last executing test programs: 33m58.858208897s ago: executing program 32 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b36476"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000680), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r3, 0x7ffffc, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000000)='./file0/file0\x00', r4, r5) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r7, @ANYRES64=0x0, @ANYRESHEX=r8, @ANYBLOB=',uid=', @ANYRESHEX=r7, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000002a80)="$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") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 32m44.532865592s ago: executing program 33 (id=701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 29m39.502056294s ago: executing program 34 (id=1261): io_destroy(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYBLOB, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) 21m19.983051292s ago: executing program 35 (id=2987): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x28900a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x9, 0x2cb, &(0x7f00000004c0)="$eJzs3T9rJGUYAPBnksnsngq7hZUIDmhhdVyutdkgFxBTeaRQCw3eHcjuItxBwD+4XmVrY2HhJxAEP4iN30CwFew85eCVmZ1hJ5fdNRvciN7v1+Thfd9n3mcmL8mkyLPvvzgd3ynj3sPPfo5+P4udUYziURbD2InWF3HG6KsAAP7LHqUUv6W5lYueOz+URUR/u6UBAFuy+vd/2YnzRfjDlZUGAGzJ7bffefPg6OjWW2XZj8Ppl6fH1V/21df5/MG9+DAmcTduxCAeR9QvCntRvy1U4WFKaZaXlWG8Mp2dHleZ0/d+bK5/8GtEnb8fgxjWQymlvA3S4RtHt/bLuU7+rKrjmWb/UZV/MwbxfLN/87bS5t9ckh/HRbz6cqf+6zGInz6Ij2ISd+q9F/mf75fl6+nr3z99t6qqys9mp8e9et1C2r3SbwwAAAAAAAAAAAAAAAAAAAAAAP9r15veOb0oh3/OewA2/Xd2H1fze1G2hmf788zzs/ZC3f5AKaVZim/b/jo3yrJMzcJFfh4v5N3GggAAAAAAAAAAAAAAAAAAAPD0evDxJ+OTyeTu/UsH12Ix0nYDyCPij9sRl73yqDPyUtRBvqrUXrPnyWSy04Rn1+Tdkdht12QRa8uobuLyj2W8yeJr52pugu++33T3/t+v2Vu+1z8ZtKdrfJItf4a9aEf6zSH5pojOQSrignsVq6ZSbHL8iqVTg43vvXi2DmZr1kS2rrDXfpk/uWYke/IuivqpLk3fa4JO+hNn40LnOfrz9PM/KzLdOgAAAAAAAAAAAAAAAAAAYKsW//27ZPLh2tSd1NtaWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwpRaf/79BMGuSL7C4iPsP/uVbBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CnwVwAAAP//NnNahw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x58, &(0x7f0000000240)}, 0x10) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000000}], 0x0, 0x0, 0x0}) 19m42.09897396s ago: executing program 36 (id=3309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17m37.445571507s ago: executing program 5 (id=3720): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17m37.140618996s ago: executing program 5 (id=3775): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/116, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/72, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000300)='./file0\x00', 0x414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000005389b3685c0836456d62cffe21fa010ae8354173037f7d719c2a"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17m34.079690918s ago: executing program 5 (id=3790): sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020700000000000000fedbdf2503000500000000000200000000001f000002000100000004d206"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140008000800"], 0x2c}}, 0x0) 17m33.86016185s ago: executing program 5 (id=3791): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 17m33.532554065s ago: executing program 5 (id=3792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000640)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000200100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_audit(0x10, 0x3, 0x9) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000480)=0xe8) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x810, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000170000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000001000,default_permissions,default_permissions,allow_other,max_read=0x0000000000000000,fsmagic=0xfffffffffffffff9,measure,\x00'], 0x0, 0x0, &(0x7f0000000600)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r8, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r8, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000001040)=0x7, 0x4) dup3(0xffffffffffffffff, r8, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a10000000000000047cf8f29a00010008001e00"], 0x24}}, 0x0) 17m33.088070902s ago: executing program 5 (id=3794): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000010000100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="408f010008200200300012800e0001006970366772657461700000001c0002800600110000000000060011000019000008000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 17m32.990247737s ago: executing program 37 (id=3794): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000010000100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="408f010008200200300012800e0001006970366772657461700000001c0002800600110000000000060011000019000008000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 16m26.472491569s ago: executing program 6 (id=4003): socket(0x18, 0x80803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@noprefix}, {@subsystem='cpuacct'}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r4, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_open_dev$tty20(0xc, 0x4, 0x1) 16m22.788519389s ago: executing program 7 (id=4014): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x24004044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000) r1 = getpid() sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x29, 0x2, {0x2, [{{0x8, 0x2, 0x3}, 0x20000, 0xf8, 0x7, './file0'}]}}, 0x2a) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fchownat(r5, &(0x7f0000000200)='./file1\x00', 0xee00, 0x0, 0x0) 16m21.632062156s ago: executing program 7 (id=4018): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x80, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5, 0xc00}, [@RTA_TABLE={0x8, 0xf, 0xffff}]}, 0x24}}, 0x90ddc0a679ff07b8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) utimes(&(0x7f0000000380)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x95}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getrlimit(0x3, &(0x7f0000000240)) 16m20.254576849s ago: executing program 7 (id=4020): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 16m19.830658478s ago: executing program 7 (id=4022): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 16m19.829836151s ago: executing program 6 (id=4023): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)={0x10, 0x41, 0x320, 0x70bd2b, 0x25dfdbfe}, 0x10}, {&(0x7f0000000380)={0x10, 0x42, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x40}, 0x0) 16m19.539010235s ago: executing program 6 (id=4025): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000002200)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b00030100000009040000000101", @ANYRESHEX=0x0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16m17.31653545s ago: executing program 7 (id=4034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000640)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000200100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_audit(0x10, 0x3, 0x9) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@multicast1}}, {{@in6=@initdev}}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000001040)=0x7, 0x4) dup3(r5, r6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a10000000000000047cf8f29a00010008001e00"], 0x24}}, 0x0) 16m16.598814651s ago: executing program 6 (id=4041): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@jqfmt_vfsold}, {@data_err_abort}, {@norecovery}, {@norecovery}]}, 0x1, 0x4cd, &(0x7f0000000a00)="$eJzs3ctrXNcZAPBvZqyn1cp2S7FdqA0uuA+s0YNiqe2iXbVdGEoN3bTgqtJYVTXSCM3ItYShcrLzIouQkEDIIstA/oFkE69iAiHrZB+8CA6Jo0ASCEyYOzPy6DHKJJY8Qff3g+s595zr+c7R8B3dOXM1N4DUOl/7JxMxFBHvRsRwfXf7AefrD5sPb83UtkxUq1c/ziTH1fabhzb/3/GI2IiI/oj4258i/p3ZHbe8tr4wXSwWVhr7+cricr68tn5pfnF6rjBXWBqbvDw1NTk6MT51YGO988x/71x54y+9r33+9IN7z771Zq1bQ4221nEcpPrQe+JkS92xiPj9YQTrglxjPAPd7gjfSe31+1FEXEjyfzhyyasJpEG1Wq1+Ve1r17xRBY6sbHIOnMmORES9nM2OjNTP4X8cg9liqVz59fXS6tJs/Vz5RPRkr88XC6ON9wonoidT2x9Lyo/2x3fsT0Qk58DP5QaS/ZGZUnH2yU51wA7Hd+T/Z7l6/gMp4S0/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kEp/vXKltlWbf/8+e2NtdaF049Jsobwwsrg6MzJTWomRuVLf6509X7FUWh77TazezFcK5Uq+vLZ+bbG0ulS5Nr84PdcbhZ5DHg/QuZPn7r6fiYiN3w4kW01vo02uwtFW/X/9OwCA9Ml1ewICusbSH6SX9/jAHl/Ru01/u4blx4r6TWGBQ5TtdgeArrl4xud/kFbW/yG9rP9Dem0/x3c2AGnUnfV/oJus/0N6DbXc/yfTcv+vH7Tcu2s0In4YEe/levqa9/oCjoLsh5lG7l8c/vnQztbezBfJokBvRPzvpasv3JyuVFbGavWfbNVXXqzX93aj+0DHkvwdbzz6RQ4Aqbb58NZMc9uqPHH4cT/6Y/0ihN3xjzXWJvuTzygHNzPbrlXIHNC1Cxu3I+L0XvEzjfud1z/5GNzM7Yp/qvGYqT9F0t9jyX3THyf+/Vc7jX+mJf7PWuKffeyfCqTD3dr8M7pX/meTnI6t/Ns+/wwd0PXR7ee/7Nb8l2sz/53rMMZ/Xn7qftv4tyPO7hm/Ga8/ibUzfq1vFzuM/+Cff/9Ju7bqK/Xn2St+U62Urywu58tr65fmF6fnCnOFpbHJy1NTk6MT41P5ZI0631yp3u13p9+5t9/4B9vE32/8tbpfdjj+L3/69j/O7xP/Fxf2fv1P7RN/ICJ+1WH8T8c/+Fe7tlr82Tbjz+6M37LAV6ub6DB++fk/93V4KADwBJTX1hemi8XCioKCwrcsVIbrWfR96c9BFro9MwGH7VHSd7snAAAAAAAAAAAAQKcO7JrhP0Tbpm6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKPg6AAD//029zuw=") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="c9f01443b39ee97dc97717af6a444a87257769af378429ec9303fb1784190ab63c2fe49d4893ee8bd420379f9bd9c42aba7789233a8e4bbc5f1715554eeacc13e8e00de798715a6546f1ed936a398359dd3a4064f251fdb0a6f0d1f449a5af413f59435192f15df86391105e2c2b13ac5487e71c235b"], 0x1, 0x37f, &(0x7f0000000440)="$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") io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000, 0x1000000}]) 16m15.163347141s ago: executing program 6 (id=4051): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 16m14.856552969s ago: executing program 7 (id=4052): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00010000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000480)="00214717a7070000deff020600710a5e31163ceb9d04712000", 0x19}], 0x1, 0x10000, 0x0) 16m14.400366431s ago: executing program 38 (id=4052): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00010000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000480)="00214717a7070000deff020600710a5e31163ceb9d04712000", 0x19}], 0x1, 0x10000, 0x0) 16m14.098579834s ago: executing program 6 (id=4058): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa43166c5be0ae608) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f00000007c0)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 16m13.571961937s ago: executing program 39 (id=4058): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa43166c5be0ae608) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f00000007c0)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 12m5.328470891s ago: executing program 0 (id=4909): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$lock(r5, 0x24, &(0x7f0000000440)={0x2, 0x0, 0x4, 0x6}) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xffffff01, @mcast2}, 0x1c, 0x0}}], 0x1, 0x804) 12m4.20258381s ago: executing program 0 (id=4912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree_skb\x00', r1}, 0x18) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000021000f"], 0x1c}}, 0x0) 12m2.987241712s ago: executing program 0 (id=4914): userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x25, 0x8, 0xfffffffd, 0x0, 0x6c5, 0x7, "01019efeffb7b865a4807da96e016180fd68f11758f1e88b50527545cbedc122d6d838050c"}}, 0x13d) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'lo\x00'}) 11m59.716152292s ago: executing program 0 (id=4921): socket(0x15, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg(r5, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000004a80)=[{0x0}, {&(0x7f0000002a80)="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", 0x618}, {&(0x7f0000000480)="b0a19877d3050d83", 0x8}, {&(0x7f0000000b40)="cac1a45fe9b1d1066f26623c14524df841f954c7e8d2bf287a08415ecbc0cfc471e804b4bf2f", 0x26}], 0x4}}], 0x1, 0x40080) splice(r5, 0x0, r4, 0x0, 0x800000000000045, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0x11, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 11m52.858183377s ago: executing program 0 (id=4943): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000280)=@v1={0x1000000, [{0x7, 0xf}]}, 0xc, 0x3) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') 11m49.823732341s ago: executing program 0 (id=4956): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) personality(0x60000a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) 11m34.480205888s ago: executing program 40 (id=4956): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) personality(0x60000a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) 31.199985243s ago: executing program 9 (id=7539): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) 31.032504658s ago: executing program 9 (id=7541): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 30.334704228s ago: executing program 9 (id=7544): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x43000000, 0x0, 0x0, 0xd, 0x4}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 27.963130319s ago: executing program 9 (id=7558): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x910cc3, 0x0, 0x8, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000540)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x4, 