last executing test programs: 16.862335222s ago: executing program 1 (id=863): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) unshare(0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r3, 0x24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="3d41f4342cfa20000000", @ANYRES16=r0, @ANYBLOB="33030000000001000000150000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4014) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYRESDEC=r4, @ANYBLOB, @ANYRESDEC, @ANYRESDEC, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x400c880}, 0xc0) 16.671316734s ago: executing program 1 (id=866): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080), &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0xc], [0x1000], [0x2, 0xffffffff]], '\x00', [{}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x58}}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r8, &(0x7f0000005c00), 0x56, 0x4040000) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 14.273512592s ago: executing program 4 (id=870): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 12.999963421s ago: executing program 1 (id=874): socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.time\x00', 0x26e1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x33e2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000440)=ANY=[], 0x0) 11.987101577s ago: executing program 1 (id=877): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r5, 0x6, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e00bec75a8bc68eefbb781200183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.787648485s ago: executing program 0 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfffa, 0x7, 0xff}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 10.783081335s ago: executing program 1 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, 0xfffffffffffffffd) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x2d203ae5, 0x6, 0x1, 0x2, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fa, 0x1}}, {0x0, 0x1f}}}, 0xa0) 10.571886529s ago: executing program 4 (id=882): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e00bec75a8bc68eefbb781200183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.540971659s ago: executing program 0 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) 8.184947325s ago: executing program 0 (id=885): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x7fffffff, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 7.21984434s ago: executing program 2 (id=887): socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.time\x00', 0x26e1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x33e2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000440)=ANY=[], 0x0) 7.170711931s ago: executing program 4 (id=888): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10142, 0x0) 6.344556413s ago: executing program 3 (id=889): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, r2, 0x0) 6.227950455s ago: executing program 4 (id=890): ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x3c524000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4089, 0x80}, &(0x7f0000000240), &(0x7f0000000040)) 6.227670585s ago: executing program 3 (id=891): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) lseek(0xffffffffffffffff, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e00bec75a8bc68eefbb781200183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.128078496s ago: executing program 2 (id=892): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x7fffffff, 0x9, 0xace8, 0x344f, "85ec21e1382c329131320f813d6d7ab7", 0x6, 0x7, 0x2, 0x5, 0x80, 0x2, 0x4}) 5.184572761s ago: executing program 3 (id=893): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$char_usb(r6, &(0x7f0000000100)="8e", 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 5.169990691s ago: executing program 0 (id=894): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) userfaultfd(0x80001) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xeb, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x6}}}}}}, 0x0) 5.047613513s ago: executing program 2 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) 5.038559673s ago: executing program 3 (id=896): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080), &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0xc], [0x1000], [0x2, 0xffffffff]], '\x00', [{}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x58}}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r8, &(0x7f0000005c00), 0x56, 0x4040000) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 2.693143999s ago: executing program 2 (id=897): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080), &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0xc], [0x1000], [0x2, 0xffffffff]], '\x00', [{}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x58}}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r8, &(0x7f0000005c00), 0x56, 0x4040000) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42}) mkdir(0x0, 0x0) 2.63995467s ago: executing program 3 (id=898): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e00bec75a8bc68eefbb781200183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.60896198s ago: executing program 4 (id=899): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000001c0)}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) 2.60689689s ago: executing program 0 (id=900): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c080800418e00000004fcff", 0x58}], 0x1) 832.288757ms ago: executing program 3 (id=901): syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=iaciceland,umask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=iso8859-5,errors=continue,errors=continue,errors=remount-ro,iocharset=maccroatian,errors=continue,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c000000ff000005000000000800", @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 816.753468ms ago: executing program 2 (id=902): socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.time\x00', 0x26e1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x33e2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000440)=ANY=[], 0x0) 432.315934ms ago: executing program 1 (id=903): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) lseek(0xffffffffffffffff, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e00bec75a8bc68eefbb781200183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 173.767977ms ago: executing program 2 (id=904): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffe, 0x7fffffff, @local, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 55.952719ms ago: executing program 4 (id=905): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043ef50d3cae"], 0xf8) 0s ago: executing program 0 (id=906): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xc0c0c0c0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. syzkaller login: [ 57.242490][ T4155] cgroup: Unknown subsys name 'net' [ 57.380020][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.891422][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.384475][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 60.418389][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 60.541789][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.548903][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.558860][ T4166] device bridge_slave_0 entered promiscuous mode [ 60.572184][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 60.586495][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 60.598613][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.606308][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.615119][ T4166] device bridge_slave_1 entered promiscuous mode [ 60.676706][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.690779][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 60.716122][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.754638][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.762181][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.773216][ T4173] device bridge_slave_0 entered promiscuous mode [ 60.811328][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.818490][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.826512][ T4167] device bridge_slave_0 entered promiscuous mode [ 60.839783][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.846850][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.855288][ T4173] device bridge_slave_1 entered promiscuous mode [ 60.864975][ T4166] team0: Port device team_slave_0 added [ 60.878988][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.886187][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.894822][ T4167] device bridge_slave_1 entered promiscuous mode [ 60.923208][ T4166] team0: Port device team_slave_1 added [ 60.975836][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.985134][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.992581][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.000675][ T4165] device bridge_slave_0 entered promiscuous mode [ 61.010208][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.030882][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.048942][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.056097][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.064115][ T4165] device bridge_slave_1 entered promiscuous mode [ 61.073739][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.083577][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.091111][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.117350][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.161549][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.168515][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.195294][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.221907][ T4167] team0: Port device team_slave_0 added [ 61.228541][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.237050][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.246116][ T4176] device bridge_slave_0 entered promiscuous mode [ 61.275291][ T4167] team0: Port device team_slave_1 added [ 61.281615][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.289975][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.299011][ T4176] device bridge_slave_1 entered promiscuous mode [ 61.308022][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.320145][ T4173] team0: Port device team_slave_0 added [ 61.328071][ T4173] team0: Port device team_slave_1 added [ 61.360988][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.414855][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.422276][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.448426][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.460098][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.467060][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.493779][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.507062][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.514644][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.540731][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.554021][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.573595][ T4165] team0: Port device team_slave_0 added [ 61.586640][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.593843][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.620004][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.637250][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.656504][ T4165] team0: Port device team_slave_1 added [ 61.665977][ T4166] device hsr_slave_0 entered promiscuous mode [ 61.673420][ T4166] device hsr_slave_1 entered promiscuous mode [ 61.737678][ T4176] team0: Port device team_slave_0 added [ 61.745178][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.752494][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.778771][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.800017][ T4173] device hsr_slave_0 entered promiscuous mode [ 61.809786][ T4173] device hsr_slave_1 entered promiscuous mode [ 61.816409][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.824512][ T4173] Cannot create hsr debugfs directory [ 61.839227][ T4176] team0: Port device team_slave_1 added [ 61.845958][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.853038][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.878981][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.892633][ T4167] device hsr_slave_0 entered promiscuous mode [ 61.899980][ T4167] device hsr_slave_1 entered promiscuous mode [ 61.906583][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.914229][ T4167] Cannot create hsr debugfs directory [ 61.962947][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.970040][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.996387][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.035410][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.042612][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.060665][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 62.069085][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 62.081787][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.081841][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 62.093020][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 62.118444][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 62.190981][ T4165] device hsr_slave_0 entered promiscuous mode [ 62.197853][ T4165] device hsr_slave_1 entered