjnMAgCdaUr/+/+uw2wEA9ErzfYD7a6uF5nS470j01t1/R8RgPf7m/c36nFzjnt1g7T7o8P1k052RJCJG96H+sYh4++Pn3k2nOKD7kADt3LgZEZdGx7af/5Ntzyx060z7l2dbM2NbZjr/Qe98ko5//t5u/Jdpjn+yzbKt45+BNsfuXjz++M/c3odqOkrHf/9sebbtQUv8DaPZRu43tTFfX3L5Sql4pvF03MnoG0jzEzvUcfLej/c6zWsd/333xvPvpPWnvzdKZG7nBjYvMzNdnd57xJvdvRnxx1y7+NPz/0Bt/Jt0GP+2eayvrf/945W3Os1L40/jbU7b4z9Y67ci/ty2/5NHZZIdn08cr+0O9Z/t6/hwKoY71T+W2+j/dErrb/4t0Atp/w/vHP9o0vq8ZmXXq370tNiXt0Y+7VSodf9vH3/7/b8/eaaW7m+8dn26Wl2ciOhP/r/99bMbyzbzzfJp/Cf/1P74b/7912b/fzZd/6VdbojcnW/e23v8ByuNf6ar/u86EYMP5rKd6t9d/09uWmY357/dNnCv2w0AAAAAAAAAAAAAAAAAAAAAAAAAupGJiOORZPKP0plMPl//Du/fxXCmVK5UT10uLy3MRO27skejL9P8qMuRls9DnWh8Hn4zf3ZL/q8R8duIeHNgqJbPF8qlmcMOHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAajnX4/v/U1wNbCmcPo4UAwIEYdGEHgKMmyeUOuwkAQK8NdlV66MDaAQD0TnfXfwDg18D1HwCOnsdc/7f+GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB066kLF9Jp/Ye11UKan7m2vDRXvnZ6pliZy88vFfKF8uLV/Gy5PFsq5gvl+Y4rulH/VSqXr07GwtL18WqxUh2vLK9cnC8vLVQvXpmfni1eLPb1LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L3K8srcdKlUXPxZiSQi9mM9Ry8x90W9H34p7ZHoLhE36v23p8WzjYPw0KNol4j+jbPEUO9PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPiJ8CAAD//46nHgA=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000b40)=@updsa={0x11c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d3, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@broadcast}, @mark={0xc}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x11c}}, 0x0) socket$netlink(0x10, 0x3, 0x6) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x92) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./file0\x00', 0x2008412, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x800, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7c6a4ae6dddfbd1ce5d29c209c737ff0edf111ff4117639c2eb4b78c660e677df7019a3f6a004000000000000b04e00", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a0500000000000000d300e6d602000000000000000000000001"}) creat(&(0x7f0000000180)='./file0\x00', 0x0) io_setup(0xffff, &(0x7f00000007c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f0000000540)=""/32}, 0x20) pipe2$9p(&(0x7f0000000240), 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1000) 9.632998448s ago: executing program 2 (id=767): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000000)=""/2) shmat(r3, &(0x7f0000fa4000/0x4000)=nil, 0x4000) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='1-N'], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000ed000095", @ANYRES8=r5], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206050000000000000000000000000005000400000000000900020073797a32000000000500051d0000000002000000000000000c00078008000840000000000d0003006c6973743a73657400000000fe0eba5b1c690fc2d6eb6b14ff35007db4031f9d81e997bf686c9128f1905fabbc061f4e386b025ab1d5870f62874c6a84610074fe3c895452f29d0795c2aac14677a880d0d66929e2beedb00f253fa04f8c55cde5"], 0x54}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) 9.451610455s ago: executing program 3 (id=768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 9.081044869s ago: executing program 1 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x30) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) syz_io_uring_setup(0x592a, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001980)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f00)={{}, 0x0, &(0x7f0000002ec0)}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086200, &(0x7f00000001c0)='\a\x00\x00\x00\x00\x00\x00\x00-control\x00') 8.95649334s ago: executing program 2 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x0, 0xfffffffffffffe88}}) pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000eba7000000000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1}) r2 = memfd_secret(0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {}, {}]}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x270, 0x168, 0x9, 0x0, 0xa, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x270, 0x0, {0x0, 0x28e}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x39, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private0, @loopback, @mcast2, @remote, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @dev, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r9}, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x14, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101701) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000340)=ANY=[@ANYBLOB="60008000c09099a8d5ae3372ad0e84f1f8c7856052dc2e43400aaf40ec4d035cce8493104b7593044eccf0f84ec3a625045d3e85dfe07b31b136c7d4a94e76eb19068109249d", @ANYRES16=0x0, @ANYBLOB="000827bd700000000000210000000c009900ff000000000000001c002c800800000000000000080000000180000008000000000000000500f600070000001c002c8008000000000000000800000000000000080000006c780000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.862877429s ago: executing program 1 (id=771): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733dbab066642c7266646e0400", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x40286608, &(0x7f0000000180)={@id={0x400fb, 0x0, @b}}) 8.804823034s ago: executing program 3 (id=772): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000180)={{r0}, 0x1, &(0x7f0000000040)=[0x2], 0xf, 0x9, 0x1}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4006}}, 0x0, 0x0, 0x124, 0x0, "e66c3b0f4b849dcbc339b5176321150bf9f04ec78458f45f65cfd4884f6f825f24ba00087e3454350235d1e12a84c490430500000000000000000500"}, 0xd8) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x800009, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000400J0,use', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) clock_getres(0x9, &(0x7f0000000180)) creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x34}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cpuset\x00', 0x0, 0x0) inotify_init1(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x19, 0x9, &(0x7f0000000780)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], 0x0, 0xb90, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 8.801155384s ago: executing program 0 (id=773): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.745989244s ago: executing program 1 (id=774): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000000007010400000000000000000500000014000780080001400000000408000140000000090c00064000000000000000030c00034000000000000000070c00034000000000000000040c00034000000000000000000c00034000000000000000090c0006550000000000000007"], 0x70}}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000701010000000000000000000000000900010073797a30000000006783c0c21eaa79438c4fca2162fdff3e7971784d53e69a58692fd726e3b0ee44da9efd450121db2911d2b6926a6643457235fffc0d195fe6573f723727a271b16017c12c19554d3a"], 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x40}}, 0x24000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x4) pipe(&(0x7f0000000340)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x97) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000000020000000000500000028000180080003000200000008000100", @ANYBLOB="140002006970766c616e30000000000000000000"], 0x3c}}, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.553945272s ago: executing program 3 (id=775): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010c00000000000000000a000000000000ecffffffff07000a0000000000"], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsa(0x0, 0x6, 0x2041) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000118a7d90defac68d0000ac1414aa00000000830300070300443c0003e000000600000000ac14140000000000ac14140000000000ac1414bb000000005534e75154000000000200"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r8, r6, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = dup(r3) ioctl$UI_DEV_CREATE(r9, 0x5501) 5.553225691s ago: executing program 0 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 3.644423916s ago: executing program 1 (id=777): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r4}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2, 0x2, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0xfffd, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3504}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@rand_addr=0x64010101, 0x22, 0x4, 0x10}, @sadb_x_nat_t_type={0x1}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/fscaps', 0x40002, 0x1ac) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) ioctl$KVM_CAP_ARM_USER_IRQ(r7, 0x4068aea3, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.611930069s ago: executing program 2 (id=778): ftruncate(0xffffffffffffffff, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x7) socket$tipc(0x1e, 0x2, 0x0) 3.607105409s ago: executing program 0 (id=779): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xc, &(0x7f0000000100)={0xe9dc, 0xa2300}) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) syz_open_dev$dri(0x0, 0x8010000000001, 0x242041) r5 = io_uring_setup(0x55f0, &(0x7f0000000480)={0x0, 0xfffffffd, 0x100, 0x8000002, 0xffffffff}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x4011}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.096850096s ago: executing program 2 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x30) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) syz_io_uring_setup(0x592a, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001980)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f00)={{}, 0x0, &(0x7f0000002ec0)}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086200, &(0x7f00000001c0)='\a\x00\x00\x00\x00\x00\x00\x00-control\x00') 2.547359106s ago: executing program 1 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) accept$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000440)=0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x210100, 0x91) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x7, {0x7, 0x0, "a05e19f8a1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902", @ANYRES32], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x67, {0x67, 0x0, "eeed2d77287b0030c873e68059b7a6b22f8d921b65ce3408e63e368a890601911e8795be368f0e7da1e2b5c2a32adccba5986fd7aa07564056bb051ec545859d9efa99db12f56ccbcb8d7ef70399e8c5f4c6c0c60d178d72cd6b0f817626090e1418cecb4a"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, 0x0) 2.06531313s ago: executing program 2 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000340), &(0x7f0000000840)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002100000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xfffffda9, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r2, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x700}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 951.406633ms ago: executing program 2 (id=783): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, &(0x7f0000000240)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x91, 0x4) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0x1, "ffffffffff60"}]}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b"], 0x1c4}}, 0x0) 949.997603ms ago: executing program 0 (id=784): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xc7000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x11c, 0x4, 0x0, 0x74efdfe049b861ab) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) io_uring_enter(r6, 0x5e40, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket(0x40000000015, 0x5, 0x0) io_uring_setup(0x19af, &(0x7f00000003c0)={0x0, 0xd546, 0x0, 0x0, 0xe2}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x7}, {0xa, 0xa4}, {0xa, 0x7a7a}, {0x9, 0xff}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x17}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x2, 0xfffffffd}, {0x6, 0x6}, {0xa, 0x4}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x61]}}, &(0x7f0000000540)=""/20, 0x9e, 0x14, 0x1, 0x4e, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000037c0)={0xffffffffffffffff, 0x20, &(0x7f0000003780)={0x0, 0x0, 0x0, &(0x7f0000003700)=""/70, 0x46}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003840)={0x8, 0x3, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000002700)=""/4096, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, r9, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x3, 0x5, 0x4}, 0x10, r10, r3, 0x4, 0x0, &(0x7f0000003800)=[{0x2, 0x1, 0x4, 0x2}, {0x2, 0x2, 0x4, 0xc}, {0x4, 0x5, 0x3, 0xc}, {0x1, 0x4, 0x9, 0x7}], 0x10, 0xaf, @void, @value}, 0x94) 0s ago: executing program 3 (id=785): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733dbab066642c7266646e0400", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x40286608, &(0x7f0000000180)={@id={0x400fb, 0x0, @b}}) kernel console output (not intermixed with test programs): et [1, 0] type 2 family 0 port 6081 - 0 [ 345.525208][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.580840][ T5791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.679743][ T5791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.787620][ T5791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.906372][ T5791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.764098][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.839336][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.849520][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.864418][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.146041][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.184744][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.344136][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.694564][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.900205][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.441922][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.691654][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.030730][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.377294][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.441868][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.452216][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.459343][ T4047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.498016][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.531750][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.566556][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.644088][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.651309][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.804755][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.365778][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.467872][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.704304][ T5746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.725964][ T5746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.069532][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.114030][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.161811][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.187883][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.662667][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.086638][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.093848][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.101850][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.135052][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.179489][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.186712][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.206394][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.215700][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.225310][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.234913][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.244703][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.255487][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.265478][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.304404][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.335485][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.364244][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.388930][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.409008][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.419683][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.625775][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.707627][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.781073][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.295983][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.332045][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.368715][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.443812][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.632816][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.172738][ T6215] Falling back ldisc for ptm0. [ 357.194161][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.227106][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.262369][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.453766][ T3654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.463644][ T3654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.473836][ T3654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.474856][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.491606][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.499309][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.507016][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.491357][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.528590][ T9] device hsr_slave_0 left promiscuous mode [ 360.545768][ T9] device hsr_slave_1 left promiscuous mode [ 360.557867][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.591210][ T3646] Bluetooth: hci4: command tx timeout [ 360.603270][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.618889][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.638185][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.646458][ T9] device bridge_slave_1 left promiscuous mode [ 360.653096][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.662103][ T9] device bridge_slave_0 left promiscuous mode [ 360.668536][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.682115][ T9] device hsr_slave_0 left promiscuous mode [ 360.688748][ T9] device hsr_slave_1 left promiscuous mode [ 360.714452][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.733808][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.766957][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.774672][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.790436][ T9] device bridge_slave_1 left promiscuous mode [ 360.796896][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.581472][ T9] device bridge_slave_0 left promiscuous mode [ 361.587842][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.361400][ T6274] Falling back ldisc for ptm0. [ 362.431401][ T9] device veth1_macvtap left promiscuous mode [ 362.448986][ T9] device veth0_macvtap left promiscuous mode [ 362.488534][ T9] device veth1_vlan left promiscuous mode [ 362.505125][ T9] device veth0_vlan left promiscuous mode [ 362.535969][ T9] device veth1_macvtap left promiscuous mode [ 362.545194][ T9] device veth0_macvtap left promiscuous mode [ 362.555618][ T9] device veth1_vlan left promiscuous mode [ 362.583647][ T9] device veth0_vlan left promiscuous mode [ 362.676691][ T48] Bluetooth: hci4: command tx timeout [ 364.294749][ T9] team0 (unregistering): Port device team_slave_1 removed [ 364.369120][ T9] team0 (unregistering): Port device team_slave_0 removed [ 364.393753][ T6298] loop0: detected capacity change from 0 to 40427 [ 364.418562][ T6298] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 364.440831][ T6298] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 364.459213][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.464475][ T6298] F2FS-fs (loop0): invalid crc value [ 364.479734][ T6298] F2FS-fs (loop0): Found nat_bits in checkpoint [ 364.541365][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.545073][ T6298] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 364.557151][ T6298] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 364.764640][ T48] Bluetooth: hci4: command tx timeout [ 366.641433][ T6311] Falling back ldisc for ptm0. [ 366.754604][ T3646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.763380][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.771521][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.779787][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.787804][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 366.795255][ T3646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.841942][ T48] Bluetooth: hci4: command tx timeout [ 367.183078][ T9] bond0 (unregistering): Released all slaves [ 367.894911][ T5961] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 367.913843][ T5961] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 368.116030][ T9] team0 (unregistering): Port device team_slave_1 removed [ 368.201624][ T9] team0 (unregistering): Port device team_slave_0 removed [ 368.411026][ T6330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.495790][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.833290][ T48] Bluetooth: hci2: command tx timeout [ 369.211986][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.926029][ T9] bond0 (unregistering): Released all slaves [ 370.325308][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.381605][ T6329] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 370.389791][ T6329] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 370.405185][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.424863][ T6329] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 370.432618][ T6329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 370.438640][ T6329] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 370.445387][ T6329] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 370.453013][ T6329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 370.459107][ T6329] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 370.503890][ T6329] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 370.572753][ T6329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.600791][ T6329] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 370.622005][ T6329] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 370.923932][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.258646][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.769878][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.812085][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.833321][ T6229] chnl_net:caif_netlink_parms(): no params data found [ 371.965604][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.033659][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.100442][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.152504][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.332058][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.339278][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.370807][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.444907][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.513596][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 372.513925][ T3646] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.597587][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 372.695002][ T6354] Falling back ldisc for ptm0. [ 372.744889][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.752063][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.794693][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 372.822313][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.862194][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 372.885212][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.902099][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.917591][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.044418][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.054109][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.063955][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.072801][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.081577][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.089683][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.098832][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.754317][ T6317] chnl_net:caif_netlink_parms(): no params data found [ 374.001419][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.026393][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.071187][ T6317] device bridge_slave_0 entered promiscuous mode [ 374.133707][ T6360] loop0: detected capacity change from 0 to 40427 [ 374.154375][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.167175][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.192071][ T6317] device bridge_slave_1 entered promiscuous mode [ 374.226435][ T6360] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 374.257212][ T6360] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 374.591631][ T3646] Bluetooth: hci3: command 0x0c1a tx timeout [ 374.591962][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 374.672178][ T3646] Bluetooth: hci2: command 0x040f tx timeout [ 375.092136][ T6360] F2FS-fs (loop0): invalid crc value [ 375.169493][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.211699][ T6360] F2FS-fs (loop0): Found nat_bits in checkpoint [ 375.272036][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.306388][ T3646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.317312][ T3646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.327369][ T3646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.336017][ T3646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.343638][ T3646] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 375.351105][ T3646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.443944][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.586514][ T6360] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 375.633421][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.668400][ T6360] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 375.723831][ T6229] device bridge_slave_0 entered promiscuous mode [ 376.156576][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.182485][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.192319][ T6229] device bridge_slave_1 entered promiscuous mode [ 376.299489][ T6229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.312035][ T6229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.349889][ T6317] team0: Port device team_slave_0 added [ 376.440669][ T6317] team0: Port device team_slave_1 added [ 376.463682][ T6229] team0: Port device team_slave_0 added [ 376.534666][ T6229] team0: Port device team_slave_1 added [ 376.585500][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.604328][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.630704][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.710605][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.722544][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.749339][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.751089][ T3646] Bluetooth: hci2: command 0x040f tx timeout [ 376.798299][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.805457][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.832636][ T6229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.852667][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.859819][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.886231][ T6229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.967444][ T6317] device hsr_slave_0 entered promiscuous mode [ 376.974944][ T6317] device hsr_slave_1 entered promiscuous mode [ 376.982053][ T6317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.989717][ T6317] Cannot create hsr debugfs directory [ 377.015682][ T6229] device hsr_slave_0 entered promiscuous mode [ 377.023695][ T6229] device hsr_slave_1 entered promiscuous mode [ 377.030375][ T6229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.038115][ T6229] Cannot create hsr debugfs directory [ 377.162142][ T6379] chnl_net:caif_netlink_parms(): no params data found [ 377.319959][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.331117][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.339235][ T6379] device bridge_slave_0 entered promiscuous mode [ 377.370712][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.380300][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.388864][ T6379] device bridge_slave_1 entered promiscuous mode [ 377.395428][ T3646] Bluetooth: hci5: command tx timeout [ 377.558637][ T6403] sctp: [Deprecated]: syz.0.512 (pid 6403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.558637][ T6403] Use struct sctp_sack_info instead [ 377.597799][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.629646][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.695790][ T6379] team0: Port device team_slave_0 added [ 377.706698][ T6379] team0: Port device team_slave_1 added [ 377.779283][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.793036][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.822490][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.863512][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.882551][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.912738][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.102527][ T6379] device hsr_slave_0 entered promiscuous mode [ 378.109791][ T6379] device hsr_slave_1 entered promiscuous mode [ 378.116899][ T6379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.124574][ T6379] Cannot create hsr debugfs directory [ 378.353022][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.359538][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.844405][ T3646] Bluetooth: hci2: command 0x040f tx timeout [ 379.471181][ T3646] Bluetooth: hci5: command tx timeout [ 379.924676][ T6427] Falling back ldisc for ptm0. [ 380.942007][ T6440] dccp_close: ABORT with 20 bytes unread [ 381.551259][ T3646] Bluetooth: hci5: command tx timeout [ 382.094997][ T6460] netlink: 432 bytes leftover after parsing attributes in process `syz.0.521'. [ 383.409422][ T6317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.533775][ T6317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.631285][ T3646] Bluetooth: hci5: command tx timeout [ 383.649811][ T6317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.679126][ T6317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.858936][ T9] device hsr_slave_0 left promiscuous mode [ 383.870694][ T9] device hsr_slave_1 left promiscuous mode [ 383.880204][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.897046][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.906788][ T9] device bridge_slave_1 left promiscuous mode [ 383.913533][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.923526][ T9] device bridge_slave_0 left promiscuous mode [ 383.929774][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.945166][ T9] device hsr_slave_0 left promiscuous mode [ 383.954062][ T9] device hsr_slave_1 left promiscuous mode [ 383.960563][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.968584][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.976765][ T9] device bridge_slave_1 left promiscuous mode [ 383.983183][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.995895][ T9] device bridge_slave_0 left promiscuous mode [ 384.002279][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.020052][ T9] device hsr_slave_0 left promiscuous mode [ 384.026608][ T9] device hsr_slave_1 left promiscuous mode [ 384.036602][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.045010][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.059302][ T9] device bridge_slave_1 left promiscuous mode [ 384.067313][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.080016][ T9] device bridge_slave_0 left promiscuous mode [ 384.086811][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.883828][ T6476] Falling back ldisc for ptm0. [ 385.983812][ T152] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 386.086181][ T9] team0 (unregistering): Port device team_slave_1 removed [ 386.100058][ T6484] dccp_close: ABORT with 20 bytes unread [ 386.148766][ T9] team0 (unregistering): Port device team_slave_0 removed [ 386.203297][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.235096][ T152] usb 1-1: Using ep0 maxpacket: 16 [ 386.287768][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.381136][ T152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.391962][ T152] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.411368][ T152] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 386.431297][ T152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.468587][ T152] usb 1-1: config 0 descriptor?? [ 386.523547][ T152] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 386.894288][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.941638][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.078081][ T9] bond0 (unregistering): Released all slaves [ 387.673142][ T9] team0 (unregistering): Port device team_slave_1 removed [ 387.748703][ T9] team0 (unregistering): Port device team_slave_0 removed [ 387.966113][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.069454][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.206758][ T6497] netlink: 432 bytes leftover after parsing attributes in process `syz.3.529'. [ 390.137911][ T9] bond0 (unregistering): Released all slaves [ 390.458162][ T9] team0 (unregistering): Port device team_slave_1 removed [ 390.507078][ T9] team0 (unregistering): Port device team_slave_0 removed [ 390.543432][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.584105][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.946977][ T9] bond0 (unregistering): Released all slaves [ 391.095274][ T6229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.132840][ T6229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.149825][ T14] usb 1-1: USB disconnect, device number 2 [ 391.170325][ T6229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.230508][ T6229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.673654][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.543630][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.004330][ T6517] Falling back ldisc for ptm0. [ 393.016693][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.056646][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.242456][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.258974][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.272758][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.279874][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.288195][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.335989][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.366869][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.385735][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.393020][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.418355][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.501044][ T3700] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 393.518064][ T6229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.534331][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.594303][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.633497][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.671323][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.688193][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.775130][ T6229] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.902340][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.923499][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.944141][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.979264][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.986672][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.020208][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.029391][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.040435][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.047609][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.163528][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.176432][ T6543] netlink: 432 bytes leftover after parsing attributes in process `syz.0.537'. [ 394.182072][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.254435][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.311924][ T3700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.314675][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.435245][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.457244][ T3700] usb 4-1: config 0 has no interfaces? [ 394.891041][ T3700] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.931015][ T3700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.933748][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.949630][ T3700] usb 4-1: config 0 descriptor?? [ 394.967477][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.979310][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.151447][ T6317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.178505][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.188621][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.199708][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.210116][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.313011][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.869380][ T6379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.886167][ T6379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.900081][ T6379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.917135][ T6379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.067005][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.097042][ T6379] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.168360][ T6379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.207315][ T6379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.237048][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.257647][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.431234][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.452011][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.470319][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.478719][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.489858][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.499700][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.512338][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.517126][ T14] usb 4-1: USB disconnect, device number 8 [ 396.519446][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.538088][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.566021][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.594653][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.603070][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.631138][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.640357][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.649766][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.660264][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.672995][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.682065][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.690882][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.699937][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.709248][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.717950][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.726696][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.734950][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.743865][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.765464][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.923510][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.891798][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.899342][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.345128][ T6569] sp0: Synchronizing with TNC [ 398.627060][ T3646] Bluetooth: hci5: command tx timeout [ 401.402586][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.793787][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.822249][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.435307][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.540052][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.564472][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.504744][ T6229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.545925][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.553797][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.607206][ T6379] device veth0_vlan entered promiscuous mode [ 406.832322][ T6379] device veth1_vlan entered promiscuous mode [ 407.261264][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 407.397671][ T6379] device veth0_macvtap entered promiscuous mode [ 407.433529][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.463572][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.493270][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 407.507228][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 407.516778][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.531635][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.563551][ T6379] device veth1_macvtap entered promiscuous mode [ 407.591811][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.603601][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.617366][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.627037][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.657798][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.682698][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.727147][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.740193][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.747965][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.760744][ T7] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 407.782695][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.796338][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.810678][ T7] usb 4-1: config 0 descriptor?? [ 407.824012][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.842340][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.872074][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.894637][ T6229] device veth0_vlan entered promiscuous mode [ 407.921055][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.940625][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.957551][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.986717][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.017727][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.037062][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.046239][ T6610] loop0: detected capacity change from 0 to 40427 [ 408.052382][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.060701][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.077684][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.080281][ T6610] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 408.118278][ T6610] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 408.122937][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.142541][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.162519][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.170793][ T6610] F2FS-fs (loop0): invalid crc value [ 408.178718][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.192852][ T6610] F2FS-fs (loop0): Found nat_bits in checkpoint [ 408.198096][ T6229] device veth1_vlan entered promiscuous mode [ 408.222848][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.232110][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.242230][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.258475][ T6379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.270873][ T6379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.282578][ T6379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.291384][ T6610] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 408.298451][ T6610] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 408.306041][ T6379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.339191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.356518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.383260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.417489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.437600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.465511][ T6317] device veth0_vlan entered promiscuous mode [ 408.488577][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.516841][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.550697][ T6317] device veth1_vlan entered promiscuous mode [ 408.576376][ T6229] device veth0_macvtap entered promiscuous mode [ 408.601912][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.610046][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.649476][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.669988][ T6229] device veth1_macvtap entered promiscuous mode [ 408.706118][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.726255][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.769595][ T6317] device veth0_macvtap entered promiscuous mode [ 408.807379][ T6229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.823799][ T6229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.837465][ T6229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.853530][ T6229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.867426][ T6229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.878208][ T6229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.892381][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.919182][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.933191][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.957048][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.982236][ T6317] device veth1_macvtap entered promiscuous mode [ 409.003990][ T6229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.019775][ T6229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.040134][ T6229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.061720][ T6229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.082484][ T6229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.104301][ T6229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.130484][ T6229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.161668][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.169798][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.232836][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.246659][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.257900][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.267542][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.282474][ T6229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.302453][ T6229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.320956][ T6229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.339894][ T6229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.376905][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.389937][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.414699][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.431122][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.450015][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.478484][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.499647][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.523766][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.543758][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.566899][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.590535][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.613163][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.641544][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.650506][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.695044][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.708470][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.734336][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.749254][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.765710][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.776347][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.792150][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.793396][ T22] usb 4-1: USB disconnect, device number 9 [ 409.815203][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.831412][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.907691][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.941835][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.967905][ T6317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.000969][ T6317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.021033][ T6317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.039952][ T6317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.537292][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.596784][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.791747][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.019222][ T5959] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 411.047594][ T5959] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 411.310456][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.358506][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.418453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.700837][ T6670] sp0: Synchronizing with TNC [ 411.716149][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.140314][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.941488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.238769][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.252704][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.319091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 418.104504][ T6697] ISOFS: Unable to identify CD-ROM format. [ 422.291279][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 422.681838][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 422.696406][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.704865][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.713242][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 422.722417][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 422.729713][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.870293][ T3706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.126695][ T3646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.136014][ T3646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.143981][ T3646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.153645][ T3646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.161409][ T3646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.169112][ T3646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.299346][ T3706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.502633][ T3706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.695312][ T3706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.751510][ T3646] Bluetooth: hci3: command tx timeout [ 425.125264][ T6717] loop3: detected capacity change from 0 to 40427 [ 425.138670][ T6734] chnl_net:caif_netlink_parms(): no params data found [ 425.171682][ T6717] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 425.179475][ T6717] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 425.275139][ T3646] Bluetooth: hci0: command tx timeout [ 425.747742][ T6717] F2FS-fs (loop3): invalid crc value [ 425.808037][ T6717] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 426.038822][ T6721] chnl_net:caif_netlink_parms(): no params data found [ 426.973374][ T3646] Bluetooth: hci3: command tx timeout [ 427.012014][ T6767] Falling back ldisc for ptm0. [ 427.276016][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.421598][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.441655][ T6734] device bridge_slave_0 entered promiscuous mode [ 427.450692][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.461446][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.471114][ T3646] Bluetooth: hci0: command tx timeout [ 427.480432][ T6734] device bridge_slave_1 entered promiscuous mode [ 428.550002][ T6782] dccp_close: ABORT with 20 bytes unread [ 428.668929][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.684694][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.749190][ T6721] device bridge_slave_0 entered promiscuous mode [ 428.814289][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.846684][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.913248][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.920402][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.953828][ T6791] ISOFS: Unable to identify CD-ROM format. [ 428.968708][ T6721] device bridge_slave_1 entered promiscuous mode [ 428.991100][ T48] Bluetooth: hci3: command tx timeout [ 429.164619][ T6734] team0: Port device team_slave_0 added [ 429.377936][ T6734] team0: Port device team_slave_1 added [ 429.413628][ T6721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.572058][ T48] Bluetooth: hci0: command tx timeout [ 430.393406][ T6721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.082187][ T48] Bluetooth: hci3: command tx timeout [ 431.631177][ T48] Bluetooth: hci0: command tx timeout [ 431.764162][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.771358][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.798255][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.796823][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.807157][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.905240][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.920343][ T6827] Falling back ldisc for ptm0. [ 432.942923][ T6721] team0: Port device team_slave_0 added [ 433.163407][ T6721] team0: Port device team_slave_1 added [ 433.193909][ T6734] device hsr_slave_0 entered promiscuous mode [ 433.222760][ T6734] device hsr_slave_1 entered promiscuous mode [ 433.237367][ T6734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.253626][ T6734] Cannot create hsr debugfs directory [ 434.328410][ T3706] device hsr_slave_0 left promiscuous mode [ 434.341194][ T3706] device hsr_slave_1 left promiscuous mode [ 434.382353][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.401014][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.421908][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.452737][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.650499][ T3706] device bridge_slave_1 left promiscuous mode [ 434.660051][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.688631][ T3706] device bridge_slave_0 left promiscuous mode [ 434.695695][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.844271][ T3706] device veth1_macvtap left promiscuous mode [ 435.851089][ T3706] device veth0_macvtap left promiscuous mode [ 435.865328][ T3706] device veth1_vlan left promiscuous mode [ 435.872577][ T3706] device veth0_vlan left promiscuous mode [ 437.198005][ T6864] Falling back ldisc for ptm1. [ 438.463244][ T6882] netlink: 260 bytes leftover after parsing attributes in process `syz.2.590'. [ 438.719154][ T6882] netlink: 260 bytes leftover after parsing attributes in process `syz.2.590'. [ 438.907775][ T6882] netlink: 260 bytes leftover after parsing attributes in process `syz.2.590'. [ 439.792697][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.799323][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.082306][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 443.134182][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 444.163809][ T6909] Falling back ldisc for ptm0. [ 444.256429][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.380495][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.766186][ T6931] xt_policy: output policy not valid in PREROUTING and INPUT [ 446.907399][ T6940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.166239][ T3706] bond0 (unregistering): Released all slaves [ 448.260168][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.267384][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.296752][ T6721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.350806][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.360328][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.405034][ T6938] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 448.415139][ T6938] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 448.425381][ T6938] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 448.437712][ T6938] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 448.444698][ T6721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.450522][ T6938] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 448.479620][ T6938] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 448.632025][ T6938] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 449.529377][ T6938] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 449.562657][ T6938] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 449.569903][ T6938] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.577326][ T6938] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 449.582336][ T6721] device hsr_slave_0 entered promiscuous mode [ 449.599770][ T6938] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 449.610343][ T6721] device hsr_slave_1 entered promiscuous mode [ 449.621033][ T6721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.628668][ T6721] Cannot create hsr debugfs directory [ 449.782747][ T26] audit: type=1326 audit(1726849185.053:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 449.858437][ T26] audit: type=1326 audit(1726849185.093:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082257c890 code=0x7ffc0000 [ 449.934101][ T26] audit: type=1326 audit(1726849185.093:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f082257f727 code=0x7ffc0000 [ 450.192375][ T6962] sp0: Synchronizing with TNC [ 450.192496][ T26] audit: type=1326 audit(1726849185.093:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 450.227909][ T26] audit: type=1326 audit(1726849185.093:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f082257f727 code=0x7ffc0000 [ 450.443515][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 450.527813][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 450.675875][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.637648][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.011759][ T6968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.021002][ T26] audit: type=1326 audit(1726849185.093:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f082257cb8a code=0x7ffc0000 [ 452.101088][ T26] audit: type=1326 audit(1726849185.093:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 452.305469][ T26] audit: type=1326 audit(1726849185.103:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 452.412410][ T26] audit: type=1326 audit(1726849185.103:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 452.412631][ T6966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 452.673318][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 452.752024][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 453.717922][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 453.799654][ T26] audit: type=1326 audit(1726849185.103:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 453.826306][ T6734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.838383][ T6966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 453.856219][ T6966] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 453.924665][ T6966] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 453.944242][ T6966] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 453.981678][ T6966] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 453.994500][ T6734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.002995][ T6966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.031201][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 454.041648][ T6966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 454.047624][ T6966] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 454.071125][ T6966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.091094][ T6966] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 454.097088][ T6966] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 454.260194][ T6734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.326633][ T6734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.951231][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 456.031623][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.111222][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 