0x0, 0x0) rmdir(&(0x7f0000001100)='./file1\x00') 24.779747826s ago: executing program 9 (id=7568): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e12090018", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 23.119297866s ago: executing program 9 (id=7579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4a}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 22.195688746s ago: executing program 41 (id=7579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4a}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.069855955s ago: executing program 3 (id=7637): socket(0x15, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8000) sendmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000004a80)=[{0x0}, {&(0x7f0000002a80)="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", 0x618}, {&(0x7f0000000480)="b0a19877d3050d83", 0x8}, {&(0x7f0000000b40)="cac1a45fe9b1d1066f26623c14524df841f954c7e8d2bf287a08415ecbc0cfc471e804b4bf2f", 0x26}], 0x4}}], 0x1, 0x40080) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800000000000045, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x11, &(0x7f0000000180)=0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xc99e, 0xffffffffffffffff, &(0x7f0000000000)="8d98bc", 0x3, 0xb, 0x0, 0xd97393af9ce72a1d}]) 6.383680658s ago: executing program 3 (id=7651): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000440)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x70dab7c4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x0, 0x9}, 0x0, 0x0, 0x1392}}, @TCA_TBF_PBURST={0x8, 0x7, 0x467}]}}]}, 0x68}}, 0x0) 4.767799197s ago: executing program 3 (id=7660): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000100), 0x20000000}, 0x20) 4.679435891s ago: executing program 3 (id=7662): socket(0x15, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8000) sendmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000004a80)=[{0x0}, {&(0x7f0000002a80)="3aa7f7425af62ea8e60faeafd5f0735118879c0a673edf432d21c88a742c73ca663b0408046c9a97c376c7d7a74b8394c25d327372821ce7fb319e7e5ba81555cfde134aeb8b021c147f253d025bf0539e2a9d9ddb90bdc784ece41328487259a769d5563dd51000cd9a8169aa42581cab7fe9c2f8e8c84178a6f6b527123de89bf9858b58fac04148347d3e2fb549d7de9e093cd4cd4368a1a808b8199cf59c0c1f41e17f55c88078281429a7d572563c5be00ae0ef4ad10902f78207018070a5ac5e9d35edccd5112a6ec8eca9ed38a0bad869c46458dc36c8bb60c42d09b6a8b5d53d9f738ac6eb29557b95dae927587a9aa8c450466b0723c78eae0a70d686cd94e57083ca98dda1eeb4b023a4b9b4a5cdb213468f48f085e603216e5d28ff2adeca3d992eef22328f38103f811cb8e834097795626fcfbbeb69ba41b59bd96d7c698ec147313b3eda8391b8804fd2ca54d3cc15514948d05f0e9ef582eaddb53427a620b7566f5309fd1dc8e9d079151dfca303813dd1fa718389f168e1d2363415edb15840bee55da0fb18e70c851e2d091eff0118db1e905ab6675ea03eee53478a732cb87cb923ade2169a131ab8c247d137a662fd3c9f4d029579fc927e3282f1e81cd71ed1692c83419f9c227d565151b25e700e9c080e7a12ac9d465babfee14cc21d85d0edb7d25d3b68cec197e96ffa046fcd12873d940407fd3c7acb01a928926eb7213b3bc90a8e470cc1e9a6a8c7ca4342223fd2f4ea6d05c41caa55951be9129f3dfd070a1234fdffcd786f4e5378288a961ead3d296214c72be737217342258f195f069a9d4b7738e30117294980a13b83b5586d5971bbf7c90caec9fbbe3859f77f34ff12479a7279bf9b658664e47738de7e2a90934f0c7e1d22683e9a44b399d119ce0c862a3e04aaa7980a9854715d63b948116eb7eb99681895201b1698005c92b5a7bbfccadb8c2ed8483bb1a561cd4bf6546f417cf00e001de23773fc7ea549905bb2257c7c412a6bba2a957e1587903ec12a3b95a809ae4c11f4a6a58cda37c4c4ea8b3c50977fcc25b563c68e890653c8f9488710a2163f377a7d97e13b2f13075b44591c84abf1f4fa9c70afa3433c4a7b33f46a5e1f93759ddb6eb1ea2c7be2220dbf9c866fbaeef81fdb5b9ec23513c8dcb3d50a18e2d91a6452e012b4872650ba8e61d4ac8768de494856a70d100b73d245ccc9719bf4e15d432a37667b11132561c57b20f55943afbd3ffba0a35c3b46c55144fd34947587170770eebeacad4b37408795b8cbad6aff9e028c5a84a76098ba6d3868e03bd3924ce0f571c96140813f6c352ee76a64e6f70efb88389299b1fe03324f8f9eab04ae5eea14df25e9579aecb2039e1f096e6e022f3bf83c845bb0922fdcc4fae97bdbb583a926ceb059c2b127ad4e2acfc536e6919f22642879909821f3f8dd311ce93c6b1ceedc14004a57744ee69a78ba362f3ec48d04eec38b9f76940dcc186ddadb2785dce69eb04abcafd1f1e6ac7876bf653e277f68686b9b67bc7d0c7ef0c813711f707c979d4abf7a12e748e777d91da6b98f238d3459627ed41ad6966b849170189e537f932e7371396537248082fc2c50e917d7420c1b103cde6ce3ecbb4705b3d75a3b143ec09251adbcff1e35b5ae1820c074761f78a909faf03d835fa59d2aa6fce0439ad29782e882775747a44e4ee38558098dee3631ed1fc35b652c0d0dd0d30412719969b8b37416e3e22c897ba72f316775bd55f09ee3d3a24087d13cc1237b8905572a3974186c46df94fd9417ddb949c2db4748c964c2cf21c89c385a1e2f0405be706a2fa98292ea3532c08c2f58040f4a7457865a97f76080bf9a77b2806a04b50b30bfa34a2df46a1ae8af177c46b9f909c1c5988b3852ae832a29b2bcb800eb678c71e0d20d79ce673918b903a74061feb28d65e0c9b30831ae14d37ca9b9055472cfb647450ec7cebb94d247eaf24e06e7d741a5d56aae770e73f6d673c87bd5ff34fd473f8b7d7c197bb30d101f56a36b6c110edf30ea3cd468db4fd64acb0011e84439932a6db6a89d7841ad0c0b6d8b6446c5a18fae205f6108e71e85ade48f749cdd025706cf6a49169856576fcdfd2e3a8b1e54d1ea3529f36772ef0b75209d08e272a5cce256e421bb35f63ebf0a7548aab826d406c7f5585ef9b6f70a2eb22d4a", 0x618}, {&(0x7f0000000480)="b0a19877d3050d83", 0x8}, {&(0x7f0000000b40)="cac1a45fe9b1d1066f26623c14524df841f954c7e8d2bf287a08415ecbc0cfc471e804b4bf2f", 0x26}], 0x4}}], 0x1, 0x40080) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800000000000045, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x11, &(0x7f0000000180)=0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xc99e, 0xffffffffffffffff, &(0x7f0000000000)="8d98bc", 0x3, 0xb, 0x0, 0xd97393af9ce72a1d}]) 4.382204208s ago: executing program 4 (id=7665): socket$kcm(0x11, 0xa, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.723203585s ago: executing program 4 (id=7669): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.749808796s ago: executing program 4 (id=7673): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000a40)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0xf, 0x58, 0x65, 0x0, 0x64, 0x2f, 0x0, @loopback, @multicast2}, {{}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x4, 0x1, 0x1, 0x0, 0x2, 0xeb}, 0x1, {0x7fff}}}, {0x8, 0x22eb, 0x2, {{0xd, 0x2, 0x9, 0x0, 0x1, 0x2, 0x2}, 0x2, {0x10000, 0x5, 0x3, 0x9, 0x0, 0x1, 0x3}}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x12, 0x0, 0x0) 2.548513238s ago: executing program 8 (id=7676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 2.216217953s ago: executing program 1 (id=7678): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e", 0x23}], 0x1}, 0x0) 2.169711586s ago: executing program 8 (id=7679): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000040000001000000c0300000000000000dc"], 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6, 0x5b, 0x2, 0x4}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.958381934s ago: executing program 1 (id=7681): socket$kcm(0x11, 0xa, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.769492422s ago: executing program 3 (id=7682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 1.630292112s ago: executing program 8 (id=7683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 1.607157097s ago: executing program 1 (id=7684): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.341648655s ago: executing program 8 (id=7685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000dfffffff0000000000005aaa40", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ffffff"], 0x48) 1.29523047s ago: executing program 3 (id=7686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x42042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 1.020562328s ago: executing program 1 (id=7687): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.017411414s ago: executing program 8 (id=7688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="6ece80", 0x3}], 0x1, 0x0, 0x0, 0x40000c0}], 0x1, 0xc051) 1.016613603s ago: executing program 2 (id=7689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 909.429252ms ago: executing program 1 (id=7690): socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x81) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0xfe33) 908.658794ms ago: executing program 4 (id=7691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 908.469827ms ago: executing program 2 (id=7692): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) 774.588449ms ago: executing program 2 (id=7693): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e12090018", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 705.524504ms ago: executing program 8 (id=7694): socket(0x15, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8000) sendmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000004a80)=[{0x0}, {&(0x7f0000002a80)="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", 0x618}, {&(0x7f0000000480)="b0a19877d3050d83", 0x8}, {&(0x7f0000000b40)="cac1a45fe9b1d1066f26623c14524df841f954c7e8d2bf287a08415ecbc0cfc471e804b4bf2f", 0x26}], 0x4}}], 0x1, 0x40080) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800000000000045, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x11, &(0x7f0000000180)=0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xc99e, 0xffffffffffffffff, &(0x7f0000000000)="8d98bc", 0x3, 0xb, 0x0, 0xd97393af9ce72a1d}]) 704.643119ms ago: executing program 1 (id=7695): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000040000001000000c0300000000000000dc"], 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6, 0x5b, 0x2, 0x4}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 380.066695ms ago: executing program 2 (id=7696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000100), 0x20000000}, 0x20) 372.224164ms ago: executing program 4 (id=7697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 183.958831ms ago: executing program 2 (id=7698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 449.527µs ago: executing program 2 (id=7699): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=7700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000dfffffff0000000000005aaa40", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ffffff"], 0x48) kernel console output (not intermixed with test programs): 992423][ T25] usb 2-1: SerialNumber: syz [ 1900.002447][ T25] usb 2-1: config 0 descriptor?? [ 1900.010922][ T25] usb 2-1: Found Unit with invalid ID 0. [ 1900.569143][T26720] usb 2-1: USB disconnect, device number 49 [ 1900.634654][T29164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1900.645564][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1900.666613][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1900.965214][T29174] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5984'. [ 1902.876841][T29182] bridge0: port 3(gretap0) entered blocking state [ 1902.883826][T29182] bridge0: port 3(gretap0) entered disabled state [ 1902.891385][T29182] gretap0: entered allmulticast mode [ 1902.904706][T29182] gretap0: entered promiscuous mode [ 1902.912212][T29182] bridge0: port 3(gretap0) entered blocking state [ 1902.918707][T29182] bridge0: port 3(gretap0) entered forwarding state [ 1903.680105][T29188] overlayfs: missing 'workdir' [ 1904.782141][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1904.790870][ T5154] Bluetooth: hci3: command 0x1003 tx timeout [ 1905.349474][ T29] audit: type=1326 audit(2000001697.717:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1905.476909][T29215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1905.543589][ T29] audit: type=1326 audit(2000001697.717:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1905.588627][T29219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1905.684879][ T29] audit: type=1326 audit(2000001697.717:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1905.856451][ T29] audit: type=1326 audit(2000001697.717:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1905.881574][T26720] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1905.924176][ T29] audit: type=1326 audit(2000001697.717:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1905.946975][ T29] audit: type=1326 audit(2000001697.717:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1905.969783][ T29] audit: type=1326 audit(2000001697.717:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1905.992759][ T29] audit: type=1326 audit(2000001697.717:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1906.015825][ T29] audit: type=1326 audit(2000001697.717:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1906.038904][ T29] audit: type=1326 audit(2000001697.717:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1906.501589][ T5940] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1906.725771][T26720] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1906.754837][T26720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.982962][T26720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1907.128497][T26720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.158625][T26720] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1907.182993][T26720] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1907.196245][T26720] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1907.210682][T26720] usb 2-1: Product: syz [ 1907.211734][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 1907.221440][T26720] usb 2-1: Manufacturer: syz [ 1907.235650][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.248846][T26720] cdc_wdm 2-1:1.0: skipping garbage [ 1907.256255][T26720] cdc_wdm 2-1:1.0: skipping garbage [ 1907.273145][T26720] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1907.282216][ T5940] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1907.290223][T26720] cdc_wdm 2-1:1.0: Unknown control protocol [ 1907.371722][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.379801][ T5940] usb 5-1: Product: syz [ 1907.391687][ T5940] usb 5-1: Manufacturer: syz [ 1907.396395][ T5940] usb 5-1: SerialNumber: syz [ 1907.425255][ T5940] usb 5-1: config 0 descriptor?? [ 1907.434054][ T5940] usb 5-1: Found Unit with invalid ID 0. [ 1907.595558][ T5940] usb 2-1: USB disconnect, device number 50 [ 1907.638577][T11630] usb 5-1: USB disconnect, device number 27 [ 1907.916042][T29217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1907.923373][T29217] IPv6: NLM_F_CREATE should be set when creating new route [ 1908.729640][ T3562] Bluetooth: hci3: Frame reassembly failed (-84) [ 1908.736598][ T3562] Bluetooth: hci3: Frame reassembly failed (-84) [ 1910.161056][T29263] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6012'. [ 1910.190956][T29263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6012'. [ 1911.169006][ T5154] Bluetooth: hci3: command 0x1003 tx timeout [ 1911.175215][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1912.036551][T29285] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1912.060602][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1912.060664][ T29] audit: type=1326 audit(2000001704.537:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29256 comm="syz.1.