last executing test programs: 6m0.066806863s ago: executing program 3 (id=13): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010012009d842cbe7988010000000800010003000000340004800500030001000000050003000000000005000300000000000500030080000000050003000000000005050300010000000800020002"], 0x58}}, 0x0) 5m58.772605326s ago: executing program 3 (id=15): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@noacl}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 5m50.798646986s ago: executing program 2 (id=21): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f00000000c0)) 5m50.267125157s ago: executing program 3 (id=23): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") utime(&(0x7f0000000040)='./file0\x00', 0x0) 5m49.49500164s ago: executing program 2 (id=26): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, 0x0}, 0x138) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) 5m49.228385844s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000074, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) timerfd_create(0x8, 0x0) 5m45.260780075s ago: executing program 2 (id=31): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x2000082, &(0x7f0000000280)={[{@numtail}, {@shortname_win95}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@uni_xlate}]}, 0x1, 0x359, &(0x7f0000001300)="$eJzs3T9oJGUUAPC3N0k2CZ7ZQhCtVjtBjkvEQqsLxwmHKfRk8V/j4uX8k10PsrgQi2y2UQ4rxUaws7tCy6vFQsTOwtYT5FRsvO7ggiO7M/t/YxJw44m/X3E83ve9+d7MDjeTkHx5rRVbl+fjyu3bt2JxsRBz586fizuFKMWpSCKzF1N9uDA9DwDc4+6kafyRZg6f/fFyL/LsB4D/ru7z/43Tg0TxGMXX7ptFSwDAjB3x6//npmavzqwtAGCGJp7/j44Mj32bf67/MwGZpdk3CAD84154+ZVn1zciLpXLixH1D5qVZiWeHoyvX4m3ohabcTZWYj8ie1HI3hY6/z5zcePC2XLHL6WodCqalYh6q1nJ3hTWk6RTX4zVWIlSXp/265NO/Wq3vhwRe63u+lEvNCvzsZyv/+NybMZarMQDE/URFzcurJXzA1TqvfpWRDsWeyfR6f9MrMT3r8fVqMXl6NQO+t9dLZfPpxsj9c3rxe48AAAAAAAAAAAAAAAAAAAAAACYhTPlvlJ//5u03mq+f2l8Qmlkf5xKNpzvD9TO9gdKi73dea4l4/sDje7P06zMxal/9cwBAAAAAAAAAAAAAAAAAADg3tHYWYhqrba53dh5b2s4aA1l3vn2i6+Xojc0l5e+nQyqIk+OHKc3cejISfSXSPvlaTIyJw+SiN7kver1G/2Oh+cU+2cxUd4JihNDhbynaq12+pGfP5tW9Wcn2OtmksjaOHCJQj44NFS/v5NYjIj9KVf1kGDtkDk30zQ9qHz30/FMvhVD69htHCH45tabDz3RePDJbuarfKXHHl958eYnn/+2Va1FO7sytdrCdmM/PcKRoxAxMXRq+P4p5Ne5MOVOmB60B5n2dmOnmvzw+0sPf/Td2ORk+oebDmfePXitL8czC1lQiCj1LsLftTo/5eafHrx6t3/3HuvzWsovWPXG7k+/HrVq6D8JG3UAAAAAAAAAAAAAAAAAAMCJGPzS79hAmqatA6ueen7mjQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADACRr8/f+hoD2ROUpwtxWTQ8XN7caBiy+d6KkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/9lcAAAD//xlWdh8=") creat(&(0x7f0000000300)='./file1\x00', 0x0) 5m39.966641447s ago: executing program 3 (id=35): socket$l2tp(0x2, 0x2, 0x73) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m39.599400133s ago: executing program 2 (id=36): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f00000000c0)="8fb2c230f2fa77846e9ff16f2b6967b0bf0422b3e7b0edaf8c8b8d05f5ecedf40a41e70b57f0ea09f827", 0x2a}, 0x68) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000004c0)="d25a9850a9726be16838807cc61ed582f1e1dd983ba54758342b615d", 0x1c, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 5m38.036474279s ago: executing program 3 (id=41): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 5m37.879390556s ago: executing program 2 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 5m32.478861064s ago: executing program 2 (id=46): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 5m20.928986109s ago: executing program 32 (id=41): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 5m16.59078203s ago: executing program 33 (id=46): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 5m6.47540171s ago: executing program 4 (id=89): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000100)={0x10, 0x0, r2}) 5m5.859872357s ago: executing program 4 (id=93): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d0800450000280000000000069078"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r3, 0x0, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) mount(0x0, 0x0, &(0x7f0000000000)='hpfs\x00', 0x9f000, &(0x7f0000000140)='barrXer\x1cH\xbea\x7f\xfa\x0e\x84\xbe\x87\x80\x91E4\xfd#\x1cwc\xea\xc55\x11We\xd7d\xb3V\x89r\xdds\x84\nk\xa1\xfe\x8b:mN\xf8F\x87\xa4\xcf\xa5[Q^]\x1e\xfe\x04[\xc4M\xedI@\x92\xfe\xedOc\xcdI\xf1\x1bL8\x9a\xca\xc79\xea\x1f.\xa5m\xbbP\n\x1a\xb4\xf7\x1b\xd4-uqMLC\xb5Kd\x01\x01\xda\xc2\xd6\xd0\xcdxu0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4m46.351645309s ago: executing program 34 (id=101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m48.369229967s ago: executing program 6 (id=210): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 3m47.148553229s ago: executing program 6 (id=214): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x83, 0x4, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x6, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0xb, 0x7, 0x1, 0x7, 0x2, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xf9, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m45.790937509s ago: executing program 6 (id=219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc84, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x214, &(0x7f0000000a00)="$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") symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f0000000040), 0x80, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x1) 3m40.111390623s ago: executing program 6 (id=228): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, r1], 0x2, 0x80000}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) io_submit(r3, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, 0x0]) 3m36.070671381s ago: executing program 6 (id=231): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000080)=0x3ff) close(0x4) 3m35.075292437s ago: executing program 6 (id=234): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000001640)=[@free_buffer={0x40086303, r4}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="09000000000000000008000086dd", 0x36, 0x4044011, &(0x7f0000000000)={0x11, 0x4, r8, 0x1, 0x0, 0x6, @local}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x80, "e77687a97c1028fbad9379c5eaf16e007b8bfdc72ec9a3fcb582179213f4adda1f770dc76a6107518f1163895c733627def9a86af6d29e0226a2346078335fdc461b8ee7c9a9aa4593f227cb74b6405967bb79c6283e837553dfede0d4f08b20bd8fabd4ca962a49f486cb3010b38a73869dc883b73041683c219bf056a09b27"}}) socket$tipc(0x1e, 0x5, 0x0) 3m19.583640507s ago: executing program 35 (id=234): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000001640)=[@free_buffer={0x40086303, r4}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="09000000000000000008000086dd", 0x36, 0x4044011, &(0x7f0000000000)={0x11, 0x4, r8, 0x1, 0x0, 0x6, @local}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x80, "e77687a97c1028fbad9379c5eaf16e007b8bfdc72ec9a3fcb582179213f4adda1f770dc76a6107518f1163895c733627def9a86af6d29e0226a2346078335fdc461b8ee7c9a9aa4593f227cb74b6405967bb79c6283e837553dfede0d4f08b20bd8fabd4ca962a49f486cb3010b38a73869dc883b73041683c219bf056a09b27"}}) socket$tipc(0x1e, 0x5, 0x0) 1m24.519390868s ago: executing program 1 (id=423): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m16.33565126s ago: executing program 1 (id=427): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x10, 0x6, @local}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 1m13.281166092s ago: executing program 1 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) 1m10.335654334s ago: executing program 1 (id=433): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44201a6, r3}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) 1m9.3697857s ago: executing program 1 (id=435): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x5120400, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r3, r4, 0x0, 0x10ffff) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) 1m2.56538929s ago: executing program 1 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open$dir(0x0, 0x80, 0x108) symlinkat(0x0, r2, &(0x7f00000002c0)='./file1\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$cgroup_devices(r3, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="62202a3a2a206d001a19f03bfa86a8d2464e959f193e700c52c9e80a73cc91e3fe12c3ad05e9271e37717db5690beeac8731f09a5fbf05e537c666cedfb6ae120164d8abe8625105bb986e9e67f98f3893ed767c39f9267d26aeff0b8ecb7bb935e71bec07d079dbd60d9f5646a73ec686228341fa3e68bb43ad8eba1c743a439fa396b80a1abe04bcca8bdbff5b39465c4f1a8ea1ad407c4b479a5bae2da6dcf00d4c121129a5624d90fa5e4dfb5f"], 0x8) write$cgroup_devices(r6, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = open$dir(&(0x7f0000000300)='./file1\x00', 0x40040, 0x13) fanotify_mark(r4, 0xd5, 0x20, r8, &(0x7f0000000340)='./file0\x00') r9 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) creat(&(0x7f0000000140)='./bus/file0\x00', 0x20) write$P9_RLERRORu(r9, &(0x7f0000000180)={0x1f, 0x7, 0x1, {{0x12, './cgroup.net/syz0\x00'}, 0x6c39}}, 0x1f) 47.076599619s ago: executing program 36 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open$dir(0x0, 0x80, 0x108) symlinkat(0x0, r2, &(0x7f00000002c0)='./file1\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$cgroup_devices(r3, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="62202a3a2a206d001a19f03bfa86a8d2464e959f193e700c52c9e80a73cc91e3fe12c3ad05e9271e37717db5690beeac8731f09a5fbf05e537c666cedfb6ae120164d8abe8625105bb986e9e67f98f3893ed767c39f9267d26aeff0b8ecb7bb935e71bec07d079dbd60d9f5646a73ec686228341fa3e68bb43ad8eba1c743a439fa396b80a1abe04bcca8bdbff5b39465c4f1a8ea1ad407c4b479a5bae2da6dcf00d4c121129a5624d90fa5e4dfb5f"], 0x8) write$cgroup_devices(r6, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = open$dir(&(0x7f0000000300)='./file1\x00', 0x40040, 0x13) fanotify_mark(r4, 0xd5, 0x20, r8, &(0x7f0000000340)='./file0\x00') r9 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) creat(&(0x7f0000000140)='./bus/file0\x00', 0x20) write$P9_RLERRORu(r9, &(0x7f0000000180)={0x1f, 0x7, 0x1, {{0x12, './cgroup.net/syz0\x00'}, 0x6c39}}, 0x1f) 40.402808427s ago: executing program 7 (id=483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000080900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001400000000000000008080005"], 0xf0}}, 0x0) 39.590746002s ago: executing program 7 (id=484): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38.712418703s ago: executing program 7 (id=487): syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) 35.119137913s ago: executing program 7 (id=492): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 32.249496845s ago: executing program 7 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 28.811256422s ago: executing program 7 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x96, 0x7) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x40000024}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15.021816037s ago: executing program 5 (id=518): getpid() prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 12.724898073s ago: executing program 37 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x96, 0x7) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x40000024}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 11.927609475s ago: executing program 8 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1401000000070015df9982cd181174436895161fccd9000844c867c9ebea1f7447a861502129cfc8c0309b6f850334298903494303c91032eca46dfaebcf8a815ad822e4798e5351e28b837e4bf6278c2353f9e6b846fe4fa223ed0abc4250f5a94972330d2178933c1a601c16131d3489c327cb24ff9001a74bb2a19ae1b64102a55118880e3bd6fbca19378c53634b3bf4307e06728a11edf6fe42506d910a7c5d2ff74e56b2"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000c40)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd604b88ef00383a00fc010000000000000000000000000000fe8000000000000000000000000000aa020090780000000060bdd7c30000330000000000000000000000000000000001000000000000000000000000000000002c00000000000000"], 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0xa, 0x400003) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x138, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x108, 0x2, [@TCA_CGROUP_EMATCHES={0x104, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x6}, {{0x3, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR='F', @TCF_META_TYPE_VAR="f0", @TCF_META_TYPE_VAR="1f"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xa032, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="a8fe5f7aac"]}]}}, @TCF_EM_CANID={0x14, 0x6, 0x0, 0x0, {{0x6}, {{}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xbe, 0x7, 0x5}, {{0x4}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0xa1f6}, {0x5, 0x40, 0x1, 0x1}}}, @TCF_EM_IPT={0x54, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xf9d7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 11.010623485s ago: executing program 5 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) 10.62250501s ago: executing program 8 (id=525): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x600000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 9.938496923s ago: executing program 5 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_read_part_table(0x408e, &(0x7f00000040c0)="$eJzszzFKK1EYBeDzJgmZhIeirYXYWcnY2Qhi5QaygXR2Fi4g6GYkuABXJAiuwObKJNeIYBsU+b5i/vOfmblww497+aab1Pn8pW1Wz1GSp/njXob9dt91SZtkeLNTP3tY/X2YpDvNaNo2+Z/ktr4tu5vzZsstXAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjdXj9jux6llJIMPtpJnf+SRZL5QRknOWtqfTd4u67x6CTJ1X7dFnVOB6P+zD5eJLPllu8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwxTc4vN8txxuvQvrM7xyYAg1AQQJMiSZcdbNzHQR1REBHEQrCwfa+54h/8W3a/62mR8iiFON/fza+7R/lPBgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEABAAD//1ifGbw=") 9.852588086s ago: executing program 8 (id=528): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.648257505s ago: executing program 5 (id=529): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x70) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.258727933s ago: executing program 8 (id=530): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000e00)="32ef1b0f2bcab97d8dbc26dfc5ba03c9518a45b5c10e5de1bcc9a3920f20ce9a413c48bfcd2c5d5e910aab845ac967f7a74284eb216cc5ffe9db7306518aead6d1c07f0e7af682b73efce8b2432d493a0daaaab44a67ebe9792ed65dbd05df9eecfe80d81100000000", 0xffffff36) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x800, 0x6) close(0x3) 7.282882161s ago: executing program 0 (id=531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x51) sendto$inet(r0, &(0x7f0000000780)="1e", 0x1, 0x4008041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) shutdown(r0, 0x1) 7.278437541s ago: executing program 8 (id=532): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r3, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 6.141878752s ago: executing program 0 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1401000000070015df9982cd181174436895161fccd9000844c867c9ebea1f7447a861502129cfc8c0309b6f850334298903494303c91032eca46dfaebcf8a815ad822e4798e5351e28b837e4bf6278c2353f9e6b846fe4fa223ed0abc4250f5a94972330d2178933c1a601c16131d3489c327cb24ff9001a74bb2a19ae1b64102a55118880e3bd6fbca19378c53634b3bf4307e06728a11edf6fe42506d910a7c5d2ff74e56b2"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000c40)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd604b88ef00383a00fc010000000000000000000000000000fe8000000000000000000000000000aa020090780000000060bdd7c30000330000000000000000000000000000000001000000000000000000000000000000002c00000000000000"], 