456.120742][ T3646] Bluetooth: hci2: command 0x040f tx timeout [ 457.299840][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.309302][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.041470][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 458.123011][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 458.196820][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 459.186459][ T7020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.072156][ T48] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 460.091586][ T7014] Falling back ldisc for ptm0. [ 460.133027][ T6734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.226819][ T7017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 460.239729][ T6734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 460.248232][ T7017] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 460.654130][ T7017] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 460.674515][ T7017] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 460.681394][ T7017] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 460.689989][ T6734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 460.699865][ T7017] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 460.728044][ T7017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 460.770400][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 460.784075][ T26] audit: type=1326 audit(1726849196.033:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 460.808894][ T7017] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 460.817673][ T7017] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 460.842080][ T7017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 460.848208][ T7017] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 460.908260][ T7017] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 460.918256][ T26] audit: type=1326 audit(1726849196.033:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 461.018332][ T6734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.040336][ T26] audit: type=1326 audit(1726849196.033:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082257c890 code=0x7ffc0000 [ 461.091225][ T26] audit: type=1326 audit(1726849196.033:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f082257f727 code=0x7ffc0000 [ 461.114871][ T26] audit: type=1326 audit(1726849196.033:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 461.175013][ T26] audit: type=1326 audit(1726849196.033:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f082257f727 code=0x7ffc0000 [ 461.296062][ T7041] netlink: 277 bytes leftover after parsing attributes in process `syz.2.627'. [ 461.297941][ T26] audit: type=1326 audit(1726849196.033:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f082257cb8a code=0x7ffc0000 [ 461.330287][ T26] audit: type=1326 audit(1726849196.033:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 461.435245][ T26] audit: type=1326 audit(1726849196.033:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 461.589792][ T26] audit: type=1326 audit(1726849196.033:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 461.723014][ T6721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.956514][ T3706] device hsr_slave_0 left promiscuous mode [ 461.991126][ T3706] device hsr_slave_1 left promiscuous mode [ 463.195388][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 463.195409][ T3646] Bluetooth: hci3: command 0x0c1a tx timeout [ 463.201664][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 463.207583][ T3646] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.486757][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.851795][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.881759][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.889321][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.905365][ T3706] device bridge_slave_1 left promiscuous mode [ 463.912168][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.942792][ T3706] device bridge_slave_0 left promiscuous mode [ 463.949092][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.332635][ T3706] device veth1_macvtap left promiscuous mode [ 464.359437][ T3706] device veth0_macvtap left promiscuous mode [ 464.369635][ T3706] device veth1_vlan left promiscuous mode [ 464.386067][ T3706] device veth0_vlan left promiscuous mode [ 465.230971][ T3646] Bluetooth: hci5: command 0x0c1a tx timeout [ 465.231419][ T3654] Bluetooth: hci3: command 0x0c1a tx timeout [ 465.231465][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 465.243517][ T3657] Bluetooth: hci0: command 0x0c1a tx timeout [ 465.421686][ T7067] Falling back ldisc for ptm0. [ 466.709303][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 466.709316][ T26] audit: type=1326 audit(1726849201.963:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 466.746993][ T26] audit: type=1326 audit(1726849201.963:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 466.854322][ T26] audit: type=1326 audit(1726849201.963:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3f0f7c890 code=0x7ffc0000 [ 466.938014][ T3646] Bluetooth: hci5: unexpected event for opcode 0x0407 [ 466.939068][ T26] audit: type=1326 audit(1726849201.963:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3f0f7f727 code=0x7ffc0000 [ 467.014496][ T26] audit: type=1326 audit(1726849201.963:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 467.068793][ T26] audit: type=1326 audit(1726849201.963:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3f0f7f727 code=0x7ffc0000 [ 467.091311][ T26] audit: type=1326 audit(1726849201.963:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3f0f7cb8a code=0x7ffc0000 [ 467.114470][ T26] audit: type=1326 audit(1726849201.963:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 467.136918][ T26] audit: type=1326 audit(1726849201.973:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 467.162689][ T26] audit: type=1326 audit(1726849201.973:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 467.847204][ T7085] slcan: can't register candev [ 467.865629][ T7085] Falling back ldisc for ttyS3. [ 467.996378][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 469.014133][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 469.063916][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.921100][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.204153][ T7102] Falling back ldisc for ptm0. [ 471.002733][ T3646] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 471.012371][ T3646] Bluetooth: hci5: Injecting HCI hardware error event [ 471.031891][ T3654] Bluetooth: hci5: hardware error 0x00 [ 474.242964][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 474.242982][ T26] audit: type=1326 audit(1726849209.513:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 474.314745][ T26] audit: type=1326 audit(1726849209.513:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 474.504937][ T26] audit: type=1326 audit(1726849209.543:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3f0f7c890 code=0x7ffc0000 [ 474.528097][ T26] audit: type=1326 audit(1726849209.543:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3f0f7f727 code=0x7ffc0000 [ 474.550554][ T26] audit: type=1326 audit(1726849209.543:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 474.573272][ T26] audit: type=1326 audit(1726849209.543:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3f0f7f727 code=0x7ffc0000 [ 474.863438][ T26] audit: type=1326 audit(1726849209.543:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3f0f7cb8a code=0x7ffc0000 [ 475.534394][ T3654] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 475.605236][ T26] audit: type=1326 audit(1726849209.543:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 475.658671][ T26] audit: type=1326 audit(1726849209.543:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 476.841848][ T26] audit: type=1326 audit(1726849209.543:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3f0f7def9 code=0x7ffc0000 [ 477.178090][ T7139] Falling back ldisc for ptm0. [ 479.295188][ T3706] bond0 (unregistering): Released all slaves [ 480.804985][ T6721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.007360][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.021335][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.029779][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.051130][ T3646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.083719][ T3646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 481.110155][ T3646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.627803][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.821869][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.836046][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.044500][ T6734] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.383243][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.419211][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.576067][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.583404][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.991143][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.019629][ T3654] Bluetooth: hci4: command tx timeout [ 485.098314][ T7180] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262395 (only 8 groups) [ 487.081260][ T3654] Bluetooth: hci4: command tx timeout [ 488.985114][ T7189] Falling back ldisc for ptm0. [ 489.971749][ T3654] Bluetooth: hci4: command tx timeout [ 490.175480][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 490.433449][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.460314][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.477018][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.487753][ T3646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.495904][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 490.503302][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.674813][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.728623][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.906759][ T7155] device bridge_slave_0 entered promiscuous mode [ 494.061747][ T3700] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 495.997885][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.057812][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.134875][ T7249] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 496.292825][ T7155] device bridge_slave_1 entered promiscuous mode [ 496.354893][ T7243] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 496.911135][ T7257] sp0: Synchronizing with TNC [ 496.966699][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.093303][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.154676][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 500.332574][ T7155] team0: Port device team_slave_0 added [ 500.396958][ T7155] team0: Port device team_slave_1 added [ 500.560045][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.579000][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.613989][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.675166][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.682396][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.710953][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.898302][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.910179][ T7279] netlink: 148 bytes leftover after parsing attributes in process `syz.4.676'. [ 500.932573][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.976431][ T7209] device bridge_slave_0 entered promiscuous mode [ 501.111213][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.131666][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.153081][ T7209] device bridge_slave_1 entered promiscuous mode [ 501.234150][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.240524][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.292243][ T7155] device hsr_slave_0 entered promiscuous mode [ 501.329488][ T7155] device hsr_slave_1 entered promiscuous mode [ 501.362382][ T7155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.370760][ T7155] Cannot create hsr debugfs directory [ 501.386476][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.438375][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.304837][ T3706] device hsr_slave_0 left promiscuous mode [ 502.321552][ T3706] device hsr_slave_1 left promiscuous mode [ 502.328362][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.394005][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.472023][ T3706] device bridge_slave_1 left promiscuous mode [ 502.489306][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.533107][ T3706] device bridge_slave_0 left promiscuous mode [ 502.551232][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.276794][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 503.366201][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 503.452561][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.005020][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.092578][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 507.573843][ T3706] bond0 (unregistering): Released all slaves [ 507.818798][ T7314] sp0: Synchronizing with TNC [ 513.003080][ T7209] team0: Port device team_slave_0 added [ 513.016282][ T7209] team0: Port device team_slave_1 added [ 513.097255][ T7315] netlink: 'syz.4.685': attribute type 10 has an invalid length. [ 513.357125][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.379179][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.524896][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.596054][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.610920][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.728737][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.192382][ T3646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.202442][ T3646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.212571][ T3646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.221971][ T3646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.229768][ T3646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 514.239222][ T3646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.269766][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.277450][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.286222][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.294445][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.302722][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 514.310145][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.497244][ T7209] device hsr_slave_0 entered promiscuous mode [ 514.563298][ T7209] device hsr_slave_1 entered promiscuous mode [ 514.595995][ T7209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.628933][ T7209] Cannot create hsr debugfs directory [ 515.055526][ T7322] loop3: detected capacity change from 0 to 40427 [ 515.102389][ T7322] ======================================================= [ 515.102389][ T7322] WARNING: The mand mount option has been deprecated and [ 515.102389][ T7322] and is ignored by this kernel. Remove the mand [ 515.102389][ T7322] option from the