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34afb7e819 code=0x7ffc0000 [ 1912.103538][ T29] audit: type=1326 audit(2000001704.537:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29256 comm="syz.1.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34afb7e819 code=0x7ffc0000 [ 1912.200133][T29257] overlayfs: failed to resolve './file0': -2 [ 1912.701690][ T5904] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1912.837826][T29306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6027'. [ 1912.854819][T29306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6027'. [ 1913.574048][T29314] bridge0: port 3(gretap0) entered blocking state [ 1913.580594][T29314] bridge0: port 3(gretap0) entered disabled state [ 1913.587400][T29314] gretap0: entered allmulticast mode [ 1913.595275][T29314] gretap0: entered promiscuous mode [ 1913.616595][T29314] bridge0: port 3(gretap0) entered blocking state [ 1913.623261][T29314] bridge0: port 3(gretap0) entered forwarding state [ 1913.937158][ T5904] usb 9-1: Using ep0 maxpacket: 16 [ 1913.944100][ T5904] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.074126][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1914.309372][ T5904] usb 9-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1914.318612][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.327294][ T5904] usb 9-1: Product: syz [ 1914.331537][ T5904] usb 9-1: Manufacturer: syz [ 1914.336159][ T5904] usb 9-1: SerialNumber: syz [ 1914.342537][ T5904] usb 9-1: config 0 descriptor?? [ 1914.350411][ T5904] usb 9-1: Found Unit with invalid ID 0. [ 1914.894508][ T5904] usb 9-1: USB disconnect, device number 47 [ 1915.925137][T11630] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1916.340210][T29341] 9pnet_fd: Insufficient options for proto=fd [ 1916.595083][ T29] audit: type=1326 audit(2000001709.077:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.619922][ T29] audit: type=1326 audit(2000001709.097:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.642699][ T29] audit: type=1326 audit(2000001709.097:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.665863][ T29] audit: type=1326 audit(2000001709.097:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.689342][ T29] audit: type=1326 audit(2000001709.097:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.712210][ T29] audit: type=1326 audit(2000001709.097:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.789274][ T29] audit: type=1326 audit(2000001709.257:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.832112][ T29] audit: type=1326 audit(2000001709.257:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 1916.913053][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.924493][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.941592][T11630] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1916.950754][T11630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.052621][T11630] usb 5-1: config 0 descriptor?? [ 1917.219857][T29355] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1918.093780][T11630] hid (null): bogus close delimiter [ 1918.359383][T11630] usb 5-1: string descriptor 0 read error: -71 [ 1918.401286][T11630] uclogic 0003:256C:006D.0050: failed retrieving string descriptor #200: -71 [ 1918.403059][T29370] bridge0: port 3(gretap0) entered blocking state [ 1918.417731][T29370] bridge0: port 3(gretap0) entered disabled state [ 1918.425359][T29370] gretap0: entered allmulticast mode [ 1918.435710][T29370] gretap0: entered promiscuous mode [ 1918.442834][T29370] bridge0: port 3(gretap0) entered blocking state [ 1918.449329][T29370] bridge0: port 3(gretap0) entered forwarding state [ 1919.146615][T11630] uclogic 0003:256C:006D.0050: failed retrieving pen parameters: -71 [ 1919.154900][T11630] uclogic 0003:256C:006D.0050: failed probing pen v2 parameters: -71 [ 1919.163214][T11630] uclogic 0003:256C:006D.0050: failed probing parameters: -71 [ 1919.170758][T11630] uclogic 0003:256C:006D.0050: probe with driver uclogic failed with error -71 [ 1919.274431][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.280774][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.881525][T11630] usb 5-1: USB disconnect, device number 28 [ 1924.307652][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1924.307680][ T29] audit: type=1326 audit(2000001716.787:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.4.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1924.368045][ T29] audit: type=1326 audit(2000001716.787:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.4.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1924.433739][ T29] audit: type=1326 audit(2000001716.787:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.4.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1924.565743][ T29] audit: type=1326 audit(2000001716.787:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.4.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1924.588978][ T29] audit: type=1326 audit(2000001716.787:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.4.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1924.895255][ T29] audit: type=1326 audit(2000001716.787:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.4.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1925.156211][ T29] audit: type=1326 audit(2000001716.797:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.4.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1926.557758][ T29] audit: type=1326 audit(2000001719.037:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.4.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1926.652415][ T29] audit: type=1326 audit(2000001719.037:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.4.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1926.711324][ T29] audit: type=1326 audit(2000001719.037:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.4.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1928.881482][T11630] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1929.052907][T11630] usb 10-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 1929.071556][T11630] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.113290][T11630] usb 10-1: config 0 descriptor?? [ 1929.619702][T15047] usb 10-1: USB disconnect, device number 29 [ 1929.704144][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 1929.704174][ T29] audit: type=1326 audit(2000001722.167:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.4.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1929.752002][ T29] audit: type=1326 audit(2000001722.167:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.4.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1929.752587][T29516] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6096'. [ 1929.831122][ T29] audit: type=1326 audit(2000001722.277:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.4.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1930.350912][ T29] audit: type=1326 audit(2000001722.277:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.4.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1930.443238][ T29] audit: type=1326 audit(2000001722.277:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29519 comm="syz.4.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 1930.714735][T29529] syzkaller0: entered promiscuous mode [ 1930.720280][T29529] syzkaller0: entered allmulticast mode [ 1932.086046][T29547] bpf: Bad value for 'mode' [ 1933.147389][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1933.940195][ T29] audit: type=1326 audit(2000001726.367:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29565 comm="syz.8.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1934.097291][ T29] audit: type=1326 audit(2000001726.367:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29565 comm="syz.8.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1934.203199][ T29] audit: type=1326 audit(2000001726.367:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29565 comm="syz.8.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1934.307495][ T29] audit: type=1326 audit(2000001726.367:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29565 comm="syz.8.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1934.427836][ T29] audit: type=1326 audit(2000001726.367:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29565 comm="syz.8.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1935.175197][T29572] loop9: detected capacity change from 0 to 40427 [ 1935.221945][T29572] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1935.231155][T29572] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1935.293681][T29572] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1935.494667][T29572] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1935.525059][T29572] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1936.674958][ T35] Bluetooth: hci3: Frame reassembly failed (-84) [ 1936.915934][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1936.915966][ T29] audit: type=1326 audit(2000001729.357:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.9.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b57e819 code=0x7ffc0000 [ 1936.987484][ T29] audit: type=1326 audit(2000001729.357:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.9.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b57e819 code=0x7ffc0000 [ 1937.089765][ T29] audit: type=1326 audit(2000001729.357:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.9.