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0xa, 0x400003) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x138, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x108, 0x2, [@TCA_CGROUP_EMATCHES={0x104, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x6}, {{0x3, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR='F', @TCF_META_TYPE_VAR="f0", @TCF_META_TYPE_VAR="1f"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xa032, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="a8fe5f7aac"]}]}}, @TCF_EM_CANID={0x14, 0x6, 0x0, 0x0, {{0x6}, {{}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xbe, 0x7, 0x5}, {{0x4}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0xa1f6}, {0x5, 0x40, 0x1, 0x1}}}, @TCF_EM_IPT={0x54, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xf9d7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 4.357885506s ago: executing program 0 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e0000001080002000a0101000c000280050001000000000024000280140001800800010000000000080002007f00"], 0x7c}}, 0x0) 2.969907337s ago: executing program 0 (id=535): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002a00090000000100000000000400002c1400160020"], 0x30}, 0x1, 0x3000000}, 0x0) 2.756281322s ago: executing program 5 (id=536): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x600000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 1.817911397s ago: executing program 8 (id=537): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0xc8, r3, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a 1 [ 255.373159][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.384271][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.393370][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.401454][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.409403][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.419613][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.428430][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.437968][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.447857][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.458040][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.491383][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.497467][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.504534][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.518065][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.530533][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.539224][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.547702][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.548217][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.556133][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.573231][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.575000][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.600340][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.627067][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.677073][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.692845][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 257.584986][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.593905][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.601762][ T5784] bridge_slave_0: entered allmulticast mode [ 257.611544][ T5784] bridge_slave_0: entered promiscuous mode [ 257.620827][ T5789] Bluetooth: hci0: command tx timeout [ 257.627343][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 257.699345][ T5789] Bluetooth: hci1: command tx timeout [ 257.701048][ T5792] Bluetooth: hci2: command tx timeout [ 257.704967][ T5799] Bluetooth: hci3: command tx timeout [ 257.768988][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.776609][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.784639][ T5784] bridge_slave_1: entered allmulticast mode [ 257.794476][ T5784] bridge_slave_1: entered promiscuous mode [ 257.805831][ T5799] Bluetooth: hci4: command tx timeout [ 257.862961][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 258.125575][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 258.163352][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.221083][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.492789][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 258.530085][ T5784] team0: Port device team_slave_0 added [ 258.567303][ T5784] team0: Port device team_slave_1 added [ 258.783872][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.791362][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.817853][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.949166][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.956392][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.982966][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.185085][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.192925][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.200948][ T5794] bridge_slave_0: entered allmulticast mode [ 259.210861][ T5794] bridge_slave_0: entered promiscuous mode [ 259.323067][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.334671][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.342653][ T5794] bridge_slave_1: entered allmulticast mode [ 259.351701][ T5794] bridge_slave_1: entered promiscuous mode [ 259.402591][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.410354][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.418056][ T5785] bridge_slave_0: entered allmulticast mode [ 259.427793][ T5785] bridge_slave_0: entered promiscuous mode [ 259.581327][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.589252][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.596925][ T5785] bridge_slave_1: entered allmulticast mode [ 259.606515][ T5785] bridge_slave_1: entered promiscuous mode [ 259.616960][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.625115][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.633006][ T5783] bridge_slave_0: entered allmulticast mode [ 259.642574][ T5783] bridge_slave_0: entered promiscuous mode [ 259.716384][ T5799] Bluetooth: hci0: command tx timeout [ 259.765581][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.773414][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.779385][ T5799] Bluetooth: hci3: command tx timeout [ 259.781345][ T5783] bridge_slave_1: entered allmulticast mode [ 259.786121][ T5789] Bluetooth: hci1: command tx timeout [ 259.796006][ T5783] bridge_slave_1: entered promiscuous mode [ 259.797605][ T5789] Bluetooth: hci2: command tx timeout [ 259.859192][ T5792] Bluetooth: hci4: command tx timeout [ 259.861010][ T5784] hsr_slave_0: entered promiscuous mode [ 259.875517][ T5784] hsr_slave_1: entered promiscuous mode [ 259.895735][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.017206][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.025136][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.035404][ T5795] bridge_slave_0: entered allmulticast mode [ 260.046150][ T5795] bridge_slave_0: entered promiscuous mode [ 260.070877][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.091697][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.176096][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.183892][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.191783][ T5795] bridge_slave_1: entered allmulticast mode [ 260.201678][ T5795] bridge_slave_1: entered promiscuous mode [ 260.289642][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.309696][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.387268][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.474234][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.566321][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.583645][ T5794] team0: Port device team_slave_0 added [ 260.666704][ T5785] team0: Port device team_slave_0 added [ 260.687002][ T5785] team0: Port device team_slave_1 added [ 260.720164][ T5794] team0: Port device team_slave_1 added [ 260.902815][ T5795] team0: Port device team_slave_0 added [ 260.920049][ T5783] team0: Port device team_slave_0 added [ 260.935362][ T5795] team0: Port device team_slave_1 added [ 261.035520][ T5783] team0: Port device team_slave_1 added [ 261.080557][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.087756][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.114534][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.128570][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.137177][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.164710][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.194777][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.202119][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.228716][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.329269][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.336470][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.363050][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.480914][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.488152][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.514881][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.577697][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.585713][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.612239][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.626366][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.633885][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.660448][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.769674][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.776996][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.803956][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.806098][ T5792] Bluetooth: hci0: command tx timeout [ 261.866040][ T5792] Bluetooth: hci2: command tx timeout [ 261.872159][ T5792] Bluetooth: hci3: command tx timeout [ 261.877825][ T5792] Bluetooth: hci1: command tx timeout [ 261.943522][ T5789] Bluetooth: hci4: command tx timeout [ 261.962448][ T5785] hsr_slave_0: entered promiscuous mode [ 261.972690][ T5785] hsr_slave_1: entered promiscuous mode [ 261.981545][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.989716][ T5785] Cannot create hsr debugfs directory [ 262.155676][ T5795] hsr_slave_0: entered promiscuous mode [ 262.166071][ T5795] hsr_slave_1: entered promiscuous mode [ 262.175043][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.183071][ T5795] Cannot create hsr debugfs directory [ 262.239558][ T5794] hsr_slave_0: entered promiscuous mode [ 262.249710][ T5794] hsr_slave_1: entered promiscuous mode [ 262.258231][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.266174][ T5794] Cannot create hsr debugfs directory [ 262.405174][ T5783] hsr_slave_0: entered promiscuous mode [ 262.415268][ T5783] hsr_slave_1: entered promiscuous mode [ 262.424199][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.432159][ T5783] Cannot create hsr debugfs directory [ 262.672435][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.694586][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.814312][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.987516][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.865490][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.879263][ T5789] Bluetooth: hci0: command tx timeout [ 263.915734][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.939276][ T5789] Bluetooth: hci1: command tx timeout [ 263.944988][ T5789] Bluetooth: hci3: command tx timeout [ 263.950979][ T5792] Bluetooth: hci2: command tx timeout [ 263.974401][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.997506][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.019531][ T5799] Bluetooth: hci4: command tx timeout [ 264.193450][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.266062][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.289362][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.366857][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.454241][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.481519][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.561126][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.665688][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.711097][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.820696][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.895333][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.983642][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.081359][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.271821][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.341806][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.349512][ T5064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.489856][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.497578][ T5064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.568389][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.715416][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.932332][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.003013][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.038041][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.118613][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.126291][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.142744][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.150413][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.186072][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.193726][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.319655][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.333856][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.341615][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.526563][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.534384][ T4154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.580141][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.587781][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.762425][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.773233][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.844775][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.855767][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.887139][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.902646][ T5795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.913484][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.242353][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.337813][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.345536][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.457964][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.465714][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.324712][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.900496][ T5784] veth0_vlan: entered promiscuous mode [ 268.975237][ T5784] veth1_vlan: entered promiscuous mode [ 269.190075][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.232567][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.272969][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.435891][ T5784] veth0_macvtap: entered promiscuous mode [ 269.601917][ T5784] veth1_macvtap: entered promiscuous mode [ 269.735516][ T5785] veth0_vlan: entered promiscuous mode [ 269.873028][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.931016][ T5794] veth0_vlan: entered promiscuous mode [ 269.954775][ T5785] veth1_vlan: entered promiscuous mode [ 269.999950][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.035776][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.096907][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.109157][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.118210][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.127482][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.196559][ T5794] veth1_vlan: entered promiscuous mode [ 270.419847][ T5785] veth0_macvtap: entered promiscuous mode [ 270.524981][ T5785] veth1_macvtap: entered promiscuous mode [ 270.554005][ T5794] veth0_macvtap: entered promiscuous mode [ 270.620826][ T5794] veth1_macvtap: entered promiscuous mode [ 270.806061][ T5783] veth0_vlan: entered promiscuous mode [ 270.830638][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.931247][ T5783] veth1_vlan: entered promiscuous mode [ 270.952141][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.966838][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.057220][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.066493][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.075716][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.084847][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.154160][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.263049][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.273230][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.282587][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.291818][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.371542][ T5783] veth0_macvtap: entered promiscuous mode [ 271.452922][ T5783] veth1_macvtap: entered promiscuous mode [ 271.693323][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.818656][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.877494][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.888369][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.899212][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.908267][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.618372][ T5795] veth0_vlan: entered promiscuous mode [ 272.748240][ T5795] veth1_vlan: entered promiscuous mode [ 273.134601][ T5795] veth0_macvtap: entered promiscuous mode [ 273.243141][ T5795] veth1_macvtap: entered promiscuous mode [ 273.464212][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.574279][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.658168][ T5795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.668563][ T5795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.677777][ T5795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.690548][ T5795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.683232][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.691617][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.856397][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.865517][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.252708][ T5784] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 278.463624][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.472732][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.752483][ T1801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.760814][ T1801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.907990][ T1801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.919042][ T1801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.092093][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.101297][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.254298][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.262998][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.409995][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.418136][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.103789][ T5979] netlink: 'syz.0.6': attribute type 3 has an invalid length. [ 281.112273][ T5979] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6'. [ 285.154822][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.167288][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.491983][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.500296][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.553147][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 286.610289][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 286.863478][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 286.998072][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.018633][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.032545][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.042103][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.479165][ T9] usb 5-1: config 0 descriptor?? [ 287.561081][ T9] hub 5-1:0.0: USB hub found [ 288.248209][ T9] hub 5-1:0.0: 1 port detected [ 288.718981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 288.788966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 288.819005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 288.979013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 289.053229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 289.055719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.069957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 289.155647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 289.158067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.172435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 290.366595][ T9] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 290.373561][ T9] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 290.542766][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 290.556052][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 291.671151][ T5845] usb 5-1: USB disconnect, device number 2 [ 291.684549][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.691567][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.773183][ T6032] random: crng reseeded on system resumption [ 295.829491][ T6037] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 296.444851][ T6044] loop3: detected capacity change from 0 to 64 [ 300.139736][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 300.752806][ T6063] team0: Port device team_slave_1 removed [ 305.466761][ T6074] loop2: detected capacity change from 0 to 256 [ 306.017894][ T6074] FAT-fs (loop2): Directory bread(block 64) failed [ 306.025601][ T6074] FAT-fs (loop2): Directory bread(block 65) failed [ 306.033122][ T6074] FAT-fs (loop2): Directory bread(block 66) failed [ 306.042407][ T6074] FAT-fs (loop2): Directory bread(block 67) failed [ 306.049607][ T6074] FAT-fs (loop2): Directory bread(block 68) failed [ 306.063376][ T6074] FAT-fs (loop2): Directory bread(block 69) failed [ 306.072732][ T6074] FAT-fs (loop2): Directory bread(block 70) failed [ 306.079682][ T6074] FAT-fs (loop2): Directory bread(block 71) failed [ 306.086638][ T6074] FAT-fs (loop2): Directory bread(block 72) failed [ 306.093666][ T6074] FAT-fs (loop2): Directory bread(block 73) failed [ 308.422354][ T6097] loop4: detected capacity change from 0 to 128 [ 308.445304][ T6097] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.680394][ T6106] loop1: detected capacity change from 0 to 32768 [ 310.690892][ T6106] ======================================================= [ 310.690892][ T6106] WARNING: The mand mount option has been deprecated and [ 310.690892][ T6106] and is ignored by this kernel. Remove the mand [ 310.690892][ T6106] option from the mount to silence this warning. [ 310.690892][ T6106] ======================================================= [ 310.981837][ T6106] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 310.990499][ T6106] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 311.010591][ T6106] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 311.374467][ T6106] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 312.686345][ T6112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.228005][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 316.432743][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 316.442487][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.591871][ T9] usb 1-1: config 0 descriptor?? [ 316.660273][ T6127] input: syz1 as /devices/virtual/input/input5 [ 316.683514][ T9] cp210x 1-1:0.0: cp210x converter detected [ 317.160236][ T6128] loop1: detected capacity change from 0 to 2048 [ 317.229909][ T9] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 317.296362][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 317.376311][ T6128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.463028][ T5845] usb 1-1: USB disconnect, device number 2 [ 317.541006][ T5845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.169866][ T5845] cp210x 1-1:0.0: device disconnected [ 322.249126][ T6144] loop0: detected capacity change from 0 to 512 [ 322.263175][ T6144] EXT4-fs: Ignoring removed mblk_io_submit option [ 322.379620][ T6144] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.389318][ T6144] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 322.454383][ T6144] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 322.520452][ T6144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 322.589461][ T6144] System zones: 0-2, 18-18, 34-34 [ 322.658699][ T6144] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.57: iget: bad i_size value: 360287970189639680 [ 322.679895][ T6144] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.57: couldn't read orphan inode 15 (err -117) [ 322.753157][ T6144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.092477][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.827294][ T6156] input: syz1 as /devices/virtual/input/input6 [ 326.688019][ T6159] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 329.170268][ T5789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.290372][ T5789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.318548][ T5789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.361378][ T5789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.421891][ T5789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.109687][ T6173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.400247][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 331.580052][ T5789] Bluetooth: hci5: command tx timeout [ 332.048065][ T5799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.090243][ T5799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.141214][ T5799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.195608][ T5799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.215907][ T5799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.785761][ T6196] input: syz1 as /devices/virtual/input/input7 [ 333.620766][ T5799] Bluetooth: hci5: command tx timeout [ 334.184396][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.192480][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.200403][ T6164] bridge_slave_0: entered allmulticast mode [ 334.209082][ T6164] bridge_slave_0: entered promiscuous mode [ 334.259589][ T5799] Bluetooth: hci6: command tx timeout [ 334.483476][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.491723][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.499752][ T6164] bridge_slave_1: entered allmulticast mode [ 334.509649][ T6164] bridge_slave_1: entered promiscuous mode [ 335.402812][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.599004][ T6187] chnl_net:caif_netlink_parms(): no params data found [ 335.659702][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.716865][ T5799] Bluetooth: hci5: command tx timeout [ 336.140577][ T4228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.372898][ T5799] Bluetooth: hci6: command tx timeout [ 336.445848][ T6164] team0: Port device team_slave_0 added [ 336.678194][ T4228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.763405][ T6227] loop1: detected capacity change from 0 to 2048 [ 336.856623][ T6164] team0: Port device team_slave_1 added [ 336.914040][ T6227] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 336.919254][ T4228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.045251][ T6227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.233844][ T6232] input: syz1 as /devices/virtual/input/input8 [ 337.318694][ T30] audit: type=1800 audit(1750498903.137:2): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 337.780243][ T5799] Bluetooth: hci5: command tx timeout [ 337.830696][ T4228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.949905][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.957154][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.983809][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.284281][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.291857][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.321267][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.434884][ T5799] Bluetooth: hci6: command tx timeout [ 339.275774][ T4228] bridge_slave_1: left allmulticast mode [ 339.283673][ T4228] bridge_slave_1: left promiscuous mode [ 339.290717][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.373195][ T4228] bridge_slave_0: left allmulticast mode [ 339.379459][ T4228] bridge_slave_0: left promiscuous mode [ 339.386122][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.220960][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.300995][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.364834][ T4228] bond0 (unregistering): Released all slaves [ 340.529791][ T5799] Bluetooth: hci6: command tx timeout [ 340.764073][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.774106][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.784147][ T6187] bridge_slave_0: entered allmulticast mode [ 340.862748][ T6187] bridge_slave_0: entered promiscuous mode [ 341.113402][ T6164] hsr_slave_0: entered promiscuous mode [ 341.123997][ T6164] hsr_slave_1: entered promiscuous mode [ 341.133096][ T6164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.141110][ T6164] Cannot create hsr debugfs directory [ 341.304853][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.312867][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.321254][ T6187] bridge_slave_1: entered allmulticast mode [ 341.331202][ T6187] bridge_slave_1: entered promiscuous mode [ 341.522302][ T6276] input: syz1 as /devices/virtual/input/input9 [ 342.339535][ T4228] hsr_slave_0: left promiscuous mode [ 342.360034][ T4228] hsr_slave_1: left promiscuous mode [ 342.368197][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.376629][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.448705][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.456620][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.610013][ T4228] veth1_macvtap: left promiscuous mode [ 342.615991][ T4228] veth0_macvtap: left promiscuous mode [ 342.624586][ T4228] veth1_vlan: left promiscuous mode [ 342.630427][ T4228] veth0_vlan: left promiscuous mode [ 343.785689][ T4228] team0 (unregistering): Port