last executing test programs: 18m23.621792114s ago: executing program 0 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 18m23.385788474s ago: executing program 0 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4014, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xc5}}}}}}}}, 0x36) 18m22.789703434s ago: executing program 0 (id=497): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'geneve0\x00', {}, 0xa}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x2, 0xe, 0x9, 0x201}, {0x804, 0x1, 0x4, 0xd, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x7f, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x115, 0x15, 0x30, 0x8, 0xfd, 0x40, 0x84, 0x0, 0x1, 0x4, 0xb, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x1000000002, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) 18m22.057216887s ago: executing program 0 (id=506): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4d9, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 18m21.865879178s ago: executing program 0 (id=509): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x60, 0x17, 0x1000, 0x7ff, 0x59, 0x4, &(0x7f0000000000)="8d2d7a8975552a726f558eecddb0cd18584f6cec4a80dd039a16f866204bcb1e019539cc32b01970a399851fd8191229896ffb6bbf6b422e1fd0da765cb1e7456f8a63542faf31b37ec7098a6edf77b6bd032b451ff09135ae"}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="019d2cbd7000fbdbdf251b00000008009a00"], 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x40) 18m21.803993019s ago: executing program 0 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffffffd}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x5c}}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb00"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x11c}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000400)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@extent_cache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5553, &(0x7f000000b3c0)="$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") 18m5.443443195s ago: executing program 32 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffffffd}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x5c}}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb00"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x11c}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000400)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@extent_cache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5553, &(0x7f000000b3c0)="$eJzs3M2PU1UUAPDzZhgYPsSJceGOlxCTmYRO6PAR3aGCXxFCUBeutNOWptD2TaaljKxYuDQu/E+MJq5c+je4cO3OuNC4M9H03TfAgChmih3g90tez7v33Z577wshc16bBvDMWsp//zWLo3EwIuYj4kjEnfNse9C5FF6KiGMRMXfPkVX9dzr2R8ShiDg6SX43z+TSlyfGx8/88u5v3/1wYN/hr779cXa7Bmbt5Yjob6Tzm/0Ui06K16r+xrhbxv7pcRXThd5iut4vUv/N9nqZ4WZje1yjjKc6aXyxcWM4iVd7jeYkdrpXy/6NQZpwOO5s5ynfcK2xWbZb7fUydodFGTu30rxbt9L/bbeGo5SnVeX7tEwfo9F2TP3trXbaz8b1MjYHo6o/5S1a7a1JHFexmi6aRa9VrmN9Fzd6j3uvO7ixlY/bm8NuMcjPrNZfWa2frdU3i1Z71D5da/RbZ0/ny53eZFht1G70z3WKotNrrzaL/kq+3Gk2a/V6vny+vd5tDPJ6ffXU6snamZXq7ET+1qUP814rX57E17uDG6Nub5hfLTbz9I6VfG311Ksr+fF6/v7Fy/nlKxcuXLz8wcfnP7r02sV33qgGPbCsfHnt5NparX6ytlZfeYr2vxh39j/5O+CB/X9WLXqK+4ddyWa9AIAnz8Pq/0z9DzxG/1b/Z/9Q//evV+1iHG8eub/+37wS8fjr/1D/T8Weqn9T/T8Xz2r9P4PnH7Ar6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfWTwtfv12eLKX24ar/uarrhaqdRcRcRPz5N+Zj/46c81WehYeMX7hvDd9nUWaYzHGgOg5FxLnq+OP5x30XAAAA4On1ze1jX6RqPb0szXpB7Fp2+5GHpoc2c0c+mdbUEbGw9PN28/6nPP/R3OTlxd2vKpn8+94XW1PKVm5tcUrJ0iO3fVNI9Oh3fH5HWLwnZCnMTWE5AADAHrOzEphGFQIAAMDe9PmsF8BsZHH3M8PqC/wHUqg+EDy4owUAAAA8Me5+Pzyb6ToAAACA/0NZ//v9PwAAAHi6pd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mLnbnLTBsIwAH82uNA/FVXd9yrdwTF6hC67rDhAL8EBsuAMuQBnILscIYIIj0OAsEjC2Fai55HMYGNef+ZnMTPSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJtuqmUV/37+vzRns71MnrsBAAAAzllXy1n9ZJL2PzfHvzaHvjf7RUSUEXGu7z6ID0eZgyanejz/6vD86qSG64g6YXeNUbN9iohfzXb3re1PAQAAAN6v1XwxTb319DDpuyC6lAZtyi+/M+UVEVFNbk8v8ErlLu9HhrJqu9/3MP5mSqsHsMaZwtKQ2zBX2rPUf/f99zM+aIrUlGffti8y270DAAAdGhw13fZCAAAA6NKfvgugH0U8TGXupwJHqWmm9z4e7QEAAABvUNF3AQAAAEDr6v5/R+v/ba3/BwAAAP1I6/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpnW1nK3mi+mTF4Yvy9lsL5PvjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAe/bnHQVCIAzCYO/6zmTuf1hp0NDYpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+DFAaBIIiilWSS6E7m/oeVAt14ARHeA+HTTQsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT/Q6vrzP+DS2JKPTxrfjmeTXVePfVWPpQWPtwbz+fdzwIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjZuZ/XOKo4AOBvZna2tirGKDlERMGDXmy6ra29iQclePBPEEK6rbFbf7Q52FLEXLxJzr2IHkUEJd76P/TcQi/11sMeKojHlTc7k522QTeCM9Pk84E377vDMO/7ZiHkO+8lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQjd+dxVk8LEzjtDx3+8H19djfeaSPbm7fXY4txkmTST8ZXq5/SJbaSwQAAIDDI6vq+xDCvXxnNfbpQlH/59U1seb//tlpXNXzj9b9VV/V/rH99uv9F3cHWpiOE296fmM0PPF4Kr3/b5bd9ty/XtErnnzx7iUrvpD0g60XxnnxPJNvb916r1+ER5rIFgD4L45XfRlUvw/FftBmYgAcGr1a4V3V/9lCuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGG8FZ6u4iSEsNybxdGdB9fX9+pvbt9drtqZGze2w9eze8Zb5CGE8xuj4YlGZ9NtV65eu7g2Gg0vNx+8EkJoa/R3yulf/GiOi0No5fnsP/irG2l0LUjLL7sr+TwZQYs/lAAAOJDyssW6/l6+sxrPJYshTH54uP5/vRaHOev/+x+fuV0fq17/DxqbYfetbF76fOXK1WtvblxauzC8MPz0rZODtwenzp4+fXaleFey4o0JAAAA+zaZTCa7H/plq9f/6eLj6//HanGYs/7/4rvBV/WBM/X/nmaLfm1nAgAAcLg9/+qffyR7nE/6/V5Y29y8PPiyOCb9fiiik9NjC6nu25Gy1ev/bLHtrAAAAIAmjLeSh9b/z9XiMOf6/zM/vvRz/Z5ZCOFouf5/fP2z0bnmptNpTfw5cdtzBAAAoF1Hy1Zf/8+L/f/p7paHNITwxmvTuPw3gP9Y/+dl/Z+9/81P9bHq+/9PNTfFTkqXps+j6JdC6C21nREAAAAH2VNli8X+7/nO6ie/HPuwb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNP+DgAA//+yYT9Y") 7.357822721s ago: executing program 4 (id=5115): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105090338d663493603"], 0x11) 7.129391349s ago: executing program 4 (id=5119): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 6.784209536s ago: executing program 4 (id=5124): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x80000000, 0x0, 0x14, "1b63192dc5b6ccc212922ceaf001534710b9ad"}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x9, '#'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 5.607899693s ago: executing program 2 (id=5127): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105090338d663493603"], 0x11) 5.342201778s ago: executing program 2 (id=5128): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r1, r1, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) write$cgroup_type(r3, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 4.60966542s ago: executing program 1 (id=5136): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105090338d663493603"], 0x11) 4.337770765s ago: executing program 1 (id=5138): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = accept4$rose(r1, &(0x7f0000000340)=@short={0xb, @remote, @default, 0x1, @netrom}, &(0x7f00000001c0)=0x1c, 0x0) recvmmsg$unix(r1, &(0x7f0000002e40)=[{{&(0x7f0000000980), 0x6e, &(0x7f0000000b40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000002d80), 0x0, &(0x7f0000002e00)}}], 0x3, 0x0, 0x0) recvmmsg(r0, &(0x7f000000eac0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400001a2, 0x0) close(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x4, 0xffffffffffffffc5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x17, 0x0, 0x595, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000007e3c769d2eaaa050000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x20000003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x6, 0x0, &(0x7f0000000000)="259a53f271a7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 4.224867714s ago: executing program 2 (id=5139): socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="710509030306002e031f010004060300c10516c9a3cac448bf5d3dd4d4f087cf5c"], 0x29) 4.176866852s ago: executing program 1 (id=5140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) 4.049846603s ago: executing program 1 (id=5141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) 3.787706057s ago: executing program 3 (id=5143): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x3, 0xb8, 0x5, "9ecaf762cafe551823e1a713b9c113c79127ad2f8079abb31de442c5ba10f93249ec1cae34083138c1195540b2cc5be230fed356efe528cdf74715a93d5243e421e4d9143501363dd599e8c084f538bd0fbdc35332"}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x700, 0x11, 0x7, 0x6, {{0x13, 0x4, 0x2, 0x27, 0x4c, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0x1f, 0x90, [@loopback, @remote, @multicast1, @multicast2, @loopback, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0x7, 0x5f, [@multicast1]}, @end, @ssrr={0x89, 0xf, 0x58, [@remote, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, @end, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@getchain={0x2c, 0x66, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {0xb, 0x1}, {0x7, 0x4}}, [{0x8, 0xb, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}]}, 0x3c}}, 0x41810) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$unix(0x1, 0x1, 0x0) bind(r5, &(0x7f0000000000), 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 3.65454575s ago: executing program 3 (id=5144): socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.357539189s ago: executing program 4 (id=5145): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0xd0, 0x24, 0x4ee4e6a52ff56541, 0x71b52c, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x94, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x49}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3fd, 0xfffff73d}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1ff}}, @TCA_HTB_DIRECT_QLEN={0xfffffffffffffc99, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x20000}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xa7b}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffd, 0x8}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 833.644141ms ago: executing program 3 (id=5146): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105090338d663493603"], 0x11) 831.462802ms ago: executing program 1 (id=5147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa4}}, 0x0) 820.885893ms ago: executing program 4 (id=5148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0xc0008c0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 773.552761ms ago: executing program 2 (id=5149): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 625.394876ms ago: executing program 2 (id=5150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc) 624.304596ms ago: executing program 1 (id=5151): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) 469.714512ms ago: executing program 3 (id=5152): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x3, 0xb8, 0x5, "9ecaf762cafe551823e1a713b9c113c79127ad2f8079abb31de442c5ba10f93249ec1cae34083138c1195540b2cc5be230fed356efe528cdf74715a93d5243e421e4d9143501363dd599e8c084f538bd0fbdc35332"}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x700, 0x11, 0x7, 0x6, {{0x13, 0x4, 0x2, 0x27, 0x4c, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0x1f, 0x90, [@loopback, @remote, @multicast1, @multicast2, @loopback, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0x7, 0x5f, [@multicast1]}, @end, @ssrr={0x89, 0xf, 0x58, [@remote, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, @end, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@getchain={0x2c, 0x66, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {0xb, 0x1}, {0x7, 0x4}}, [{0x8, 0xb, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}]}, 0x3c}}, 0x41810) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$unix(0x1, 0x1, 0x0) bind(r5, &(0x7f0000000000), 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 383.493056ms ago: executing program 2 (id=5153): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x80000000, 0x0, 0x14, "1b63192dc5b6ccc212922ceaf001534710b9ad"}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x9, '#'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 293.052011ms ago: executing program 3 (id=5154): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x3ac3, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x4004000) 3.47039ms ago: executing program 3 (id=5155): socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 4 (id=5156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.3.2502'. [ 956.499577][T14117] syzkaller0: entered promiscuous mode [ 956.505279][T14117] syzkaller0: entered allmulticast mode [ 957.556651][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'. [ 958.598103][T14133] netlink: 'syz.2.2515': attribute type 10 has an invalid length. [ 958.825203][T14133] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 958.904394][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 958.921889][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'. [ 959.158168][T14142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 959.479541][T14054] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 959.787169][T14054] usb 4-1: Using ep0 maxpacket: 16 [ 959.836159][T14054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.880673][T14054] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 959.915921][T14054] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 959.955550][T14054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.973398][T14054] usb 4-1: config 0 descriptor?? [ 961.073630][T14054] HID 045e:07da: Invalid code 65791 type 1 [ 961.085945][T14054] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input11 [ 961.160411][T14054] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 961.442307][T14168] netlink: 'syz.4.2528': attribute type 10 has an invalid length. [ 961.584622][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 961.612275][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'. [ 962.111638][T14054] usb 4-1: USB disconnect, device number 6 [ 962.411026][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 962.459159][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 962.983979][T14208] netlink: 'syz.2.2546': attribute type 10 has an invalid length. [ 964.364110][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 964.449529][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2554'. [ 964.949328][T14248] netlink: 'syz.1.2563': attribute type 10 has an invalid length. [ 964.985057][T14248] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 966.105461][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2569'. [ 966.772924][T14279] syzkaller0: entered promiscuous mode [ 966.793594][T14279] syzkaller0: entered allmulticast mode [ 968.174702][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 970.277493][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 974.050809][T14417] bridge_slave_0: left allmulticast mode [ 974.100224][T14417] bridge_slave_0: left promiscuous mode [ 974.106128][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.166946][T14417] bridge_slave_1: left allmulticast mode [ 974.197454][T14417] bridge_slave_1: left promiscuous mode [ 974.213426][T14417] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.259500][T14417] bond0: (slave bond_slave_0): Releasing backup interface [ 974.307359][T14417] bond0: (slave bond_slave_1): Releasing backup interface [ 974.499785][T14417] team0: Port device team_slave_0 removed [ 974.619430][T14417] team0: Port device team_slave_1 removed [ 974.626647][T14417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.660714][T14417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.680724][T14417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.692556][T14417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.283717][T14452] syzkaller0: entered promiscuous mode [ 975.299987][T14452] syzkaller0: entered allmulticast mode [ 975.931803][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'. [ 976.496474][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2655'. [ 977.561932][T14522] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2668'. [ 977.811985][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2671'. [ 978.117596][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 978.653654][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 979.699114][T14603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2694'. [ 981.298159][T14628] syzkaller0: entered promiscuous mode [ 981.325710][T14628] syzkaller0: entered allmulticast mode [ 982.259533][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.266839][ C1] bridge0: topology change detected, propagating [ 982.924024][T14634] tipc: Started in network mode [ 982.929217][T14634] tipc: Node identity fffffff8, cluster identity 4711 [ 982.936195][T14634] tipc: Node number set to 4294967288 [ 983.164696][T14649] netlink: 'syz.3.2704': attribute type 10 has an invalid length. [ 983.227000][T14649] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 983.395306][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2707'. [ 983.489492][T14662] €Â0: renamed from batadv_slave_1 (while UP) [ 