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f736b57e819 code=0x7ffc0000 [ 1937.102444][T29605] loop9: detected capacity change from 0 to 512 [ 1937.351512][ T29] audit: type=1326 audit(2000001729.357:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.9.6119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736b57e819 code=0x7ffc0000 [ 1937.664273][T29605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1937.701365][T29605] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1938.077769][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1938.731512][ T5154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1939.537082][T29634] veth1_macvtap: left promiscuous mode [ 1939.542829][T29634] macsec0: entered promiscuous mode [ 1940.662809][T29654] loop9: detected capacity change from 0 to 512 [ 1940.693715][T29654] EXT4-fs: Ignoring removed i_version option [ 1940.695958][T29653] syz.8.6139 (29653): attempted to duplicate a private mapping with mremap. This is not supported. [ 1940.699835][T29654] EXT4-fs: Ignoring removed nobh option [ 1940.765939][T29654] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1940.782890][T29654] EXT4-fs (loop9): can't mount with commit=14, fs mounted w/o journal [ 1941.326284][T29666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1943.262929][T29680] bridge: RTM_NEWNEIGH with invalid ether address [ 1943.796863][T12366] Bluetooth: hci3: Frame reassembly failed (-84) [ 1944.791554][ T5904] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1944.966174][ T5904] usb 9-1: Using ep0 maxpacket: 32 [ 1944.988095][ T5904] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.999193][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1945.029077][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1945.049635][ T5904] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1945.090425][ T5904] usb 9-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1945.116879][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.157531][ T5904] usb 9-1: config 0 descriptor?? [ 1945.174363][T29718] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6160'. [ 1945.307649][ T29] audit: type=1326 audit(2000001737.787:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29721 comm="syz.1.6162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34afb7e819 code=0x0 [ 1945.831968][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1946.314284][ T5904] usbhid 9-1:0.0: can't add hid device: -71 [ 1946.320518][ T5904] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1946.330265][ T5904] usb 9-1: USB disconnect, device number 48 [ 1946.493872][ T29] audit: type=1326 audit(2000001738.977:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34afb7e819 code=0x7ffc0000 [ 1946.578789][ T29] audit: type=1326 audit(2000001738.997:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f34afb7e819 code=0x7ffc0000 [ 1946.655682][ T29] audit: type=1326 audit(2000001738.997:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29730 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34afb7e819 code=0x7ffc0000 [ 1947.736677][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6169'. [ 1947.750809][T29746] tipc: Failed to obtain node identity [ 1947.756801][T29746] tipc: Enabling of bearer rejected, failed to enable media [ 1947.768857][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6169'. [ 1947.850428][ T29] audit: type=1326 audit(2000001740.327:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1947.886522][ T29] audit: type=1326 audit(2000001740.327:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1948.547958][ T29] audit: type=1326 audit(2000001740.327:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1948.602909][ T29] audit: type=1326 audit(2000001740.327:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1948.835725][ T29] audit: type=1326 audit(2000001740.327:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34d3b7d2ff code=0x7ffc0000 [ 1949.410096][T11630] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1949.462212][ T29] audit: type=1326 audit(2000001740.327:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1949.818399][T29045] Bluetooth: hci3: Frame reassembly failed (-84) [ 1949.864466][T11630] usb 5-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 1949.891138][T11630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.933324][T11630] usb 5-1: config 0 descriptor?? [ 1950.671589][ T25] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1950.738772][T15047] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1950.750311][T11630] wacom 0003:056A:00BB.0051: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 1950.761326][T11630] wacom 0003:056A:00BB.0051: hidraw0: USB HID v1.01 Device [HID 056a:00bb] on usb-dummy_hcd.4-1/input0 [ 1950.774812][T11630] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BB.0051/input/input81 [ 1950.845394][T11630] usb 5-1: USB disconnect, device number 29 [ 1950.931962][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 1950.938922][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1950.941847][T15047] usb 9-1: Using ep0 maxpacket: 16 [ 1950.951273][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1950.966650][T15047] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.968308][ T25] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1950.985655][T15047] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1950.987529][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.008140][T15047] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1951.008192][T15047] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.025467][ T25] usb 10-1: config 0 descriptor?? [ 1951.032440][T29782] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1951.033011][T15047] usb 9-1: config 0 descriptor?? [ 1951.041287][ T25] hub 10-1:0.0: USB hub found [ 1951.448356][ T25] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 1951.472300][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x2 [ 1951.473812][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 1951.481851][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.505458][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.509537][ T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1951.521696][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.521742][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.553974][ T25] usb 10-1: USB disconnect, device number 30 [ 1951.589741][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.606274][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.613655][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.621106][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.628657][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.636030][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.643451][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.650692][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.658014][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.665323][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.672857][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.680109][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.687465][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.695876][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.704238][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.711583][T15047] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 1951.719274][T15047] microsoft 0003:045E:07DA.0052: No inputs registered, leaving [ 1951.732601][T15047] microsoft 0003:045E:07DA.0052: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1951.746392][T15047] microsoft 0003:045E:07DA.0052: no inputs found [ 1951.752936][T15047] microsoft 0003:045E:07DA.0052: could not initialize ff, continuing anyway [ 1951.831968][ T5154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1952.010855][T29776] syz.8.6181: attempt to access beyond end of device [ 1952.010855][T29776] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1952.068841][T29776] FAT-fs (loop17): unable to read boot sector [ 1952.077108][ T25] usb 9-1: USB disconnect, device number 49 [ 1953.884463][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1954.175158][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.280486][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.466784][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1954.492007][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1954.502286][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.514593][ T25] usb 4-1: config 0 descriptor?? [ 1954.864394][T29835] loop9: detected capacity change from 0 to 512 [ 1955.714594][T29835] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1955.786296][T29835] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1957.404389][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 1957.423850][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1957.447806][ T25] usb 4-1: USB disconnect, device number 23 [ 1957.656616][T21312] Bluetooth: hci3: Frame reassembly failed (-84) [ 1958.406387][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1959.537943][T29870] xt_bpf: check failed: parse error [ 1960.050403][ T5154] Bluetooth: hci3: command 0x1003 tx timeout [ 1961.187062][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1963.024185][T29920] input: syz0 as /devices/virtual/input/input84 [ 1965.945860][T29958] xt_hashlimit: size too large, truncated to 1048576 [ 1966.006871][T21312] Bluetooth: hci3: Frame reassembly failed (-84) [ 1966.237389][T29967] tipc: Enabling of bearer rejected, failed to enable media [ 1966.936777][T29973] syz.4.6239[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1966.936897][T29973] syz.4.6239[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1967.214274][T29973] syz.4.6239[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1967.591524][ T25] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1968.348417][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1969.042116][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1969.049201][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.066553][ T25] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1969.080781][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.090632][ T25] usb 10-1: Product: syz [ 1969.149733][ T25] usb 10-1: Manufacturer: syz [ 1969.158960][ T25] usb 10-1: SerialNumber: syz [ 1969.221967][T23475] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1969.258225][ T25] usb 10-1: config 0 descriptor?? [ 1969.267094][ T25] usb 10-1: Found Unit with invalid ID 0. [ 1969.381723][T23475] usb 5-1: Using ep0 maxpacket: 32 [ 1969.398489][T23475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1969.423134][T23475] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1969.597601][T11630] usb 10-1: USB disconnect, device number 31 [ 1969.693166][T23475] usb 5-1: New USB device found, idVendor=056a, idProduct=133e, bcdDevice= 0.00 [ 1969.702552][T23475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.713498][T23475] usb 5-1: config 0 descriptor?? [ 1970.194761][T30011] gretap0: left allmulticast mode [ 1970.227834][T30011] gretap0: left promiscuous mode [ 1970.249206][T30011] bridge0: port 4(gretap0) entered disabled state [ 1970.499132][T30018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6250'. [ 1970.539549][T30018] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6250'. [ 1970.644387][T30021] fuse: Bad value for 'fd' [ 1971.039078][T23475] wacom 0003:056A:133E.0053: unknown main item tag 0x0 [ 1971.097953][T23475] wacom 0003:056A:133E.0053: unknown main item tag 0x0 [ 1971.112195][T23475] wacom 0003:056A:133E.0053: unknown main item tag 0x0 [ 1971.119295][T23475] wacom 0003:056A:133E.0053: unknown main item tag 0x0 [ 1971.152256][T23475] wacom 0003:056A:133E.0053: unknown main item tag 0x0 [ 1971.159787][T23475] wacom 0003:056A:133E.0053: Unknown device_type for 'HID 056a:133e'. Ignoring. [ 1971.316879][T23475] usb 5-1: USB disconnect, device number 30 [ 1974.506537][T29045] Bluetooth: hci3: Frame reassembly failed (-84) [ 1974.769770][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6268'. [ 1974.871714][ T5940] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1975.315140][T30074] fuse: Bad value for 'fd' [ 1975.322245][T30074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1975.329583][T30074] IPv6: NLM_F_CREATE should be set when creating new route [ 1975.337703][T30074] IPv6: NLM_F_CREATE should be set when creating new route [ 1975.796475][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.807722][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.853285][ T5940] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1975.885200][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.942163][ T5940] usb 2-1: config 0 descriptor?? [ 1976.563361][ T5154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1976.784650][ T5940] appleir 0003:05AC:8243.0054: report_id 0 is invalid [ 1976.792821][ T5940] appleir 0003:05AC:8243.0054: item 0 0 1 8 parsing failed [ 1976.826003][ T5940] appleir 0003:05AC:8243.0054: parse failed [ 1976.881760][ T5940] appleir 0003:05AC:8243.0054: probe with driver appleir failed with error -22 [ 1977.643375][T30092] loop9: detected capacity change from 0 to 512 [ 1977.965859][ T5940] usb 2-1: USB disconnect, device number 51 [ 1978.120519][T30092] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1978.133841][T30092] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1978.392952][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1978.448121][T30106] gretap0: left allmulticast mode [ 1978.670722][T30106] gretap0: left promiscuous mode [ 1978.686619][T30106] bridge0: port 3(gretap0) entered disabled state [ 1979.490926][T30120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 1980.848693][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.855295][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1984.309644][T30165] loop9: detected capacity change from 0 to 256 [ 1984.361257][T30163] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1984.399050][T30165] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1984.412336][T30161] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1985.133762][T30177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1986.596855][T30192] loop9: detected capacity change from 0 to 512 [ 1986.820908][T30192] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1986.850794][T30192] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1987.543949][ T5940] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1988.211939][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 1988.221648][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.253663][ T5940] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1988.263219][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.271277][ T5940] usb 2-1: Product: syz [ 1988.301602][ T5940] usb 2-1: Manufacturer: syz [ 1988.311634][ T5940] usb 2-1: SerialNumber: syz [ 1988.328616][ T5940] usb 2-1: config 0 descriptor?? [ 1988.350320][ T5940] usb 2-1: Found Unit with invalid ID 0. [ 1988.381999][T30217] Illegal XDP return value 4189037068 on prog (id 2944) dev syz_tun, expect packet loss! [ 1988.388115][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1988.578721][T26720] usb 2-1: USB disconnect, device number 52 [ 1989.642402][T30239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1990.681827][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1990.681862][ T29] audit: type=1326 audit(2000001782.717:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1990.741511][ T29] audit: type=1326 audit(2000001782.717:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1990.764929][ T29] audit: type=1326 audit(2000001782.757:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34d3b80737 code=0x7ffc0000 [ 1990.802409][ T29] audit: type=1326 audit(2000001782.757:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f34d3b806ac code=0x7ffc0000 [ 1990.860825][ T29] audit: type=1326 audit(2000001782.767:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f34d3b805e4 code=0x7ffc0000 [ 1990.883858][ T29] audit: type=1326 audit(2000001782.777:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f34d3b805e4 code=0x7ffc0000 [ 1990.922415][ T29] audit: type=1326 audit(2000001782.777:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f34d3b7d4aa code=0x7ffc0000 [ 1990.945603][ T29] audit: type=1326 audit(2000001782.787:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1991.161628][ T29] audit: type=1326 audit(2000001782.787:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1991.219673][ T29] audit: type=1326 audit(2000001782.977:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.8.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 1994.730571][T30280] fuse: Bad value for 'fd' [ 1994.736786][T30280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1994.744071][T30280] IPv6: NLM_F_CREATE should be set when creating new route [ 1994.751312][T30280] IPv6: NLM_F_CREATE should be set when creating new route [ 1998.043728][T26720] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1998.261462][T26720] usb 10-1: Using ep0 maxpacket: 16 [ 1998.270593][T26720] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1998.327968][T26720] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1998.363121][T26720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.417348][T26720] usb 10-1: Product: syz [ 1998.443969][T26720] usb 10-1: Manufacturer: syz [ 1998.448755][T26720] usb 10-1: SerialNumber: syz [ 1998.502272][T26720] usb 10-1: config 0 descriptor?? [ 1998.564687][T26720] usb 10-1: Found Unit with invalid ID 0. [ 1998.770792][T26720] usb 10-1: USB disconnect, device number 32 [ 2002.549142][T30331] loop9: detected capacity change from 0 to 40427 [ 2002.622062][T30331] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 2002.628878][T30331] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 2002.642043][T30331] F2FS-fs (loop9): Unrecognized mount option "lazytime" or missing value [ 2004.509836][T30382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6357'. [ 2005.464605][T30389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6360'. [ 2005.634408][T29045] Bluetooth: hci3: Frame reassembly failed (-84) [ 2005.732671][T15047] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2005.946303][ T29] audit: type=1326 audit(2000001798.427:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2006.046691][ T29] audit: type=1326 audit(2000001798.457:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2006.151120][ T29] audit: type=1326 audit(2000001798.457:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2006.898885][T30404] loop9: detected capacity change from 0 to 512 [ 2007.088703][ T29] audit: type=1326 audit(2000001798.457:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2007.111490][ T29] audit: type=1326 audit(2000001798.457:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2007.134324][ T29] audit: type=1326 audit(2000001798.457:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2007.156956][ T29] audit: type=1326 audit(2000001798.457:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2007.180571][ T29] audit: type=1326 audit(2000001798.477:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30398 comm="syz.2.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf67d7e819 code=0x7ffc0000 [ 2007.411549][T30404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2007.425312][T30404] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2007.441460][T26720] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2007.663234][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2007.672075][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2007.672942][ T5154] Bluetooth: hci3: command 0x1003 tx timeout [ 2007.691708][T26720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.712551][T26720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.739467][T26720] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2007.771481][T26720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.974009][T26720] usb 3-1: config 0 descriptor?? [ 2008.139652][T30424] loop9: detected capacity change from 0 to 512 [ 2008.537194][T30424] EXT4-fs (loop9): Encoding requested by superblock is unknown [ 2009.407689][T26720] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 2009.435219][T26720] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0055/input/input91 [ 2009.524796][T26720] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2009.554028][T26720] usb 3-1: USB disconnect, device number 34 [ 2010.048027][T30440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6369'. [ 2010.558233][T30444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6375'. [ 2010.605041][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6375'. [ 2013.051670][T26720] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 2013.411573][T26720] usb 10-1: Using ep0 maxpacket: 16 [ 2013.781676][T26720] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.086404][T26720] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2014.095996][T26720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.595652][T26720] usb 10-1: Product: syz [ 2014.599997][T26720] usb 10-1: Manufacturer: syz [ 2014.605026][T26720] usb 10-1: SerialNumber: syz [ 2014.611829][T26720] usb 10-1: config 0 descriptor?? [ 2014.619680][T26720] usb 10-1: Found Unit with invalid ID 0. [ 2014.837874][ T5904] usb 10-1: USB disconnect, device number 33 [ 2014.982058][T30494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6390'. [ 2015.040423][T30494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6390'. [ 2015.283854][ T29] audit: type=1326 audit(2000001807.767:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30468 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2015.601723][ T29] audit: type=1326 audit(2000001807.797:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30468 comm="syz.4.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2016.891726][T15047] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2017.391796][T15047] usb 4-1: Using ep0 maxpacket: 16 [ 2017.409753][T15047] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2018.086534][T15047] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 2018.385171][T15047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.398780][T15047] usb 4-1: config 0 descriptor?? [ 2018.864714][T15047] logitech 0003:046D:C626.0056: item fetching failed at offset 8/9 [ 2018.878279][T30537] loop9: detected capacity change from 0 to 128 [ 2018.878681][T15047] logitech 0003:046D:C626.0056: parse failed [ 2018.891904][T30537] ext4: Unknown parameter 'smackfsdef' [ 2018.901627][T15047] logitech 0003:046D:C626.0056: probe with driver logitech failed with error -22 [ 2019.089454][ T5904] usb 4-1: USB disconnect, device number 24 [ 2019.155557][T30542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6404'. [ 2019.183336][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6404'. [ 2019.848321][ T29] audit: type=1326 audit(2000001812.327:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2019.929156][ T29] audit: type=1326 audit(2000001812.327:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2019.961521][ T5904] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2019.982255][ T29] audit: type=1326 audit(2000001812.357:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.070399][ T29] audit: type=1326 audit(2000001812.357:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.121569][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 2020.131635][ T29] audit: type=1326 audit(2000001812.357:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.132364][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.168081][ T29] audit: type=1326 audit(2000001812.367:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.191456][ T29] audit: type=1326 audit(2000001812.367:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.214819][ T29] audit: type=1326 audit(2000001812.367:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.321602][ T5904] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2020.331692][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 2020.331722][ T29] audit: type=1326 audit(2000001812.727:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecad1757e7 code=0x7ffc0000 [ 2020.379718][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.420619][ T29] audit: type=1326 audit(2000001812.727:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecad11a1a9 code=0x7ffc0000 [ 2020.427989][ T5904] usb 3-1: Product: syz [ 2020.444128][ T29] audit: type=1326 audit(2000001812.727:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.470949][ T29] audit: type=1326 audit(2000001812.847:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecad1757e7 code=0x7ffc0000 [ 2020.493792][ T29] audit: type=1326 audit(2000001812.847:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecad11a1a9 code=0x7ffc0000 [ 2020.518450][ T29] audit: type=1326 audit(2000001812.847:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2020.542659][ T29] audit: type=1326 audit(2000001812.857:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecad1757e7 code=0x7ffc0000 [ 2021.069863][ T5904] usb 3-1: Manufacturer: syz [ 2021.161529][ T29] audit: type=1326 audit(2000001812.857:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fecad11a1a9 code=0x7ffc0000 [ 2021.171559][ T5904] usb 3-1: SerialNumber: syz [ 2021.202697][ T5904] usb 3-1: config 0 descriptor?? [ 2021.229937][ T5904] usb 3-1: Found Unit with invalid ID 0. [ 2021.271660][ T29] audit: type=1326 audit(2000001812.857:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fecad17e819 code=0x7ffc0000 [ 2021.316213][ T29] audit: type=1326 audit(2000001812.877:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30548 comm="syz.3.