device team_slave_1 removed [ 343.900731][ T4228] team0 (unregistering): Port device team_slave_0 removed [ 345.047501][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.266414][ T4228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.457585][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.587420][ T4228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.020116][ T4228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.241029][ T4228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.757178][ T6187] team0: Port device team_slave_0 added [ 347.125852][ T6187] team0: Port device team_slave_1 added [ 347.760528][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.767796][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.796176][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.920626][ T4228] bridge_slave_1: left allmulticast mode [ 347.927073][ T4228] bridge_slave_1: left promiscuous mode [ 347.935145][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.185991][ T4228] bridge_slave_0: left allmulticast mode [ 348.192192][ T4228] bridge_slave_0: left promiscuous mode [ 348.199110][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.122554][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.167583][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.194456][ T4228] bond0 (unregistering): Released all slaves [ 349.219657][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.226900][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.253773][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.827056][ T6164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.032751][ T6187] hsr_slave_0: entered promiscuous mode [ 350.043841][ T6187] hsr_slave_1: entered promiscuous mode [ 350.053167][ T6187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.061211][ T6187] Cannot create hsr debugfs directory [ 350.072431][ T6164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.100914][ T6164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.165069][ T6164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.285523][ T6323] input: syz1 as /devices/virtual/input/input10 [ 350.896371][ T4228] hsr_slave_0: left promiscuous mode [ 350.939857][ T4228] hsr_slave_1: left promiscuous mode [ 350.948039][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.956126][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.037849][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.045882][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.259560][ T4228] veth1_macvtap: left promiscuous mode [ 351.265400][ T4228] veth0_macvtap: left promiscuous mode [ 351.271580][ T4228] veth1_vlan: left promiscuous mode [ 351.277188][ T4228] veth0_vlan: left promiscuous mode [ 351.609660][ T30] audit: type=1326 audit(1750498917.457:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6566b8e929 code=0x0 [ 352.152184][ T4228] team0 (unregistering): Port device team_slave_1 removed [ 352.180557][ T4228] team0 (unregistering): Port device team_slave_0 removed [ 352.626245][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.633522][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.711140][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.902691][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.955937][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.963686][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.094953][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.102786][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.186733][ T6187] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.276624][ T6187] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.356963][ T6187] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.452959][ T6187] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 355.626968][ T6366] loop0: detected capacity change from 0 to 16 [ 355.712955][ T6366] erofs (device loop0): mounted with root inode @ nid 36. [ 356.095394][ T6187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.349784][ T6187] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.476054][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.483893][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.500416][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.508018][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.975854][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.765288][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.026753][ T6164] veth0_vlan: entered promiscuous mode [ 360.143696][ T6164] veth1_vlan: entered promiscuous mode [ 360.611030][ T6164] veth0_macvtap: entered promiscuous mode [ 360.711568][ T6164] veth1_macvtap: entered promiscuous mode [ 360.932006][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.035571][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.323405][ T6164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.334665][ T6164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.343947][ T6164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.353104][ T6164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.735510][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.793371][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.869605][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.897799][ T6187] veth0_vlan: entered promiscuous mode [ 361.907862][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.946295][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.266214][ T6187] veth1_vlan: entered promiscuous mode [ 362.566575][ T6187] veth0_macvtap: entered promiscuous mode [ 362.666203][ T6187] veth1_macvtap: entered promiscuous mode [ 363.014834][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.142321][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.302974][ T6187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.312535][ T6187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.322186][ T6187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.331435][ T6187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.480991][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 364.020776][ T5799] Bluetooth: hci0: command tx timeout [ 364.651987][ T6446] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 364.703940][ T6446] loop0: detected capacity change from 0 to 512 [ 364.714597][ T6446] EXT4-fs: Ignoring removed nobh option [ 365.535741][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.558016][ T6446] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.123: iget: bad i_size value: 15393162788874 [ 365.608848][ T6446] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.123: iget: bad i_size value: 15393162788874 [ 365.761209][ T6449] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.123: iget: bad i_size value: 15393162788874 [ 366.142747][ T5799] Bluetooth: hci0: command tx timeout [ 367.188551][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.190905][ T5799] Bluetooth: hci0: command tx timeout [ 368.625812][ T4228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.044337][ T4228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.320183][ T4228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.393542][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.402146][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.410189][ T6425] bridge_slave_0: entered allmulticast mode [ 369.419372][ T6425] bridge_slave_0: entered promiscuous mode [ 369.574019][ T4228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.659566][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.667065][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.676889][ T6425] bridge_slave_1: entered allmulticast mode [ 369.686528][ T6425] bridge_slave_1: entered promiscuous mode [ 370.259406][ T5799] Bluetooth: hci0: command tx timeout [ 370.286039][ T4228] bridge_slave_1: left allmulticast mode [ 370.293600][ T4228] bridge_slave_1: left promiscuous mode [ 370.300631][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.387798][ T4228] bridge_slave_0: left allmulticast mode [ 370.395138][ T4228] bridge_slave_0: left promiscuous mode [ 370.401669][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.206680][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.270649][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.315410][ T4228] bond0 (unregistering): Released all slaves [ 371.402147][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.513953][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.962783][ T6425] team0: Port device team_slave_0 added [ 372.076585][ T6425] team0: Port device team_slave_1 added [ 372.412027][ T4228] hsr_slave_0: left promiscuous mode [ 372.432542][ T4228] hsr_slave_1: left promiscuous mode [ 372.440897][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.448690][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.518611][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.526739][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.662704][ T4228] veth1_macvtap: left promiscuous mode [ 372.668574][ T4228] veth0_macvtap: left promiscuous mode [ 372.674966][ T4228] veth1_vlan: left promiscuous mode [ 372.680762][ T4228] veth0_vlan: left promiscuous mode [ 373.563420][ T4228] team0 (unregistering): Port device team_slave_0 removed [ 373.842365][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.849732][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.876429][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.063657][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.071181][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.097720][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.851252][ T6425] hsr_slave_0: entered promiscuous mode [ 374.861920][ T6425] hsr_slave_1: entered promiscuous mode [ 374.872929][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.880894][ T6425] Cannot create hsr debugfs directory [ 375.087499][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 375.259897][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 375.310348][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 375.323555][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 375.396667][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 375.407305][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.416669][ T24] usb 2-1: Product: syz [ 375.421594][ T24] usb 2-1: Manufacturer: syz [ 375.426480][ T24] usb 2-1: SerialNumber: syz [ 375.592442][ T24] usb 2-1: config 0 descriptor?? [ 375.621054][ T24] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 376.562641][ T6425] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 376.593792][ T6425] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 376.733990][ T6425] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.743707][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.751993][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.791142][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.799511][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.833153][ T6425] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.989589][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.997716][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.288311][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.298040][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.979559][ T5843] usb 2-1: USB disconnect, device number 2 [ 378.635703][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.850011][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.927493][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.935236][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.080703][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.088354][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.716192][ T6556] loop0: detected capacity change from 0 to 1764 [ 380.264858][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 380.265062][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 380.462217][ T6560] netlink: 108 bytes leftover after parsing attributes in process `syz.0.137'. [ 381.918575][ T6574] Zero length message leads to an empty skb [ 384.004215][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.262063][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.142'. [ 388.216847][ T6425] veth0_vlan: entered promiscuous mode [ 388.356817][ T6425] veth1_vlan: entered promiscuous mode [ 388.719333][ T6619] loop5: detected capacity change from 0 to 512 [ 388.876820][ T6425] veth0_macvtap: entered promiscuous mode [ 388.986341][ T6425] veth1_macvtap: entered promiscuous mode [ 389.121911][ T6619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.135447][ T6619] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.407255][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.501411][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.613051][ T6425] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.622539][ T6425] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.631831][ T6425] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.640964][ T6425] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.912965][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.420038][ T5870] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 393.759319][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.770881][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.781241][ T5870] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 393.790864][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.930471][ T5870] usb 1-1: config 0 descriptor?? [ 394.412106][ T5870] uclogic 0003:28BD:0075.0001: interface is invalid, ignoring [ 394.674259][ T24] usb 1-1: USB disconnect, device number 3 [ 395.770985][ T24] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 396.019732][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 396.029298][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.114796][ T24] usb 2-1: config 0 descriptor?? [ 396.893591][ T6674] loop0: detected capacity change from 0 to 4096 [ 397.457350][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 397.468253][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 397.479766][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 397.662092][ T24] usb 2-1: USB disconnect, device number 3 [ 397.933685][ T30] audit: type=1800 audit(1750498963.767:4): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.162" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 399.323385][ T6696] netlink: 'syz.1.166': attribute type 4 has an invalid length. [ 399.661062][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.669945][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.409458][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.417590][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.911941][ T6723] loop6: detected capacity change from 0 to 1024 [ 403.470970][ T6723] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 404.038272][ T6723] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 404.062579][ T6723] EXT4-fs (loop6): orphan cleanup on readonly fs [ 404.176865][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 404.342676][ T6723] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.174: bg 0: block 10: padding at end of block bitmap is