promiscuous mode [ 62.204713][ T4165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.212490][ T4165] Cannot create hsr debugfs directory [ 62.312525][ T4176] device hsr_slave_0 entered promiscuous mode [ 62.319835][ T4176] device hsr_slave_1 entered promiscuous mode [ 62.326661][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.334374][ T4176] Cannot create hsr debugfs directory [ 62.478142][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.490586][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.514518][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.530141][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.608925][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.626988][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.646823][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.655970][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.702876][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.736445][ T4173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.747136][ T4173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.763293][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.776790][ T4173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.786801][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.796505][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.814798][ T4173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.827404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.837759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.847464][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.854773][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.890655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.924060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.933296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.942994][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.950140][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.961259][ T4176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.971850][ T4176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.997782][ T4176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.008877][ T4176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.031368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.046289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.072168][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.090792][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.103821][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.114287][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.125586][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.134774][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.153519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.170707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.195731][ T4165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.207524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.216412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.235497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.244549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.253291][ T4165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.265808][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.283555][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.292981][ T4165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.303146][ T4165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.352179][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.362409][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.375974][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.383142][ T4211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.401520][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.411471][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.420667][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.430537][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.437639][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.465548][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.478531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.514374][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.524639][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.535720][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.544808][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.554168][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.564346][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.595707][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.605697][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.614632][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.625528][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.634341][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.642810][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.653144][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.669794][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.688646][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.718010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.728314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.735970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.745030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.754548][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.761803][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.775622][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.794603][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.807482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.816900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.826807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.838448][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.845637][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.855951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.865167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.874193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.904030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.913430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.923026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.932780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.942332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.951509][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.958559][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.966670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.976908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.986752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.995415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.019894][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.035709][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.051698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.063110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.073700][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.080820][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.089208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.097694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.106148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.115903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.125200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.132833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.140741][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 64.145244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.146928][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 64.157744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.160964][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 64.175039][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 64.181225][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 64.195108][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.224431][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.250514][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.264760][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.273666][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.282963][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.292644][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.302918][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.311730][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.321243][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.331164][ T4167] device veth0_vlan entered promiscuous mode [ 64.356756][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.370685][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.380373][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.388602][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.405111][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.414077][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.421237][ T4211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.429722][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.438382][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.447080][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.454202][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.462106][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.471506][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.480378][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.488741][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.497962][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.528494][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.551540][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.561221][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.575268][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.584747][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.608157][ T4166] device veth0_vlan entered promiscuous mode [ 64.627606][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.635754][ T4167] device veth1_vlan entered promiscuous mode [ 64.648297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.665006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.674559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.684632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.693991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.702514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.716154][ T4166] device veth1_vlan entered promiscuous mode [ 64.740833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.748601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.758224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.767657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.776889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.786210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.795188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.805666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.823524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.832451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.841418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.859611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.868191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.890353][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.899809][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.915139][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.926698][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.936024][ T4167] device veth0_macvtap entered promiscuous mode [ 64.960159][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.969002][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.978845][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.988529][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.996429][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.010368][ T4167] device veth1_macvtap entered promiscuous mode [ 65.044720][ T4166] device veth0_macvtap entered promiscuous mode [ 65.059096][ T4173] device veth0_vlan entered promiscuous mode [ 65.068981][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.078044][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.096140][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.105994][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.114747][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.123511][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.132440][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.141467][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.152564][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.173616][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.184309][ T4166] device veth1_macvtap entered promiscuous mode [ 65.204332][ T4173] device veth1_vlan entered promiscuous mode [ 