985.202853][T14676] syzkaller0: entered promiscuous mode [ 986.184220][T14676] syzkaller0: entered allmulticast mode [ 986.910821][T14681] tipc: Started in network mode [ 986.915867][T14681] tipc: Node identity fffffff8, cluster identity 4711 [ 986.924238][T14681] tipc: Node number set to 4294967288 [ 986.960132][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 989.425124][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.431643][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.514825][T14708] netlink: 'syz.2.2722': attribute type 10 has an invalid length. [ 991.089638][T14719] syzkaller0: entered promiscuous mode [ 991.122275][T14719] syzkaller0: entered allmulticast mode [ 991.197383][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'. [ 991.215132][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 991.232187][T14723] netlink: 'syz.2.2730': attribute type 18 has an invalid length. [ 991.658394][T14735] netlink: 'syz.1.2733': attribute type 10 has an invalid length. [ 991.782462][T14740] tipc: Enabled bearer , priority 0 [ 991.801667][T14740] syzkaller0: entered promiscuous mode [ 991.807238][T14740] syzkaller0: entered allmulticast mode [ 991.852813][T14740] tipc: Resetting bearer [ 991.875567][T14739] tipc: Resetting bearer [ 991.960315][T14739] tipc: Disabling bearer [ 994.102950][T14746] loop2: detected capacity change from 0 to 40427 [ 994.229677][T14746] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 994.262119][T14746] F2FS-fs (loop2): invalid crc value [ 994.483019][T14746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 994.644405][T14746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 994.972658][T14746] random: crng reseeded on system resumption [ 995.602829][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 996.134381][T14760] syzkaller0: entered promiscuous mode [ 996.139945][T14760] syzkaller0: entered allmulticast mode [ 996.378413][T14767] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 996.667685][T14775] netlink: 'syz.3.2748': attribute type 10 has an invalid length. [ 996.687903][T14775] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 997.597101][T14791] xt_TPROXY: Can be used only with -p tcp or -p udp [ 999.296013][T14808] tipc: Started in network mode [ 999.301060][T14808] tipc: Node identity ba60efe6d46c, cluster identity 4711 [ 999.362390][T14808] tipc: Enabled bearer , priority 0 [ 999.413447][T14801] syzkaller0: entered promiscuous mode [ 999.430160][T14801] syzkaller0: entered allmulticast mode [ 999.581472][T14801] tipc: Resetting bearer [ 999.613567][T14798] tipc: Resetting bearer [ 999.735315][T14798] tipc: Disabling bearer [ 1001.703867][T14848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1002.673704][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 1002.820599][T14871] tipc: Enabled bearer , priority 0 [ 1002.846825][T14871] syzkaller0: entered promiscuous mode [ 1002.873669][T14871] syzkaller0: entered allmulticast mode [ 1002.927183][T14871] tipc: Resetting bearer [ 1002.943459][T14870] tipc: Resetting bearer [ 1002.979400][T14870] tipc: Disabling bearer [ 1003.148856][T14880] bridge_slave_0: left allmulticast mode [ 1003.182262][T14880] bridge_slave_0: left promiscuous mode [ 1003.188253][T14880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.297865][T14880] bridge_slave_1: left allmulticast mode [ 1003.690260][T14880] bridge_slave_1: left promiscuous mode [ 1004.002191][T14880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.313483][T14880] bond0: (slave bond_slave_0): Releasing backup interface [ 1004.398800][T14880] bond0: (slave bond_slave_1): Releasing backup interface [ 1004.479448][T14880] team0: Port device team_slave_0 removed [ 1004.509405][T14880] team0: Port device team_slave_1 removed [ 1004.523690][T14880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.532654][T14880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.544299][T14880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.552343][T14880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.569512][T14880] bond0: (slave netdevsim0): Releasing backup interface [ 1004.662476][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 1005.740536][T14936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.167780][ T7841] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1006.404713][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 1006.584315][ T7841] usb 2-1: device descriptor read/64, error -71 [ 1006.890863][ T7841] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1007.082323][ T7841] usb 2-1: device descriptor read/64, error -71 [ 1007.221406][ T7841] usb usb2-port1: attempt power cycle [ 1007.680597][ T7841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1007.728536][ T7841] usb 2-1: device descriptor read/8, error -71 [ 1007.738867][T14978] syzkaller0: entered promiscuous mode [ 1007.745262][T14978] syzkaller0: entered allmulticast mode [ 1008.022518][ T7841] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1008.076772][ T7841] usb 2-1: device descriptor read/8, error -71 [ 1008.232434][ T7841] usb usb2-port1: unable to enumerate USB device [ 1009.486225][T15009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1010.359435][T15064] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1011.370194][T15087] syzkaller0: entered promiscuous mode [ 1011.386695][T15087] syzkaller0: entered allmulticast mode [ 1014.334929][T15071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1015.135587][T15124] syzkaller0: entered promiscuous mode [ 1015.142085][T15124] syzkaller0: entered allmulticast mode [ 1016.848084][T15164] syzkaller0: entered promiscuous mode [ 1016.864508][T15164] syzkaller0: entered allmulticast mode [ 1016.983394][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.008261][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.020374][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.031773][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.043605][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1017.051105][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1017.066580][T15155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1017.400017][ T2972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.532914][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2870'. [ 1017.587834][ T2972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.685071][ T2972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.820503][ T2972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.943646][T15183] tipc: Enabled bearer , priority 0 [ 1017.959964][T15183] syzkaller0: entered promiscuous mode [ 1017.979212][T15183] syzkaller0: entered allmulticast mode [ 1018.051057][T15183] tipc: Resetting bearer [ 1018.107083][T15182] tipc: Resetting bearer [ 1018.150927][T15182] tipc: Disabling bearer [ 1018.233747][T15167] chnl_net:caif_netlink_parms(): no params data found [ 1018.541999][ T2972] tipc: Left network mode [ 1018.618953][T15199] syzkaller0: entered promiscuous mode [ 1018.628481][T15199] syzkaller0: entered allmulticast mode [ 1019.060301][T15167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.080655][T15167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.102102][T15167] bridge_slave_0: entered allmulticast mode [ 1019.114280][T15167] bridge_slave_0: entered promiscuous mode [ 1019.134552][ T5838] IPVS: starting estimator thread 0... [ 1019.141997][T15167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.162857][T15167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.181538][T15167] bridge_slave_1: entered allmulticast mode [ 1019.194253][T15167] bridge_slave_1: entered promiscuous mode [ 1019.233293][T13734] Bluetooth: hci2: command tx timeout [ 1019.243245][T15228] IPVS: using max 21 ests per chain, 50400 per kthread [ 1019.406094][T15167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.480076][T15167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.824778][T15167] team0: Port device team_slave_0 added [ 1019.960807][T15167] team0: Port device team_slave_1 added [ 1020.214128][T15167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.235897][T15167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.264946][T15167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.281061][T15167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.288192][T15167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.315260][T15167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.430088][T15253] syzkaller0: entered promiscuous mode [ 1020.435665][T15253] syzkaller0: entered allmulticast mode [ 1020.841204][T15277] syzkaller0: entered promiscuous mode [ 1020.856713][T15277] syzkaller0: entered allmulticast mode [ 1020.893520][T15274] tipc: Enabled bearer , priority 0 [ 1020.953156][T15276] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2895'. [ 1021.009792][T15270] tipc: Resetting bearer [ 1021.078470][T15269] tipc: Resetting bearer [ 1021.157189][T15269] tipc: Disabling bearer [ 1021.233520][T15167] hsr_slave_0: entered promiscuous mode [ 1021.284781][T15167] hsr_slave_1: entered promiscuous mode [ 1021.316255][T15167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.323923][T15167] Cannot create hsr debugfs directory [ 1021.455945][T13734] Bluetooth: hci2: command tx timeout [ 1021.635854][ T2972] batman_adv: batadv0: Interface deactivated: dummy0 [ 1021.652732][ T2972] batman_adv: batadv0: Removing interface: dummy0 [ 1021.676272][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.691278][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.713241][ T2972] batman_adv: batadv0: Interface deactivated: €Â0 [ 1021.719970][ T2972] batman_adv: batadv0: Removing interface: €Â0 [ 1021.810864][ T2972] veth1_macvtap: left promiscuous mode [ 1021.816522][ T2972] veth0_macvtap: left promiscuous mode [ 1021.856986][ T2972] veth1_vlan: left promiscuous mode [ 1021.865626][ T2972] veth0_vlan: left promiscuous mode [ 1022.574796][ T2972] bond1 (unregistering): Released all slaves [ 1023.159028][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 1023.220927][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 1023.688448][T13734] Bluetooth: hci2: command tx timeout [ 1023.822866][T15302] syzkaller0: entered promiscuous mode [ 1023.830510][T15302] syzkaller0: entered allmulticast mode [ 1024.751483][ T2972] IPVS: stop unused estimator thread 0... [ 1025.028089][T15359] syzkaller0: entered promiscuous mode [ 1025.033849][T15359] syzkaller0: entered allmulticast mode [ 1025.495147][T15376] syzkaller0: entered promiscuous mode [ 1025.526272][T15376] syzkaller0: entered allmulticast mode [ 1025.822086][T15167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1025.871861][T15167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1025.902201][T13734] Bluetooth: hci2: command tx timeout [ 1025.925393][T15167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1025.969898][T15167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1026.214856][T15167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.329112][T15167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.382160][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.389421][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.445526][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.452781][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.558260][T15411] syzkaller0: entered promiscuous mode [ 1026.579020][T15411] syzkaller0: entered allmulticast mode [ 1026.761778][T15167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1026.791085][T15167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.970301][T15424] syzkaller0: entered promiscuous mode [ 1026.975873][T15424] syzkaller0: entered allmulticast mode [ 1027.627025][T15167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.878844][T15459] syzkaller0: entered promiscuous mode [ 1027.884587][T15459] syzkaller0: entered allmulticast mode [ 1028.459351][T15487] syzkaller0: entered promiscuous mode [ 1028.476263][T15487] syzkaller0: entered allmulticast mode [ 1028.600636][T15167] veth0_vlan: entered promiscuous mode [ 1028.619589][T15167] veth1_vlan: entered promiscuous mode [ 1028.691537][T15167] veth0_macvtap: entered promiscuous mode [ 1028.713779][T15167] veth1_macvtap: entered promiscuous mode [ 1028.761552][T15167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.777636][T15167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.794554][T15167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.808177][T15167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.821651][T15167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.837958][T15167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.848969][T15167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.864097][T15167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.876349][T15167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.888763][T15167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.926313][T15167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.941564][T15167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.954282][T15167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.967274][T15167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.434801][T15474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1031.525232][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.564435][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.681999][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.705565][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.432425][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 1032.513133][T15573] syzkaller0: entered promiscuous mode [ 1032.520559][T15573] syzkaller0: entered allmulticast mode [ 1032.726907][T15577] syzkaller0: entered promiscuous mode [ 1032.739645][T15577] syzkaller0: entered allmulticast mode [ 1032.956778][T15581] syzkaller1: entered promiscuous mode [ 1032.962348][T15581] syzkaller1: entered allmulticast mode [ 1033.606327][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'. [ 1034.247746][T15609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1035.026714][T15616] syzkaller0: entered promiscuous mode [ 1035.032261][T15616] syzkaller0: entered allmulticast mode [ 1035.361701][T15620] syzkaller1: entered promiscuous mode [ 1035.367351][T15620] syzkaller1: entered allmulticast mode [ 1036.220013][T15585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.669396][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 1036.952155][T15636] syzkaller0: entered promiscuous mode [ 1036.972132][T15636] syzkaller0: entered allmulticast mode [ 1037.493132][T15645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1038.298534][T15656] tipc: Started in network mode [ 1038.303959][T15656] tipc: Node identity fffffff8, cluster identity 4711 [ 1038.310957][T15656] tipc: Node number set to 4294967288 [ 1041.032662][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1042.503552][T15664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1042.519564][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1043.861840][T15694] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1044.925361][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1048.458826][T15714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1049.547635][T15766] syzkaller0: entered promiscuous mode [ 1049.564063][T15766] syzkaller0: entered allmulticast mode [ 1050.505615][T15793] syzkaller0: entered promiscuous mode [ 1050.511669][T15793] syzkaller0: entered allmulticast mode [ 1051.318399][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3039'. [ 1053.133549][T15775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1053.982940][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 1054.163730][T15874] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1054.974837][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.981815][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.152486][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1055.636061][T15908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3074'. [ 1055.981289][T15918] tipc: Enabled bearer , priority 0 [ 1056.037530][T15917] tipc: Disabling bearer [ 1056.365796][T15933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3085'. [ 1057.189598][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1058.925344][T15987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.690240][T16055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.976106][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1066.514274][T16122] tipc: Enabling of bearer rejected, failed to enable media [ 1066.526542][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3149'. [ 1066.529245][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3152'. [ 