not set [ 404.457075][ T6723] Quota error (device loop6): write_blk: dquota write failed [ 404.467567][ T6723] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 404.480090][ T6723] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 404.492346][ T6723] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.174: Failed to acquire dquot type 0 [ 404.599639][ T6723] Quota error (device loop6): write_blk: dquota write failed [ 404.607543][ T6723] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 404.617931][ T6723] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 404.629178][ T6723] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.174: Failed to acquire dquot type 0 [ 404.751892][ T6723] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.174: Freeing blocks not in datazone - block = 0, count = 4096 [ 404.867114][ T6723] Quota error (device loop6): write_blk: dquota write failed [ 404.876646][ T6723] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 404.887215][ T6723] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 404.897770][ T6723] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.174: Failed to acquire dquot type 0 [ 405.019438][ T6723] EXT4-fs (loop6): 1 orphan inode deleted [ 405.165901][ T6723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 406.024826][ T6723] syz.6.174 (6723) used greatest stack depth: 3088 bytes left [ 406.160514][ T6741] loop5: detected capacity change from 0 to 32768 [ 406.208658][ T6187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.265457][ T6741] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 406.274349][ T6741] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 406.317523][ T6741] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 406.606705][ T6741] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 411.177284][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 413.749465][ T6801] loop5: detected capacity change from 0 to 32768 [ 413.792648][ T6801] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 413.801376][ T6801] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 413.892514][ T6801] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 414.064390][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.071260][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.121847][ T6813] loop7: detected capacity change from 0 to 1024 [ 414.182645][ T6813] EXT4-fs: Ignoring removed oldalloc option [ 414.190767][ T6813] EXT4-fs: Ignoring removed orlov option [ 414.198161][ T6801] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 414.239581][ T6813] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 414.470813][ T6813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.400495][ T6425] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.182188][ T6833] capability: warning: `syz.5.205' uses deprecated v2 capabilities in a way that may be insecure [ 421.002845][ T6862] loop0: detected capacity change from 0 to 32768 [ 421.133440][ T6862] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 421.142203][ T6862] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 421.321324][ T5870] kernel write not supported for file bpf-prog (pid: 5870 comm: kworker/0:6) [ 421.407047][ T6862] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 422.928567][ T6862] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 423.814559][ T6879] loop6: detected capacity change from 0 to 256 [ 430.960418][ T5843] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 431.221986][ T5843] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 431.231903][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.411613][ T5843] usb 8-1: config 0 descriptor?? [ 431.457957][ T5843] cp210x 8-1:0.0: cp210x converter detected [ 432.187068][ T6928] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 432.334566][ T5843] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 432.342674][ T5843] cp210x 8-1:0.0: querying part number failed [ 432.536608][ T6932] binder: BINDER_SET_CONTEXT_MGR already set [ 432.543064][ T6932] binder: 6931:6932 ioctl 4018620d 200000000040 returned -16 [ 432.567329][ T5843] usb 8-1: cp210x converter now attached to ttyUSB0 [ 434.069897][ T5870] usb 8-1: USB disconnect, device number 2 [ 434.146149][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 434.163662][ T5870] cp210x 8-1:0.0: device disconnected [ 438.340899][ T5870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 439.019168][ T5870] usb 1-1: unable to read config index 0 descriptor/all [ 439.026553][ T5870] usb 1-1: can't read configurations, error -71 [ 440.528311][ T5843] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 440.834596][ T5843] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 440.844456][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.183042][ T5843] usb 8-1: config 0 descriptor?? [ 441.289266][ T5843] cp210x 8-1:0.0: cp210x converter detected [ 441.776813][ T5843] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 441.784923][ T5843] cp210x 8-1:0.0: querying part number failed [ 441.950490][ T5843] usb 8-1: cp210x converter now attached to ttyUSB0 [ 443.897829][ T5870] usb 8-1: USB disconnect, device number 3 [ 444.001726][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 444.012705][ T5870] cp210x 8-1:0.0: device disconnected [ 446.017952][ T5870] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 446.199940][ T30] audit: type=1326 audit(1750499012.047:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f3d8e929 code=0x7ffc0000 [ 446.223031][ T30] audit: type=1326 audit(1750499012.047:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f3d8e929 code=0x7ffc0000 [ 446.349121][ T5870] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 446.359570][ T5870] usb 8-1: config 0 interface 0 has no altsetting 0 [ 446.454875][ T5870] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.464600][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.473634][ T5870] usb 8-1: Product: syz [ 446.478073][ T5870] usb 8-1: Manufacturer: syz [ 446.483105][ T5870] usb 8-1: SerialNumber: syz [ 446.574604][ T30] audit: type=1326 audit(1750499012.127:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f31f3d8e929 code=0x7ffc0000 [ 446.597362][ T30] audit: type=1326 audit(1750499012.127:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f3d8e929 code=0x7ffc0000 [ 446.732651][ T5870] usb 8-1: config 0 descriptor?? [ 446.797190][ T5870] usb 8-1: selecting invalid altsetting 0 [ 450.191221][ T5843] usb 8-1: USB disconnect, device number 4 [ 450.469138][ T5870] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 450.576533][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.600615][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.610590][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.640104][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.662799][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.715685][ T5870] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 450.725250][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.772705][ T5870] usb 6-1: config 0 descriptor?? [ 450.793032][ T5870] cp210x 6-1:0.0: cp210x converter detected [ 451.150070][ T5870] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 451.164350][ T5870] cp210x 6-1:0.0: querying part number failed [ 451.237435][ T5870] usb 6-1: cp210x converter now attached to ttyUSB0 [ 451.959616][ T5792] Bluetooth: hci5: command 0x0406 tx timeout [ 452.970261][ T5789] Bluetooth: hci3: command tx timeout [ 454.081008][ T24] usb 6-1: USB disconnect, device number 2 [ 454.222024][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 454.235359][ T24] cp210x 6-1:0.0: device disconnected [ 454.699578][ T7041] chnl_net:caif_netlink_parms(): no params data found [ 454.980697][ T5789] Bluetooth: hci3: command tx timeout [ 456.890773][ T30] audit: type=1326 audit(1750499022.727:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.034290][ T7099] loop1: detected capacity change from 0 to 1024 [ 457.039323][ T30] audit: type=1326 audit(1750499022.777:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.063928][ T5799] Bluetooth: hci6: command 0x0406 tx timeout [ 457.064054][ T5799] Bluetooth: hci3: command tx timeout [ 457.077071][ T30] audit: type=1326 audit(1750499022.777:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.104002][ T30] audit: type=1326 audit(1750499022.777:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.127977][ T30] audit: type=1326 audit(1750499022.777:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.150957][ T30] audit: type=1326 audit(1750499022.837:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.173630][ T30] audit: type=1326 audit(1750499022.837:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.200346][ T30] audit: type=1326 audit(1750499022.847:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.7.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09e98e929 code=0x7ffc0000 [ 457.722490][ T7099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.849329][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.857211][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.865333][ T7041] bridge_slave_0: entered allmulticast mode [ 457.875453][ T7041] bridge_slave_0: entered promiscuous mode [ 458.076852][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 458.148408][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.156403][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.164413][ T7041] bridge_slave_1: entered allmulticast mode [ 458.174388][ T7041] bridge_slave_1: entered promiscuous mode [ 458.370558][ T5870] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 458.380314][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.461337][ T5870] usb 1-1: config 0 descriptor?? [ 458.606658][ T5870] cp210x 1-1:0.0: cp210x converter detected [ 459.065567][ T5870] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 459.073858][ T5870] cp210x 1-1:0.0: querying part number failed [ 459.126795][ T7041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.150204][ T5870] usb 1-1: cp210x converter now attached to ttyUSB0 [ 459.272991][ T7041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.359787][ T5789] Bluetooth: hci3: command tx timeout [ 460.563665][ T7041] team0: Port device team_slave_0 added [ 460.708525][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.817808][ T7041] team0: Port device team_slave_1 added [ 461.069710][ T5870] usb 1-1: USB disconnect, device number 6 [ 461.154209][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 461.166506][ T5870] cp210x 1-1:0.0: device disconnected [ 461.780685][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.787908][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.819646][ T7041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.084282][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.091779][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.124083][ T7041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.271373][ T7129] netlink: 32 bytes leftover after parsing attributes in process `syz.7.287'. [ 463.404740][ T4154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.666981][ T7041] hsr_slave_0: entered promiscuous mode [ 463.677837][ T7041] hsr_slave_1: entered promiscuous mode [ 463.686951][ T7041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.694984][ T7041] Cannot create hsr debugfs directory [ 463.947940][ T7133] loop1: detected capacity change from 0 to 32768 [ 463.966252][ T4154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.056733][ T7133] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 464.065346][ T7133] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 464.095876][ T7133] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 464.132533][ T4154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.347932][ T7133] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 464.712148][ T4154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.420155][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 468.701699][ T24] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 468.711337][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.992107][ T24] usb 8-1: config 0 descriptor?? [ 469.069807][ T4154] bridge_slave_1: left allmulticast mode [ 469.079805][ T24] cp210x 8-1:0.0: cp210x converter detected [ 469.088047][ T4154] bridge_slave_1: left promiscuous mode [ 469.095015][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.224256][ T4154] bridge_slave_0: left allmulticast mode [ 469.230573][ T4154] bridge_slave_0: left promiscuous mode [ 469.237430][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.321230][ T24] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 469.329567][ T24] cp210x 8-1:0.0: querying part number failed [ 469.491473][ T24] usb 8-1: cp210x converter now attached to ttyUSB0 [ 470.190450][ T7164] loop1: detected capacity change from 0 to 4096 [ 471.141626][ T7181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.299'. [ 471.506624][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.581797][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.641861][ T4154] bond0 (unregistering): Released all slaves [ 471.683687][ T30] audit: type=1800 audit(1750499037.517:17): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.293" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 471.750498][ T9] usb 8-1: USB disconnect, device number 5 [ 471.861973][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 471.872979][ T9] cp210x 8-1:0.0: device disconnected [ 472.533101][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 472.798219][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.810248][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 472.820734][ T24] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 472.830253][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.326619][ T4154] hsr_slave_0: left promiscuous mode [ 473.413379][ T4154] hsr_slave_1: left promiscuous mode [ 473.422164][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.430327][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.692598][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.701242][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.817774][ T24] usb 8-1: config 0 descriptor?? [ 473.950574][ T7191] loop1: detected capacity change from 0 to 32768 [ 474.002383][ T4154] veth1_macvtap: left promiscuous mode [ 474.008223][ T4154] veth0_macvtap: left promiscuous mode [ 474.014827][ T4154] veth1_vlan: left promiscuous mode [ 474.020557][ T4154] veth0_vlan: left promiscuous mode [ 474.031600][ T7191] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 474.041185][ T7191] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 474.075412][ T7191] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 474.136591][ T9] usb 8-1: USB disconnect, device number 6 [ 474.539418][ T7191] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 475.599837][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.606589][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.863514][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 476.331558][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 478.199076][ T7041] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 