mount to silence this warning. [ 515.102389][ T7322] ======================================================= [ 515.147892][ T3706] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.229234][ T7322] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 515.258880][ T7322] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 515.286362][ T7322] F2FS-fs (loop3): invalid crc value [ 515.326270][ T3706] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.661948][ T7322] F2FS-fs (loop3): Found nat_bits in checkpoint [ 515.993723][ T3706] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.128505][ T7322] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 516.150798][ T3706] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.161417][ T7322] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 516.305460][ T7155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 516.316517][ T7155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 516.328038][ T7155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 516.351099][ T3654] Bluetooth: hci0: command tx timeout [ 516.517608][ T7354] ALSA: seq fatal error: cannot create timer (-16) [ 518.434805][ T3654] Bluetooth: hci0: command tx timeout [ 518.980640][ T7155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 519.046417][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 520.522128][ T3654] Bluetooth: hci0: command tx timeout [ 521.220944][ T1183] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 522.483767][ T1183] usb 5-1: Using ep0 maxpacket: 32 [ 522.601179][ T3654] Bluetooth: hci0: command tx timeout [ 523.028713][ T1183] usb 5-1: device descriptor read/all, error -71 [ 523.430168][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.467695][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.609611][ T7325] device bridge_slave_0 entered promiscuous mode [ 523.808532][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.858191][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.915804][ T7381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.695'. [ 523.925580][ T7381] ubi: mtd0 is already attached to ubi0 [ 524.379478][ T7375] Falling back ldisc for ptm0. [ 524.386584][ T7325] device bridge_slave_1 entered promiscuous mode [ 525.453472][ T7386] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 525.697612][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.884380][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.029432][ T7209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 526.059621][ T7209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 526.220384][ T7209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 526.305005][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.333515][ T7325] team0: Port device team_slave_0 added [ 526.339888][ T7209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 526.450315][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.500253][ T7325] team0: Port device team_slave_1 added [ 526.521068][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 526.546009][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.787672][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.807133][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.834749][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.841978][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.941743][ T7401] loop3: detected capacity change from 0 to 40427 [ 526.954064][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.968506][ T7401] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 526.998448][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.035152][ T7401] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 527.052613][ T7401] F2FS-fs (loop3): invalid crc value [ 527.058022][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.089623][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 527.098455][ T7401] F2FS-fs (loop3): Found nat_bits in checkpoint [ 527.123540][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 527.170212][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.189256][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.196469][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.261934][ T7401] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 527.269042][ T7401] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 527.281344][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.301336][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.386910][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.567722][ T7424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.312420][ T7422] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.318868][ T7422] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 528.342816][ T7422] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 528.379485][ T7325] device hsr_slave_0 entered promiscuous mode [ 528.437672][ T7325] device hsr_slave_1 entered promiscuous mode [ 528.476547][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.500172][ T7325] Cannot create hsr debugfs directory [ 528.508365][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 529.512731][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 529.576501][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 529.624829][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 529.652332][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 529.683950][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 529.698066][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 529.722327][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.738883][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 529.759914][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.210614][ T3706] device hsr_slave_0 left promiscuous mode [ 530.352346][ T3646] Bluetooth: hci0: command 0x0c1a tx timeout [ 530.513467][ T3706] device hsr_slave_1 left promiscuous mode [ 530.521892][ T7442] Falling back ldisc for ptm0. [ 530.536728][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.682388][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.715973][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.073961][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.671962][ T3706] device bridge_slave_1 left promiscuous mode [ 531.682702][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.701958][ T3706] device bridge_slave_0 left promiscuous mode [ 531.708266][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.728122][ T3706] device hsr_slave_0 left promiscuous mode [ 531.743800][ T3706] device hsr_slave_1 left promiscuous mode [ 531.765917][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.788435][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.856069][ T3706] device bridge_slave_1 left promiscuous mode [ 532.509692][ T3646] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.521816][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.617359][ T3706] device bridge_slave_0 left promiscuous mode [ 532.627614][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.719566][ T3706] device veth1_macvtap left promiscuous mode [ 532.727490][ T3706] device veth0_macvtap left promiscuous mode [ 532.736391][ T3706] device veth1_vlan left promiscuous mode [ 532.743605][ T3706] device veth0_vlan left promiscuous mode [ 532.911240][ T1183] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 533.271913][ T1183] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 533.283518][ T1183] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 533.302829][ T1183] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 533.312103][ T1183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.361327][ T7465] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.612470][ T1183] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 533.660802][ T1183] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 533.706134][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 533.789243][ T1183] usb 4-1: USB disconnect, device number 11 [ 533.795835][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 533.893921][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 533.976851][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.046531][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.628623][ T7476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.588856][ T3706] bond0 (unregistering): Released all slaves [ 535.598067][ T7473] loop4: detected capacity change from 0 to 40427 [ 535.613805][ T7473] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 535.621688][ T7473] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 535.634440][ T7473] F2FS-fs (loop4): invalid crc value [ 535.650099][ T7473] F2FS-fs (loop4): Found nat_bits in checkpoint [ 535.715567][ T7473] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 535.723016][ T7473] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 535.933438][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 535.967819][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 535.993864][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.028981][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.558304][ T3706] bond0 (unregistering): Released all slaves [ 536.657859][ T7155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.670213][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 536.693901][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.710110][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.737433][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.753126][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.792149][ T7475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 536.799473][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.809118][ T7475] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 536.848655][ T7475] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 536.883294][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 536.901589][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 536.925071][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.932274][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.947596][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 536.959091][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.032701][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.039848][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.060048][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.079501][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 537.113525][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.182667][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'. [ 537.931269][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.969600][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.016275][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.192277][ T5961] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 538.244502][ T5961] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 538.247512][ T7209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.309799][ T7209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.356019][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.365855][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.394339][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.424861][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.462521][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.472129][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.535985][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.831417][ T3654] Bluetooth: hci0: command 0x0c1a tx timeout [ 539.761427][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.781619][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.796526][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.816527][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.833842][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 539.844372][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.916161][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 539.916177][ T26] audit: type=1326 audit(1726849275.183:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 539.994241][ T26] audit: type=1326 audit(1726849275.183:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 540.022094][ T26] audit: type=1326 audit(1726849275.213:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082257c890 code=0x7ffc0000 [ 540.127251][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.130929][ T26] audit: type=1326 audit(1726849275.213:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f082257f727 code=0x7ffc0000 [ 540.181396][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.202017][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.213315][ T26] audit: type=1326 audit(1726849275.213:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 540.248563][ T7325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 540.271865][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 540.288878][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 540.335844][ T7325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.356204][ T26] audit: type=1326 audit(1726849275.213:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f082257f727 code=0x7ffc0000 [ 540.429239][ T7325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 540.437736][ T26] audit: type=1326 audit(1726849275.213:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f082257cb8a code=0x7ffc0000 [ 540.463425][ T7325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 540.470621][ T26] audit: type=1326 audit(1726849275.213:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 540.551031][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 540.578252][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 540.596063][ T26] audit: type=1326 audit(1726849275.213:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 540.621343][ T26] audit: type=1326 audit(1726849275.213:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082257def9 code=0x7ffc0000 [ 540.656143][ T7209] device veth0_vlan entered promiscuous mode [ 540.712399][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 540.724073][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 540.776279][ T7209] device veth1_vlan entered promiscuous mode [ 540.831269][ T7532] loop3: detected capacity change from 0 to 128 [ 540.860209][ T7532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 540.872547][ T7532] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 540.911467][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 540.965082][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 541.049691][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 541.179419][ T7209] device veth0_macvtap entered promiscuous mode [ 541.193730][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 541.204126][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 541.226562][ T7209] device veth1_macvtap entered promiscuous mode [ 541.263537][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.286638][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 541.297946][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 