1067.701796][T16149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1068.943230][T16158] tipc: Enabled bearer , priority 0 [ 1068.962436][T16158] syzkaller0: entered promiscuous mode [ 1068.973232][T16158] syzkaller0: entered allmulticast mode [ 1069.542937][T16169] tipc: Resetting bearer [ 1069.549571][T16174] tipc: Enabling of bearer rejected, failed to enable media [ 1069.614139][T16157] tipc: Resetting bearer [ 1069.717241][T16157] tipc: Disabling bearer [ 1069.951517][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 1070.846938][T16203] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1072.360137][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1072.402473][T16225] tipc: Enabling of bearer rejected, failed to enable media [ 1074.395791][T16239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1074.541390][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1075.418236][T16256] syzkaller0: entered promiscuous mode [ 1075.443613][T16256] syzkaller0: entered allmulticast mode [ 1076.113244][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 1077.490977][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 1078.310522][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1079.159718][T13734] Bluetooth: hci3: command 0x0406 tx timeout [ 1079.532943][T16339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1079.882080][T16369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1081.018154][T16409] syzkaller0: entered promiscuous mode [ 1081.061666][T16409] syzkaller0: entered allmulticast mode [ 1081.330744][T16416] tipc: Enabled bearer , priority 0 [ 1081.347633][T16416] syzkaller0: entered promiscuous mode [ 1081.372301][T16416] syzkaller0: entered allmulticast mode [ 1081.457188][T16416] tipc: Resetting bearer [ 1081.505109][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3252'. [ 1081.514939][T16415] tipc: Resetting bearer [ 1081.567845][T16415] tipc: Disabling bearer [ 1082.548341][T16450] syzkaller0: entered promiscuous mode [ 1082.568444][T16450] syzkaller0: entered allmulticast mode [ 1083.815674][T16484] xt_hashlimit: size too large, truncated to 1048576 [ 1083.918888][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1084.472779][T16501] tipc: Enabling of bearer rejected, failed to enable media [ 1086.394382][T16534] syzkaller0: entered promiscuous mode [ 1086.404761][T16534] syzkaller0: entered allmulticast mode [ 1086.491767][T16536] syzkaller0: entered promiscuous mode [ 1086.504320][T16536] syzkaller0: entered allmulticast mode [ 1086.656701][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'. [ 1086.754849][T16541] tipc: Enabling of bearer rejected, failed to enable media [ 1092.440335][T16590] tipc: Enabling of bearer rejected, failed to enable media [ 1093.858682][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3310'. [ 1094.054032][T16639] tipc: Enabling of bearer rejected, failed to enable media [ 1094.313812][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1094.991412][T16663] tipc: Cannot configure node identity twice [ 1095.912055][T16678] tipc: Enabling of bearer rejected, failed to enable media [ 1095.928381][T16677] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1096.945825][T16709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1097.369372][ T9126] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1097.753838][ T9126] usb 4-1: Using ep0 maxpacket: 16 [ 1097.771893][ T9126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.800088][ T9126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1097.827199][ T9126] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1097.845808][ T9126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.871799][ T9126] usb 4-1: config 0 descriptor?? [ 1097.961002][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1098.086667][T16731] tipc: Enabling of bearer rejected, failed to enable media [ 1098.336637][ T9126] HID 045e:07da: Invalid code 65791 type 1 [ 1098.373516][ T9126] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input12 [ 1098.432104][ T9126] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1099.019801][T16758] tipc: Enabled bearer , priority 0 [ 1099.048179][T16758] syzkaller0: entered promiscuous mode [ 1099.065193][T16758] syzkaller0: entered allmulticast mode [ 1099.086012][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 1099.155652][T16758] tipc: Resetting bearer [ 1099.189681][T16757] tipc: Resetting bearer [ 1099.263190][T16757] tipc: Disabling bearer [ 1099.530428][T16769] tipc: Enabled bearer , priority 0 [ 1099.603430][T16767] tipc: Disabling bearer [ 1099.983508][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'. [ 1099.994002][ T9126] usb 4-1: USB disconnect, device number 7 [ 1100.231917][T16785] tipc: Enabled bearer , priority 0 [ 1100.263540][T16785] syzkaller0: entered promiscuous mode [ 1100.274270][T16785] syzkaller0: entered allmulticast mode [ 1100.445063][T16785] tipc: Resetting bearer [ 1100.487402][T16784] tipc: Resetting bearer [ 1100.529548][T16784] tipc: Disabling bearer [ 1100.530428][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1100.601038][T16795] tipc: Enabled bearer , priority 0 [ 1100.655886][T16794] tipc: Disabling bearer [ 1101.462475][T16815] tipc: Enabled bearer , priority 0 [ 1101.509717][T16813] tipc: Disabling bearer [ 1102.324991][T16839] syzkaller0: entered promiscuous mode [ 1102.332005][T16839] syzkaller0: entered allmulticast mode [ 1102.901601][T16851] tipc: Enabled bearer , priority 0 [ 1102.910001][T16851] syzkaller0: entered promiscuous mode [ 1102.916154][T16851] syzkaller0: entered allmulticast mode [ 1102.968345][T16851] tipc: Resetting bearer [ 1102.987250][T16850] tipc: Resetting bearer [ 1103.075226][T16850] tipc: Disabling bearer [ 1103.619231][T16872] syzkaller0: entered promiscuous mode [ 1103.636205][T16872] syzkaller0: entered allmulticast mode [ 1104.774723][T16897] syzkaller0: entered promiscuous mode [ 1104.780294][T16897] syzkaller0: entered allmulticast mode [ 1104.957719][T16904] syzkaller0: entered promiscuous mode [ 1104.965116][T16904] syzkaller0: entered allmulticast mode [ 1104.982519][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 1105.800676][T16936] ip6gretap0: entered promiscuous mode [ 1105.817891][T16936] macsec1: entered allmulticast mode [ 1105.831989][T16936] ip6gretap0: entered allmulticast mode [ 1105.927748][T16936] ip6gretap0: left allmulticast mode [ 1105.949695][T16936] ip6gretap0: left promiscuous mode [ 1106.362684][T16952] syzkaller0: entered promiscuous mode [ 1106.370941][T16952] syzkaller0: entered allmulticast mode [ 1106.382737][T16950] syzkaller0: entered promiscuous mode [ 1106.396472][T16950] syzkaller0: entered allmulticast mode [ 1106.699233][T16959] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1106.713957][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 1107.143064][T16982] syzkaller0: entered promiscuous mode [ 1107.164762][T16982] syzkaller0: entered allmulticast mode [ 1107.258496][T16986] syzkaller0: entered promiscuous mode [ 1107.264645][T16986] syzkaller0: entered allmulticast mode [ 1107.484674][T16993] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1107.532027][T16994] tipc: Enabled bearer , priority 0 [ 1107.551450][T16994] syzkaller0: entered promiscuous mode [ 1107.558478][T16994] syzkaller0: entered allmulticast mode [ 1107.638823][T16994] tipc: Resetting bearer [ 1107.649634][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1107.662284][T16992] tipc: Resetting bearer [ 1107.684784][T16992] tipc: Disabling bearer [ 1108.595687][T17026] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1108.941965][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1109.306342][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 1109.321720][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.330254][T17032] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1109.334047][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1109.363504][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1109.373060][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3453'. [ 1109.379718][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.394152][ T5838] usb 3-1: config 0 descriptor?? [ 1109.430605][ T5838] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1109.639424][T17042] tipc: Enabled bearer , priority 0 [ 1109.649182][T17042] syzkaller0: entered promiscuous mode [ 1109.654734][T17042] syzkaller0: entered allmulticast mode [ 1109.683770][T17042] tipc: Resetting bearer [ 1109.699297][T17041] tipc: Resetting bearer [ 1109.727200][T17041] tipc: Disabling bearer [ 1110.433933][T17061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1110.495373][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'. [ 1110.679482][T17067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1111.171791][T17090] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1111.573508][ T9126] usb 3-1: USB disconnect, device number 2 [ 1111.759299][T17097] syzkaller1: entered promiscuous mode [ 1111.765502][T17097] syzkaller1: entered allmulticast mode [ 1112.449053][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1112.674516][T17132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1113.428584][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'. [ 1113.841046][T17167] syzkaller1: entered promiscuous mode [ 1113.867292][T17167] syzkaller1: entered allmulticast mode [ 1113.992678][T17176] syzkaller0: entered promiscuous mode [ 1113.999854][T17176] syzkaller0: entered allmulticast mode [ 1114.088674][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3500'. [ 1114.258983][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1114.420043][T17188] syzkaller0: entered promiscuous mode [ 1114.633120][T17189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1114.679797][T17188] syzkaller0: entered allmulticast mode [ 1114.958086][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1115.332099][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1115.356587][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.383573][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1115.417904][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1115.442004][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.478085][ T27] usb 3-1: config 0 descriptor?? [ 1115.626780][T17207] syzkaller1: entered promiscuous mode [ 1115.633147][T17207] syzkaller1: entered allmulticast mode [ 1115.810497][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1116.469391][T17222] syzkaller0: entered promiscuous mode [ 1116.475922][T17222] syzkaller0: entered allmulticast mode [ 1116.975933][T17233] syzkaller1: entered promiscuous mode [ 1116.981735][T17233] syzkaller1: entered allmulticast mode [ 1116.994197][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1117.696868][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1117.702966][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1117.717193][ T27] usb 3-1: USB disconnect, device number 3 [ 1118.123901][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1118.244349][T17266] syzkaller1: entered promiscuous mode [ 1118.250934][T17266] syzkaller1: entered allmulticast mode [ 1118.604556][T17275] syzkaller0: entered promiscuous mode [ 1118.623651][T17275] syzkaller0: entered allmulticast mode [ 1118.933964][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3539'. [ 1119.286073][T17291] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1119.606253][ T9126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1119.927120][ T9126] usb 4-1: Using ep0 maxpacket: 16 [ 1119.960163][ T9126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.979674][ T9126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1120.002565][ T9126] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1120.011858][ T9126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.052907][ T9126] usb 4-1: config 0 descriptor?? [ 1120.599791][T17309] syzkaller0: entered promiscuous mode [ 1120.606496][T17309] syzkaller0: entered allmulticast mode [ 1120.626099][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.799516][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1120.920908][T17314] syzkaller0: entered promiscuous mode [ 1120.926545][T17314] syzkaller0: entered allmulticast mode [ 1121.184247][T17316] tipc: Enabled bearer , priority 0 [ 1121.196656][T17316] syzkaller0: entered promiscuous mode [ 1121.203621][T17316] syzkaller0: entered allmulticast mode [ 1121.247934][T17316] tipc: Resetting bearer [ 1121.258217][T17315] tipc: Resetting bearer [ 1121.288016][T17315] tipc: Disabling bearer [ 1121.928377][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 1122.146978][ T9126] usbhid 4-1:0.0: can't add hid device: -71 [ 1122.159059][ T9126] usbhid: probe of 4-1:0.0 failed with error -71 [ 1122.193801][ T9126] usb 4-1: USB disconnect, device number 8 [ 1122.212646][T17341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3558'. [ 1122.319085][T17345] €Â0: renamed from batadv_slave_1 (while UP) [ 1122.543092][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3562'. [ 1122.745521][T17366] syzkaller0: entered promiscuous mode [ 1122.751784][T17366] syzkaller0: entered allmulticast mode [ 1122.970530][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1123.292480][T17382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3571'. [ 1123.335080][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1123.861682][T17409] tipc: Enabled bearer , priority 0 [ 1123.879117][T17409] syzkaller0: entered promiscuous mode [ 1123.887462][T17409] syzkaller0: entered allmulticast mode [ 1123.981144][T17408] tipc: Resetting bearer [ 1124.096422][T17408] tipc: Disabling bearer [ 1124.444510][T17423] syzkaller0: entered promiscuous mode [ 1124.460440][T17423] syzkaller0: entered allmulticast mode [ 1124.468212][T17425] syzkaller1: entered promiscuous mode [ 1124.480102][T17425] syzkaller1: entered allmulticast mode [ 1125.103252][T17447] tipc: Enabled bearer , priority 0 [ 1125.134983][T17447] syzkaller0: entered promiscuous mode [ 1125.143144][T17447] syzkaller0: entered allmulticast mode [ 1125.188929][T17446] tipc: Resetting bearer [ 1125.305366][T17446] tipc: Disabling bearer [ 1125.567731][T17460] syzkaller1: entered promiscuous mode [ 1125.580599][T17460] syzkaller1: entered allmulticast mode [ 1125.595293][T17462] syzkaller0: entered promiscuous mode [ 1125.607268][T17462] syzkaller0: entered allmulticast mode [ 1126.002533][T17468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1126.494453][T17490] tipc: Enabled bearer , priority 0 [ 1126.512514][T17491] syzkaller1: entered promiscuous mode [ 1126.523375][T17491] syzkaller1: entered allmulticast mode [ 1126.533838][T17490] syzkaller0: entered promiscuous mode [ 1126.541860][T17490] syzkaller0: entered allmulticast mode [ 1126.600279][T17488] tipc: Resetting bearer [ 1126.652393][T17488] tipc: Disabling bearer [ 1127.118996][T17511] €Â0: renamed from batadv_slave_1 (while UP) [ 1127.828287][T17528] tipc: Enabled bearer , priority 0 [ 1127.861093][T17528] syzkaller0: entered promiscuous mode [ 1127.888011][T17528] syzkaller0: entered allmulticast mode [ 1128.022022][T17526] tipc: Resetting bearer [ 1128.098306][T17526] tipc: Disabling bearer [ 1128.193978][T17542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1128.303222][T17546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3621'. [ 1128.659700][T17559] syzkaller0: entered promiscuous mode [ 1128.672890][T17559] syzkaller0: entered allmulticast mode [ 1133.041265][T17623] €Â0: renamed from batadv_slave_1 (while UP) [ 1134.622814][T17665] syzkaller0: entered promiscuous mode [ 1134.629331][T17665] syzkaller0: entered allmulticast mode [ 1135.186225][T17687] syzkaller0: entered promiscuous mode [ 1135.196115][T17687] syzkaller0: entered allmulticast mode [ 1136.785107][T17711] tipc: Enabled bearer , priority 0 [ 1136.851780][T17711] tipc: Resetting bearer [ 1136.992524][T17710] tipc: Disabling bearer [ 1139.187139][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1139.553409][T17769] syzkaller0: entered promiscuous mode [ 1139.570127][T17769] syzkaller0: entered allmulticast mode [ 1139.585362][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 1140.450013][T17796] syzkaller0: entered promiscuous mode [ 1140.467821][T17796] syzkaller0: entered allmulticast mode [ 1140.598750][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3712'. [ 1141.391757][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1141.769733][T17843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3726'. [ 1142.392565][T17867] syzkaller0: entered promiscuous mode [ 1142.400329][T17867] syzkaller0: entered allmulticast mode [ 1143.126691][T17886] €Â0Û: renamed from batadv_slave_1 (while UP) [ 