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecad1757e7 code=0x7ffc0000 [ 2021.455966][T26720] usb 3-1: USB disconnect, device number 35 [ 2026.883178][ T1195] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2027.101729][T15047] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2027.133778][ T1195] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2027.145229][ T1195] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.157316][ T1195] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2027.169789][ T1195] usb 9-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 2027.209633][ T1195] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.234811][ T1195] usb 9-1: config 0 descriptor?? [ 2027.271949][T15047] usb 5-1: Using ep0 maxpacket: 16 [ 2027.306255][T15047] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.319259][T15047] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2027.344747][T15047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.373996][T15047] usb 5-1: Product: syz [ 2027.378304][T15047] usb 5-1: Manufacturer: syz [ 2027.416849][T15047] usb 5-1: SerialNumber: syz [ 2027.452815][T15047] usb 5-1: config 0 descriptor?? [ 2027.473746][T15047] usb 5-1: Found Unit with invalid ID 0. [ 2028.757918][ T5940] usb 5-1: USB disconnect, device number 31 [ 2028.803278][ T1195] sony 0003:054C:1000.0057: item fetching failed at offset 5/7 [ 2029.615295][T30638] loop9: detected capacity change from 0 to 512 [ 2029.751949][ T1195] sony 0003:054C:1000.0057: parse failed [ 2029.757713][ T1195] sony 0003:054C:1000.0057: probe with driver sony failed with error -22 [ 2030.209398][T15047] usb 9-1: USB disconnect, device number 51 [ 2030.265073][T30638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2030.280274][T30638] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2032.476530][T30670] fuse: Invalid rootmode [ 2033.804890][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2035.459890][T30696] loop9: detected capacity change from 0 to 40427 [ 2035.541757][T30696] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2035.549758][T30696] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2035.609388][T30696] F2FS-fs (loop9): invalid crc value [ 2037.123239][T30696] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4) [ 2038.697399][T30714] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6454'. [ 2038.707620][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6454'. [ 2041.847620][T30751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6469'. [ 2042.884115][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.890617][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.215197][T30755] loop9: detected capacity change from 0 to 40427 [ 2043.249735][T30755] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2043.257856][T30755] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2043.284456][T30755] F2FS-fs (loop9): invalid crc value [ 2043.573097][T30755] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2043.832543][T30755] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2043.839791][T30755] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2045.112443][ T12] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2045.185071][ T12] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2046.728110][T30807] overlayfs: failed to resolve './file0': -2 [ 2046.898573][T30828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6486'. [ 2046.932770][T30828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6486'. [ 2050.521639][T30850] syzkaller0: entered promiscuous mode [ 2050.527186][T30850] syzkaller0: entered allmulticast mode [ 2050.820734][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 2050.820763][ T29] audit: type=1326 audit(2000001843.297:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2050.909080][ T29] audit: type=1326 audit(2000001843.347:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2050.947689][ T29] audit: type=1326 audit(2000001843.347:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2050.970675][ T29] audit: type=1326 audit(2000001843.347:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2050.993471][ T29] audit: type=1326 audit(2000001843.347:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2051.175908][T30870] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6503'. [ 2051.217552][ T29] audit: type=1326 audit(2000001843.347:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2051.477800][ T5940] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2051.489318][ T29] audit: type=1326 audit(2000001843.347:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2051.514801][ T29] audit: type=1326 audit(2000001843.347:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2051.539324][ T29] audit: type=1326 audit(2000001843.347:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2051.575667][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6503'. [ 2051.587432][ T29] audit: type=1326 audit(2000001843.347:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2052.262289][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.369145][ T5940] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2052.378281][ T5940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2052.387535][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.472633][ T5940] usb 4-1: config 0 descriptor?? [ 2052.665978][T30892] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6506'. [ 2055.928635][ T5904] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2056.054494][ T5940] usb 4-1: USB disconnect, device number 25 [ 2056.192497][ T5904] usb 10-1: Using ep0 maxpacket: 16 [ 2056.691760][ T5904] usb 10-1: device descriptor read/all, error -71 [ 2058.871868][ T5904] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2059.250533][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.363309][ T5940] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2059.378575][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2059.403405][ T5904] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2059.432091][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.452397][ T5904] usb 10-1: config 0 descriptor?? [ 2059.615520][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.627286][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2059.640711][ T5940] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2059.660112][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.679311][ T5940] usb 3-1: config 0 descriptor?? [ 2059.952386][T26720] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2059.983058][T30954] syzkaller0: entered promiscuous mode [ 2059.988633][T30954] syzkaller0: entered allmulticast mode [ 2060.169423][T26720] usb 9-1: Using ep0 maxpacket: 16 [ 2060.236523][ T5904] pyra 0003:1E7D:2CF6.0058: item fetching failed at offset 5/7 [ 2060.278772][T26720] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2060.553322][ T5904] pyra 0003:1E7D:2CF6.0058: parse failed [ 2060.686353][ T5940] sony 0003:054C:0268.0059: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 2060.698457][ T5940] sony 0003:054C:0268.0059: failed to claim input [ 2060.781127][ T5904] pyra 0003:1E7D:2CF6.0058: probe with driver pyra failed with error -22 [ 2060.799100][ T5940] usb 10-1: USB disconnect, device number 35 [ 2060.819553][T26720] usb 9-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2060.828771][T26720] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.846811][T26720] usb 9-1: Product: syz [ 2060.851105][T26720] usb 9-1: Manufacturer: syz [ 2060.858505][T26720] usb 9-1: SerialNumber: syz [ 2060.870836][T26720] usb 9-1: config 0 descriptor?? [ 2060.911003][T26720] usb 9-1: Found Unit with invalid ID 0. [ 2061.124140][T26720] usb 9-1: USB disconnect, device number 52 [ 2061.133770][ T1195] usb 3-1: USB disconnect, device number 36 [ 2063.111613][T15047] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2063.681586][T15047] usb 4-1: Using ep0 maxpacket: 8 [ 2063.693596][T15047] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2063.705214][T15888] Bluetooth: hci3: Frame reassembly failed (-84) [ 2063.713048][T15047] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2063.825562][T15047] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2063.835276][T15047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.848611][T15047] usb 4-1: config 0 descriptor?? [ 2065.740236][T15047] usbhid 4-1:0.0: can't add hid device: -71 [ 2065.770097][T20128] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2065.777254][ T5154] Bluetooth: hci3: command 0x1003 tx timeout [ 2066.062293][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2066.062327][ T29] audit: type=1326 audit(2000001858.497:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2066.256757][T31018] loop9: detected capacity change from 0 to 512 [ 2066.298822][ T29] audit: type=1326 audit(2000001858.607:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2066.427487][T31018] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.6544: casefold flag without casefold feature [ 2066.489724][ T29] audit: type=1326 audit(2000001858.607:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2066.534919][T31018] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.6544: couldn't read orphan inode 15 (err -117) [ 2066.601758][T31018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2066.644782][ T29] audit: type=1326 audit(2000001858.607:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2066.734180][T15047] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2066.747401][T15047] usb 4-1: USB disconnect, device number 26 [ 2066.855284][ T29] audit: type=1326 audit(2000001858.607:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2066.963579][ T29] audit: type=1326 audit(2000001858.607:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2066.999017][ T29] audit: type=1326 audit(2000001858.607:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2067.050688][ T29] audit: type=1326 audit(2000001858.607:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2067.331797][ T29] audit: type=1326 audit(2000001858.607:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2067.816988][ T29] audit: type=1326 audit(2000001858.607:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10617e819 code=0x7ffc0000 [ 2070.519006][T31031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2072.181689][T17148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2072.801730][ T1195] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2073.311675][ T1195] usb 4-1: Using ep0 maxpacket: 16 [ 2073.318447][ T1195] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.332206][ T1195] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2073.342974][ T1195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.451859][ T1195] usb 4-1: Product: syz [ 2073.456115][ T1195] usb 4-1: Manufacturer: syz [ 2073.460918][ T1195] usb 4-1: SerialNumber: syz [ 2073.467145][ T1195] usb 4-1: config 0 descriptor?? [ 2073.475848][ T1195] usb 4-1: Found Unit with invalid ID 0. [ 2073.761264][T15047] usb 4-1: USB disconnect, device number 27 [ 2075.251033][T31105] fuse: Bad value for 'fd' [ 2076.987245][T31102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2082.236017][T31148] syz.1.6583[31148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2082.236136][T31148] syz.1.6583[31148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2082.307767][T31148] syz.1.6583[31148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2084.772896][T31159] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2085.240953][T31218] loop9: detected capacity change from 0 to 256 [ 2085.276166][T31218] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2085.305687][T15047] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2086.066929][T15047] usb 9-1: Using ep0 maxpacket: 16 [ 2086.075157][T15047] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.155048][T15047] usb 9-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2086.199753][T15047] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.224393][T15047] usb 9-1: Product: syz [ 2086.738231][T15047] usb 9-1: Manufacturer: syz [ 2086.742979][T15047] usb 9-1: SerialNumber: syz [ 2086.749339][T15047] usb 9-1: config 0 descriptor?? [ 2086.758782][T15047] usb 9-1: Found Unit with invalid ID 0. [ 2087.760036][T31243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6609'. [ 2087.858111][T31247] netlink: 'syz.1.6611': attribute type 29 has an invalid length. [ 2087.872619][T31247] netlink: 'syz.1.6611': attribute type 29 has an invalid length. [ 2087.882681][T31247] netlink: 'syz.1.6611': attribute type 29 has an invalid length. [ 2088.623890][T15047] usb 9-1: USB disconnect, device number 53 [ 2088.908522][T31269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6619'. [ 2089.406355][T31291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6628'. [ 2090.857012][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6645'. [ 2091.605732][T31336] netlink: 'syz.9.6648': attribute type 21 has an invalid length. [ 2092.436313][T31359] loop9: detected capacity change from 0 to 40427 [ 2092.448669][T31359] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2092.456637][T31359] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2092.482539][T31359] F2FS-fs (loop9): invalid crc value [ 2092.633398][T31359] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2092.709266][T31359] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2092.716713][T31359] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2092.741875][T31374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6661'. [ 2092.923109][T12366] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2092.936989][T12366] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2093.179271][T31386] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 2096.367028][T31427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6681'. [ 2096.617595][T31433] netlink: 'syz.9.6684': attribute type 10 has an invalid length. [ 2096.625633][T31430] raw_sendmsg: syz.4.6682 forgot to set AF_INET. Fix it! [ 2096.634932][T31433] netlink: 55 bytes leftover after parsing attributes in process `syz.9.6684'. [ 2098.077634][T31470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6698'. [ 2099.561438][T31490] netlink: 'syz.9.6705': attribute type 10 has an invalid length. [ 2099.729843][T31493] netlink: 'syz.8.6706': attribute type 3 has an invalid length. [ 2099.746248][T31493] netlink: 'syz.8.6706': attribute type 1 has an invalid length. [ 2099.754575][T31493] netlink: 'syz.8.6706': attribute type 2 has an invalid length. [ 2099.764346][T31493] netlink: 198060 bytes leftover after parsing attributes in process `syz.8.6706'. [ 2099.859506][T31497] netlink: 'syz.9.6707': attribute type 29 has an invalid length. [ 2099.897523][T31497] netlink: 'syz.9.6707': attribute type 29 has an invalid length. [ 2099.912499][T31497] netlink: 'syz.9.6707': attribute type 29 has an invalid length. [ 