541.375325][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.386053][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.396299][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.407156][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.419865][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.450257][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.466096][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.483526][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 541.528516][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.583895][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.656022][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.669781][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.685415][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.696415][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.719126][ T3643] EXT4-fs (loop3): unmounting filesystem. [ 541.730020][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.828517][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.852094][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.871024][ T48] Bluetooth: hci4: command tx timeout [ 541.884198][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.900269][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.912831][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.920012][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.940474][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.968222][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.988356][ T7510] device bridge_slave_0 entered promiscuous mode [ 542.017310][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.026442][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.066549][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.099239][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.106452][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.252584][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.266577][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.283147][ T7209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.297150][ T7209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.591068][ T7209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.636787][ T7209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.078405][ T5947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.111436][ T5947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.121169][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.128268][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.190360][ T7510] device bridge_slave_1 entered promiscuous mode [ 543.202816][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.347402][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.369122][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.471671][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.491259][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.534232][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.557302][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.602900][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.676955][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.702059][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.748046][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.760663][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.777606][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.798703][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.857453][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.932968][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.951310][ T48] Bluetooth: hci4: command tx timeout [ 544.295779][ T7510] team0: Port device team_slave_0 added [ 544.383185][ T7510] team0: Port device team_slave_1 added [ 544.521290][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.530453][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.575129][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.631370][ T6679] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 544.652030][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.659043][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.755421][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.995735][ T7510] device hsr_slave_0 entered promiscuous mode [ 545.015679][ T7510] device hsr_slave_1 entered promiscuous mode [ 545.047987][ T7510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.058112][ T7510] Cannot create hsr debugfs directory [ 545.063156][ T6679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.081212][ T6679] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 545.110816][ T6679] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 545.120414][ T6679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.139255][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.154683][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.179038][ T6679] usb 1-1: config 0 descriptor?? [ 545.181569][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.326374][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.345968][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.496268][ T7325] device veth0_vlan entered promiscuous mode [ 545.552631][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.577302][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.600631][ T3706] device hsr_slave_0 left promiscuous mode [ 545.617626][ T3706] device hsr_slave_1 left promiscuous mode [ 545.631998][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.651457][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.660356][ T3706] device bridge_slave_1 left promiscuous mode [ 545.676840][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.689966][ T3706] device bridge_slave_0 left promiscuous mode [ 545.697008][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.895426][ T7589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.721'. [ 545.905332][ T7589] ubi: mtd0 is already attached to ubi0 [ 546.041179][ T48] Bluetooth: hci4: command tx timeout [ 546.373983][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 546.451725][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 546.603382][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.671860][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.086078][ T3706] bond0 (unregistering): Released all slaves [ 547.201988][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.214843][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.832651][ T6679] usb 1-1: USB disconnect, device number 3 [ 548.121124][ T48] Bluetooth: hci4: command tx timeout [ 549.753400][ T7325] device veth1_vlan entered promiscuous mode [ 549.831654][ T7325] device veth0_macvtap entered promiscuous mode [ 549.840160][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.855121][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.015554][ T7325] device veth1_macvtap entered promiscuous mode [ 550.023487][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 550.036869][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 550.392393][ T3654] Bluetooth: hci4: command tx timeout [ 550.812945][ T7622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.730'. [ 550.822460][ T7622] ubi: mtd0 is already attached to ubi0 [ 551.154171][ T7629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.599067][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.630140][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.659174][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.680095][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.704925][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.743621][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.778414][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.790741][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.814104][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.822958][ T7628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 551.847937][ T7628] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 551.857702][ T7628] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 551.869388][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.891257][ T7628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 551.898611][ T7628] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 551.911444][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.914460][ T7628] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 551.932842][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.955596][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.969357][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.980132][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.022644][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.053271][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.071887][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.106228][ T7325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.135134][ T7325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.162828][ T7325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.188736][ T7325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.275725][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.314892][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.349791][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.425510][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.441055][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.495235][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.603238][ T7510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 553.649041][ T7510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 553.680406][ T7510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 553.833441][ T7510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 553.881820][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 553.994367][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 556.050089][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 556.677219][ T3654] Bluetooth: hci0: command 0x0c1a tx timeout [ 557.209375][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.358854][ T7510] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.380707][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 557.403264][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 557.421012][ T4213] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 557.436720][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 559.643737][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 559.655890][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.663078][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.678206][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 559.812795][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 559.822410][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 559.832536][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.839670][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.855105][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 559.886674][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 559.905106][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 559.934622][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 560.002035][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 560.012175][ T7683] ALSA: seq fatal error: cannot create timer (-16) [ 560.079587][ T7686] netlink: 432 bytes leftover after parsing attributes in process `syz.0.739'. [ 560.764504][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 560.798398][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 560.863189][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 560.891156][ T4213] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 560.898839][ T4213] usb 3-1: can't read configurations, error -71 [ 560.959147][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.999293][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 561.151566][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.162382][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 561.480475][ T7699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.828574][ T7695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 561.841073][ T7695] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 561.871233][ T7695] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 561.899499][ T7695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 561.907117][ T7695] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 562.017546][ T7695] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 562.673690][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.774516][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.532340][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 563.539852][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 563.577018][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.631162][ T3654] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.843669][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.930334][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.951953][ T3654] Bluetooth: hci4: command 0x0c1a tx timeout [ 564.412392][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 564.451770][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 564.523925][ T7510] device veth0_vlan entered promiscuous mode [ 564.537425][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 564.809994][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 564.838241][ T7510] device veth1_vlan entered promiscuous mode [ 565.007544][ T7730] sp0: Synchronizing with TNC [ 565.787103][ T3654] Bluetooth: hci0: command 0x0c1a tx timeout [ 566.217432][ T3654] Bluetooth: hci4: command 0x0c1a tx timeout [ 567.763020][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.807472][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 567.862519][ T7510] device veth0_macvtap entered promiscuous mode [ 567.953650][ T7510] device veth1_macvtap entered promiscuous mode [ 568.043013][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.097673][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.140958][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.170955][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.206425][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.249445][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.284171][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.316234][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.384777][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.410087][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 568.472683][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.600380][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.661950][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.713534][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.211300][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.447948][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.480991][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.560077][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.606346][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.641401][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.678734][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.800955][ T3687] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 569.845752][ T7510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.974144][ T7510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.040473][ T7510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.100381][ T7510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.191267][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.214792][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.444130][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.471482][ T3687] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.493395][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.502238][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.510370][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.518130][ T3687] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 570.538033][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 570.550888][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.578433][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 570.588556][ T3687] usb 5-1: config 0 descriptor?? [ 572.593525][ T7784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'. [ 572.603562][ T7784] ubi: mtd0 is already attached to ubi0 [ 572.947377][ T3769] usb 5-1: USB disconnect, device number 6 [ 576.019984][ T7793] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262395 (only 8 groups) [ 576.738327][ T7795] sp0: Synchronizing with TNC [ 584.822485][ T7823] loop0: detected capacity change from 0 to 2048 [ 585.126552][ T7830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.767'. [ 585.136336][ T7830] ubi: mtd0 is already attached to ubi0 [ 585.466254][ T7663] blk_print_req_error: 2 callbacks suppressed [ 585.466272][ T7663] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 585.651752][ T3654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 585.661928][ T3654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 585.680218][ T3654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 585.698345][ T3654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 585.708913][ T3654] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 585.717844][ T3654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.764370][ T7848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.870702][ T3654] Bluetooth: hci5: command tx timeout [ 588.801012][ T1183] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 588.861570][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.840891][ T3654] Bluetooth: hci5: command tx timeout [ 591.042650][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.251117][ T7865] netlink: 'syz.3.775': attribute type 10 has an invalid length. [ 592.444490][ T7871] input: syz1 as /devices/virtual/input/input8 [ 592.514789][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.713414][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 592.911051][ T3654] Bluetooth: hci5: command tx timeout [ 592.924520][ T1183] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 593.394110][ T1183] usb 2-1: config index 0 descriptor too short (expected 65535, got 27) [ 593.527624][ T1183] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 593.560978][ T1183] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 593.586959][ T1183] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 593.611748][ T1183] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 593.714922][ T7889] netlink: 432 bytes leftover after parsing attributes in process `syz.2.783'. [ 594.438420][ T1183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.525193][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.746265][ C1] ------------[ cut here ]------------ [ 594.752116][ C1] WARNING: CPU: 1 PID: 7885 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x6e7/0x7f0 [ 594.761731][ C1] Modules linked in: [ 594.765633][ C1] CPU: 1 PID: 7885 Comm: syz.0.784 Not tainted 6.1.111-syzkaller #0 [ 594.773663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 594.783801][ C1] RIP: 0010:inet_sock_destruct+0x6e7/0x7f0 [ 594.789626][ C1] Code: ff ff e8 3c bc 53 f8 0f 0b e9 21 fe ff ff e8 30 bc 53 f8 0f 0b 41 80 3c 2c 00 0f 85 4c fe ff ff e9 4f fe ff ff e8 19 bc 53 f8 <0f> 0b e9 bb fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0e fc ff [ 594.809322][ C1] RSP: 0000:ffffc900001e0b30 EFLAGS: 00010246 [ 594.815473][ C1] RAX: ffffffff8936f327 RBX: 0000000000000100 RCX: ffff8880250d3b80 [ 594.823515][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 594.831561][ C1] RBP: ffff88802e93f2c0 R08: ffffffff8936f1dc R09: ffffed1005d27ea7 [ 594.839651][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11005d27e5d [ 594.847701][ C1] R13: ffff88802e93f7a8 R14: ffff88802e93f2e8 R15: ffff88802e93f2d2 [ 594.855740][ C1] FS: 000055555b989500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 594.864743][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.871414][ C1] CR2: 00007fa874c53108 CR3: 000000005f401000 CR4: 00000000003506e0 [ 594.879419][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.887453][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 594.895479][ C1] Call Trace: [ 594.898781][ C1] [ 594.901682][ C1] ? __warn+0x15a/0x520 [ 594.905875][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 594.911160][ C1] ? report_bug+0x2af/0x500 [ 594.915710][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 594.921006][ C1] ? handle_bug+0x3d/0x70 [ 594.925357][ C1] ? exc_invalid_op+0x16/0x40 [ 594.930063][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 594.935475][ C1] ? inet_sock_destruct+0x59c/0x7f0 [ 594.940746][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 594.946122][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 594.951470][ C1] ? ipv6_mod_enabled+0x20/0x20 [ 594.956416][ C1] ? sk_destruct+0xd0/0xd0 [ 594.960991][ C1] __sk_destruct+0x50/0x5f0 [ 594.965579][ C1] ? sk_destruct+0xd0/0xd0 [ 594.970047][ C1] rcu_core+0xade/0x1820 [ 594.974379][ C1] ? rcu_core+0xa6b/0x1820 [ 594.978831][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 594.984394][ C1] ? ieee80211_handle_queued_frames+0x192/0x1b0 [ 594.990693][ C1] ? mark_lock+0x9a/0x340 [ 594.995108][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 595.001171][ C1] ? print_irqtrace_events+0x210/0x210 [ 595.006693][ C1] handle_softirqs+0x2ee/0xa40 [ 595.011563][ C1] ? __irq_exit_rcu+0x157/0x240 [ 595.016463][ C1] ? do_softirq+0x240/0x240 [ 595.021035][ C1] ? _raw_spin_unlock+0x24/0x40 [ 595.025935][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 595.031223][ C1] __irq_exit_rcu+0x157/0x240 [ 595.035947][ C1] ? irq_exit_rcu+0x20/0x20 [ 595.040494][ C1] ? __flush_smp_call_function_queue+0x78c/0xd00 [ 595.046914][ C1] irq_exit_rcu+0x5/0x20 [ 595.051232][ C1] sysvec_call_function_single+0x8e/0xb0 [ 595.056906][ C1] [ 595.059868][ C1] [ 595.062856][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 595.068879][ C1] RIP: 0010:rcu_is_watching+0x56/0xb0 [ 595.074319][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 50 c8 6e 00 48 c7 c3 a8 56 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 1e 8b 03 65 ff 0d f5 05 8f 7e 74 0c 83 e0 04 c1 e8 02 5b [ 595.093998][ C1] RSP: 0000:ffffc900055df8e0 EFLAGS: 00000a02 [ 595.100099][ C1] RAX: 0000000000000000 RBX: ffff8880b8f356a8 RCX: ffffffff816a83db [ 595.108149][ C1] RDX: 0000000000000000 RSI: ffffffff8b5d6da0 RDI: ffffffff8b5d6d60 [ 595.116196][ C1] RBP: ffffc900055dfa60 R08: dffffc0000000000 R09: fffffbfff1d33cae [ 595.124251][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000abbf28 [ 595.132316][ C1] R13: dffffc0000000000 R14: ffffffff8cd8b878 R15: dffffc0000000000 [ 595.140337][ C1] ? lock_acquire+0xeb/0x5a0 [ 595.145023][ C1] lock_acquire+0xfa/0x5a0 [ 595.149486][ C1] ? read_lock_is_recursive+0x10/0x10 [ 595.154956][ C1] ? slab_post_alloc_hook+0x19e/0x3a0 [ 595.160381][ C1] slab_post_alloc_hook+0x1bb/0x3a0 [ 595.165646][ C1] ? slab_post_alloc_hook+0x19e/0x3a0 [ 595.171106][ C1] kmem_cache_alloc+0x10c/0x2d0 [ 595.175999][ C1] ? vm_area_dup+0x23/0x1b0 [ 595.180546][ C1] vm_area_dup+0x23/0x1b0 [ 595.184945][ C1] __split_vma+0xcc/0x530 [ 595.189316][ C1] ? split_vma+0x69/0xd0 [ 595.193632][ C1] mprotect_fixup+0x753/0x840 [ 595.198354][ C1] ? change_protection+0x3dc0/0x3dc0 [ 595.203702][ C1] ? apparmor_file_mprotect+0xf3/0x110 [ 595.209195][ C1] ? bpf_lsm_file_mprotect+0x5/0x10 [ 595.214451][ C1] ? security_file_mprotect+0x81/0xc0 [ 595.219868][ C1] do_mprotect_pkey+0x8b6/0xbe0 [ 595.224791][ C1] ? prot_none_test+0x10/0x10 [ 595.229528][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 595.235573][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 595.240855][ C1] __x64_sys_mprotect+0x7c/0x90 [ 595.245744][ C1] do_syscall_64+0x3b/0xb0 [ 595.250190][ C1] ? clear_bhb_loop+0x45/0xa0 [ 595.254953][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.260919][ C1] RIP: 0033:0x7f554c17dfb7 [ 595.265457][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.285119][ C1] RSP: 002b:00007fff44ceba48 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 595.293593][ C1] RAX: ffffffffffffffda RBX: 00007f554bf9c6c0 RCX: 00007f554c17dfb7 [ 595.301626][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f554bf7d000 [ 595.309629][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 595.317669][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff44cebba0 [ 595.325713][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 595.333755][ C1] [ 595.336820][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 595.344118][ C1] CPU: 1 PID: 7885 Comm: syz.0.784 Not tainted 6.1.111-syzkaller #0 [ 595.352115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 595.362185][ C1] Call Trace: [ 595.365482][ C1] [ 595.368340][ C1] dump_stack_lvl+0x1e3/0x2cb [ 595.373053][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 595.378546][ C1] ? panic+0x764/0x764 [ 595.382648][ C1] ? vscnprintf+0x59/0x80 [ 595.387011][ C1] panic+0x318/0x764 [ 595.390933][ C1] ? __warn+0x169/0x520 [ 595.395113][ C1] ? memcpy_page_flushcache+0xfc/0xfc [ 595.400532][ C1] __warn+0x348/0x520 [ 595.404539][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 595.409772][ C1] report_bug+0x2af/0x500 [ 595.414122][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 595.419354][ C1] handle_bug+0x3d/0x70 [ 595.423542][ C1] exc_invalid_op+0x16/0x40 [ 595.428078][ C1] asm_exc_invalid_op+0x16/0x20 [ 595.432974][ C1] RIP: 0010:inet_sock_destruct+0x6e7/0x7f0 [ 595.438824][ C1] Code: ff ff e8 3c bc 53 f8 0f 0b e9 21 fe ff ff e8 30 bc 53 f8 0f 0b 41 80 3c 2c 00 0f 85 4c fe ff ff e9 4f fe ff ff e8 19 bc 53 f8 <0f> 0b e9 bb fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0e fc ff [ 595.458464][ C1] RSP: 0000:ffffc900001e0b30 EFLAGS: 00010246 [ 595.464559][ C1] RAX: ffffffff8936f327 RBX: 0000000000000100 RCX: ffff8880250d3b80 [ 595.472555][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 595.480547][ C1] RBP: ffff88802e93f2c0 R08: ffffffff8936f1dc R09: ffffed1005d27ea7 [ 595.488539][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11005d27e5d [ 595.496532][ C1] R13: ffff88802e93f7a8 R14: ffff88802e93f2e8 R15: ffff88802e93f2d2 [ 595.504534][ C1] ? inet_sock_destruct+0x59c/0x7f0 [ 595.509773][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 595.515016][ C1] ? ipv6_mod_enabled+0x20/0x20 [ 595.519896][ C1] ? sk_destruct+0xd0/0xd0 [ 595.524337][ C1] __sk_destruct+0x50/0x5f0 [ 595.528867][ C1] ? sk_destruct+0xd0/0xd0 [ 595.533307][ C1] rcu_core+0xade/0x1820 [ 595.537583][ C1] ? rcu_core+0xa6b/0x1820 [ 595.542038][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 595.547277][ C1] ? ieee80211_handle_queued_frames+0x192/0x1b0 [ 595.553551][ C1] ? mark_lock+0x9a/0x340 [ 595.557919][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 595.563938][ C1] ? print_irqtrace_events+0x210/0x210 [ 595.569444][ C1] handle_softirqs+0x2ee/0xa40 [ 595.574256][ C1] ? __irq_exit_rcu+0x157/0x240 [ 595.579156][ C1] ? do_softirq+0x240/0x240 [ 595.583690][ C1] ? _raw_spin_unlock+0x24/0x40 [ 595.588571][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 595.593793][ C1] __irq_exit_rcu+0x157/0x240 [ 595.598503][ C1] ? irq_exit_rcu+0x20/0x20 [ 595.603035][ C1] ? __flush_smp_call_function_queue+0x78c/0xd00 [ 595.609401][ C1] irq_exit_rcu+0x5/0x20 [ 595.613687][ C1] sysvec_call_function_single+0x8e/0xb0 [ 595.619361][ C1] [ 595.622305][ C1] [ 595.625254][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 595.631269][ C1] RIP: 0010:rcu_is_watching+0x56/0xb0 [ 595.636670][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 50 c8 6e 00 48 c7 c3 a8 56 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 1e 8b 03 65 ff 0d f5 05 8f 7e 74 0c 83 e0 04 c1 e8 02 5b [ 595.656312][ C1] RSP: 0000:ffffc900055df8e0 EFLAGS: 00000a02 [ 595.662433][ C1] RAX: 0000000000000000 RBX: ffff8880b8f356a8 RCX: ffffffff816a83db [ 595.670436][ C1] RDX: 0000000000000000 RSI: ffffffff8b5d6da0 RDI: ffffffff8b5d6d60 [ 595.678455][ C1] RBP: ffffc900055dfa60 R08: dffffc0000000000 R09: fffffbfff1d33cae [ 595.686492][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000abbf28 [ 595.694495][ C1] R13: dffffc0000000000 R14: ffffffff8cd8b878 R15: dffffc0000000000 [ 595.702503][ C1] ? lock_acquire+0xeb/0x5a0 [ 595.707139][ C1] lock_acquire+0xfa/0x5a0 [ 595.711595][ C1] ? read_lock_is_recursive+0x10/0x10 [ 595.717028][ C1] ? slab_post_alloc_hook+0x19e/0x3a0 [ 595.722433][ C1] slab_post_alloc_hook+0x1bb/0x3a0 [ 595.727659][ C1] ? slab_post_alloc_hook+0x19e/0x3a0 [ 595.733072][ C1] kmem_cache_alloc+0x10c/0x2d0 [ 595.737949][ C1] ? vm_area_dup+0x23/0x1b0 [ 595.742494][ C1] vm_area_dup+0x23/0x1b0 [ 595.746858][ C1] __split_vma+0xcc/0x530 [ 595.751223][ C1] ? split_vma+0x69/0xd0 [ 595.755499][ C1] mprotect_fixup+0x753/0x840 [ 595.760213][ C1] ? change_protection+0x3dc0/0x3dc0 [ 595.765520][ C1] ? apparmor_file_mprotect+0xf3/0x110 [ 595.771007][ C1] ? bpf_lsm_file_mprotect+0x5/0x10 [ 595.776226][ C1] ? security_file_mprotect+0x81/0xc0 [ 595.781625][ C1] do_mprotect_pkey+0x8b6/0xbe0 [ 595.786509][ C1] ? prot_none_test+0x10/0x10 [ 595.791234][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 595.797251][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 595.802497][ C1] __x64_sys_mprotect+0x7c/0x90 [ 595.807379][ C1] do_syscall_64+0x3b/0xb0 [ 595.811824][ C1] ? clear_bhb_loop+0x45/0xa0 [ 595.816559][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.822478][ C1] RIP: 0033:0x7f554c17dfb7 [ 595.826920][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.846563][ C1] RSP: 002b:00007fff44ceba48 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 595.855096][ C1] RAX: ffffffffffffffda RBX: 00007f554bf9c6c0 RCX: 00007f554c17dfb7 [ 595.863108][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f554bf7d000 [ 595.871123][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 595.879129][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff44cebba0 [ 595.887143][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 595.895161][ C1] [ 595.898615][ C1] Kernel Offset: disabled [ 595.902997][ C1] Rebooting in 86400 seconds..