1143.796346][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3752'. [ 1144.594412][T17937] trusted_key: syz.4.3763 sent an empty control message without MSG_MORE. [ 1144.698912][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3765'. [ 1145.522467][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1145.719566][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3780'. [ 1146.481944][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1146.518903][T18008] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3787'. [ 1147.529508][T18044] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3802'. [ 1148.305262][T18069] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3812'. [ 1148.597081][T18079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3816'. [ 1149.243803][T18101] syzkaller0: entered promiscuous mode [ 1149.261501][T18101] syzkaller0: entered allmulticast mode [ 1149.285203][T18100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1149.498126][T18106] syzkaller0: entered promiscuous mode [ 1149.503997][T18106] syzkaller0: entered allmulticast mode [ 1149.796197][T18121] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1150.136770][T18130] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1150.260925][T18135] syzkaller0: entered promiscuous mode [ 1150.269193][T18135] syzkaller0: entered allmulticast mode [ 1150.476960][T18139] syzkaller0: entered promiscuous mode [ 1150.499708][T18139] syzkaller0: entered allmulticast mode [ 1150.677874][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3844'. [ 1150.985961][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3847'. [ 1151.536311][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'. [ 1151.720407][ T9126] IPVS: starting estimator thread 0... [ 1151.785705][T18191] syzkaller0: entered promiscuous mode [ 1151.795145][T18191] syzkaller0: entered allmulticast mode [ 1151.814124][T18190] IPVS: using max 19 ests per chain, 45600 per kthread [ 1151.837294][T18186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3856'. [ 1152.179147][T18204] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1152.717008][T18221] netlink: 'syz.3.3868': attribute type 12 has an invalid length. [ 1153.600940][T18242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3873'. [ 1153.898491][T18252] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1154.408061][T18268] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1154.731249][ T9126] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1155.094896][ T9126] usb 5-1: Using ep0 maxpacket: 16 [ 1155.125053][ T9126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.148611][ T9126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1155.180053][ T9126] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1155.189188][ T9126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.211262][T18274] syzkaller0: entered promiscuous mode [ 1155.222798][T18274] syzkaller0: entered allmulticast mode [ 1155.229906][ T9126] usb 5-1: config 0 descriptor?? [ 1156.331888][T18301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1156.542935][T18309] syzkaller0: entered promiscuous mode [ 1156.562469][T18309] syzkaller0: entered allmulticast mode [ 1157.335310][ T9126] usbhid 5-1:0.0: can't add hid device: -71 [ 1157.346007][ T9126] usbhid: probe of 5-1:0.0 failed with error -71 [ 1157.356927][ T9126] usb 5-1: USB disconnect, device number 12 [ 1157.408832][T18336] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3901'. [ 1157.830049][T18340] syzkaller0: entered promiscuous mode [ 1157.835776][T18340] syzkaller0: entered allmulticast mode [ 1158.096718][T18344] syzkaller0: entered promiscuous mode [ 1158.119047][T18344] syzkaller0: entered allmulticast mode [ 1158.317209][T18355] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3910'. [ 1158.379599][T18357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1159.128362][T18387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1159.139713][T18387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1159.333355][T18390] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3921'. [ 1159.891574][T18380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1160.187605][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'. [ 1160.462940][T18419] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3930'. [ 1160.852005][T18429] tipc: Enabled bearer , priority 0 [ 1160.895269][T18429] tipc: Resetting bearer [ 1160.937395][T18426] tipc: Disabling bearer [ 1161.251612][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3937'. [ 1161.831471][T18457] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3942'. [ 1162.022893][T18436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.318655][ T5838] IPVS: starting estimator thread 0... [ 1162.427188][T18469] IPVS: using max 18 ests per chain, 43200 per kthread [ 1163.069455][T18493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1163.787499][T18485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1164.485238][T18519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1164.808589][ T5838] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1165.142892][T18521] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1165.152500][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 1165.177615][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.207869][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1165.222788][ T5838] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1165.234011][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.245659][ T5838] usb 5-1: config 0 descriptor?? [ 1166.647758][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1166.757388][T18542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1167.357943][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 1167.367733][ T5838] usbhid: probe of 5-1:0.0 failed with error -71 [ 1167.408912][ T5838] usb 5-1: USB disconnect, device number 13 [ 1167.486215][T18578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1167.801712][T18590] batman_adv: batadv0: Adding interface: dummy0 [ 1167.808122][T18590] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.837253][T18590] batman_adv: batadv0: Interface activated: dummy0 [ 1167.850740][T18585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1167.888880][T18590] batadv0: mtu less than device minimum [ 1167.905953][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1167.919124][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1167.932056][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1167.945238][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1167.958200][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1167.971423][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1167.984396][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1167.997318][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1168.010342][T18590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1171.344243][T18600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.316956][T18640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4000'. [ 1173.180242][T18675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1173.280303][T18682] netlink: 'syz.2.4016': attribute type 12 has an invalid length. [ 1174.050409][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1174.402764][T18711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4026'. [ 1174.474331][T18716] syzkaller0: entered promiscuous mode [ 1174.480892][T18716] syzkaller0: entered allmulticast mode [ 1174.735221][T18722] netlink: 'syz.1.4031': attribute type 12 has an invalid length. [ 1175.128246][T18731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1175.625789][T18746] syzkaller0: entered promiscuous mode [ 1175.631513][T18746] syzkaller0: entered allmulticast mode [ 1176.061050][T18761] netlink: 'syz.3.4047': attribute type 12 has an invalid length. [ 1176.855476][T18781] syzkaller0: entered promiscuous mode [ 1176.861112][T18781] syzkaller0: entered allmulticast mode [ 1177.210539][T18791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4060'. [ 1177.847606][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4071'. [ 1177.865637][T18814] bridge0: entered promiscuous mode [ 1177.872156][T18814] macvtap1: entered promiscuous mode [ 1177.880563][T18814] macvtap1: entered allmulticast mode [ 1177.885981][T18814] bridge0: entered allmulticast mode [ 1177.900990][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4071'. [ 1177.919299][T18814] bridge0: left allmulticast mode [ 1177.925472][T18814] bridge0: left promiscuous mode [ 1178.361263][T18825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4075'. [ 1178.597866][T18832] netlink: 'syz.1.4078': attribute type 1 has an invalid length. [ 1178.662558][T18832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1178.702172][T18832] bond1: (slave ip6gretap1): making interface the new active one [ 1178.712135][T18832] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1179.235908][T18853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1183.371860][T18884] syzkaller0: entered promiscuous mode [ 1183.391360][T18884] syzkaller0: entered allmulticast mode [ 1184.142446][T18907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1184.471071][ T27] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1184.802799][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 1184.812041][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.838840][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1184.861892][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1184.871493][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.900193][ T27] usb 5-1: config 0 descriptor?? [ 1184.978007][T18914] syzkaller0: entered promiscuous mode [ 1185.008506][T18914] syzkaller0: entered allmulticast mode [ 1185.086199][T18918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4107'. [ 1185.959657][T18940] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4117'. [ 1186.053064][T18942] syzkaller0: entered promiscuous mode [ 1186.060534][T18942] syzkaller0: entered allmulticast mode [ 1186.281304][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.002939][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 1187.011946][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 1187.025325][ T27] usb 5-1: USB disconnect, device number 14 [ 1187.177852][T18970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4129'. [ 1187.402975][T18977] netlink: 'syz.2.4132': attribute type 25 has an invalid length. [ 1187.700652][T18987] syzkaller0: entered promiscuous mode [ 1187.706248][T18987] syzkaller0: entered allmulticast mode [ 1188.209501][T19010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1188.511318][T19016] netlink: 'syz.3.4145': attribute type 25 has an invalid length. [ 1188.713185][T19023] syzkaller0: entered promiscuous mode [ 1188.718935][T19023] syzkaller0: entered allmulticast mode [ 1189.218250][T19040] syzkaller0: entered promiscuous mode [ 1189.236343][T19040] syzkaller0: entered allmulticast mode [ 1189.770276][T19053] syzkaller0: entered promiscuous mode [ 1189.777505][T19053] syzkaller0: entered allmulticast mode [ 1190.253407][T19065] syzkaller0: entered promiscuous mode [ 1190.267728][T19065] syzkaller0: entered allmulticast mode [ 1190.820315][T19077] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1190.872014][T19076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4170'. [ 1191.135674][T19085] syzkaller0: entered promiscuous mode [ 1191.141464][T19085] syzkaller0: entered allmulticast mode [ 1191.499982][T19093] syzkaller0: entered promiscuous mode [ 1191.505900][T19093] syzkaller0: entered allmulticast mode [ 1191.880008][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1191.943125][T19106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4181'. [ 1192.145256][T19111] syzkaller0: entered promiscuous mode [ 1192.156436][T19111] syzkaller0: entered allmulticast mode [ 1192.408733][T19125] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1192.611087][T19130] syzkaller0: entered promiscuous mode [ 1192.618089][T19130] syzkaller0: entered allmulticast mode [ 1192.673130][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4192'. [ 1193.119559][T19144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1193.469088][T19148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1194.067928][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1194.160835][T19152] syzkaller0: entered promiscuous mode [ 1194.173478][T19152] syzkaller0: entered allmulticast mode [ 1194.301718][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1194.312904][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.355555][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1194.384575][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1194.418888][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.452979][ T27] usb 3-1: config 0 descriptor?? [ 1194.511555][T19159] syzkaller0: entered promiscuous mode [ 1194.517509][T19159] syzkaller0: entered allmulticast mode [ 1194.531695][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 1194.914137][T19172] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1194.975365][T19175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4210'. [ 1195.236558][T19183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4213'. [ 1195.394350][T19187] syzkaller0: entered promiscuous mode [ 1195.400103][T19187] syzkaller0: entered allmulticast mode [ 1195.948230][T19200] tipc: Enabled bearer , priority 0 [ 1195.966661][T19200] tipc: Resetting bearer [ 1195.991390][T19199] tipc: Disabling bearer [ 1196.562359][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1196.569045][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1196.600321][ T27] usb 3-1: USB disconnect, device number 4 [ 1196.645586][T19213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4226'. [ 1196.997811][T19225] tipc: Enabled bearer , priority 0 [ 1197.018144][T19225] syzkaller0: entered promiscuous mode [ 1197.023883][T19225] syzkaller0: entered allmulticast mode [ 1197.071659][T19225] tipc: Resetting bearer [ 1197.096966][T19224] tipc: Resetting bearer [ 1197.135736][T19224] tipc: Disabling bearer [ 1197.225608][T19233] syzkaller0: entered promiscuous mode [ 1197.240372][T19233] syzkaller0: entered allmulticast mode [ 1197.377766][T19235] syzkaller0: entered promiscuous mode [ 1197.384628][T19235] syzkaller0: entered allmulticast mode [ 1197.522700][T19237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1199.545335][T19237] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.554608][T19237] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.564728][T19237] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.575041][T19237] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.944560][T19280] syzkaller0: entered promiscuous mode [ 1199.974217][T19280] syzkaller0: entered allmulticast mode [ 1200.030635][T19283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4246'. [ 1200.302831][T19295] tipc: Enabled bearer , priority 0 [ 1200.314660][T19295] syzkaller0: entered promiscuous mode [ 1200.326216][T19295] syzkaller0: entered allmulticast mode [ 1200.346260][T19295] tipc: Resetting bearer [ 1200.355946][T19293] tipc: Resetting bearer [ 1200.385856][T19293] tipc: Disabling bearer [ 1201.119882][T19309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4258'. [ 1201.231983][T19312] syzkaller0: entered promiscuous mode [ 1201.241001][T19312] syzkaller0: entered allmulticast mode [ 1201.967651][T19342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1202.141080][T19348] tipc: Enabled bearer , priority 0 [ 1202.151493][T19348] syzkaller0: entered promiscuous mode [ 1202.158576][T19348] syzkaller0: entered allmulticast mode [ 1202.181274][T19348] tipc: Resetting bearer [ 1202.237722][T19346] tipc: Resetting bearer [ 1202.273776][T19346] tipc: Disabling bearer [ 1206.870473][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 1207.111770][T19392] syzkaller0: entered promiscuous mode [ 1207.117751][T19392] syzkaller0: entered allmulticast mode [ 1207.130634][T19393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1207.418227][T19397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4286'. [ 1207.615074][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1208.120507][T19418] syzkaller0: entered promiscuous mode [ 1208.126078][T19418] syzkaller0: entered allmulticast mode [ 1208.242147][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4295'. [ 1208.257827][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4295'. [ 1210.880168][T19405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1210.897610][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 1211.418966][T19450] tipc: Enabled bearer , priority 0 [ 1211.427983][T19450] syzkaller0: entered promiscuous mode [ 1211.443438][T19450] syzkaller0: entered allmulticast mode [ 1211.489982][T19450] tipc: Resetting bearer [ 1211.509241][T19448] tipc: Resetting bearer [ 1211.579963][T19448] tipc: Disabling bearer [ 1211.786794][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4309'. [ 1211.803253][T19461] tipc: Enabled bearer , priority 0 [ 1211.818090][T19461] syzkaller0: entered promiscuous mode [ 1211.823639][T19461] syzkaller0: entered allmulticast mode [ 1211.856479][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1211.873208][T19461] tipc: Resetting bearer [ 1211.895956][T19460] tipc: Resetting bearer [ 1211.957601][T19460] tipc: Disabling bearer [ 1212.343038][T19475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4314'. [ 1212.382289][T19475] net_ratelimit: 10 callbacks suppressed [ 1212.382308][T19475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1212.458010][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4315'. [ 1212.847011][T19490] netlink: 'syz.3.4319': attribute type 25 has an invalid length. [ 1212.895800][T19495] syzkaller0: entered promiscuous mode [ 1212.901485][T19495] syzkaller0: entered allmulticast mode [ 1212.933251][T19494] syzkaller0: entered promiscuous mode [ 1212.941271][T19494] syzkaller0: entered allmulticast mode [ 1213.131182][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1213.153618][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1213.415566][T19506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1213.498230][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1214.019724][T19526] syzkaller0: entered promiscuous mode [ 1214.025384][T19526] syzkaller0: entered allmulticast mode [ 1214.671425][T19547] syzkaller0: entered promiscuous mode [ 1214.676986][T19547] syzkaller0: entered allmulticast mode [ 1214.814374][T19550] syzkaller0: entered promiscuous mode [ 1214.823031][T19550] syzkaller0: entered allmulticast mode [ 1215.114768][T19564] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1215.331634][T19568] syzkaller0: entered promiscuous mode [ 1215.344840][T19568] syzkaller0: entered allmulticast mode [ 1216.273398][T19606] syzkaller0: entered promiscuous mode [ 1216.289219][T19606] syzkaller0: entered allmulticast mode [ 1216.898653][T19638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1217.549542][T19642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.557429][T19642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.312138][T19642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.378747][T19642] batman_adv: batadv0: Interface deactivated: €Â0 [ 1218.978391][T19642] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.988100][T19642] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.997685][T19642] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.006749][T19642] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.386388][T19672] syzkaller0: entered promiscuous mode [ 1219.392140][T19672] syzkaller0: entered allmulticast mode [ 1219.638033][T19674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1219.904691][T19680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4372'. [ 1219.963166][T19631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1220.309430][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1220.603817][T19699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1220.765260][T19705] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1223.961069][T19706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1224.225622][T19733] tipc: Enabled bearer , priority 0 [ 1224.261821][T19733] syzkaller0: entered promiscuous mode [ 1224.282740][T19733] syzkaller0: entered allmulticast mode [ 1224.359060][T19733] tipc: Resetting bearer [ 1224.396869][T19731] tipc: Resetting bearer [ 1224.491132][T19731] tipc: Disabling bearer [ 1224.578255][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4391'. [ 1224.898933][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4395'. [ 1225.207584][T19763] syzkaller0: entered promiscuous mode [ 1225.213386][T19763] syzkaller0: entered allmulticast mode [ 1225.475696][T19754] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1225.558713][T19766] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4400'. [ 1225.716458][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4401'. [ 1225.926882][T19773] netlink: 'syz.4.4403': attribute type 12 has an invalid length. [ 1226.210503][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4405'. [ 1226.427150][T19787] ieee802154 phy0 wpan0: encryption failed: -22 [ 1226.649264][T19790] tipc: Enabled bearer , priority 0 [ 1226.683426][T19790] syzkaller0: entered promiscuous mode [ 1226.689031][T19790] syzkaller0: entered allmulticast mode [ 1226.749741][T19790] tipc: Resetting bearer [ 1226.795187][T19789] tipc: Resetting bearer [ 1226.917887][T19789] tipc: Disabling bearer [ 1227.353209][T19811] syzkaller0: entered promiscuous mode [ 1227.369916][T19811] syzkaller0: entered allmulticast mode [ 1227.383581][T13900] hid (null): global environment stack underflow [ 1227.464121][T13900] hid-generic 0005:4C4A:0004.000A: global environment stack underflow [ 1227.527308][T13900] hid-generic 0005:4C4A:0004.000A: item 0 0 1 11 parsing failed [ 1227.604046][T13900] hid-generic: probe of 0005:4C4A:0004.000A failed with error -22 [ 1227.804467][T19824] tipc: Enabled bearer , priority 0 [ 1227.816944][T19824] syzkaller0: entered promiscuous mode [ 1227.822494][T19824] syzkaller0: entered allmulticast mode [ 1227.936848][T19829] tipc: Resetting bearer [ 1227.982161][T19822] tipc: Resetting bearer [ 1228.032497][T19822] tipc: Disabling bearer [ 1228.345032][T19840] netlink: 'syz.4.4432': attribute type 24 has an invalid length. [ 1228.483082][T19847] syzkaller0: entered promiscuous mode [ 1228.489023][T19847] syzkaller0: entered allmulticast mode [ 1228.673107][T19851] syzkaller0: entered promiscuous mode [ 1228.699934][T19851] syzkaller0: entered allmulticast mode [ 1229.456066][T19868] syzkaller0: entered promiscuous mode [ 1229.480675][T19868] syzkaller0: entered allmulticast mode [ 1229.654854][T19875] syzkaller0: entered promiscuous mode [ 1229.660672][T19875] syzkaller0: entered allmulticast mode [ 1229.966027][T19883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4451'. [ 1230.509829][T19910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1230.711462][T19913] syzkaller0: entered promiscuous mode [ 1230.719310][T19913] syzkaller0: entered allmulticast mode [ 1230.898908][T19917] syzkaller0: entered promiscuous mode [ 1230.914391][T19917] syzkaller0: entered allmulticast mode [ 1231.287156][T19925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4468'. [ 1231.395755][T19930] netlink: 'syz.1.4470': attribute type 12 has an invalid length. [ 1231.505563][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4472'. [ 1231.834675][T19943] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1231.975474][T19947] syzkaller0: entered promiscuous mode [ 1231.991519][T19947] syzkaller0: entered allmulticast mode [ 1232.267305][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1232.279581][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1232.335832][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1232.517960][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1232.946801][T19975] netlink: 'syz.2.4489': attribute type 24 has an invalid length. [ 1233.182278][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1233.358181][T19996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1233.464545][T20002] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1236.182730][T19979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.425184][T20024] netlink: 'syz.1.4504': attribute type 12 has an invalid length. [ 1240.596304][T20035] tipc: Enabled bearer , priority 0 [ 1240.603591][T20036] syzkaller0: entered promiscuous mode [ 1240.615421][T20036] syzkaller0: entered allmulticast mode [ 1240.658926][T20041] tipc: Resetting bearer [ 1240.681195][T20030] tipc: Resetting bearer [ 1240.787041][T20030] tipc: Disabling bearer [ 1240.848087][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1240.866238][T20065] netlink: 'syz.2.4514': attribute type 25 has an invalid length. [ 1241.042860][ T4273] tipc: Left network mode [ 1242.073717][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 1242.151156][T20098] syzkaller0: entered promiscuous mode [ 1242.160337][T20098] syzkaller0: entered allmulticast mode [ 1242.443329][T20106] tipc: Enabled bearer , priority 0 [ 1242.458179][T20102] syzkaller0: entered promiscuous mode [ 1242.489516][T20102] syzkaller0: entered allmulticast mode [ 1242.635110][ T4273] gretap0 (unregistering): left promiscuous mode [ 1242.721230][T20102] tipc: Resetting bearer [ 1242.824221][T20101] tipc: Resetting bearer [ 1242.940082][T20101] tipc: Disabling bearer [ 1242.977425][T20113] tipc: Enabled bearer , priority 0 [ 1243.247680][T20121] syzkaller0: entered promiscuous mode [ 1243.253252][T20121] syzkaller0: entered allmulticast mode [ 1243.306006][T20128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4528'. [ 1243.342155][T20128] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4528'. [ 1243.362650][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4532'. [ 1243.404947][T20130] tipc: Resetting bearer [ 1243.788570][T20111] tipc: Resetting bearer [ 1243.941871][T20111] tipc: Disabling bearer [ 1244.235819][ T4273] hsr_slave_0: left promiscuous mode [ 1244.253195][ T4273] hsr_slave_1: left promiscuous mode [ 1244.261336][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.272854][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.281404][ T4273] bridge_slave_1: left allmulticast mode [ 1244.287428][ T4273] bridge_slave_1: left promiscuous mode [ 1244.294099][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.304249][ T4273] bridge_slave_0: left allmulticast mode [ 1244.310185][ T4273] bridge_slave_0: left promiscuous mode [ 1244.330652][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.529787][ T4273] team0 (unregistering): Port device team_slave_1 removed [ 1245.609708][ T4273] team0 (unregistering): Port device team_slave_0 removed [ 1246.481529][T20157] syzkaller0: entered promiscuous mode [ 1246.487155][T20157] syzkaller0: entered allmulticast mode [ 1247.207415][ T4273] IPVS: stop unused estimator thread 0... [ 1247.965957][T20210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1248.002309][T20208] syzkaller0: entered promiscuous mode [ 1248.007870][T20208] syzkaller0: entered allmulticast mode [ 1248.053751][T20211] syzkaller0: entered promiscuous mode [ 1248.063387][T20211] syzkaller0: entered allmulticast mode [ 1248.991145][T20238] syzkaller0: entered promiscuous mode [ 1249.016850][T20238] syzkaller0: entered allmulticast mode [ 1249.646160][T20257] syzkaller0: entered promiscuous mode [ 1249.676794][T20257] syzkaller0: entered allmulticast mode [ 1250.770278][T20302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4585'. [ 1250.994731][T20313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1251.539021][T20316] syzkaller0: entered promiscuous mode [ 1251.544883][T20316] syzkaller0: entered allmulticast mode [ 1251.935061][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1253.258784][T20277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1253.887461][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1254.149460][T20353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4599'. [ 1254.617217][T20364] syzkaller0: entered promiscuous mode [ 1254.622818][T20364] syzkaller0: entered allmulticast mode [ 1254.886208][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 1255.454553][T20386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4606'. [ 1257.573807][T20361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1257.947319][T20403] syzkaller0: entered promiscuous mode [ 1257.981536][T20403] syzkaller0: entered allmulticast mode [ 1258.232974][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4615'. [ 1258.394319][T20416] netlink: 'syz.4.4618': attribute type 25 has an invalid length. [ 1258.443077][T20418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1258.604578][T20418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.615362][T20418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.629000][T20418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1259.111255][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1259.345808][T20447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4627'. [ 1261.630251][T20422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.459223][T20481] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4639'. [ 1262.465912][T20483] tipc: Enabled bearer , priority 0 [ 1262.489870][T20483] syzkaller0: entered promiscuous mode [ 1262.501545][T20483] syzkaller0: entered allmulticast mode [ 1262.554433][T20483] tipc: Resetting bearer [ 1262.582686][T20482] tipc: Resetting bearer [ 1262.684325][T20482] tipc: Disabling bearer [ 1262.731166][T20488] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4642'. [ 1265.856798][T20489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.049749][T20519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4652'. [ 1266.232728][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4654'. [ 1266.503034][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4658'. [ 1266.877104][T20548] syzkaller0: entered promiscuous mode [ 1266.894462][T20548] syzkaller0: entered allmulticast mode [ 1267.041007][T20553] tipc: Enabling of bearer rejected, failed to enable media [ 1267.050479][T20560] syzkaller0: entered promiscuous mode [ 1267.056715][T20560] syzkaller0: entered allmulticast mode [ 1267.232556][T20568] ax25_connect(): syz.4.4669 uses autobind, please contact jreuter@yaina.de [ 1267.916123][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4677'. [ 1268.819839][T20616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4687'. [ 1269.232842][T20629] syzkaller0: entered promiscuous mode [ 1269.238459][T20629] syzkaller0: entered allmulticast mode [ 1269.896448][T20644] syzkaller0: entered promiscuous mode [ 1269.902267][T20644] syzkaller0: entered allmulticast mode [ 1272.168372][T20621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1272.466912][T20658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1272.848628][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1272.944383][T20673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1273.175243][T20681] syzkaller0: entered promiscuous mode [ 1273.189682][T20681] syzkaller0: entered allmulticast mode [ 1273.880089][T20709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4713'. [ 1274.050198][T20714] syzkaller0: entered promiscuous mode [ 1274.057274][T20714] syzkaller0: entered allmulticast mode [ 1274.381342][T20717] syzkaller0: entered promiscuous mode [ 1274.387573][T20717] syzkaller0: entered allmulticast mode [ 1276.867511][T20698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1277.402690][T20738] syzkaller0: entered promiscuous mode [ 1277.418847][T20738] syzkaller0: entered allmulticast mode [ 1277.639441][T20744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4727'. [ 1277.874248][T20752] tipc: Enabling of bearer rejected, failed to enable media [ 1277.885192][T20752] syzkaller0: entered promiscuous mode [ 1277.893161][T20752] syzkaller0: entered allmulticast mode [ 1278.193840][T20761] syzkaller0: entered promiscuous mode [ 1278.209626][T20761] syzkaller0: entered allmulticast mode [ 1278.314718][T20764] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1278.759504][T20772] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4737'. [ 1278.829609][T20772] gretap0: entered promiscuous mode [ 1278.866114][T20772] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4737'. [ 1278.895452][T20772] 0ªî{X¹¦: renamed from gretap0 [ 1278.912340][T20772] 0ªî{X¹¦: left promiscuous mode [ 1278.920894][T20772] 0ªî{X¹¦: entered allmulticast mode [ 1278.939070][T20772] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1279.223497][T20789] syzkaller0: entered promiscuous mode [ 1279.230400][T20789] syzkaller0: entered allmulticast mode [ 1280.099681][T20796] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4745'. [ 1280.154777][T10026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1280.166876][T10026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1280.178349][T10026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1280.203274][T10026] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1280.219525][T10026] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1280.223638][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.238179][T10026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1280.368258][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.480605][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.589185][ T34] bond0: (slave netdevsim0): Releasing backup interface [ 1280.606789][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.754893][T20797] chnl_net:caif_netlink_parms(): no params data found [ 1281.005057][T20797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.024442][T20797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.032768][T20797] bridge_slave_0: entered allmulticast mode [ 1281.042354][T20797] bridge_slave_0: entered promiscuous mode [ 1281.050793][ T34] tipc: Left network mode [ 1281.057176][T20797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.065810][T20797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.077576][T20797] bridge_slave_1: entered allmulticast mode [ 1281.100657][T20797] bridge_slave_1: entered promiscuous mode [ 1281.208404][T20797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.219997][T20797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.289085][T20797] team0: Port device team_slave_0 added [ 1281.301041][T20797] team0: Port device team_slave_1 added [ 1281.334756][T20757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1281.565814][T20811] netlink: 'syz.4.4747': attribute type 25 has an invalid length. [ 1281.583707][T20797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.601973][T20797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.645158][T20797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.659027][T20797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.666637][T20797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.696383][T20797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.964476][T20817] syzkaller0: entered promiscuous mode [ 1281.990741][T20817] syzkaller0: entered allmulticast mode [ 1282.360358][T20797] hsr_slave_0: entered promiscuous mode [ 1282.418242][T20797] hsr_slave_1: entered promiscuous mode [ 1282.453556][T13734] Bluetooth: hci0: command tx timeout [ 1282.468982][T20797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1282.494023][T20797] Cannot create hsr debugfs directory [ 1282.516708][T20843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1283.624780][T20862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1283.947310][ T5838] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1284.194049][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 1284.213468][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.225450][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1284.248420][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1284.281253][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.293575][ T34] hsr_slave_0: left promiscuous mode [ 1284.300532][ T34] hsr_slave_1: left promiscuous mode [ 1284.312134][ T5838] usb 3-1: config 0 descriptor?? [ 1284.351114][ T34] veth1_macvtap: left promiscuous mode [ 1284.357511][ T34] veth0_macvtap: left promiscuous mode [ 1284.363285][ T34] veth1_vlan: left promiscuous mode [ 1284.369096][ T34] veth0_vlan: left promiscuous mode [ 1284.681907][T13734] Bluetooth: hci0: command tx timeout [ 1285.709485][T20846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1286.445185][ T5838] usbhid 3-1:0.0: can't add hid device: -71 [ 1286.452563][ T5838] usbhid: probe of 3-1:0.0 failed with error -71 [ 1286.464090][ T5838] usb 3-1: USB disconnect, device number 5 [ 1286.842060][ T34] bond0 (unregistering): Released all slaves [ 1286.897639][T13734] Bluetooth: hci0: command tx timeout [ 1287.264787][T20880] tipc: Enabled bearer , priority 0 [ 1287.523155][T20880] syzkaller0: entered promiscuous mode [ 1287.540116][T20880] syzkaller0: entered allmulticast mode [ 1287.615877][T20889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1287.638106][T20894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1287.677194][T20890] tipc: Resetting bearer [ 1287.940353][T20877] tipc: Resetting bearer [ 1288.101220][T20877] tipc: Disabling bearer [ 1288.216837][T20797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1288.256327][T20797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1288.340870][T20797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1288.353671][ T34] IPVS: stop unused estimator thread 0... [ 1288.426916][T20797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1288.491235][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'. [ 1289.196572][T20930] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1289.233331][T13734] Bluetooth: hci0: command tx timeout [ 1289.525369][ T5838] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1289.647990][T20924] syzkaller0: entered promiscuous mode [ 1289.775397][T20924] syzkaller0: entered allmulticast mode [ 1289.813855][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 1289.825493][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.867032][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1289.891152][ T5838] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1289.923178][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.937657][ T5838] usb 5-1: config 0 descriptor?? [ 1291.561365][T20912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1292.060564][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 1292.066663][ T5838] usbhid: probe of 5-1:0.0 failed with error -71 [ 1292.075120][T20797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.076621][ T5838] usb 5-1: USB disconnect, device number 15 [ 1292.206878][T20797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.253343][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.260687][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.270161][T20987] netlink: 'syz.4.4773': attribute type 25 has an invalid length. [ 1292.294864][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.302201][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.497014][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1292.912089][T20797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.040742][T20797] veth0_vlan: entered promiscuous mode [ 1293.050355][T21009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4780'. [ 1293.079094][T20797] veth1_vlan: entered promiscuous mode [ 1293.190862][T20797] veth0_macvtap: entered promiscuous mode [ 1293.281451][T21014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4782'. [ 1293.382204][T20797] veth1_macvtap: entered promiscuous mode [ 1293.458475][T20797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.469285][T20797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.479759][T20797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.491380][T20797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.508773][T20797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.684889][T21018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1293.937369][T20797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.046629][ T5838] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1294.114638][T20797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.231168][T20797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1294.257741][T20797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.281945][T20797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.304229][T20797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.313572][T20797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.322604][T20797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.331809][T20797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.365962][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 1294.378999][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.419691][T21021] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.426211][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1294.455506][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1294.504396][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.530583][ T5838] usb 3-1: config 0 descriptor?? [ 1294.622993][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.669508][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.790499][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.809780][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.918328][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4786'. [ 1295.019587][T21035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4787'. [ 1295.993258][T21053] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4792'. [ 1296.559468][ T5838] usbhid 3-1:0.0: can't add hid device: -71 [ 1296.565644][ T5838] usbhid: probe of 3-1:0.0 failed with error -71 [ 1296.685557][ T5838] usb 3-1: USB disconnect, device number 6 [ 1296.790573][T10026] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1296.813254][T10026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1296.834045][T10026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1296.863990][T10026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1296.872984][T10026] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1296.887447][T10026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1297.216835][T21073] syzkaller0: entered promiscuous mode [ 1297.222807][T21073] syzkaller0: entered allmulticast mode [ 1297.940282][T21061] chnl_net:caif_netlink_parms(): no params data found [ 1297.997570][ T11] tipc: Left network mode [ 1298.227375][ T11] bond1: (slave ip6gretap1): Releasing active interface [ 1298.406001][T21095] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4802'. [ 1298.719601][T21061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.758232][T21061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.766263][T21061] bridge_slave_0: entered allmulticast mode [ 1298.791241][T21061] bridge_slave_0: entered promiscuous mode [ 1298.945649][T21061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.994276][T21061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.005402][T21061] bridge_slave_1: entered allmulticast mode [ 1299.025404][T21061] bridge_slave_1: entered promiscuous mode [ 1299.032770][T21122] netlink: 'syz.3.4806': attribute type 25 has an invalid length. [ 1299.138352][T21061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.207859][T13734] Bluetooth: hci1: command tx timeout [ 1299.455345][T21061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.606104][T21061] team0: Port device team_slave_0 added [ 1299.896628][T21061] team0: Port device team_slave_1 added [ 1300.162476][T21154] netlink: 'syz.2.4815': attribute type 25 has an invalid length. [ 1300.255232][T21061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.271849][T21061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.329377][T21061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.344477][T21061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.394511][T21061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.486144][T21061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.951586][T21061] hsr_slave_0: entered promiscuous mode [ 1300.972428][T21061] hsr_slave_1: entered promiscuous mode [ 1300.987013][T21061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1301.003549][T21061] Cannot create hsr debugfs directory [ 1301.207171][ T5838] IPVS: starting estimator thread 0... [ 1301.222824][T21186] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1301.284275][ T11] hsr_slave_0: left promiscuous mode [ 1301.303185][T21187] IPVS: using max 19 ests per chain, 45600 per kthread [ 1301.324715][ T11] hsr_slave_1: left promiscuous mode [ 1301.431091][T13734] Bluetooth: hci1: command tx timeout [ 1301.683269][T21200] netlink: 'syz.3.4825': attribute type 25 has an invalid length. [ 1301.807018][ T11] bond1 (unregistering): Released all slaves [ 1303.654253][T13734] Bluetooth: hci1: command tx timeout [ 1303.700212][ T11] bond0 (unregistering): Released all slaves [ 1303.826234][T21185] syzkaller0: entered promiscuous mode [ 1303.831807][T21185] syzkaller0: entered allmulticast mode [ 1304.283419][T21213] syzkaller0: entered promiscuous mode [ 1304.289158][T21213] syzkaller0: entered allmulticast mode [ 1304.527934][T21220] syzkaller0: entered promiscuous mode [ 1304.557797][T21220] syzkaller0: entered allmulticast mode [ 1304.810025][T21230] netlink: 'syz.3.4835': attribute type 25 has an invalid length. [ 1305.089569][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4836'. [ 1305.499464][T21246] syzkaller0: entered promiscuous mode [ 1305.511654][T21246] syzkaller0: entered allmulticast mode [ 1305.646585][T21258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1305.703177][ T11] IPVS: stop unused estimator thread 0... [ 1305.875022][T13734] Bluetooth: hci1: command tx timeout [ 1306.012044][T21264] syzkaller0: entered promiscuous mode [ 1306.022089][T21264] syzkaller0: entered allmulticast mode [ 1306.106171][T21269] netlink: 'syz.2.4844': attribute type 25 has an invalid length. [ 1306.209466][T21061] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1306.266588][T21061] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1306.301542][T21061] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1306.346938][T21061] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1306.391220][T21273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4846'. [ 1307.017586][T21293] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1307.338841][ T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1307.664882][T21061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.681214][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 1307.697410][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.743154][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1307.764109][T21061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.783274][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.790788][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.791867][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1307.809445][T21300] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1307.829335][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.846132][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.853373][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.874150][ T27] usb 5-1: config 0 descriptor?? [ 1308.525314][T13734] Bluetooth: hci3: command 0x0406 tx timeout [ 1308.646788][T21314] syzkaller0: entered promiscuous mode [ 1308.664742][T21314] syzkaller0: entered allmulticast mode [ 1308.860350][T21061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.029779][T21061] veth0_vlan: entered promiscuous mode [ 1309.072005][T21061] veth1_vlan: entered promiscuous mode [ 1309.199814][T21061] veth0_macvtap: entered promiscuous mode [ 1309.240155][T21061] veth1_macvtap: entered promiscuous mode [ 1309.335584][T21328] syzkaller0: entered promiscuous mode [ 1309.349695][T21328] syzkaller0: entered allmulticast mode [ 1309.393933][T21061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.416070][T21061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.442087][T21061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.474979][T21061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.497861][T21061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.529419][T21061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.552298][T21061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.681068][T21339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 1309.686299][T21061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.747939][T21061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.785842][T21061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1309.813981][T21061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.835819][T21061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.879661][T21061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.909315][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 1309.915502][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 1309.934115][ T27] usb 5-1: USB disconnect, device number 16 [ 1309.969027][T21061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.162188][T21061] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.181237][T21061] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.201959][T21061] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.252182][T21061] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.591198][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.630734][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.748470][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.756377][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.816995][T21366] syzkaller0: entered promiscuous mode [ 1310.836142][T21366] syzkaller0: entered allmulticast mode [ 1311.025058][T21382] tipc: Started in network mode [ 