478.241442][ T7041] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.273283][ T7041] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.752959][ T7041] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 479.339229][ T5870] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 479.617781][ T5870] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 479.627761][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 479.780052][ T5870] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 479.790810][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.799281][ T5870] usb 8-1: Product: syz [ 479.803701][ T5870] usb 8-1: Manufacturer: syz [ 479.808574][ T5870] usb 8-1: SerialNumber: syz [ 479.931392][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 479.941458][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.042539][ T24] usb 1-1: config 0 descriptor?? [ 480.055369][ T7219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.310'. [ 480.091596][ T24] cp210x 1-1:0.0: cp210x converter detected [ 480.373655][ T24] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 480.382567][ T24] cp210x 1-1:0.0: querying part number failed [ 480.451785][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 480.650064][ T7041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.909849][ T7041] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.026532][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.034611][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.177839][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.185897][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.219886][ T7221] loop5: detected capacity change from 0 to 4096 [ 481.612364][ T24] usb 8-1: USB disconnect, device number 7 [ 482.627571][ T24] usb 1-1: USB disconnect, device number 7 [ 482.717391][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 482.728623][ T24] cp210x 1-1:0.0: device disconnected [ 484.444616][ T7243] loop7: detected capacity change from 0 to 32768 [ 484.545827][ T7243] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 484.554626][ T7243] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 484.575254][ T7243] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 484.931467][ T7243] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 486.528373][ T7267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.321'. [ 487.761895][ T7041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.779920][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 488.300599][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 488.539196][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 488.549152][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.674430][ T9] usb 1-1: config 0 descriptor?? [ 488.753854][ T9] cp210x 1-1:0.0: cp210x converter detected [ 489.140015][ T9] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 489.278638][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 489.457241][ T9] usb 1-1: USB disconnect, device number 8 [ 489.594845][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 489.789556][ T9] cp210x 1-1:0.0: device disconnected [ 490.218185][ T7282] loop7: detected capacity change from 0 to 4096 [ 491.199607][ T30] audit: type=1800 audit(1750499057.037:18): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.326" name="file1" dev="loop7" ino=33 res=0 errno=0 [ 492.011081][ T7041] veth0_vlan: entered promiscuous mode [ 492.160594][ T7041] veth1_vlan: entered promiscuous mode [ 492.689463][ T7041] veth0_macvtap: entered promiscuous mode [ 492.844863][ T7041] veth1_macvtap: entered promiscuous mode [ 493.075561][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.220708][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.272323][ T7312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.334'. [ 493.347942][ T7041] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.357272][ T7041] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.366587][ T7041] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.375830][ T7041] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.487941][ T7315] loop7: detected capacity change from 0 to 32768 [ 494.546664][ T7315] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 494.555407][ T7315] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 494.574742][ T7315] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 494.744241][ T7315] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 496.385441][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 496.674475][ T5843] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.684103][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.828209][ T5843] usb 6-1: config 0 descriptor?? [ 496.904222][ T5843] cp210x 6-1:0.0: cp210x converter detected [ 497.359835][ T5843] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 497.487325][ T5843] usb 6-1: cp210x converter now attached to ttyUSB0 [ 497.599656][ T5843] usb 6-1: USB disconnect, device number 3 [ 497.693193][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 497.952287][ T5843] cp210x 6-1:0.0: device disconnected [ 498.090830][ T7340] loop0: detected capacity change from 0 to 4096 [ 498.835243][ T30] audit: type=1800 audit(1750499064.677:19): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.341" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 499.990417][ T7360] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 500.370029][ T5843] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 500.578008][ T5843] usb 2-1: config index 0 descriptor too short (expected 149, got 148) [ 500.587102][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.597734][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.768368][ T5843] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 500.778101][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.786639][ T5843] usb 2-1: SerialNumber: syz [ 500.964761][ T5843] usb 2-1: 0:2 : does not exist [ 502.106192][ T7380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.361520][ T9] usb 2-1: USB disconnect, device number 4 [ 504.592985][ T7384] loop5: detected capacity change from 0 to 32768 [ 504.765020][ T7384] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 504.774042][ T7384] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 504.807118][ T7384] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 504.989782][ T7384] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 506.739028][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 507.071747][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 507.081267][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.292501][ T9] usb 1-1: config 0 descriptor?? [ 507.363490][ T9] cp210x 1-1:0.0: cp210x converter detected [ 507.888347][ T9] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 508.043059][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 508.142293][ T9] usb 1-1: USB disconnect, device number 9 [ 508.155584][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 508.183851][ T9] cp210x 1-1:0.0: device disconnected [ 509.409182][ T7412] loop1: detected capacity change from 0 to 4096 [ 509.722207][ T7421] loop2: detected capacity change from 0 to 7 [ 509.788403][ T7421] Dev loop2: unable to read RDB block 7 [ 509.794655][ T7421] loop2: unable to read partition table [ 509.845417][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.879705][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.900495][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.942798][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.954233][ T7421] loop2: partition table beyond EOD, truncated [ 509.954492][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.961069][ T7421] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 512.465535][ T5792] Bluetooth: hci4: command tx timeout [ 513.234994][ T7434] loop7: detected capacity change from 0 to 32768 [ 513.516156][ T7434] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 513.524824][ T7434] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 513.622214][ T7434] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 514.135983][ T7434] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 515.074563][ T5792] Bluetooth: hci4: command tx timeout [ 517.139670][ T5792] Bluetooth: hci4: command tx timeout [ 520.060834][ T5792] Bluetooth: hci4: command tx timeout [ 526.239667][ T1011] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.686788][ T7459] netlink: 32 bytes leftover after parsing attributes in process `syz.7.368'. [ 526.995886][ T1011] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.327611][ T7462] loop0: detected capacity change from 0 to 1024 [ 527.460382][ T1011] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.488004][ T7462] EXT4-fs: Ignoring removed nobh option [ 527.494298][ T7462] EXT4-fs: Ignoring removed nobh option [ 527.637441][ T7462] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 527.754480][ T7462] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.370: inode #4294967295: comm syz.0.370: iget: illegal inode # [ 527.800238][ T7423] chnl_net:caif_netlink_parms(): no params data found [ 527.939436][ T7462] EXT4-fs (loop0): no journal found [ 527.945073][ T7462] EXT4-fs (loop0): can't get journal size [ 528.024451][ T1011] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.184750][ T7462] EXT4-fs (loop0): failed to initialize system zone (-22) [ 528.258205][ T7462] EXT4-fs (loop0): mount failed [ 529.624123][ T1011] bridge_slave_1: left allmulticast mode [ 529.630672][ T1011] bridge_slave_1: left promiscuous mode [ 529.637386][ T1011] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.828476][ T1011] bridge_slave_0: left allmulticast mode [ 529.835111][ T1011] bridge_slave_0: left promiscuous mode [ 529.842188][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.714272][ T7483] loop0: detected capacity change from 0 to 4096 [ 531.491131][ T1011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.556358][ T1011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.621609][ T1011] bond0 (unregistering): Released all slaves [ 532.483312][ T7494] loop1: detected capacity change from 0 to 32768 [ 532.632121][ T7494] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 532.640738][ T7494] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 532.742127][ T7494] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 532.923017][ T1011] hsr_slave_0: left promiscuous mode [ 532.970051][ T1011] hsr_slave_1: left promiscuous mode [ 532.978570][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.986778][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.104126][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.113537][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.122105][ T7494] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 533.222643][ T1011] veth1_macvtap: left promiscuous mode [ 533.228517][ T1011] veth0_macvtap: left promiscuous mode [ 533.236001][ T1011] veth1_vlan: left promiscuous mode [ 533.241659][ T1011] veth0_vlan: left promiscuous mode [ 535.015659][ T7512] netlink: 32 bytes leftover after parsing attributes in process `syz.5.381'. [ 536.197156][ T1011] team0 (unregistering): Port device team_slave_1 removed [ 536.326637][ T1011] team0 (unregistering): Port device team_slave_0 removed [ 537.007806][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.015088][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.832483][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.840358][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.848165][ T7423] bridge_slave_0: entered allmulticast mode [ 537.858450][ T7423] bridge_slave_0: entered promiscuous mode [ 538.043700][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.051462][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.059926][ T7423] bridge_slave_1: entered allmulticast mode [ 538.070030][ T7423] bridge_slave_1: entered promiscuous mode [ 538.753263][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.851410][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.889101][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 539.079647][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 539.103500][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 539.120894][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 539.131664][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.233309][ T9] usb 1-1: config 0 descriptor?? [ 539.289624][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 539.339164][ T7423] team0: Port device team_slave_0 added [ 539.414958][ T7423] team0: Port device team_slave_1 added [ 539.461135][ T5132] bcm5974 1-1:0.0: could not read from device [ 539.517962][ T5132] bcm5974 1-1:0.0: could not read from device [ 539.571542][ T5132] bcm5974 1-1:0.0: could not read from device [ 539.589862][ T9] usb 1-1: USB disconnect, device number 10 [ 540.624793][ T7537] loop1: detected capacity change from 0 to 4096 [ 540.670175][ T7540] loop5: detected capacity change from 0 to 32768 [ 540.689769][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.697003][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.723596][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.790530][ T7540] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 540.799250][ T7540] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 540.816708][ T7540] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 540.902789][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.910204][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.936843][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.171191][ T7540] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 541.615619][ T7423] hsr_slave_0: entered promiscuous mode [ 541.626265][ T7423] hsr_slave_1: entered promiscuous mode [ 541.635434][ T7423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.643400][ T7423] Cannot create hsr debugfs directory [ 546.021178][ T7569] loop0: detected capacity change from 0 to 2048 [ 546.420833][ T7569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.634563][ T7576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.396'. [ 548.117929][ T7423] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 548.158347][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.295986][ T7423] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 548.580896][ T7423] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 548.853073][ T7423] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 549.497893][ T7590] loop1: detected capacity change from 0 to 32768 [ 549.544785][ T7590] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 549.553518][ T7590] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 549.696740][ T7590] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 549.977374][ T7590] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 550.722486][ T7593] loop0: detected capacity change from 0 to 4096 [ 551.467503][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.356631][ T7423] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.503292][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.510995][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.644752][ T7593] ntfs3(loop0): Failed to read $AttrDef (-4). [ 