2099.934508][T31497] netlink: 'syz.9.6707': attribute type 29 has an invalid length. [ 2101.008172][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6715'. [ 2101.201087][T31524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2101.211533][T31524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2101.218992][T31524] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2101.227068][T31524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2101.234729][T31524] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2101.242171][T31524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2102.426908][T31551] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6730'. [ 2102.598135][T31517] chnl_net:caif_netlink_parms(): no params data found [ 2103.431681][T20128] Bluetooth: hci3: command tx timeout [ 2103.463015][T31517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.481258][T31517] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.521734][T31517] bridge_slave_0: entered allmulticast mode [ 2103.525565][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6743'. [ 2103.528947][T31517] bridge_slave_0: entered promiscuous mode [ 2103.598739][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.605245][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2103.650069][T31517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.667299][T31517] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.680319][T31517] bridge_slave_1: entered allmulticast mode [ 2103.694270][T31517] bridge_slave_1: entered promiscuous mode [ 2103.715101][T31582] netlink: 'syz.3.6741': attribute type 21 has an invalid length. [ 2104.557253][T31517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2104.608676][T31517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2104.836615][T31602] netlink: 'syz.1.6748': attribute type 29 has an invalid length. [ 2104.848462][T31603] netlink: 'syz.1.6748': attribute type 29 has an invalid length. [ 2104.925416][T31517] team0: Port device team_slave_0 added [ 2104.959853][T31517] team0: Port device team_slave_1 added [ 2105.115578][T31517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.129966][T31517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.165641][T31517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.184747][T31609] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 2105.195484][T31517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2105.203152][T31517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.244115][T31517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.266395][T31613] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 2105.297601][T31609] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 2105.312069][T31613] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 2105.528141][T20128] Bluetooth: hci3: command tx timeout [ 2105.873959][T31609] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 2105.887791][T31613] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 2105.986266][T31517] hsr_slave_0: entered promiscuous mode [ 2106.041204][T31517] hsr_slave_1: entered promiscuous mode [ 2106.047871][T31517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2106.055525][T31517] Cannot create hsr debugfs directory [ 2106.121270][T31628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6758'. [ 2106.658907][T21315] Bluetooth: hci4: Frame reassembly failed (-84) [ 2106.667964][T31517] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.775707][T31652] netlink: 'syz.2.6767': attribute type 39 has an invalid length. [ 2106.922118][T31517] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.578436][T31517] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.596666][T31524] Bluetooth: hci3: command tx timeout [ 2107.827763][T31668] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.6775'. [ 2107.843501][T31668] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6775'. [ 2107.857632][T31517] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.900769][T31668] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.6775'. [ 2107.961780][T26720] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2108.114040][T26720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2108.127672][T26720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.158765][T26720] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2108.175022][T26720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.225342][T31517] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2108.237700][T31517] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2108.252482][T26720] usb 3-1: config 0 descriptor?? [ 2108.263860][T31517] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2108.274672][T31517] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2108.725099][T31524] Bluetooth: hci4: command 0x1003 tx timeout [ 2108.801493][T20128] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2109.001931][T31517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.018469][T31517] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.035711][T15888] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.042911][T15888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2109.087351][T27875] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.094571][T27875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2110.075044][T26720] zydacron 0003:13EC:0006.005A: unknown main item tag 0x0 [ 2110.083185][T26720] zydacron 0003:13EC:0006.005A: unknown main item tag 0x0 [ 2110.101984][T26720] zydacron 0003:13EC:0006.005A: unknown main item tag 0x0 [ 2110.119637][T26720] zydacron 0003:13EC:0006.005A: unknown main item tag 0x0 [ 2110.275967][T20128] Bluetooth: hci3: command tx timeout [ 2110.301727][T26720] zydacron 0003:13EC:0006.005A: item fetching failed at offset 4/5 [ 2110.315145][T26720] zydacron 0003:13EC:0006.005A: parse failed [ 2110.322081][T26720] zydacron 0003:13EC:0006.005A: probe with driver zydacron failed with error -22 [ 2110.353865][T26720] usb 3-1: USB disconnect, device number 37 [ 2110.896244][T31517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2112.379760][T31517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2114.714110][T31759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6802'. [ 2114.798228][T31762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6802'. [ 2114.819900][T31760] netlink: 'syz.1.6801': attribute type 10 has an invalid length. [ 2114.834252][T31517] veth0_vlan: entered promiscuous mode [ 2114.840093][T31760] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6801'. [ 2114.865191][T31517] veth1_vlan: entered promiscuous mode [ 2115.011127][T31517] veth0_macvtap: entered promiscuous mode [ 2115.020953][T31517] veth1_macvtap: entered promiscuous mode [ 2115.063182][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.095704][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.111709][T20128] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2115.147716][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.181724][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.197232][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.230631][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.250964][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.267471][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.277805][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.308066][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.322421][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.335479][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.346793][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.357963][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.367990][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.378760][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.388876][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.404929][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.419985][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.452916][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.468184][T31517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2115.483851][T31773] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.6806'. [ 2115.519773][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.572003][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.596926][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.607972][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.618674][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.629915][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.640250][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.654754][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.668510][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.684033][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.059250][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.149926][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.160029][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.170894][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.180794][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.198539][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.215354][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.235706][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.258898][T31517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.270006][T31517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.287184][T31517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2116.416990][T31517] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.544927][T31517] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.570266][T31517] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.584003][T31517] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.353972][T27875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.362126][T27875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.854150][T31795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6814'. [ 2118.035619][T31800] netlink: 'syz.3.6815': attribute type 29 has an invalid length. [ 2118.045116][T31795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6814'. [ 2118.064400][T27646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.072615][T27646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.072729][T31803] netlink: 'syz.3.6815': attribute type 29 has an invalid length. [ 2120.627428][ T5154] Bluetooth: hci4: command 0x1003 tx timeout [ 2120.661025][T20128] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2121.841654][T31856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6834'. [ 2121.914093][T31861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6834'. [ 2122.025130][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2122.049041][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2122.133149][T31872] netlink: 'syz.2.6839': attribute type 3 has an invalid length. [ 2122.141143][T31872] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6839'. [ 2122.151226][T31524] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2122.202642][T31524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2122.220357][T31524] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2122.228312][T31524] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2122.685000][T31881] loop9: detected capacity change from 0 to 16 [ 2122.698165][T31881] erofs (device loop9): mounted with root inode @ nid 36. [ 2123.022192][T31864] chnl_net:caif_netlink_parms(): no params data found [ 2124.086995][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6849'. [ 2124.148505][T31914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6849'. [ 2124.237358][T21312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2124.311582][T20128] Bluetooth: hci4: command tx timeout [ 2124.442742][T31864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.461983][T31864] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.469325][T31864] bridge_slave_0: entered allmulticast mode [ 2124.520828][T31864] bridge_slave_0: entered promiscuous mode [ 2124.711794][T31524] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2124.829288][T21312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.014486][T31864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2125.050714][T31864] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.298182][T31864] bridge_slave_1: entered allmulticast mode [ 2125.305580][T31864] bridge_slave_1: entered promiscuous mode [ 2126.036023][T21312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.391898][T20128] Bluetooth: hci4: command tx timeout [ 2126.603605][T21312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.659752][T31864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2126.685024][T31864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2127.398224][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6863'. [ 2127.475163][T31864] team0: Port device team_slave_0 added [ 2127.487827][T31864] team0: Port device team_slave_1 added [ 