65.213503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.223096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.232035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.241421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.255878][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.274563][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.287527][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.298915][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.321801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.330316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.339023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.349595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.358293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.371455][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.380994][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.390134][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.398858][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.412615][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.423431][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.439066][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.449940][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.461909][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.474677][ T4173] device veth0_macvtap entered promiscuous mode [ 65.502345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.512384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.521389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.530991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.542002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.550204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.557724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.571248][ T4173] device veth1_macvtap entered promiscuous mode [ 65.583245][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.596117][ T4176] device veth0_vlan entered promiscuous mode [ 65.616824][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.631507][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.641318][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.653137][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.683412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.692337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.702044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.710278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.724234][ T4176] device veth1_vlan entered promiscuous mode [ 65.738605][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.752353][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.764276][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.775856][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.788970][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.822264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.837637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.847697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.886423][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.903601][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.913835][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.924638][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.936252][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.959586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.967797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.985776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.027876][ T4176] device veth0_macvtap entered promiscuous mode [ 66.041600][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.051350][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.061047][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.070158][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.091578][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.101247][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.110466][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.120520][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.129240][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.148865][ T4176] device veth1_macvtap entered promiscuous mode [ 66.210268][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.218300][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.219871][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 66.232441][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.255701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.267074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.268312][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.275759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.288863][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 66.292526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.296165][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 66.310950][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 66.321486][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 66.330132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.338083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.350616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.358976][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.370580][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.381220][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.392013][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.402201][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.413442][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.425904][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.437226][ T4165] device veth0_vlan entered promiscuous mode [ 66.454192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.464029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.498134][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.507646][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.518848][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.529655][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.534005][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.547886][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.557941][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.568940][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.581369][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.606025][ T4165] device veth1_vlan entered promiscuous mode [ 66.614824][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.624355][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.632686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.642577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.652327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.660988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.669879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.678664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.690096][ T4176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.698828][ T4176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.718187][ T4176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.727002][ T4176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.786344][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.814892][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.824886][ T4165] device veth0_macvtap entered promiscuous mode [ 66.835859][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.845070][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.854291][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.878324][ T4165] device veth1_macvtap entered promiscuous mode [ 66.893682][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.910935][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.936021][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.956123][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.977451][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.997369][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.008985][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.021543][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.033316][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.051126][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.064440][ T26] audit: type=1326 audit(1743811375.369:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.073507][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.093328][ T26] audit: type=1326 audit(1743811375.369:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.098864][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.136211][ T26] audit: type=1326 audit(1743811375.369:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.137179][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.162252][ T26] audit: type=1326 audit(1743811375.369:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.204783][ T26] audit: type=1326 audit(1743811375.369:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.219628][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.230074][ T26] audit: type=1326 audit(1743811375.369:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.248534][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.266442][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.278832][ T26] audit: type=1326 audit(1743811375.369:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.303911][ T26] audit: type=1326 audit(1743811375.369:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.342678][ T26] audit: type=1326 audit(1743811375.369:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.367817][ T26] audit: type=1326 audit(1743811375.369:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4243 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 67.381660][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.402337][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.414497][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.426562][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.436872][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.447533][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.457634][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.468540][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.482107][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.494586][ T4165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.505309][ T4165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.514760][ T4165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.524038][ T4165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.556025][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.566136][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.597774][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.757897][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.785006][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.814318][ T4256] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.909833][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.940785][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.959750][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.967793][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.025104][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.071101][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.215096][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.250095][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.276582][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.300579][ T4216] Bluetooth: hci4: command 0x0419 tx timeout [ 68.321224][ T4267] netlink: 'syz.2.8': attribute type 4 has an invalid length. [ 68.337476][ T4267] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 69.099808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.108887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.118607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.128355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 69.137787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 69.147244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.156607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.169565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 69.219874][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 69.315717][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 69.332657][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 69.353029][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 69.617357][ T4280] device veth1_macvtap left promiscuous mode [ 70.496950][ T4275] loop4: detected capacity change from 0 to 32768 [ 71.251635][ T4287] device veth1_macvtap left promiscuous mode [ 71.343759][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.350700][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.428247][ T4275] XFS (loop4): Mounting V5 Filesystem [ 71.442513][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 71.635698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 72.241889][ T4275] XFS (loop4): Ending clean mount [ 72.409222][ T4165] XFS (loop4): Unmounting Filesystem [ 72.461758][ T4306] tipc: Started in network mode [ 72.467143][ T4306] tipc: Node identity 4, cluster identity 4711 [ 72.473569][ T4306] tipc: Node number set to 4 [ 76.602126][ T4309] sched: RT throttling activated [ 77.985990][ T4347] loop0: detected capacity change from 0 to 4096 [ 78.070946][ T4347] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 78.082071][ T4347] ntfs3: loop0: Failed to load $Extend. [ 78.339542][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.292466][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 79.317218][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.331963][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.339473][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 79.394140][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.437634][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.490206][ T23] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 79.498827][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.509204][ T23] usb 4-1: config 0 has no interface number 0 [ 79.515483][ T23] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.529623][ T23] usb 4-1: New USB device found, idVendor=04ff, idProduct=0066, bcdDevice=d8.b0 [ 79.540439][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.569350][ T23] usb 4-1: config 0 descriptor?? [ 79.623028][ T23] usb 4-1: bad CDC descriptors [ 79.897434][ T13] usb 4-1: USB disconnect, device number 2 [ 81.069488][ T4384] tipc: Started in network mode [ 81.074406][ T4384] tipc: Node identity 4, cluster identity 4711 [ 81.080661][ T4384] tipc: Node number set to 4 [ 81.241143][ T4385] device veth1_macvtap left promiscuous mode [ 81.584108][ T1323] cfg80211: failed to load regulatory.db [ 83.960362][ T4213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.319411][ T4213] usb 1-1: Using ep0 maxpacket: 32 [ 84.469544][ T4213] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 84.482459][ T4213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.495553][ T4213] usb 1-1: config 0 has no interface number 0 [ 84.503821][ T4213] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.524201][ T4213] usb 1-1: New USB device found, idVendor=04ff, idProduct=0066, bcdDevice=d8.b0 [ 84.550365][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.591201][ T4213] usb 1-1: config 0 descriptor?? [ 84.661166][ T4213] usb 1-1: bad CDC descriptors [ 84.914692][ T4213] usb 1-1: USB disconnect, device number 2 [ 85.599554][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 85.623946][ T4459] loop0: detected capacity change from 0 to 256 [ 85.652547][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 86.369943][ T4472] device veth1_macvtap left promiscuous mode [ 87.159631][ T1323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.453002][ T4495] device veth1_macvtap left promiscuous mode [ 87.699668][ T1323] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 87.712962][ T1323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.738944][ T1323] usb 5-1: config 0 descriptor?? [ 87.984445][ T4500] loop2: detected capacity change from 0 to 2048 [ 88.096744][ T4500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.159801][ T1323] usb 5-1: Cannot set autoneg [ 89.165159][ T1323] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 89.252980][ T4515] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.792513][ T1323] usb 5-1: USB disconnect, device number 2 [ 89.825671][ T4522] loop4: detected capacity change from 0 to 512 [ 89.930522][ T4522] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.022667][ T4522] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.89: invalid indirect mapped block 4294967295 (level 1) [ 90.166638][ T4522] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.89: invalid indirect mapped block 4294967295 (level 1) [ 90.238088][ T4522] EXT4-fs (loop4): 2 truncates cleaned up [ 90.246331][ T4522] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,,errors=continue. Quota mode: writeback. [ 90.284460][ T4522] EXT4-fs error (device loop4): ext4_get_parent:1906: inode #11: comm syz.4.89: bad parent inode number: 3 [ 90.581876][ T4528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 91.244052][ T4542] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 91.266978][ T4543] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 91.280291][ T4544] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 91.296806][ T4545] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 91.952301][ T4552] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.089620][ T1323] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.469943][ T1323] usb 5-1: Using ep0 maxpacket: 8 [ 92.589759][ T1323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.649577][ T1323] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 92.718870][ T1323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 92.756544][ T1323] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.789781][ T1323] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 93.820449][ T1323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.843711][ T1323] usb 5-1: Product: syz [ 93.848351][ T1323] usb 5-1: Manufacturer: syz [ 93.899462][ T1323] usb 5-1: SerialNumber: syz [ 93.947886][ T1323] usb 5-1: config 0 descriptor?? [ 94.001442][ T4553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.024283][ T4580] loop3: detected capacity change from 0 to 4096 [ 94.285869][ T1323] ati_remote_probe: Unexpected desc.bNumEndpoints [ 94.348176][ T4580] overlayfs: unrecognized mount option "smackfsroot=\[" or missing value [ 94.954304][ T4597] udc-core: couldn't find an available UDC or it's busy [ 94.968853][ T4597] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.001157][ T4597] udc-core: couldn't find an available UDC or it's busy [ 95.011007][ T4597] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.424702][ T4209] usb 5-1: USB disconnect, device number 3 [ 97.918351][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 99.124449][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 99.124466][ T26] audit: type=1326 audit(1743811407.399:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4631 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b68e23169 code=0x7ffc0000 [ 99.183377][ T4641] loop3: detected capacity change from 0 to 256 [ 99.256075][ T4647] loop4: detected capacity change from 0 to 64 [ 99.450229][ T4641] FAT-fs (loop3): Directory bread(block 64) failed [ 99.846060][ T4641] FAT-fs (loop3): Directory bread(block 65) failed [ 100.841635][ T4641] FAT-fs (loop3): Directory bread(block 66) failed [ 100.848656][ T4641] FAT-fs (loop3): Directory bread(block 67) failed [ 101.608393][ T4641] FAT-fs (loop3): Directory bread(block 68) failed [ 101.634187][ T4641] FAT-fs (loop3): Directory bread(block 69) failed [ 102.698577][ T4641] FAT-fs (loop3): Directory bread(block 70) failed [ 102.749645][ T4641] FAT-fs (loop3): Directory bread(block 71) failed [ 102.801837][ T4641] FAT-fs (loop3): Directory bread(block 72) failed [ 103.012291][ T4641] FAT-fs (loop3): Directory bread(block 73) failed [ 104.021628][ T4165] hfs: node 4:3 still has 1 user(s)! [ 104.909734][ T4213] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.162071][ T4213] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.373110][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.566874][ T4213] usb 1-1: Product: syz [ 106.909694][ T4213] usb 1-1: Manufacturer: syz [ 107.012003][ T4213] usb 1-1: SerialNumber: syz [ 107.062402][ T4700] loop4: detected capacity change from 0 to 256 [ 107.085954][ T4213] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.299997][ T4700] ======================================================= [ 107.299997][ T4700] WARNING: The mand mount option has been deprecated and [ 107.299997][ T4700] and is ignored by this kernel. Remove the mand [ 107.299997][ T4700] option from the mount to silence this warning. [ 107.299997][ T4700] ======================================================= [ 108.027426][ T21] usb 1-1: USB disconnect, device number 3 [ 108.049667][ T4213] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 108.131048][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 108.583030][ T4711] syz.0.146 uses obsolete (PF_INET,SOCK_PACKET) [ 110.929858][ T21] Bluetooth: hci3: command 0x0405 tx timeout [ 115.293507][ T4741] loop0: detected capacity change from 0 to 512 [ 115.825998][ T4741] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.830514][ T4212] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.837720][ T4741] EXT4-fs (loop0): group descriptors corrupted! [ 116.739562][ T4212] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.772934][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.849383][ T4212] usb 4-1: Product: syz [ 116.889665][ T4212] usb 4-1: Manufacturer: syz [ 116.924395][ T4212] usb 4-1: SerialNumber: syz [ 116.990612][ T4212] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.550958][ T4212] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 119.650923][ T4212] usb 4-1: ath9k_htc: USB layer deinitialized [ 119.816990][ T1323] usb 4-1: USB disconnect, device number 3 [ 121.122177][ T4210] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.101350][ T4802] loop3: detected capacity change from 0 to 128 [ 122.150720][ T4802] FAT-fs (loop3): Unrecognized mount option "defcontext=system_u" or missing value [ 122.276571][ T4797] loop0: detected capacity change from 0 to 32768 [ 122.455154][ T4797] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.474169][ T4210] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 122.516659][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.570858][ T4210] usb 5-1: Product: syz [ 122.575635][ T4210] usb 5-1: Manufacturer: syz [ 122.625328][ T4210] usb 5-1: SerialNumber: syz [ 122.675489][ T4210] usb 5-1: config 0 descriptor?? [ 122.720824][ T4210] ch341 5-1:0.0: ch341-uart converter detected [ 123.259048][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 123.301106][ T4811] loop3: detected capacity change from 0 to 40427 [ 123.387254][ T4811] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 123.396220][ T4811] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 123.429013][ T4811] F2FS-fs (loop3): invalid crc value [ 123.463234][ T4811] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.533170][ T4811] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 123.550106][ T4811] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.859493][ T4210] ch341-uart ttyUSB0: failed to read break control: -71 [ 123.935205][ T4210] ch341-uart: probe of ttyUSB0 failed with error -71 [ 123.965716][ T4210] usb 5-1: USB disconnect, device number 4 [ 124.723082][ T4210] ch341 5-1:0.0: device disconnected [ 126.537564][ T4841] loop0: detected capacity change from 0 to 32768 [ 126.597611][ T4841] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.184 (4841) [ 126.778248][ T4841] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.791307][ T4841] BTRFS info (device loop0): force clearing of disk cache [ 126.803393][ T4841] BTRFS info (device loop0): enabling ssd optimizations [ 126.813623][ T4841] BTRFS info (device loop0): using spread ssd allocation scheme [ 126.822241][ T4841] BTRFS info (device loop0): using free space tree [ 126.830603][ T4841] BTRFS info (device loop0): has skinny extents [ 128.883270][ T4841] BTRFS info (device loop0): clearing free space tree [ 128.891213][ T4841] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.901942][ T4841] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.908257][ T4883] tipc: Started in network mode [ 128.951643][ T4841] BTRFS info (device loop0): creating free space tree [ 128.962715][ T4841] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.973155][ T4841] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.990211][ T4883] tipc: Node identity 4, cluster identity 4711 [ 128.996977][ T4883] tipc: Node number set to 4 [ 129.239889][ T4841] BTRFS info (device loop0): balance: start -susage=12582912,drange=65536..8,limit=10376293541461622786,limit=2..2415919104 [ 129.263567][ T4841] BTRFS info (device loop0): relocating block group 1048576 flags system [ 129.348550][ T4841] BTRFS info (device loop0): balance: ended with status: 0 [ 130.144910][ T4890] device batadv_slave_1 entered promiscuous mode [ 130.164839][ T4889] device batadv_slave_1 left promiscuous mode [ 131.281632][ T4911] loop0: detected capacity change from 0 to 40427 [ 131.382993][ T4911] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 131.392275][ T4911] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 131.410835][ T4911] F2FS-fs (loop0): invalid crc value [ 131.486049][ T4911] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.560146][ T4911] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.567671][ T4911] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.442954][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.450900][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.875779][ T4934] loop0: detected capacity change from 0 to 1024 [ 135.194492][ T26] audit: type=1800 audit(1743811443.499:18): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.198" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=25 res=0 errno=0 [ 135.449601][ T4210] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.309328][ T4210] usb 5-1: Using ep0 maxpacket: 16 [ 136.444645][ T4210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 136.507492][ T4210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 136.580884][ T4210] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 136.605246][ T4945] loop0: detected capacity change from 0 to 40427 [ 136.652181][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.738911][ T4945] F2FS-fs (loop0): invalid crc value [ 136.757085][ T4210] usb 5-1: config 0 descriptor?? [ 136.815678][ T4945] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.867591][ T4945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.918304][ T4950] Zero length message leads to an empty skb [ 137.172522][ T4955] loop2: detected capacity change from 0 to 32768 [ 137.229336][ T4955] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.203 (4955) [ 137.252224][ T4955] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.264807][ T4955] BTRFS info (device loop2): force clearing of disk cache [ 137.273193][ T4955] BTRFS info (device loop2): enabling ssd optimizations [ 137.281873][ T4955] BTRFS info (device loop2): using spread ssd allocation scheme [ 137.290317][ T4955] BTRFS info (device loop2): using free space tree [ 137.297340][ T4955] BTRFS info (device loop2): has skinny extents [ 137.362374][ T4210] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 137.562310][ T4955] BTRFS info (device loop2): clearing free space tree [ 137.571006][ T4955] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.582106][ T4955] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.602252][ T4955] BTRFS info (device loop2): creating free space tree [ 137.615479][ T4955] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.626370][ T4955] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.817706][ T4955] BTRFS info (device loop2): balance: start -susage=12582912,drange=65536..8,limit=10376293541461622786,limit=2..2415919104 [ 137.842291][ T4955] BTRFS info (device loop2): relocating block group 1048576 flags system [ 137.920561][ T4955] BTRFS info (device loop2): balance: ended with status: 0 [ 138.073732][ T4981] tipc: Started in network mode [ 138.089456][ T4981] tipc: Node identity 4, cluster identity 4711 [ 138.117034][ T4981] tipc: Node number set to 4 [ 138.239145][ T4210] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 138.264632][ T4210] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 138.300907][ T4210] kovaplus: probe of 0003:1E7D:2D50.0001 failed with error -71 [ 138.341987][ T4210] usb 5-1: USB disconnect, device number 5 [ 139.644836][ T4995] device batadv_slave_1 entered promiscuous mode [ 140.240861][ T4992] device batadv_slave_1 left promiscuous mode [ 141.778732][ T5015] loop2: detected capacity change from 0 to 40427 [ 141.873205][ T5015] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 141.886390][ T5015] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 141.904887][ T5015] F2FS-fs (loop2): invalid crc value [ 141.968650][ T5015] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.052863][ T5015] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.061819][ T5015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.225063][ T5022] process 'syz.4.214' launched '/dev/fd/4' with NULL argv: empty string added [ 142.289096][ T5024] loop3: detected capacity change from 0 to 1024 [ 143.639588][ T26] audit: type=1800 audit(1743811451.939:19): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.213" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=25 res=0 errno=0 [ 144.153305][ T5033] loop0: detected capacity change from 0 to 32768 [ 144.452876][ T5033] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.216 (5033) [ 144.525390][ T5035] loop1: detected capacity change from 0 to 40427 [ 144.775445][ T5043] loop3: detected capacity change from 0 to 32768 [ 144.790013][ T5033] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 144.803727][ T5033] BTRFS info (device loop0): force clearing of disk cache [ 144.805388][ T5035] F2FS-fs (loop1): invalid crc value [ 144.813510][ T5033] BTRFS info (device loop0): enabling ssd optimizations [ 144.813568][ T5033] BTRFS info (device loop0): using spread ssd allocation scheme [ 144.813587][ T5033] BTRFS info (device loop0): using free space tree [ 144.813604][ T5033] BTRFS info (device loop0): has skinny extents [ 144.917273][ T5035] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.974573][ T5043] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.221 (5043) [ 145.014446][ T5035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.080661][ T4157] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4157) [ 145.338347][ T5033] BTRFS info (device loop0): clearing free space tree [ 145.346635][ T5033] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.357523][ T5033] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.390425][ T5033] BTRFS info (device loop0): creating free space tree [ 145.399167][ T5033] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.410676][ T5033] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.596272][ T5033] BTRFS info (device loop0): balance: start -susage=12582912,drange=65536..8,limit=10376293541461622786,limit=2..2415919104 [ 145.612577][ T5033] BTRFS info (device loop0): relocating block group 1048576 flags system [ 145.669772][ T5033] BTRFS info (device loop0): balance: ended with status: 0 [ 145.854667][ T5072] loop3: detected capacity change from 0 to 512 [ 146.132566][ T5072] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 146.189509][ T5072] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.274490][ T5079] loop1: detected capacity change from 0 to 128 [ 146.368507][ T5068] loop2: detected capacity change from 0 to 32768 [ 146.430332][ T5079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.461666][ T5079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.480714][ T5068] [ 146.480714][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.480714][ T5068] [ 146.684403][ T5068] [ 146.684403][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.684403][ T5068] [ 146.717960][ T5068] [ 146.717960][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.717960][ T5068] [ 146.735527][ T5068] [ 146.735527][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.735527][ T5068] [ 146.739470][ T3146] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 146.750612][ T5068] [ 146.750612][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.750612][ T5068] [ 146.785213][ T5068] [ 146.785213][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.785213][ T5068] [ 146.805291][ T5068] [ 146.805291][ T5068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.805291][ T5068] [ 146.915637][ T276] [ 146.915637][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.915637][ T276] [ 146.935191][ T26] audit: type=1800 audit(1743811455.239:20): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.223" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 147.018140][ T5090] [ 147.018140][ T5090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.018140][ T5090] [ 147.069792][ T5090] [ 147.069792][ T5090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.069792][ T5090] [ 147.243699][ T5090] [ 147.243699][ T5090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.243699][ T5090] [ 147.258783][ T5090] [ 147.258783][ T5090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.258783][ T5090] [ 147.273127][ T5090] [ 147.273127][ T5090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.273127][ T5090] [ 147.318924][ T275] [ 147.318924][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.318924][ T275] [ 147.349617][ T3146] usb 5-1: config 8 has an invalid interface number: 176 but max is 0 [ 147.382096][ T3146] usb 5-1: config 8 has no interface number 0 [ 147.389767][ T3146] usb 5-1: config 8 interface 176 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 147.443486][ T3146] usb 5-1: config 8 interface 176 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 147.490974][ T4302] [ 147.490974][ T4302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.490974][ T4302] [ 147.506972][ T3146] usb 5-1: config 8 interface 176 has no altsetting 0 [ 147.764370][ T5093] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.109461][ T4302] [ 148.109461][ T4302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.109461][ T4302] [ 148.175945][ T3146] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 148.293715][ T275] [ 148.293715][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.293715][ T275] [ 148.327614][ T3146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.529330][ T4173] [ 148.529330][ T4173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.529330][ T4173] [ 148.579662][ T5083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.589211][ T4173] [ 148.589211][ T4173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.589211][ T4173] [ 148.676047][ T5105] loop1: detected capacity change from 0 to 8 [ 148.734653][ T5105] squashfs: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ' [ 148.840108][ T3146] usb 5-1: string descriptor 0 read error: -71 [ 148.958804][ T3146] ir_toy 5-1:8.176: required endpoints not found [ 149.345087][ T3146] usb 5-1: USB disconnect, device number 6 [ 149.749720][ T4209] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.529616][ T4209] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 150.963189][ T4209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.981245][ T4209] usb 1-1: Product: syz [ 150.986999][ T4209] usb 1-1: Manufacturer: syz [ 150.997991][ T4209] usb 1-1: SerialNumber: syz [ 151.581339][ T4209] usb 1-1: config 0 descriptor?? [ 151.634085][ T4209] ch341 1-1:0.0: ch341-uart converter detected [ 151.829528][ T4209] usb 1-1: failed to receive control message: -71 [ 151.910108][ T4209] ch341-uart: probe of ttyUSB0 failed with error -71 [ 151.940395][ T4209] usb 1-1: USB disconnect, device number 4 [ 151.971494][ T4209] ch341 1-1:0.0: device disconnected [ 158.039471][ T4212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.283159][ T5165] loop0: detected capacity change from 0 to 32768 [ 158.343260][ T5165] [ 158.343260][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.343260][ T5165] [ 158.403254][ T5165] [ 158.403254][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.403254][ T5165] [ 158.414809][ T5165] [ 158.414809][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.414809][ T5165] [ 158.428122][ T5165] [ 158.428122][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.428122][ T5165] [ 158.440771][ T5165] [ 158.440771][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.440771][ T5165] [ 158.452751][ T5165] [ 158.452751][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.452751][ T5165] [ 158.489395][ T5165] [ 158.489395][ T5165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.489395][ T5165] [ 158.510045][ T276] [ 158.510045][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 158.510045][ T276] [ 159.459496][ T4212] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 159.471153][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.479797][ T4212] usb 3-1: Product: syz [ 159.484716][ T4212] usb 3-1: Manufacturer: syz [ 159.490649][ T4212] usb 3-1: SerialNumber: syz [ 159.500469][ T4212] usb 3-1: config 0 descriptor?? [ 159.691224][ T4167] [ 159.691224][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.691224][ T4167] [ 159.691900][ T4212] ch341 3-1:0.0: ch341-uart converter detected [ 159.715703][ T4167] [ 159.715703][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.715703][ T4167] [ 160.879528][ T4212] ch341-uart ttyUSB0: failed to read break control: -71 [ 160.894397][ T4212] ch341-uart: probe of ttyUSB0 failed with error -71 [ 160.984694][ T4212] usb 3-1: USB disconnect, device number 2 [ 161.053814][ T4212] ch341 3-1:0.0: device disconnected [ 163.339741][ T3146] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.619567][ T3146] usb 3-1: Using ep0 maxpacket: 16 [ 163.779893][ T3146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 163.851233][ T3146] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 163.999457][ T3146] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 164.044560][ T3146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.147503][ T3146] usb 3-1: config 0 descriptor?? [ 166.253272][ T3146] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 166.909496][ T3146] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 166.918193][ T3146] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 168.038842][ T3146] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -71 [ 168.126523][ T3146] usb 3-1: USB disconnect, device number 3 [ 171.237371][ T5305] loop1: detected capacity change from 0 to 32768 [ 171.439970][ T5305] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.289 (5305) [ 171.820051][ T5305] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 171.829548][ T5305] BTRFS info (device loop1): force clearing of disk cache [ 171.836797][ T5305] BTRFS info (device loop1): enabling ssd optimizations [ 171.843825][ T5305] BTRFS info (device loop1): using spread ssd allocation scheme [ 171.851501][ T5305] BTRFS info (device loop1): using free space tree [ 171.858712][ T5305] BTRFS info (device loop1): has skinny extents [ 173.200463][ T5305] BTRFS info (device loop1): clearing free space tree [ 173.207341][ T5305] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.217867][ T5305] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.262679][ T5305] BTRFS info (device loop1): creating free space tree [ 173.270833][ T5305] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.280834][ T5305] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.321954][ T5305] BTRFS info (device loop1): balance: start -susage=12582912,drange=65536..8,limit=10376293541461622786,limit=2..2415919104 [ 173.339061][ T5305] BTRFS info (device loop1): relocating block group 1048576 flags system [ 173.370385][ T5305] BTRFS info (device loop1): balance: ended with status: 0 [ 173.660445][ T4170] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.864089][ T4170] usb 1-1: Using ep0 maxpacket: 16 [ 175.051625][ T4170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 175.073730][ T4170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 