554.708816][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.716440][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.919475][ T7619] syz.5.408 uses obsolete (PF_INET,SOCK_PACKET) [ 555.211011][ T5870] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 555.315998][ T5870] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 555.430634][ T7623] netlink: 32 bytes leftover after parsing attributes in process `syz.7.410'. [ 557.033614][ T7625] fido_id[7625]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 558.246152][ T7639] loop5: detected capacity change from 0 to 32768 [ 558.403297][ T7639] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 558.412067][ T7639] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 558.455287][ T7639] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 558.834485][ T7639] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 562.013581][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.241288][ T7669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.422'. [ 562.410422][ T5843] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 562.649482][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 562.761822][ T5843] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 562.771393][ T5843] usb 2-1: config 0 has no interface number 0 [ 562.880003][ T5843] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 562.890008][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.898310][ T5843] usb 2-1: Product: syz [ 562.903483][ T5843] usb 2-1: Manufacturer: syz [ 562.908360][ T5843] usb 2-1: SerialNumber: syz [ 563.428253][ T5843] usb 2-1: config 0 descriptor?? [ 568.701710][ T5843] msi2500 2-1:0.246: Registered as swradio24 [ 568.708049][ T5843] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 569.013248][ T5843] usb 2-1: USB disconnect, device number 5 [ 574.914166][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 574.937306][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 574.948098][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.016781][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.037237][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.651124][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.434'. [ 577.169154][ T5792] Bluetooth: hci3: command tx timeout [ 577.759974][ T7718] chnl_net:caif_netlink_parms(): no params data found [ 579.219169][ T5792] Bluetooth: hci3: command tx timeout [ 581.299289][ T5792] Bluetooth: hci3: command tx timeout [ 583.619586][ T5792] Bluetooth: hci3: command tx timeout [ 583.891669][ T7750] loop7: detected capacity change from 0 to 4096 [ 584.061151][ T7750] NILFS (loop7): invalid segment: Checksum error in segment payload [ 584.074431][ T7750] NILFS (loop7): trying rollback from an earlier position [ 584.194075][ T4154] bridge_slave_1: left allmulticast mode [ 584.201291][ T4154] bridge_slave_1: left promiscuous mode [ 584.207999][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.305590][ T4154] bridge_slave_0: left allmulticast mode [ 584.311909][ T4154] bridge_slave_0: left promiscuous mode [ 584.318847][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.320230][ T7750] NILFS (loop7): recovery complete [ 584.416622][ T7761] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.980690][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.013175][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'. [ 587.025130][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.089956][ T4154] bond0 (unregistering): Released all slaves [ 587.435777][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.447506][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.456168][ T7718] bridge_slave_0: entered allmulticast mode [ 587.466241][ T7718] bridge_slave_0: entered promiscuous mode [ 587.511887][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.519728][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.527590][ T7718] bridge_slave_1: entered allmulticast mode [ 587.537586][ T7718] bridge_slave_1: entered promiscuous mode [ 587.995574][ T4154] hsr_slave_0: left promiscuous mode [ 588.049229][ T4154] hsr_slave_1: left promiscuous mode [ 588.057925][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.167923][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.595479][ T5843] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 588.649923][ T7787] loop0: detected capacity change from 0 to 1024 [ 588.669588][ T5843] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 589.221435][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 589.372733][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 589.726056][ T7793] fido_id[7793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 590.100788][ T5843] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 590.300482][ T7718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.329740][ T5843] usb 1-1: config 0 has no interfaces? [ 590.435095][ T5843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 590.445246][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.453778][ T5843] usb 1-1: Product: syz [ 590.458196][ T5843] usb 1-1: Manufacturer: syz [ 590.463212][ T5843] usb 1-1: SerialNumber: syz [ 590.509650][ T7718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.706421][ T5843] usb 1-1: config 0 descriptor?? [ 591.040085][ T7718] team0: Port device team_slave_0 added [ 591.119041][ T7718] team0: Port device team_slave_1 added [ 591.490900][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.498248][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.525169][ T7718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.759348][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.766739][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.793327][ T7718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.798021][ T5843] usb 1-1: USB disconnect, device number 11 [ 592.227462][ T7718] hsr_slave_0: entered promiscuous mode [ 592.238092][ T7718] hsr_slave_1: entered promiscuous mode [ 592.247220][ T7718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.255184][ T7718] Cannot create hsr debugfs directory [ 593.019064][ T7798] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 593.238333][ T7798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 593.249951][ T7798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.260425][ T7798] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 593.269912][ T7798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.427917][ T7798] usb 6-1: config 0 descriptor?? [ 594.131022][ T7798] usbhid 6-1:0.0: can't add hid device: -71 [ 594.137831][ T7798] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 594.239565][ T7798] usb 6-1: USB disconnect, device number 4 [ 594.320513][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 594.983720][ T7718] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 595.131827][ T7718] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 595.201270][ T7718] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 595.238628][ T7718] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 596.141208][ T7836] loop5: detected capacity change from 0 to 4096 [ 596.767812][ T7718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.057791][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.074955][ T5792] Bluetooth: hci0: Unable to find connection with handle 0x0001 [ 597.155754][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.163632][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.298726][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.306462][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.378496][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.385481][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.565497][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 599.812042][ T11] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 599.999762][ T7718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.039879][ T11] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.051684][ T11] usb 6-1: config 0 has no interface number 0 [ 600.058109][ T11] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 600.069286][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.197087][ T11] usb 6-1: config 0 descriptor?? [ 600.293915][ T11] usb 6-1: selecting invalid altsetting 1 [ 600.301037][ T11] dvb_ttusb_budget: ttusb_init_controller: error [ 600.307624][ T11] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 600.961134][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.982001][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 601.001246][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 601.019023][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 601.037854][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.160542][ T11] DVB: Unable to find symbol cx22700_attach() [ 601.916776][ T11] DVB: Unable to find symbol tda10046_attach() [ 601.923439][ T11] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 601.942224][ T11] usb 6-1: USB disconnect, device number 5 [ 601.989849][ T7893] netlink: 68 bytes leftover after parsing attributes in process `syz.5.474'. [ 602.575883][ T7881] chnl_net:caif_netlink_parms(): no params data found [ 603.140300][ T5789] Bluetooth: hci4: command tx timeout [ 603.738422][ T7718] veth0_vlan: entered promiscuous mode [ 603.876106][ T7718] veth1_vlan: entered promiscuous mode [ 604.480880][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.491296][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.500211][ T7881] bridge_slave_0: entered allmulticast mode [ 604.510299][ T7881] bridge_slave_0: entered promiscuous mode [ 604.724511][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.732963][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.741478][ T7881] bridge_slave_1: entered allmulticast mode [ 604.751484][ T7881] bridge_slave_1: entered promiscuous mode [ 605.219938][ T5789] Bluetooth: hci4: command tx timeout [ 605.416451][ T4585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.507709][ T7881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.520387][ T7718] veth0_macvtap: entered promiscuous mode [ 605.634014][ T4585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.945206][ T4585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.046453][ T7718] veth1_macvtap: entered promiscuous mode [ 606.081020][ T7881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.186327][ T7928] loop5: detected capacity change from 0 to 256 [ 606.254579][ T4585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.317081][ T7926] process 'syz.0.482' launched './file2' with NULL argv: empty string added [ 606.772847][ T7881] team0: Port device team_slave_0 added [ 607.119104][ T7881] team0: Port device team_slave_1 added [ 607.229706][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.300176][ T5789] Bluetooth: hci4: command tx timeout [ 607.693872][ T4585] bridge_slave_1: left allmulticast mode [ 607.700510][ T4585] bridge_slave_1: left promiscuous mode [ 607.707165][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.838986][ T4585] bridge_slave_0: left allmulticast mode [ 607.845173][ T4585] bridge_slave_0: left promiscuous mode [ 607.852332][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.827119][ T7952] xt_cgroup: xt_cgroup: no path or classid specified [ 609.200946][ T4585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.306049][ T4585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.354828][ T4585] bond0 (unregistering): Released all slaves [ 609.380037][ T5789] Bluetooth: hci4: command tx timeout [ 609.645832][ T7881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.653407][ T7881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.684213][ T7881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.803563][ T7881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.811338][ T7881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.837919][ T7881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.957329][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.088104][ T7718] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.097600][ T7718] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.107052][ T7718] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.116202][ T7718] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.230465][ T7881] hsr_slave_0: entered promiscuous mode [ 611.241268][ T7881] hsr_slave_1: entered promiscuous mode [ 611.250532][ T7881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.258362][ T7881] Cannot create hsr debugfs directory [ 611.608407][ T4585] hsr_slave_0: left promiscuous mode [ 611.655013][ T4585] hsr_slave_1: left promiscuous mode [ 611.663443][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.671529][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.759960][ T5870] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 611.770972][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.784048][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.879908][ T4585] veth1_macvtap: left promiscuous mode [ 611.886061][ T4585] veth0_macvtap: left promiscuous mode [ 611.892512][ T4585] veth1_vlan: left promiscuous mode [ 611.898146][ T4585] veth0_vlan: left promiscuous mode [ 611.902270][ T7966] loop0: detected capacity change from 0 to 256 [ 611.989971][ T5870] usb 8-1: Using ep0 maxpacket: 32 [ 612.035030][ T5870] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 612.044789][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.112134][ T5870] usb 8-1: config 0 descriptor?? [ 612.160241][ T5870] gspca_main: sq930x-2.14.0 probing 041e:403c [ 612.899851][ T5870] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 612.906252][ T5870] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 613.098464][ T5870] usb 8-1: USB disconnect, device number 8 [ 613.128451][ T4585] team0 (unregistering): Port device team_slave_1 removed [ 613.212586][ T4585] team0 (unregistering): Port device team_slave_0 removed [ 616.274867][ T7881] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 616.502390][ T7881] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 616.773197][ T7881] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 617.011981][ T7881] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 618.359422][ T7798] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 618.581376][ T7798] usb 1-1: Using ep0 maxpacket: 8 [ 618.625324][ T7798] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 618.634046][ T7798] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 618.644544][ T7798] usb 1-1: config 6 has no interface number 0 [ 618.651583][ T7798] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 618.663589][ T7798] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 618.673921][ T7798] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.859372][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.959507][ T7798] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 618.969227][ T7798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.977399][ T7798] usb 1-1: Product: syz [ 618.982158][ T7798] usb 1-1: Manufacturer: syz [ 618.989427][ T7798] usb 1-1: SerialNumber: syz [ 619.087715][ T7998] loop5: detected capacity change from 0 to 256 [ 619.147338][ T7881] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.162067][ T7798] hso 1-1:6.2: Failed to find INT IN ep [ 619.268165][ T1801] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.275785][ T1801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.411830][ T7798] usb 1-1: USB disconnect, device number 12 [ 619.483553][ T1801] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.491419][ T1801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.487456][ T8005] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 620.495543][ T8005] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 624.461432][ T5870] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 624.586515][ T7881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.646689][ T5870] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 624.656276][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.753123][ T5870] usb 1-1: config 0 descriptor?? [ 625.022817][ T5870] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 625.039737][ T5870] asix 1-1:0.0: probe with driver asix failed with error -32 [ 625.534071][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 625.740563][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 625.791047][ T5870] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 625.801575][ T5870] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 625.812152][ T5870] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.881071][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.890661][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 625.899007][ T5870] usb 6-1: SerialNumber: syz [ 625.932820][ T8029] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 625.960884][ T8029] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 626.423182][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.432374][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.459065][ T5870] usb 6-1: USB disconnect, device number 6 [ 626.655099][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.665399][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.662688][ T5843] usb 1-1: USB disconnect, device number 13 [ 628.301152][ T7881] veth0_vlan: entered promiscuous mode [ 628.460065][ T7881] veth1_vlan: entered promiscuous mode [ 628.916546][ T7881] veth0_macvtap: entered promiscuous mode [ 628.999345][ T5870] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 629.045890][ T7881] veth1_macvtap: entered promiscuous mode [ 629.239759][ T5870] usb 9-1: Using ep0 maxpacket: 8 [ 629.291259][ T5870] usb 9-1: config 6 has an invalid interface number: 2 but max is 0 [ 629.300628][ T5870] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 629.311659][ T5870] usb 9-1: config 6 has no interface number 0 [ 629.318465][ T5870] usb 9-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 629.336493][ T5870] usb 9-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 629.348219][ T5870] usb 9-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.381684][ T7881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.424470][ T7881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.552596][ T7881] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.562491][ T7881] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.571628][ T7881] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.580697][ T7881] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.634132][ T5870] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 629.648532][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.659511][ T5870] usb 9-1: Product: syz [ 629.664046][ T5870] usb 9-1: Manufacturer: syz [ 629.669454][ T5870] usb 9-1: SerialNumber: syz [ 629.780688][ T5870] hso 9-1:6.2: Failed to find INT IN ep [ 629.985067][ T5870] usb 9-1: USB disconnect, device number 2 [ 630.487919][ T8053] loop2: detected capacity change from 0 to 7 [ 630.555667][ T8053] Dev loop2: unable to read RDB block 7 [ 630.569061][ T8053] loop2: AHDI p1 p2 p3 [ 630.573447][ T8053] loop2: partition table partially beyond EOD, truncated [ 630.581684][ T8053] loop2: p1 start 1601398130 is beyond EOD, truncated [ 630.588925][ T8053] loop2: p2 start 1702059890 is beyond EOD, truncated [ 635.118280][ T8081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.523'. [ 635.129060][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 635.751093][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 635.761385][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 635.770353][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 635.790895][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 635.802613][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.344205][ T5870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 636.621058][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 637.201846][ T8096] loop5: detected capacity change from 0 to 32768 [ 637.221576][ T5870] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 637.230181][ T5870] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 637.241442][ T5870] usb 1-1: config 6 has no interface number 0 [ 637.247928][ T5870] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 637.260016][ T5870] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 637.270503][ T5870] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.319377][ T8096] loop5: p1 p2 p3 < p5 > [ 637.324686][ T8096] loop5: p1 size 242222080 extends beyond EOD, truncated [ 637.452582][ T5870] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 637.462845][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.471278][ T5870] usb 1-1: Product: syz [ 637.475607][ T5870] usb 1-1: Manufacturer: syz [ 637.480475][ T5870] usb 1-1: SerialNumber: syz [ 637.515876][ T5870] hso 1-1:6.2: Failed to find INT IN ep [ 637.724379][ T5147] loop5: p1 p2 p3 < p5 > [ 637.731276][ T5147] loop5: p1 size 242222080 extends beyond EOD, truncated [ 637.791245][ T5870] usb 1-1: USB disconnect, device number 14 [ 637.860083][ T5792] Bluetooth: hci1: command tx timeout [ 639.345691][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 639.532862][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 639.599487][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 639.602452][ T6175] udevd[6175]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 639.612503][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 639.926144][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 639.954108][ T5792] Bluetooth: hci1: command tx timeout [ 640.109864][ T6760] udevd[6760]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 640.166373][ T6175] udevd[6175]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 640.199465][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 642.023877][ T5792] Bluetooth: hci1: command tx timeout [ 642.602706][ T8132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.534'. [ 642.612203][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 642.791518][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.799396][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.807239][ T8086] bridge_slave_0: entered allmulticast mode [ 642.817397][ T8086] bridge_slave_0: entered promiscuous mode [ 643.112295][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.121039][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.129169][ T8086] bridge_slave_1: entered allmulticast mode [ 643.139225][ T8086] bridge_slave_1: entered promiscuous mode [ 643.877552][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.911206][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 644.041899][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.132659][ T5792] Bluetooth: hci1: command tx timeout [ 644.503717][ T8086] team0: Port device team_slave_0 added [ 644.545016][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.553548][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.714394][ T8086] team0: Port device team_slave_1 added [ 645.359191][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.367507][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.389438][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.396810][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.426378][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.548248][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.555823][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.582680][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.710651][ T8151] pim6reg: entered allmulticast mode [ 645.848222][ T8151] pim6reg: left allmulticast mode [ 646.500825][ T8150] loop5: detected capacity change from 0 to 4096 [ 646.672925][ T8086] hsr_slave_0: entered promiscuous mode [ 646.683641][ T8086] hsr_slave_1: entered promiscuous mode [ 646.692761][ T8086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.700691][ T8086] Cannot create hsr debugfs directory [ 646.745807][ T8131] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 646.849261][ T8128] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 646.970662][ T8131] usb 1-1: Using ep0 maxpacket: 8 [ 647.018548][ T8131] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 647.027186][ T8131] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 647.037835][ T8131] usb 1-1: config 6 has no interface number 0 [ 647.047834][ T8131] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 647.060936][ T8131] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 647.070997][ T8131] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.143225][ T8128] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.158279][ T8128] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.169690][ T8128] usb 10-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 647.179207][ T8128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.274508][ T8128] usb 10-1: config 0 descriptor?? [ 647.312323][ T8150] ntfs3(loop5): ino=1a, mi_enum_attr [ 647.318293][ T8150] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 647.339793][ T8131] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 647.349834][ T8131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.361165][ T8131] usb 1-1: Product: syz [ 647.365502][ T8131] usb 1-1: Manufacturer: syz [ 647.371444][ T8131] usb 1-1: SerialNumber: syz [ 647.621310][ T8131] hso 1-1:6.2: Failed to find INT IN ep [ 647.727738][ T8150] ===================================================== [ 647.740026][ T8150] BUG: KMSAN: uninit-value in longest_match_std+0x588/0xee0 [ 647.749287][ T8150] longest_match_std+0x588/0xee0 [ 647.754546][ T8150] compress_lznt+0x49d/0xe90 [ 647.759668][ T8150] ni_write_frame+0xff8/0x1ef0 [ 647.767936][ T8150] ntfs_compress_write+0x2768/0x3950 [ 647.774584][ T8150] ntfs_file_write_iter+0xeb0/0x1040 [ 647.780295][ T8150] vfs_write+0xb4b/0x1580 [ 647.785603][ T8150] __x64_sys_write+0x1fb/0x4d0 [ 647.790878][ T8150] x64_sys_call+0x38c3/0x3db0 [ 647.795985][ T8150] do_syscall_64+0xd9/0x210 [ 647.801799][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.807843][ T8150] [ 647.810571][ T8150] Uninit was created at: [ 647.815220][ T8150] __alloc_frozen_pages_noprof+0x689/0xf00 [ 647.821703][ T8150] alloc_pages_mpol+0x328/0x860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 647.826819][ T8150] folio_alloc_noprof+0x109/0x360 [ 647.833247][ T8150] filemap_alloc_folio_noprof+0x9d/0x420 [ 647.839425][ T8150] __filemap_get_folio+0xb45/0x1930 [ 647.844858][ T8150] ntfs_get_frame_pages+0xdc/0x5f0 [ 647.850404][ T8150] ntfs_compress_write+0x1cf4/0x3950 [ 647.855958][ T8150] ntfs_file_write_iter+0xeb0/0x1040 [ 647.861654][ T8150] vfs_write+0xb4b/0x1580 [ 647.870218][ T8150] __x64_sys_write+0x1fb/0x4d0 [ 647.875302][ T8150] x64_sys_call+0x38c3/0x3db0 [ 647.881900][ T8150] do_syscall_64+0xd9/0x210 [ 647.886881][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.893297][ T8150] [ 647.896023][ T8150] CPU: 0 UID: 0 PID: 8150 Comm: syz.5.539 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 647.909207][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.919988][ T8150] ===================================================== [ 647.927034][ T8150] Disabling lock debugging due to kernel taint [ 647.933412][ T8150] Kernel panic - not syncing: kmsan.panic set ... [ 647.939952][ T8150] CPU: 0 UID: 0 PID: 8150 Comm: syz.5.539 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 647.953679][ T8150] Tainted: [B]=BAD_PAGE [ 647.957921][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.968140][ T8150] Call Trace: [ 647.971557][ T8150] [ 647.974583][ T8150] __dump_stack+0x26/0x30 [ 647.979078][ T8150] dump_stack_lvl+0x53/0x270 [ 647.983848][ T8150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 647.989974][ T8150] dump_stack+0x1e/0x25 [ 647.994378][ T8150] panic+0x4bd/0xd50 [ 647.998569][ T8150] kmsan_report+0x31c/0x320 [ 648.003334][ T8150] ? __msan_warning+0x1b/0x30 [ 648.008243][ T8150] ? longest_match_std+0x588/0xee0 [ 648.013580][ T8150] ? compress_lznt+0x49d/0xe90 [ 648.018549][ T8150] ? ni_write_frame+0xff8/0x1ef0 [ 648.023712][ T8150] ? ntfs_compress_write+0x2768/0x3950 [ 648.029395][ T8150] ? ntfs_file_write_iter+0xeb0/0x1040 [ 648.035086][ T8150] ? vfs_write+0xb4b/0x1580 [ 648.039836][ T8150] ? __x64_sys_write+0x1fb/0x4d0 [ 648.045031][ T8150] ? x64_sys_call+0x38c3/0x3db0 [ 648.050120][ T8150] ? do_syscall_64+0xd9/0x210 [ 648.055001][ T8150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.061285][ T8150] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 648.067383][ T8150] ? prep_new_page+0x502/0x570 [ 648.072441][ T8150] ? get_page_from_freelist+0x176d/0x1820 [ 648.078435][ T8150] ? kmsan_get_metadata+0xfb/0x160 [ 648.083802][ T8150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 648.089868][ T8150] ? kmsan_get_metadata+0xfb/0x160 [ 648.095232][ T8150] ? kmsan_get_metadata+0x150/0x160 [ 648.100712][ T8150] __msan_warning+0x1b/0x30 [ 648.105450][ T8150] longest_match_std+0x588/0xee0 [ 648.110683][ T8150] compress_lznt+0x49d/0xe90 [ 648.115513][ T8150] ? __pfx_longest_match_std+0x10/0x10 [ 648.121256][ T8150] ni_write_frame+0xff8/0x1ef0 [ 648.126403][ T8150] ntfs_compress_write+0x2768/0x3950 [ 648.132024][ T8150] ntfs_file_write_iter+0xeb0/0x1040 [ 648.137576][ T8150] vfs_write+0xb4b/0x1580 [ 648.142175][ T8150] ? __pfx_ntfs_file_write_iter+0x10/0x10 [ 648.148141][ T8150] __x64_sys_write+0x1fb/0x4d0 [ 648.153170][ T8150] x64_sys_call+0x38c3/0x3db0 [ 648.158093][ T8150] do_syscall_64+0xd9/0x210 [ 648.162801][ T8150] ? irqentry_exit+0x16/0x60 [ 648.167587][ T8150] ? clear_bhb_loop+0x40/0x90 [ 648.172491][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.178617][ T8150] RIP: 0033:0x7fa7a0b8e929 [ 648.183230][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.203080][ T8150] RSP: 002b:00007fa79e9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.211717][ T8150] RAX: ffffffffffffffda RBX: 00007fa7a0db5fa0 RCX: 00007fa7a0b8e929 [ 648.219872][ T8150] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000004 [ 648.228013][ T8150] RBP: 00007fa7a0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 648.236152][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.244283][ T8150] R13: 0000000000000000 R14: 00007fa7a0db5fa0 R15: 00007ffec9657468 [ 648.252502][ T8150] [ 648.256047][ T8150] Kernel Offset: disabled [ 648.260483][ T8150] Rebooting in 86400 seconds..