1311.033259][T21382] tipc: Node identity 8e302f18517c, cluster identity 4711 [ 1311.043278][T21382] tipc: Enabled bearer , priority 0 [ 1311.061074][T21376] syzkaller0: entered promiscuous mode [ 1311.067197][T21376] syzkaller0: entered allmulticast mode [ 1311.547818][T21384] syzkaller0: entered promiscuous mode [ 1311.582486][T21384] syzkaller0: entered allmulticast mode [ 1311.589886][T21374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4867'. [ 1311.668756][T21382] tipc: Resetting bearer [ 1311.705691][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4871'. [ 1311.907171][T21373] tipc: Resetting bearer [ 1312.009714][T21373] tipc: Disabling bearer [ 1312.437693][T10026] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1312.450752][T10026] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1312.460116][T10026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1312.482972][T10026] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1312.500399][T10026] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1312.509259][T10026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1312.971457][ T59] bond0: (slave netdevsim0): Releasing backup interface [ 1313.065812][T21423] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1313.349683][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4880'. [ 1313.749006][T21412] chnl_net:caif_netlink_parms(): no params data found [ 1313.828387][T21451] tipc: Enabled bearer , priority 0 [ 1313.844266][T21456] syzkaller0: entered promiscuous mode [ 1313.852498][T21456] syzkaller0: entered allmulticast mode [ 1313.949647][T21453] syzkaller0: entered promiscuous mode [ 1313.958312][T21453] syzkaller0: entered allmulticast mode [ 1313.973680][ T59] tipc: Left network mode [ 1314.086473][T21453] tipc: Resetting bearer [ 1314.589577][T21446] tipc: Resetting bearer [ 1314.655922][T21446] tipc: Disabling bearer [ 1314.687430][T21412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.709323][T21412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.747233][T21412] bridge_slave_0: entered allmulticast mode [ 1314.768567][T13734] Bluetooth: hci3: command tx timeout [ 1314.789397][T21412] bridge_slave_0: entered promiscuous mode [ 1314.829223][T21477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1314.977374][T21412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.986338][T21412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.004406][T21412] bridge_slave_1: entered allmulticast mode [ 1315.025915][T21412] bridge_slave_1: entered promiscuous mode [ 1315.290559][T21412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.410806][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1315.420749][T21496] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1315.482590][T21412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.948447][T21412] team0: Port device team_slave_0 added [ 1316.024783][T21412] team0: Port device team_slave_1 added [ 1316.156714][T21516] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1316.183182][T21518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4896'. [ 1316.201970][T21412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.212538][T21412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.270861][T21412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.480938][T21412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.507473][T21412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.579504][T21412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.723326][T21529] netlink: 'syz.3.4898': attribute type 12 has an invalid length. [ 1316.957994][ T59] hsr_slave_0: left promiscuous mode [ 1316.976897][ T59] hsr_slave_1: left promiscuous mode [ 1316.986366][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.998734][ T59] batman_adv: batadv0: Removing interface: €Â0 [ 1316.999241][T13734] Bluetooth: hci3: command tx timeout [ 1317.017790][ T59] bridge_slave_1: left allmulticast mode [ 1317.026175][ T59] bridge_slave_1: left promiscuous mode [ 1317.042154][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.051634][ T59] bridge_slave_0: left allmulticast mode [ 1317.058355][ T59] bridge_slave_0: left promiscuous mode [ 1317.064500][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.591622][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1318.092886][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1318.170033][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1318.245772][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.327183][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.850414][ T59] bond0 (unregistering): Released all slaves [ 1319.004191][T21531] syzkaller0: entered promiscuous mode [ 1319.011774][T21531] syzkaller0: entered allmulticast mode [ 1319.020232][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4900'. [ 1319.055852][T21545] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1319.211638][T13734] Bluetooth: hci3: command tx timeout [ 1319.215107][T21412] hsr_slave_0: entered promiscuous mode [ 1319.254242][T21412] hsr_slave_1: entered promiscuous mode [ 1319.518354][T21557] syzkaller0: entered promiscuous mode [ 1319.535168][T21557] syzkaller0: entered allmulticast mode [ 1319.548575][T21559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4904'. [ 1320.002524][T21574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4908'. [ 1320.045982][T21574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4908'. [ 1320.129405][T21579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1320.277901][ T59] IPVS: stop unused estimator thread 0... [ 1320.426835][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 1320.661513][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4911'. [ 1321.306188][T21598] syzkaller0: entered promiscuous mode [ 1321.337928][T21598] syzkaller0: entered allmulticast mode [ 1321.346099][T21412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1321.378349][T21412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1321.433995][T13734] Bluetooth: hci3: command tx timeout [ 1321.443764][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4919'. [ 1321.503333][T21412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1321.516163][T21412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1321.549428][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4917'. [ 1321.701302][T21613] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1322.069708][T21412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.239349][T21412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.407009][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.414320][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.480493][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.487806][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.697436][T21637] syzkaller0: entered promiscuous mode [ 1322.702994][T21637] syzkaller0: entered allmulticast mode [ 1322.944951][T21412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1323.911749][T21412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.418473][T21412] veth0_vlan: entered promiscuous mode [ 1324.523689][T21412] veth1_vlan: entered promiscuous mode [ 1324.580469][T21700] syzkaller0: entered promiscuous mode [ 1324.597062][T21700] syzkaller0: entered allmulticast mode [ 1324.923984][T21412] veth0_macvtap: entered promiscuous mode [ 1324.966441][T21412] veth1_macvtap: entered promiscuous mode [ 1325.007558][T21727] __nla_validate_parse: 4 callbacks suppressed [ 1325.007577][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1325.017586][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.078048][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.088142][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.172629][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.200663][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.237994][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.248974][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.265200][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.288729][T21412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1325.316089][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.364174][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.396270][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1325.418027][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.443498][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.452452][T21735] IPVS: set_ctl: invalid protocol: 60 172.20.20.59:20000 [ 1325.471010][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.488977][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.500617][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.559992][T21412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1325.632676][T21745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4945'. [ 1325.809395][T21412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.825867][T21412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.848101][T21412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.867326][T21412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.140731][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.178280][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.318225][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.356086][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.481894][ T1143] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x63 [ 1326.559896][T21785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4950'. [ 1326.747892][T21788] netlink: 'syz.2.4870': attribute type 24 has an invalid length. [ 1326.947239][T21800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1327.606558][T21823] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4959'. [ 1331.139954][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1331.254860][T21847] netlink: 'syz.1.4962': attribute type 24 has an invalid length. [ 1331.797959][T21867] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 1331.867393][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1332.377195][T21890] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4977'. [ 1336.238220][T21906] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4981'. [ 1336.461343][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4983'. [ 1336.584617][T21918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 1337.195612][T21931] tipc: Enabled bearer , priority 0 [ 1337.206833][T21931] syzkaller0: entered promiscuous mode [ 1337.212585][T21931] syzkaller0: entered allmulticast mode [ 1337.291013][T21930] tipc: Resetting bearer [ 1337.371542][T21930] tipc: Disabling bearer [ 1337.399518][T21934] tipc: Started in network mode [ 1337.408648][T21934] tipc: Node identity 010000000000000002, cluster identity 10 [ 1337.571320][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4989'. [ 1337.669374][T21938] syzkaller0: entered promiscuous mode [ 1337.697307][T21938] syzkaller0: entered allmulticast mode [ 1338.057520][T21956] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 1338.428123][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4999'. [ 1338.630899][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1338.897904][T21979] syzkaller0: entered promiscuous mode [ 1338.903568][T21979] syzkaller0: entered allmulticast mode [ 1339.290820][T21991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 1339.549055][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1339.880917][T22022] syzkaller0: entered promiscuous mode [ 1339.886498][T22022] syzkaller0: entered allmulticast mode [ 1340.007134][T19246] IPVS: starting estimator thread 0... [ 1340.123607][T22027] IPVS: using max 20 ests per chain, 48000 per kthread [ 1340.431099][T22040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 1340.522475][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1340.792332][T22054] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1341.015030][T22064] syzkaller0: entered promiscuous mode [ 1341.020692][T22064] syzkaller0: entered allmulticast mode [ 1341.171572][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5037'. [ 1341.402266][T22074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5040'. [ 1341.466223][T22076] syzkaller0: entered promiscuous mode [ 1341.474048][T22076] syzkaller0: entered allmulticast mode [ 1341.652014][T22085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5038'. [ 1341.726252][T22087] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5044'. [ 1343.703390][T22047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1343.934769][T22097] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5048'. [ 1345.433178][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5047'. [ 1345.719056][T22107] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5053'. [ 1346.029306][T22117] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5057'. [ 1349.210618][T22118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1350.439997][T22164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 1350.523809][T22171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5075'. [ 1350.877258][T22181] tipc: Started in network mode [ 1350.882532][T22181] tipc: Node identity 1ae51841b7bd, cluster identity 4711 [ 1350.891153][T22181] tipc: Enabled bearer , priority 0 [ 1350.911288][T22185] tipc: Enabled bearer , priority 0 [ 1350.937368][T22181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1350.947467][T22181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1350.973402][T22181] tipc: Resetting bearer [ 1351.003321][T22183] tipc: Disabling bearer [ 1351.152998][T22177] tipc: Disabling bearer [ 1351.323363][T22201] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 1351.605517][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5088'. [ 1352.026929][T22218] tipc: Enabled bearer , priority 0 [ 1352.046443][T22224] syzkaller0: entered promiscuous mode [ 1352.083032][T22224] syzkaller0: entered allmulticast mode [ 1352.325129][T22230] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1352.647780][ T27] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1352.907160][T22224] tipc: Resetting bearer [ 1352.930731][T22232] tipc: Enabling of bearer rejected, failed to enable media [ 1352.947407][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 1352.947597][T22216] tipc: Resetting bearer [ 1352.955216][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.009142][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1353.023940][T22216] tipc: Disabling bearer [ 1353.052282][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1353.086136][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.152079][ T27] usb 5-1: config 0 descriptor?? [ 1353.275826][T22242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1353.387438][T22243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 1354.199390][T22269] bridge0: port 3(erspan0) entered blocking state [ 1354.206586][T22269] bridge0: port 3(erspan0) entered disabled state [ 1354.229443][T22269] erspan0: entered allmulticast mode [ 1354.238912][T22269] erspan0: entered promiscuous mode [ 1354.282129][T22269] bridge0: port 3(erspan0) entered blocking state [ 1354.288883][T22269] bridge0: port 3(erspan0) entered forwarding state [ 1354.327502][T22274] erspan0: left allmulticast mode [ 1354.345467][T22274] erspan0: left promiscuous mode [ 1354.361152][T22274] bridge0: port 3(erspan0) entered disabled state [ 1354.508976][T22269] vxcan3: entered allmulticast mode [ 1354.713299][T22273] syzkaller0: entered promiscuous mode [ 1354.741567][T22273] syzkaller0: entered allmulticast mode [ 1355.209775][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 1355.220147][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 1355.231828][ T27] usb 5-1: USB disconnect, device number 17 [ 1358.567459][T22282] syzkaller0: entered promiscuous mode [ 1358.573326][T22282] syzkaller0: entered allmulticast mode [ 1359.059507][T22318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5119'. [ 1359.107339][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5120'. [ 1359.428770][T22328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5123'. [ 1359.454714][T22328] netlink: 58 bytes leftover after parsing attributes in process `syz.1.5123'. [ 1359.863449][T22335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1360.181378][ T5838] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1360.516870][T22328] team0 (unregistering): Port device team_slave_0 removed [ 1360.555892][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 1360.560095][T22328] team0 (unregistering): Port device team_slave_1 removed [ 1360.568560][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.568594][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1360.568637][ T5838] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1360.568662][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.571868][ T5838] usb 5-1: config 0 descriptor?? [ 1360.938756][T22347] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 1361.133569][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1361.167985][T22355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5131'. [ 1361.496314][T22361] block nbd0: server does not support multiple connections per device. [ 1361.519112][T22361] block nbd0: shutting down sockets [ 1362.135089][T22382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5141'. [ 1362.718235][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 1362.724356][ T5838] usbhid: probe of 5-1:0.0 failed with error -71 [ 1362.736068][ T5838] usb 5-1: USB disconnect, device number 18 [ 1363.004809][T22396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5145'. [ 1363.029862][T22396] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5145'. [ 1365.153713][T22375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1365.541490][T22407] syzkaller0: entered promiscuous mode [ 1365.558769][T22407] syzkaller0: entered allmulticast mode [ 1365.717699][T22410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5151'. [ 1366.272080][T22423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1366.593303][ T7841] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1366.828591][ C1] ------------[ cut here ]------------ [ 1366.834943][ C1] ODEBUG: free active (active state 0) object: ffff8880255c9c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1366.848467][ C1] WARNING: CPU: 1 PID: 4273 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1366.858616][ C1] Modules linked in: [ 1366.862582][ C1] CPU: 1 PID: 4273 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1366.870417][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1366.880594][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1366.887103][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1366.893632][ C1] Code: 4c 8b 4d 00 48 c7 c7 20 98 1c 8b 48 c7 c6 80 94 1c 8b 48 c7 c2 a0 99 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 de 84 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 13 f6 59 [ 1366.913389][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1366.919527][ C1] RAX: 1994c9e5f1750a00 RBX: ffffffff9748fcd0 RCX: ffff88802ff00000 [ 1366.927727][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1366.935925][ C1] RBP: ffffffff8accac60 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1366.944046][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff8880255c9e00 [ 1366.952176][ C1] R13: ffffffff897b0790 R14: ffff8880255c9000 R15: ffff8880255c9c90 [ 1366.960261][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1366.969417][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1366.976081][ C1] CR2: 000000110c2d5b8f CR3: 000000001e742000 CR4: 00000000003506e0 [ 1366.984207][ C1] Call Trace: [ 1366.987531][ C1] [ 1366.990499][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1366.996605][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1367.001917][ C1] __kmem_cache_free+0xba/0x1e0 [ 1367.006840][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1367.011977][ C1] ? call_timer_fn+0x171/0x540 [ 1367.016854][ C1] call_timer_fn+0x189/0x540 [ 1367.021634][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1367.026746][ C1] ? call_timer_fn+0xd2/0x540 [ 1367.031636][ C1] ? __run_timers+0x800/0x800 [ 1367.036387][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1367.041810][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1367.047147][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1367.052250][ C1] __run_timers+0x542/0x800 [ 1367.056915][ C1] ? detach_timer+0x2b0/0x2b0 [ 1367.061809][ C1] ? lock_chain_count+0x20/0x20 [ 1367.066824][ C1] run_timer_softirq+0x67/0xf0 [ 1367.072090][ C1] handle_softirqs+0x280/0x820 [ 1367.077048][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1367.081870][ C1] ? do_softirq+0x1a0/0x1a0 [ 1367.086481][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1367.091835][ C1] __irq_exit_rcu+0xd3/0x190 [ 1367.096546][ C1] ? irq_exit_rcu+0x20/0x20 [ 1367.101109][ C1] irq_exit_rcu+0x9/0x20 [ 1367.105397][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1367.111134][ C1] [ 1367.114196][ C1] [ 1367.117315][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1367.123633][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 1367.129530][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 99 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1367.149299][ C1] RSP: 0018:ffffc9000e286f78 EFLAGS: 00000286 [ 1367.155500][ C1] RAX: 1994c9e5f1750a00 RBX: 0000000000000000 RCX: 1994c9e5f1750a00 [ 1367.163785][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 1367.172020][ C1] RBP: ffffc9000e286fd0 R08: ffffffff911c556f R09: 1ffffffff2238aad [ 1367.180221][ C1] R10: dffffc0000000000 R11: fffffbfff2238aae R12: ffff88802ff00000 [ 1367.188482][ C1] R13: dffffc0000000000 R14: ffff88807d3f8000 R15: ffff8880b8f3cac8 [ 1367.196755][ C1] ? finish_task_switch+0x265/0x8f0 [ 1367.202062][ C1] __schedule+0x155b/0x45a0 [ 1367.206632][ C1] ? verify_lock_unused+0x140/0x140 [ 1367.211979][ C1] ? asan.module_dtor+0x20/0x20 [ 1367.216925][ C1] ? mark_lock+0x94/0x320 [ 1367.221315][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1367.227406][ C1] ? preempt_schedule+0xc0/0xd0 [ 1367.232478][ C1] preempt_schedule_common+0x82/0xc0 [ 1367.237845][ C1] preempt_schedule+0xc0/0xd0 [ 1367.242579][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1367.248324][ C1] ? unwind_next_frame+0x1648/0x2970 [ 1367.253828][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1367.259159][ C1] ? unwind_next_frame+0x200a/0x2970 [ 1367.264495][ C1] unwind_next_frame+0x200f/0x2970 [ 1367.269726][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1367.276174][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1367.282568][ C1] ? stack_trace_save+0x100/0x100 [ 1367.287680][ C1] arch_stack_walk+0x144/0x190 [ 1367.292499][ C1] ? ieee80211_iface_work+0x717/0xc70 [ 1367.297972][ C1] stack_trace_save+0xaa/0x100 [ 1367.302831][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1367.307996][ C1] ? mark_lock+0x94/0x320 [ 1367.312474][ C1] kasan_set_track+0x4e/0x70 [ 1367.317578][ C1] ? kasan_set_track+0x4e/0x70 [ 1367.322528][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1367.327785][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1367.333287][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1367.339214][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 1367.344322][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1367.350728][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 1367.355930][ C1] kasan_save_free_info+0x2e/0x50 [ 1367.361096][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1367.366337][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1367.371855][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1367.378468][ C1] __kmem_cache_free+0xba/0x1e0 [ 1367.383405][ C1] ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1367.389672][ C1] ? mark_lock+0x94/0x320 [ 1367.394065][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xe9d/0x2c80 [ 1367.400403][ C1] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1367.406238][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1367.412287][ C1] ? trace_irq_disable+0x37/0xe0 [ 1367.417391][ C1] ? lock_chain_count+0x20/0x20 [ 1367.422328][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1367.428166][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1367.433505][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1367.439336][ C1] ? kcov_remote_start+0x8f/0x7e0 [ 1367.444500][ C1] ? kcov_remote_start+0x2b/0x7e0 [ 1367.449609][ C1] ? skb_dequeue+0x124/0x160 [ 1367.454288][ C1] ieee80211_iface_work+0x717/0xc70 [ 1367.460104][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1367.465411][ C1] cfg80211_wiphy_work+0x225/0x260 [ 1367.470565][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1367.476289][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1367.481948][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1367.487438][ C1] ? assign_work+0x3d2/0x5d0 [ 1367.492093][ C1] worker_thread+0xa55/0xfc0 [ 1367.496793][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1367.502815][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1367.507669][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1367.513686][ C1] kthread+0x2fa/0x390 [ 1367.517782][ C1] ? pr_cont_work+0x560/0x560 [ 1367.522514][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1367.527140][ C1] ret_from_fork+0x48/0x80 [ 1367.531557][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1367.536186][ C1] ret_from_fork_asm+0x11/0x20 [ 1367.541149][ C1] [ 1367.544203][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1367.551483][ C1] CPU: 1 PID: 4273 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1367.559107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1367.569448][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1367.575825][ C1] Call Trace: [ 1367.579126][ C1] [ 1367.581996][ C1] dump_stack_lvl+0x18c/0x250 [ 1367.586929][ C1] ? show_regs_print_info+0x20/0x20 [ 1367.592141][ C1] ? load_image+0x420/0x420 [ 1367.596682][ C1] panic+0x2dc/0x730 [ 1367.600599][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1367.605104][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1367.610063][ C1] __warn+0x2e0/0x470 [ 1367.614070][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1367.619793][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1367.625513][ C1] report_bug+0x2be/0x4f0 [ 1367.629864][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1367.635581][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1367.641315][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 1367.647035][ C1] handle_bug+0xcf/0x120 [ 1367.651317][ C1] exc_invalid_op+0x1a/0x50 [ 1367.655970][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1367.660843][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1367.667221][ C1] Code: 4c 8b 4d 00 48 c7 c7 20 98 1c 8b 48 c7 c6 80 94 1c 8b 48 c7 c2 a0 99 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 de 84 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 13 f6 59 [ 1367.686942][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1367.693021][ C1] RAX: 1994c9e5f1750a00 RBX: ffffffff9748fcd0 RCX: ffff88802ff00000 [ 1367.701031][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1367.709129][ C1] RBP: ffffffff8accac60 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1367.717281][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff8880255c9e00 [ 1367.725537][ C1] R13: ffffffff897b0790 R14: ffff8880255c9000 R15: ffff8880255c9c90 [ 1367.733621][ C1] ? rose_transmit_link+0x740/0x740 [ 1367.738953][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1367.744452][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1367.749683][ C1] __kmem_cache_free+0xba/0x1e0 [ 1367.754630][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1367.759655][ C1] ? call_timer_fn+0x171/0x540 [ 1367.764703][ C1] call_timer_fn+0x189/0x540 [ 1367.769340][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1367.774413][ C1] ? call_timer_fn+0xd2/0x540 [ 1367.779139][ C1] ? __run_timers+0x800/0x800 [ 1367.783932][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1367.789137][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1367.794351][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1367.799377][ C1] __run_timers+0x542/0x800 [ 1367.803926][ C1] ? detach_timer+0x2b0/0x2b0 [ 1367.808649][ C1] ? lock_chain_count+0x20/0x20 [ 1367.813590][ C1] run_timer_softirq+0x67/0xf0 [ 1367.818353][ C1] handle_softirqs+0x280/0x820 [ 1367.823118][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1367.828066][ C1] ? do_softirq+0x1a0/0x1a0 [ 1367.832660][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1367.837896][ C1] __irq_exit_rcu+0xd3/0x190 [ 1367.842500][ C1] ? irq_exit_rcu+0x20/0x20 [ 1367.847025][ C1] irq_exit_rcu+0x9/0x20 [ 1367.851287][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1367.856950][ C1] [ 1367.859889][ C1] [ 1367.862934][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1367.869121][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 1367.875086][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 99 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1367.894893][ C1] RSP: 0018:ffffc9000e286f78 EFLAGS: 00000286 [ 1367.901050][ C1] RAX: 1994c9e5f1750a00 RBX: 0000000000000000 RCX: 1994c9e5f1750a00 [ 1367.909033][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 1367.917182][ C1] RBP: ffffc9000e286fd0 R08: ffffffff911c556f R09: 1ffffffff2238aad [ 1367.925170][ C1] R10: dffffc0000000000 R11: fffffbfff2238aae R12: ffff88802ff00000 [ 1367.933156][ C1] R13: dffffc0000000000 R14: ffff88807d3f8000 R15: ffff8880b8f3cac8 [ 1367.941246][ C1] ? finish_task_switch+0x265/0x8f0 [ 1367.946552][ C1] __schedule+0x155b/0x45a0 [ 1367.951078][ C1] ? verify_lock_unused+0x140/0x140 [ 1367.956517][ C1] ? asan.module_dtor+0x20/0x20 [ 1367.961405][ C1] ? mark_lock+0x94/0x320 [ 1367.965752][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1367.971829][ C1] ? preempt_schedule+0xc0/0xd0 [ 1367.976805][ C1] preempt_schedule_common+0x82/0xc0 [ 1367.982105][ C1] preempt_schedule+0xc0/0xd0 [ 1367.986794][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1367.992435][ C1] ? unwind_next_frame+0x1648/0x2970 [ 1367.997731][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1368.002941][ C1] ? unwind_next_frame+0x200a/0x2970 [ 1368.008227][ C1] unwind_next_frame+0x200f/0x2970 [ 1368.013373][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1368.019821][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1368.026167][ C1] ? stack_trace_save+0x100/0x100 [ 1368.031210][ C1] arch_stack_walk+0x144/0x190 [ 1368.036079][ C1] ? ieee80211_iface_work+0x717/0xc70 [ 1368.041574][ C1] stack_trace_save+0xaa/0x100 [ 1368.046369][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1368.051501][ C1] ? mark_lock+0x94/0x320 [ 1368.055833][ C1] kasan_set_track+0x4e/0x70 [ 1368.060423][ C1] ? kasan_set_track+0x4e/0x70 [ 1368.065194][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1368.070502][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1368.075785][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1368.081500][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 1368.086714][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1368.093062][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 1368.098183][ C1] kasan_save_free_info+0x2e/0x50 [ 1368.103303][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1368.108438][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1368.114035][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1368.120465][ C1] __kmem_cache_free+0xba/0x1e0 [ 1368.125342][ C1] ieee80211_ibss_rx_queued_mgmt+0x1a9e/0x2c80 [ 1368.131515][ C1] ? mark_lock+0x94/0x320 [ 1368.136029][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xe9d/0x2c80 [ 1368.142285][ C1] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1368.148011][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1368.154088][ C1] ? trace_irq_disable+0x37/0xe0 [ 1368.159028][ C1] ? lock_chain_count+0x20/0x20 [ 1368.163931][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1368.169760][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1368.175177][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1368.180916][ C1] ? kcov_remote_start+0x8f/0x7e0 [ 1368.186039][ C1] ? kcov_remote_start+0x2b/0x7e0 [ 1368.191065][ C1] ? skb_dequeue+0x124/0x160 [ 1368.195814][ C1] ieee80211_iface_work+0x717/0xc70 [ 1368.201752][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1368.207605][ C1] cfg80211_wiphy_work+0x225/0x260 [ 1368.212864][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1368.218615][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1368.224203][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1368.229689][ C1] ? assign_work+0x3d2/0x5d0 [ 1368.234400][ C1] worker_thread+0xa55/0xfc0 [ 1368.239607][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1368.245791][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1368.250778][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1368.256679][ C1] kthread+0x2fa/0x390 [ 1368.260884][ C1] ? pr_cont_work+0x560/0x560 [ 1368.265594][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1368.270198][ C1] ret_from_fork+0x48/0x80 [ 1368.274635][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1368.279231][ C1] ret_from_fork_asm+0x11/0x20 [ 1368.284017][ C1] [ 1368.287758][ C1] Kernel Offset: disabled [ 1368.292191][ C1] Rebooting in 86400 seconds..