175.118618][ T4170] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 175.159356][ T4170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.187684][ T4170] usb 1-1: config 0 descriptor?? [ 175.530013][ T5358] loop1: detected capacity change from 0 to 32768 [ 175.754047][ T4170] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 178.372809][ T4170] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 178.381426][ T4170] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 178.480641][ T4170] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -71 [ 178.549972][ T4170] usb 1-1: USB disconnect, device number 5 [ 184.657355][ T5428] loop0: detected capacity change from 0 to 2048 [ 185.125738][ T5428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.379375][ T1323] Bluetooth: hci1: command 0x0406 tx timeout [ 186.395781][ T1323] Bluetooth: hci0: command 0x0406 tx timeout [ 186.539465][ T1323] Bluetooth: hci2: command 0x0406 tx timeout [ 186.545959][ T1323] Bluetooth: hci3: command 0x0406 tx timeout [ 187.406887][ T1323] Bluetooth: hci4: command 0x0406 tx timeout [ 189.511040][ T5475] loop0: detected capacity change from 0 to 32768 [ 194.221806][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.265875][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.669070][ T5535] loop3: detected capacity change from 0 to 2048 [ 195.884956][ T5535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.246447][ T5562] loop2: detected capacity change from 0 to 32768 [ 215.284990][ T5713] loop0: detected capacity change from 0 to 512 [ 215.465232][ T5713] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 215.484719][ T5713] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.123005][ T5770] loop3: detected capacity change from 0 to 512 [ 221.392751][ T5770] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 221.411262][ T5770] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.448958][ T5779] loop1: detected capacity change from 0 to 256 [ 226.306358][ T5812] loop0: detected capacity change from 0 to 32768 [ 226.371403][ T5812] loop0: p1 p2 p3 < p5 p6 > [ 226.396809][ T5812] loop0: p1 size 242222080 extends beyond EOD, truncated [ 226.500365][ T5812] loop0: p2 start 4294967295 is beyond EOD, truncated [ 228.408845][ T4475] udevd[4475]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 228.427206][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 228.457211][ T4157] udevd[4157]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 229.134576][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 239.805462][ T26] audit: type=1326 audit(1743811548.109:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 239.881656][ T26] audit: type=1326 audit(1743811548.149:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 239.968041][ T5952] loop0: detected capacity change from 0 to 64 [ 239.996226][ T26] audit: type=1326 audit(1743811548.149:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 241.464412][ T4167] hfs: node 4:3 still has 1 user(s)! [ 254.776877][ T6060] loop0: detected capacity change from 0 to 32768 [ 254.833221][ T6060] loop0: p1 p2 p3 < p5 p6 > [ 254.839730][ T6060] loop0: p1 size 242222080 extends beyond EOD, truncated [ 254.864037][ T6060] loop0: p2 start 4294967295 is beyond EOD, truncated [ 255.087143][ T4475] udevd[4475]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 255.087327][ T4157] udevd[4157]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 255.111312][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 255.111365][ T4681] udevd[4681]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 255.225286][ T6079] loop2: detected capacity change from 0 to 1024 [ 255.359368][ T6079] EXT4-fs (loop2): Ignoring removed orlov option [ 255.365838][ T6079] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 255.463672][ T6079] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue. Quota mode: none. [ 255.662607][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.670519][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.679960][ T6091] loop3: detected capacity change from 0 to 8192 [ 256.812177][ T6091] loop3: p1 p3 p4 [ 256.812177][ T6091] p3: [ 256.844327][ T6091] loop3: p3 size 4294967040 extends beyond EOD, truncated [ 256.899592][ T6091] loop3: p4 start 261888 is beyond EOD, truncated [ 256.941586][ T6091] loop3: p6 size 4294967040 extends beyond EOD, truncated [ 257.461706][ T5089] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.739623][ T5089] usb 5-1: Using ep0 maxpacket: 8 [ 257.866354][ T5089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.918752][ T5089] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.099563][ T5089] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.117182][ T5089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.144050][ T5089] usb 5-1: Product: syz [ 258.164793][ T5089] usb 5-1: Manufacturer: syz [ 258.193506][ T5089] usb 5-1: SerialNumber: syz [ 258.262422][ T6131] loop2: detected capacity change from 0 to 2048 [ 258.405090][ T6131] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,usrjquota=,. Quota mode: none. [ 258.539573][ T5089] usb 5-1: 0:2 : does not exist [ 258.587853][ T5089] usb 5-1: USB disconnect, device number 7 [ 258.653123][ T6131] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.528: bg 0: block 234: padding at end of block bitmap is not set [ 258.718244][ T6131] EXT4-fs (loop2): Remounting filesystem read-only [ 258.842964][ T4157] udevd[4157]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.597977][ T6160] tipc: Started in network mode [ 260.661367][ T6160] tipc: Node identity 4, cluster identity 4711 [ 260.744677][ T6160] tipc: Node number set to 4 [ 261.707135][ T6175] loop0: detected capacity change from 0 to 256 [ 262.145786][ T6175] FAT-fs (loop0): Directory bread(block 64) failed [ 262.165761][ T6175] FAT-fs (loop0): Directory bread(block 65) failed [ 262.196926][ T6175] FAT-fs (loop0): Directory bread(block 66) failed [ 262.234058][ T6175] FAT-fs (loop0): Directory bread(block 67) failed [ 262.260237][ T6175] FAT-fs (loop0): Directory bread(block 68) failed [ 262.276940][ T6175] FAT-fs (loop0): Directory bread(block 69) failed [ 262.294836][ T6175] FAT-fs (loop0): Directory bread(block 70) failed [ 262.318968][ T6175] FAT-fs (loop0): Directory bread(block 71) failed [ 262.337010][ T6175] FAT-fs (loop0): Directory bread(block 72) failed [ 262.357461][ T6175] FAT-fs (loop0): Directory bread(block 73) failed [ 264.143811][ T6213] SET target dimension over the limit! [ 265.744281][ T6224] loop2: detected capacity change from 0 to 8192 [ 265.799316][ T1323] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 265.843379][ T6224] loop2: p1 p3 p4 [ 265.843379][ T6224] p3: [ 265.915577][ T6224] loop2: p3 size 4294967040 extends beyond EOD, truncated [ 265.940659][ T6224] loop2: p4 start 261888 is beyond EOD, truncated [ 265.975662][ T6224] loop2: p6 size 4294967040 extends beyond EOD, truncated [ 266.159683][ T1323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.192521][ T1323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.229391][ T1323] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 266.248089][ T1323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.302807][ T1323] usb 5-1: config 0 descriptor?? [ 266.807114][ T1323] wacom 0003:056A:0314.0004: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 266.862619][ T1323] wacom 0003:056A:0314.0004: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.4-1/input0 [ 266.892282][ T1323] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0314.0004/input/input5 [ 267.049320][ T1323] usb 5-1: USB disconnect, device number 8 [ 267.095459][ T6250] lo speed is unknown, defaulting to 1000 [ 267.159755][ T6250] lo speed is unknown, defaulting to 1000 [ 267.263792][ T6250] lo speed is unknown, defaulting to 1000 [ 267.316233][ T6250] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 267.365332][ T6250] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 268.087204][ T6250] lo speed is unknown, defaulting to 1000 [ 268.293152][ T6250] lo speed is unknown, defaulting to 1000 [ 268.344698][ T6250] lo speed is unknown, defaulting to 1000 [ 268.537788][ T6250] lo speed is unknown, defaulting to 1000 [ 268.551050][ T6250] lo speed is unknown, defaulting to 1000 [ 268.578907][ T6250] lo speed is unknown, defaulting to 1000 [ 268.634276][ T1323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 268.759667][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 269.099292][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 269.359827][ T23] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 269.374444][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.580544][ T23] usb 1-1: config 0 descriptor?? [ 270.489583][ T1323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.513980][ T1323] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.546348][ T6283] loop2: detected capacity change from 0 to 8 [ 270.549729][ T6275] loop4: detected capacity change from 256 to 64 [ 270.739670][ T1323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 270.757808][ T1323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.786265][ T1323] usb 4-1: Product: syz [ 270.786904][ T6283] SQUASHFS error: xz decompression failed, data probably corrupt [ 270.803712][ T1323] usb 4-1: Manufacturer: syz [ 270.821625][ T1323] usb 4-1: SerialNumber: syz [ 270.829794][ T6283] SQUASHFS error: Failed to read block 0xa8: -5 [ 270.864988][ T6283] SQUASHFS error: xz decompression failed, data probably corrupt [ 270.888216][ T6283] SQUASHFS error: Failed to read block 0xa8: -5 [ 270.901935][ T1323] cdc_subset: probe of 4-1:1.0 failed with error -22 [ 270.934569][ T26] audit: type=1800 audit(1743811579.239:24): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.576" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 270.969713][ T1323] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 270.981908][ T1323] cdc_ncm 4-1:1.0: bind() failure [ 270.996670][ T1323] cdc_subset: probe of 4-1:1.1 failed with error -22 [ 271.004361][ T1323] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 271.138952][ T1323] cdc_ncm 4-1:1.1: bind() failure [ 271.183718][ T1323] usb 4-1: USB disconnect, device number 4 [ 272.343192][ T23] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 272.354076][ T23] asix: probe of 1-1:0.0 failed with error -71 [ 272.366062][ T23] usb 1-1: USB disconnect, device number 6 [ 273.519774][ T26] audit: type=1326 audit(1743811581.829:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 273.556965][ T26] audit: type=1326 audit(1743811581.849:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 273.579311][ T26] audit: type=1326 audit(1743811581.849:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 273.614627][ T26] audit: type=1326 audit(1743811581.849:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 273.638273][ T26] audit: type=1326 audit(1743811581.849:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 273.710788][ T4209] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 273.774974][ T26] audit: type=1326 audit(1743811581.849:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 274.316050][ T4209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.378072][ T4209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.409266][ T26] audit: type=1326 audit(1743811581.849:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 274.515374][ T26] audit: type=1326 audit(1743811581.849:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 274.650194][ T4209] usb 1-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 274.661425][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.679703][ T26] audit: type=1326 audit(1743811581.849:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50260b4169 code=0x7fc00000 [ 274.702853][ T4209] usb 1-1: config 0 descriptor?? [ 275.563266][ T4209] wacom 0003:056A:0314.0005: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 275.603731][ T4209] wacom 0003:056A:0314.0005: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.0-1/input0 [ 275.662023][ T4209] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0314.0005/input/input8 [ 275.781820][ T4209] usb 1-1: USB disconnect, device number 7 [ 275.974665][ T6332] syz.4.589 (6332) used greatest stack depth: 19256 bytes left [ 276.025969][ T6336] siw: device registration error -23 [ 278.581231][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 278.581247][ T26] audit: type=1326 audit(1743811586.889:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 280.072208][ T6358] loop0: detected capacity change from 0 to 128 [ 280.132411][ T26] audit: type=1326 audit(1743811586.929:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 280.169751][ T26] audit: type=1326 audit(1743811587.069:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 280.187825][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.194468][ T26] audit: type=1326 audit(1743811587.069:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 280.212584][ T6358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.224326][ T26] audit: type=1326 audit(1743811587.069:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3647529169 code=0x7ffc0000 [ 280.271749][ T6358] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.442759][ T6381] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 280.539956][ T6358] loop_set_status: loop0 () has still dirty pages (nrpages=4) [ 280.846823][ T6389] lo speed is unknown, defaulting to 1000 [ 280.883861][ T6389] lo speed is unknown, defaulting to 1000 [ 281.774563][ T6389] lo speed is unknown, defaulting to 1000 [ 281.827565][ T6389] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 281.908262][ T6389] lo speed is unknown, defaulting to 1000 [ 281.969672][ T4167] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 282.003070][ T6389] lo speed is unknown, defaulting to 1000 [ 282.034644][ T6389] lo speed is unknown, defaulting to 1000 [ 282.090429][ T6389] lo speed is unknown, defaulting to 1000 [ 282.116012][ T6389] lo speed is unknown, defaulting to 1000 [ 286.769267][ T6436] loop1: detected capacity change from 256 to 64 [ 286.974955][ T6452] siw: device registration error -23 [ 291.552990][ T6488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.699893][ T6488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.995201][ T6488] bond0 (unregistering): Released all slaves [ 292.742247][ T5089] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 292.989308][ T5089] usb 3-1: Using ep0 maxpacket: 32 [ 294.449497][ T5089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.222183][ T5089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.232914][ T5089] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 295.242074][ T5089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.354828][ T5089] usb 3-1: config 0 descriptor?? [ 295.529491][ T5089] usb 3-1: can't set config #0, error -71 [ 295.584571][ T5089] usb 3-1: USB disconnect, device number 4 [ 295.616880][ T6525] loop2: detected capacity change from 0 to 1024 [ 297.211631][ T26] audit: type=1326 audit(1743811605.509:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378f8e3169 code=0x7ffc0000 [ 298.049350][ T1323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 299.239346][ T1323] usb 4-1: Using ep0 maxpacket: 32 [ 299.878277][ T6578] loop2: detected capacity change from 0 to 128 [ 299.939544][ T1323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.954202][ T1323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.968695][ T1323] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 299.989255][ T1323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.000421][ T1323] usb 4-1: config 0 descriptor?? [ 300.159445][ T1323] usbhid 4-1:0.0: can't add hid device: -71 [ 300.174040][ T1323] usbhid: probe of 4-1:0.0 failed with error -71 [ 300.199328][ T1323] usb 4-1: USB disconnect, device number 5 [ 300.269309][ T6578] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 303.632803][ T6629] loop3: detected capacity change from 0 to 128 [ 303.821035][ T6629] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.886131][ T4209] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.896049][ T6629] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.871624][ T4209] usb 1-1: Using ep0 maxpacket: 32 [ 305.331546][ T4209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.377794][ T4209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.445766][ T4209] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 305.537771][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.618797][ T4209] usb 1-1: config 0 descriptor?? [ 305.825490][ T6654] loop3: detected capacity change from 0 to 128 [ 306.871813][ T4209] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 306.977969][ T4209] usb 1-1: USB disconnect, device number 8 [ 307.270746][ T1323] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 308.489265][ T1323] usb 5-1: Using ep0 maxpacket: 16 [ 308.609565][ T1323] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 308.790102][ T1323] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 308.803690][ T1323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.812260][ T1323] usb 5-1: Product: syz [ 308.816514][ T1323] usb 5-1: Manufacturer: syz [ 308.821489][ T1323] usb 5-1: SerialNumber: syz [ 308.830839][ T1323] usb 5-1: config 0 descriptor?? [ 308.870907][ T1323] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 308.884053][ T1323] usb 5-1: Detected FT232RL [ 309.099608][ T1323] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 309.371010][ T1323] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.184489][ T1323] usb 5-1: USB disconnect, device number 9 [ 311.255995][ T1323] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 311.510328][ T1323] ftdi_sio 5-1:0.0: device disconnected [ 313.763277][ T6732] loop2: detected capacity change from 0 to 128 [ 314.459537][ T4209] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 315.670706][ T4209] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.797377][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.528524][ T4209] usb 3-1: config 0 descriptor?? [ 316.562411][ T6764] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.583527][ T4209] cp210x 3-1:0.0: cp210x converter detected [ 316.999400][ T3146] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 317.109136][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117079][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.239364][ T4209] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 317.902444][ T4209] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 317.915666][ T4209] usb 3-1: cp210x converter now attached to ttyUSB0 [ 317.924245][ T4209] usb 3-1: USB disconnect, device number 5 [ 317.950232][ T4209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 317.969677][ T4209] cp210x 3-1:0.0: device disconnected [ 318.065979][ T6789] tipc: Enabled bearer , priority 10 [ 318.169382][ T3146] usb 4-1: Using ep0 maxpacket: 16 [ 318.469964][ T3146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.705389][ T3146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.149975][ T6803] loop0: detected capacity change from 0 to 256 [ 319.304861][ T3146] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.365733][ T3146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.388319][ T6805] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 319.412494][ T3146] usb 4-1: Product: syz [ 319.426953][ T3146] usb 4-1: Manufacturer: syz [ 319.439325][ T3146] usb 4-1: SerialNumber: syz [ 320.000434][ T6823] loop3: detected capacity change from 0 to 128 [ 320.293967][ T3146] usb 4-1: 0:2 : does not exist [ 320.677746][ T3146] usb 4-1: USB disconnect, device number 6 [ 320.704423][ T6829] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 321.257892][ T4157] udevd[4157]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.390016][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 322.029350][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 322.251407][ T21] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 322.260989][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.272878][ T21] usb 5-1: config 0 descriptor?? [ 322.321627][ T21] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 322.539432][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 323.251325][ T6859] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 324.038783][ T6867] device vlan2 entered promiscuous mode [ 324.191063][ T6867] device bond0 entered promiscuous mode [ 324.244504][ T6867] device bond_slave_0 entered promiscuous mode [ 324.256181][ T6867] device bond_slave_1 entered promiscuous mode [ 324.279471][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.294280][ T6867] device bond0 left promiscuous mode [ 324.322258][ T6867] device bond_slave_0 left promiscuous mode [ 324.329415][ T6867] device bond_slave_1 left promiscuous mode [ 324.589904][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 324.959830][ T13] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 324.996615][ T13] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 325.096844][ T13] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 325.209990][ T13] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 325.330991][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.554805][ T13] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 325.849487][ T21] gspca_vc032x: reg_w err -71 [ 325.854302][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.364127][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.376941][ T13] usb 1-1: Product: syz [ 326.387072][ T13] usb 1-1: Manufacturer: syz [ 326.392540][ T13] usb 1-1: SerialNumber: syz [ 326.394061][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.411246][ T13] usb 1-1: config 0 descriptor?? [ 326.429884][ T6872] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 326.582172][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.587888][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.593304][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.598795][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.605918][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.619214][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.624560][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.629917][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.635224][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 326.690891][ T13] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 327.430106][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 327.438924][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 327.446765][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 327.459227][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 327.479256][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 327.499215][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 327.505426][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 327.509667][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 327.546210][ T13] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 327.549144][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 327.569222][ T21] gspca_vc032x: Unknown sensor... [ 327.582307][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 327.589280][ T21] vc032x: probe of 5-1:0.0 failed with error -22 [ 327.590474][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 327.630762][ T21] usb 5-1: USB disconnect, device number 10 [ 327.636206][ T13] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 327.686700][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 327.710383][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 327.737547][ T13] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 327.758257][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 327.776682][ T13] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 327.797748][ T13] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 327.817547][ T13] usb 1-1: USB disconnect, device number 9 [ 327.837259][ T13] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 327.899557][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 327.919690][ T13] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 327.973382][ T13] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 328.010640][ T13] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 328.044553][ T13] keyspan 1-1:0.0: device disconnected [ 328.275154][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 328.348395][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 328.375357][ T7] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 328.399271][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.433351][ T7] usb 2-1: config 0 descriptor?? [ 328.922479][ T7] kye 0003:0458:0138.0007: item fetching failed at offset 0/1 [ 328.948349][ T7] kye 0003:0458:0138.0007: parse failed [ 328.969364][ T7] kye: probe of 0003:0458:0138.0007 failed with error -22 [ 329.126215][ T7] usb 2-1: USB disconnect, device number 2 [ 329.300059][ T6913] loop2: detected capacity change from 0 to 2048 [ 330.284746][ T6924] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.330569][ T6913] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 331.418674][ T6913] Remounting filesystem read-only [ 332.247712][ T6950] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 332.279263][ T6950] netlink: 244 bytes leftover after parsing attributes in process `syz.2.786'. [ 332.489433][ T4209] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 333.654462][ T6966] loop2: detected capacity change from 0 to 2048 [ 333.675522][ T6970] loop0: detected capacity change from 0 to 128 [ 333.718599][ T6966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.729382][ T4209] usb 5-1: Using ep0 maxpacket: 16 [ 333.742732][ T6970] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.755637][ T6970] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.859447][ T4209] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 333.867997][ T4209] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 333.885451][ T4209] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 333.894415][ T4209] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 333.903075][ T4209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 333.915550][ T4209] usb 5-1: config 0 has no interface number 0 [ 333.922067][ T4209] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 333.933784][ T4209] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 333.959230][ T4209] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.970372][ T4209] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.999308][ T4209] usb 5-1: config 0 interface 125 has no altsetting 0 [ 334.006179][ T4209] usb 5-1: config 0 interface 125 has no altsetting 2 [ 334.189471][ T4209] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 334.198828][ T4209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.071601][ T4209] usb 5-1: Product: syz [ 335.076113][ T4209] usb 5-1: Manufacturer: syz [ 335.082428][ T4209] usb 5-1: SerialNumber: syz [ 335.089016][ T4209] usb 5-1: config 0 descriptor?? [ 335.141240][ T4209] usb 5-1: selecting invalid altsetting 2 [ 335.189353][ C1] usb 5-1: async_complete: urb error -71 [ 335.196225][ C1] usb 5-1: async_complete: urb error -71 [ 335.201968][ C1] usb 5-1: async_complete: urb error -71 [ 335.207683][ C1] usb 5-1: async_complete: urb error -71 [ 335.215289][ T4209] get_1284_register: usb error -71 [ 335.221371][ T4209] uss720: probe of 5-1:0.125 failed with error -71 [ 335.258161][ T4209] usb 5-1: USB disconnect, device number 11 [ 345.868094][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 352.079475][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 352.460569][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.514581][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.602498][ T13] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 352.690628][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.786484][ T13] usb 5-1: config 0 descriptor?? [ 353.512292][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 354.605959][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 354.618301][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 354.626309][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.051553][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.344324][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.372152][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.380227][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.387815][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.413740][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.477198][ T13] hid-generic 0003:1532:010D.0008: unknown main item tag 0x0 [ 355.567116][ T7128] loop2: detected capacity change from 0 to 4096 [ 355.717284][ T7138] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.834774][ T13] hid-generic 0003:1532:010D.0008: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.4-1/input0 [ 355.889789][ T13] usb 5-1: USB disconnect, device number 12 [ 358.157555][ T7167] loop0: detected capacity change from 0 to 2048 [ 360.670009][ T7167] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 360.812189][ T7167] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x00000000000034d1,resgid=0x000000000000ee01,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpquota,bsddf,,errors=continue. Quota mode: writeback. [ 360.906315][ T7190] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 364.734544][ T7226] loop2: detected capacity change from 0 to 512 [ 365.579297][ T7226] EXT4-fs (loop2): Ignoring removed bh option [ 366.670817][ T7226] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,bh,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 366.741500][ T7226] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.839121][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 366.872918][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.880191][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.054262][ T26] audit: type=1326 audit(1743811675.359:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 367.077462][ T26] audit: type=1326 audit(1743811675.379:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 367.224009][ T26] audit: type=1326 audit(1743811675.379:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 367.358211][ T26] audit: type=1326 audit(1743811675.379:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 367.992704][ T26] audit: type=1326 audit(1743811675.379:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 368.212870][ T26] audit: type=1326 audit(1743811675.379:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 368.268690][ T26] audit: type=1326 audit(1743811675.379:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 368.302859][ T26] audit: type=1326 audit(1743811675.379:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 368.573766][ T26] audit: type=1326 audit(1743811675.379:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 369.612476][ T26] audit: type=1326 audit(1743811675.399:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62bd20e169 code=0x7ffc0000 [ 378.098983][ T7334] loop3: detected capacity change from 0 to 256 [ 378.545024][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.558369][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.727221][ T7334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 378.781922][ T4177] ================================================================== [ 378.790554][ T4177] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 378.798419][ T4177] Read of size 1 at addr ffff88807a74dc0a by task kworker/u5:4/4177 [ 378.806420][ T4177] [ 378.808771][ T4177] CPU: 1 PID: 4177 Comm: kworker/u5:4 Not tainted 5.15.179-syzkaller #0 [ 378.817122][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.827208][ T4177] Workqueue: hci0 hci_rx_work [ 378.831944][ T4177] Call Trace: [ 378.835245][ T4177] [ 378.838243][ T4177] dump_stack_lvl+0x1e3/0x2d0 [ 378.842967][ T4177] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 378.848633][ T4177] ? _printk+0xd1/0x120 [ 378.852836][ T4177] ? __wake_up_klogd+0xcc/0x100 [ 378.857728][ T4177] ? panic+0x860/0x860 [ 378.861816][ T4177] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 378.867299][ T4177] print_address_description+0x63/0x3b0 [ 378.872865][ T4177] ? hci_le_meta_evt+0x11d6/0x3f50 [ 378.877994][ T4177] kasan_report+0x16b/0x1c0 [ 378.882513][ T4177] ? hci_le_meta_evt+0x11d6/0x3f50 [ 378.887650][ T4177] hci_le_meta_evt+0x11d6/0x3f50 [ 378.892604][ T4177] ? __lock_acquire+0x1ff0/0x1ff0 [ 378.897649][ T4177] ? hci_remote_host_features_evt+0x280/0x280 [ 378.903726][ T4177] ? __mutex_unlock_slowpath+0x218/0x750 [ 378.909368][ T4177] ? hci_event_packet+0x3b4/0x1550 [ 378.914491][ T4177] ? mutex_unlock+0x10/0x10 [ 378.919029][ T4177] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 378.925024][ T4177] ? print_irqtrace_events+0x210/0x210 [ 378.930491][ T4177] hci_event_packet+0xc41/0x1550 [ 378.935550][ T4177] ? rcu_lock_release+0x20/0x20 [ 378.940416][ T4177] ? hci_send_to_monitor+0x99/0x4d0 [ 378.945634][ T4177] hci_rx_work+0x237/0xa10 [ 378.950157][ T4177] process_one_work+0x8a1/0x10c0 [ 378.955123][ T4177] ? worker_detach_from_pool+0x260/0x260 [ 378.960762][ T4177] ? _raw_spin_lock_irqsave+0x120/0x120 [ 378.966322][ T4177] ? kthread_data+0x4e/0xc0 [ 378.970839][ T4177] ? wq_worker_running+0x97/0x170 [ 378.975868][ T4177] worker_thread+0xaca/0x1280 [ 378.980579][ T4177] kthread+0x3f6/0x4f0 [ 378.984735][ T4177] ? rcu_lock_release+0x20/0x20 [ 378.989587][ T4177] ? kthread_blkcg+0xd0/0xd0 [ 378.994179][ T4177] ret_from_fork+0x1f/0x30 [ 378.998607][ T4177] [ 379.001630][ T4177] [ 379.003952][ T4177] Allocated by task 7339: [ 379.008271][ T4177] ____kasan_kmalloc+0xba/0xf0 [ 379.013038][ T4177] __kmalloc_node_track_caller+0x195/0x390 [ 379.018845][ T4177] __alloc_skb+0x12c/0x590 [ 379.023265][ T4177] vhci_write+0xbc/0x430 [ 379.027512][ T4177] vfs_write+0xacd/0xe50 [ 379.031849][ T4177] ksys_write+0x1a2/0x2c0 [ 379.036196][ T4177] do_syscall_64+0x3b/0xb0 [ 379.040615][ T4177] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.046512][ T4177] [ 379.048836][ T4177] The buggy address belongs to the object at ffff88807a74d800 [ 379.048836][ T4177] which belongs to the cache kmalloc-1k of size 1024 [ 379.062916][ T4177] The buggy address is located 10 bytes to the right of [ 379.062916][ T4177] 1024-byte region [ffff88807a74d800, ffff88807a74dc00) [ 379.076713][ T4177] The buggy address belongs to the page: [ 379.082352][ T4177] page:ffffea0001e9d200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a748 [ 379.092511][ T4177] head:ffffea0001e9d200 order:3 compound_mapcount:0 compound_pincount:0 [ 379.100845][ T4177] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 379.108844][ T4177] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441dc0 [ 379.117537][ T4177] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 379.126117][ T4177] page dumped because: kasan: bad access detected [ 379.132537][ T4177] page_owner tracks the page as allocated [ 379.138248][ T4177] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7330, ts 378598178195, free_ts 376325847820 [ 379.158307][ T4177] get_page_from_freelist+0x3b78/0x3d40 [ 379.163863][ T4177] __alloc_pages+0x272/0x700 [ 379.168454][ T4177] new_slab+0xbb/0x4b0 [ 379.172529][ T4177] ___slab_alloc+0x6f6/0xe10 [ 379.177261][ T4177] __kmalloc_node_track_caller+0x1f6/0x390 [ 379.183088][ T4177] __alloc_skb+0x12c/0x590 [ 379.187514][ T4177] skb_copy+0x127/0x820 [ 379.191671][ T4177] mac80211_hwsim_tx_frame_no_nl+0xe37/0x1840 [ 379.197741][ T4177] mac80211_hwsim_tx_frame+0x1cc/0x220 [ 379.203202][ T4177] mac80211_hwsim_beacon_tx+0x48f/0x8a0 [ 379.208767][ T4177] __iterate_interfaces+0x21e/0x4b0 [ 379.213972][ T4177] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 379.220999][ T4177] mac80211_hwsim_beacon+0xa7/0x180 [ 379.226200][ T4177] __hrtimer_run_queues+0x598/0xcf0 [ 379.231399][ T4177] hrtimer_run_softirq+0x196/0x2c0 [ 379.236519][ T4177] handle_softirqs+0x3a7/0x930 [ 379.241286][ T4177] page last free stack trace: [ 379.245952][ T4177] free_unref_page_prepare+0xc34/0xcf0 [ 379.251414][ T4177] free_unref_page+0x95/0x2d0 [ 379.256091][ T4177] __unfreeze_partials+0x1b7/0x210 [ 379.261224][ T4177] put_cpu_partial+0x132/0x1a0 [ 379.265991][ T4177] ___cache_free+0xe3/0x100 [ 379.270501][ T4177] qlist_free_all+0x36/0x90 [ 379.275009][ T4177] kasan_quarantine_reduce+0x162/0x180 [ 379.280468][ T4177] __kasan_slab_alloc+0x2f/0xc0 [ 379.285329][ T4177] slab_post_alloc_hook+0x53/0x380 [ 379.290443][ T4177] kmem_cache_alloc+0xf3/0x280 [ 379.295217][ T4177] ptlock_alloc+0x1c/0x60 [ 379.299552][ T4177] pte_alloc_one+0xd1/0x360 [ 379.304179][ T4177] handle_mm_fault+0x3353/0x5960 [ 379.309146][ T4177] __get_user_pages+0x4ed/0x11d0 [ 379.314105][ T4177] populate_vma_page_range+0x215/0x2a0 [ 379.319570][ T4177] __mm_populate+0x2a5/0x4a0 [ 379.324159][ T4177] [ 379.326485][ T4177] Memory state around the buggy address: [ 379.332108][ T4177] ffff88807a74db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.340166][ T4177] ffff88807a74db80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.348226][ T4177] >ffff88807a74dc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.356293][ T4177] ^ [ 379.360615][ T4177] ffff88807a74dc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.368672][ T4177] ffff88807a74dd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.376728][ T4177] ================================================================== [ 379.384785][ T4177] Disabling lock debugging due to kernel taint [ 379.394199][ T4177] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 379.401432][ T4177] CPU: 1 PID: 4177 Comm: kworker/u5:4 Tainted: G B 5.15.179-syzkaller #0 [ 379.411199][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.421273][ T4177] Workqueue: hci0 hci_rx_work [ 379.425985][ T4177] Call Trace: [ 379.429314][ T4177] [ 379.432260][ T4177] dump_stack_lvl+0x1e3/0x2d0 [ 379.436971][ T4177] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 379.442632][ T4177] ? panic+0x860/0x860 [ 379.446726][ T4177] ? rcu_is_watching+0x11/0xa0 [ 379.451606][ T4177] ? preempt_schedule_common+0xa6/0xd0 [ 379.457102][ T4177] panic+0x318/0x860 [ 379.461033][ T4177] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 379.467218][ T4177] ? check_panic_on_warn+0x1d/0xa0 [ 379.472361][ T4177] ? fb_is_primary_device+0xd0/0xd0 [ 379.477589][ T4177] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 379.483596][ T4177] ? _raw_spin_unlock+0x40/0x40 [ 379.488490][ T4177] check_panic_on_warn+0x7e/0xa0 [ 379.493459][ T4177] ? hci_le_meta_evt+0x11d6/0x3f50 [ 379.498608][ T4177] end_report+0x6d/0xf0 [ 379.502793][ T4177] kasan_report+0x18e/0x1c0 [ 379.507325][ T4177] ? hci_le_meta_evt+0x11d6/0x3f50 [ 379.512480][ T4177] hci_le_meta_evt+0x11d6/0x3f50 [ 379.517452][ T4177] ? __lock_acquire+0x1ff0/0x1ff0 [ 379.522522][ T4177] ? hci_remote_host_features_evt+0x280/0x280 [ 379.528618][ T4177] ? __mutex_unlock_slowpath+0x218/0x750 [ 379.534278][ T4177] ? hci_event_packet+0x3b4/0x1550 [ 379.539422][ T4177] ? mutex_unlock+0x10/0x10 [ 379.543962][ T4177] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 379.549972][ T4177] ? print_irqtrace_events+0x210/0x210 [ 379.555453][ T4177] hci_event_packet+0xc41/0x1550 [ 379.560425][ T4177] ? rcu_lock_release+0x20/0x20 [ 379.565308][ T4177] ? hci_send_to_monitor+0x99/0x4d0 [ 379.570527][ T4177] hci_rx_work+0x237/0xa10 [ 379.574967][ T4177] process_one_work+0x8a1/0x10c0 [ 379.579937][ T4177] ? worker_detach_from_pool+0x260/0x260 [ 379.585598][ T4177] ? _raw_spin_lock_irqsave+0x120/0x120 [ 379.591340][ T4177] ? kthread_data+0x4e/0xc0 [ 379.595866][ T4177] ? wq_worker_running+0x97/0x170 [ 379.600910][ T4177] worker_thread+0xaca/0x1280 [ 379.605622][ T4177] kthread+0x3f6/0x4f0 [ 379.609709][ T4177] ? rcu_lock_release+0x20/0x20 [ 379.614582][ T4177] ? kthread_blkcg+0xd0/0xd0 [ 379.619193][ T4177] ret_from_fork+0x1f/0x30 [ 379.623637][ T4177] [ 379.626882][ T4177] Kernel Offset: disabled [ 379.639993][ T4177] Rebooting in 86400 seconds..