2128.392473][T31864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2128.401081][T31864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2128.476676][T31864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2128.487819][T20128] Bluetooth: hci4: command tx timeout [ 2128.518166][T31864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2128.537651][T31864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2128.635147][T31864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2130.591677][T20128] Bluetooth: hci4: command tx timeout [ 2131.386210][T21312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2131.412035][T21312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2131.447904][T21312] bond0 (unregistering): Released all slaves [ 2131.775542][T32003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6878'. [ 2131.959892][T32005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6878'. [ 2132.243866][T31864] hsr_slave_0: entered promiscuous mode [ 2132.285903][T31864] hsr_slave_1: entered promiscuous mode [ 2132.433263][T31864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2132.461637][T31864] Cannot create hsr debugfs directory [ 2132.513320][T21312] hsr_slave_0: left promiscuous mode [ 2133.797100][T21312] hsr_slave_1: left promiscuous mode [ 2134.056778][T21312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2134.085746][T21312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2134.163857][T21312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2134.211959][T21312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2134.336421][T21312] veth0_macvtap: left promiscuous mode [ 2134.743098][T21312] team0 (unregistering): Port device team_slave_1 removed [ 2135.379242][T21312] team0 (unregistering): Port device team_slave_0 removed [ 2135.715521][T32050] netlink: 'syz.3.6890': attribute type 29 has an invalid length. [ 2135.785438][T32053] netlink: 'syz.3.6890': attribute type 29 has an invalid length. [ 2135.819236][T32050] netlink: 'syz.3.6890': attribute type 29 has an invalid length. [ 2135.903396][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6893'. [ 2138.518153][T32105] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6904'. [ 2138.642993][T31864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2138.760131][T31864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2138.803018][T31864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2139.812178][T31864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2140.014972][T32121] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6909'. [ 2140.099875][T31864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2140.113684][T32121] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6909'. [ 2140.149982][T31864] 8021q: adding VLAN 0 to HW filter on device team0 [ 2140.179678][T31864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2140.190499][T31864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2140.341020][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.348200][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2140.358155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.365296][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2141.242507][T31864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2141.287682][T31864] veth0_vlan: entered promiscuous mode [ 2141.301315][T31864] veth1_vlan: entered promiscuous mode [ 2141.320267][T31864] veth0_macvtap: entered promiscuous mode [ 2141.330311][T31864] veth1_macvtap: entered promiscuous mode [ 2141.344427][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.355423][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.365415][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.379174][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.389068][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.399778][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.409706][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.420321][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.430208][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.441244][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.451682][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.462282][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.472358][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.482920][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.492856][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.503356][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.513448][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.524015][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.534443][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2141.545397][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.556456][T31864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2141.566229][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.576730][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.586708][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.597223][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.607112][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.617630][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.627537][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.638733][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.649381][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.659992][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.670009][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.680742][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.690699][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.701247][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.711150][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.721917][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.731923][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.742913][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.753936][T31864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2141.764481][T31864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2141.775519][T31864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2141.790178][T31864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.799034][T31864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.807867][T31864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.810189][T32162] loop9: detected capacity change from 0 to 512 [ 2141.816747][T31864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.117472][T32162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2142.150630][T32162] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2143.701901][T32181] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 2143.866105][T31517] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2143.925351][T15888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2143.933496][T15888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2144.701799][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2144.710176][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.482722][T32210] 9pnet_fd: Insufficient options for proto=fd [ 2146.241949][T11630] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2146.252721][T32226] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.6932'. [ 2146.352584][T32230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 2146.389806][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6933'. [ 2146.406485][T11630] usb 10-1: Using ep0 maxpacket: 16 [ 2146.562569][T21312] Bluetooth: hci6: Frame reassembly failed (-84) [ 2146.733786][T32243] sctp: [Deprecated]: syz.1.6936 (pid 32243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2146.733786][T32243] Use struct sctp_sack_info instead [ 2146.800902][T11630] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.434294][T11630] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2147.443872][T11630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.476178][T11630] usb 10-1: Product: syz [ 2147.480495][T11630] usb 10-1: Manufacturer: syz [ 2147.541413][T11630] usb 10-1: SerialNumber: syz [ 2147.570100][T11630] usb 10-1: config 0 descriptor?? [ 2147.658257][T11630] usb 10-1: Found Unit with invalid ID 0. [ 2147.930482][T11630] usb 10-1: USB disconnect, device number 36 [ 2147.977474][T32263] netlink: 'syz.2.6944': attribute type 3 has an invalid length. [ 2147.987305][T32263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6944'. [ 2148.167167][T32267] netlink: 'syz.2.6946': attribute type 29 has an invalid length. [ 2148.206677][T32267] netlink: 'syz.2.6946': attribute type 29 has an invalid length. [ 2148.661011][T20128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2149.098617][T32274] syzkaller0: entered promiscuous mode [ 2149.130942][T32274] syzkaller0: entered allmulticast mode [ 2149.143094][T32284] netlink: 15999 bytes leftover after parsing attributes in process `syz.9.6950'. [ 2150.193234][T32298] netlink: 'syz.8.6958': attribute type 29 has an invalid length. [ 2150.209148][T32301] netlink: 'syz.4.6960': attribute type 29 has an invalid length. [ 2150.218872][T32303] netlink: 'syz.8.6958': attribute type 29 has an invalid length. [ 2150.257951][T32306] netlink: 'syz.4.6960': attribute type 29 has an invalid length. [ 2150.297596][T32307] netlink: 'syz.4.6960': attribute type 29 has an invalid length. [ 2150.322555][T32310] netlink: 'syz.4.6960': attribute type 29 has an invalid length. [ 2151.531420][T15047] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2152.241772][T15047] usb 2-1: Using ep0 maxpacket: 16 [ 2152.254840][T15047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.287921][T15047] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2152.298956][T15047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.307371][T15047] usb 2-1: Product: syz [ 2152.312710][T15047] usb 2-1: Manufacturer: syz [ 2152.317352][T15047] usb 2-1: SerialNumber: syz [ 2152.342300][T15047] usb 2-1: config 0 descriptor?? [ 2152.393303][T15047] usb 2-1: Found Unit with invalid ID 0. [ 2152.562098][T15047] usb 2-1: USB disconnect, device number 53 [ 2152.589324][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6974'. [ 2153.326691][T32352] team0: Port device team_slave_0 removed [ 2153.342728][T32352] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2155.552146][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6990'. [ 2155.660643][T27646] Bluetooth: hci6: Frame reassembly failed (-84) [ 2156.071820][T23475] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2156.251587][T23475] usb 3-1: Using ep0 maxpacket: 16 [ 2156.338170][T23475] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.692129][T23475] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2156.701261][T23475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.709981][T23475] usb 3-1: Product: syz [ 2156.714562][T23475] usb 3-1: Manufacturer: syz [ 2156.719198][T23475] usb 3-1: SerialNumber: syz [ 2156.727872][T23475] usb 3-1: config 0 descriptor?? [ 2156.964097][T23475] usb 3-1: Found Unit with invalid ID 0. [ 2157.547335][T23475] usb 3-1: USB disconnect, device number 38 [ 2157.661493][T32416] netlink: 'syz.4.7000': attribute type 5 has an invalid length. [ 2157.672258][T20128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2158.743192][T32435] netlink: 'syz.1.7007': attribute type 29 has an invalid length. [ 2158.765507][T32435] netlink: 'syz.1.7007': attribute type 29 has an invalid length. [ 2158.986785][T32443] syz.8.7012[32443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2158.986888][T32443] syz.8.7012[32443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2159.081633][T32443] syz.8.7012[32443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2159.470033][T27875] Bluetooth: hci6: Frame reassembly failed (-84) [ 2161.569330][T31524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2161.590341][T20128] Bluetooth: hci6: command 0x1003 tx timeout [ 2162.443623][T32508] tap0: tun_chr_ioctl cmd 1074025692 [ 2163.255863][T21315] Bluetooth: hci6: Frame reassembly failed (-84) [ 2163.349123][T32515] overlayfs: failed to resolve './file1': -2 [ 2164.529655][T32560] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.7054'. [ 2164.548077][T32559] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7059'. [ 2164.558193][T32559] netlink: zone id is out of range [ 2164.561748][T32549] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.7054'. [ 2164.563792][T32559] netlink: zone id is out of range [ 2164.578421][T32559] netlink: zone id is out of range [ 2164.584226][T32559] netlink: get zone limit has 8 unknown bytes [ 2164.592728][T32560] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.7054'. [ 2165.034742][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.041658][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.301663][T20128] Bluetooth: hci6: command 0x1003 tx timeout [ 2165.307825][T31524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2167.729726][T32600] netlink: 'syz.9.7074': attribute type 29 has an invalid length. [ 2167.769519][T32600] netlink: 'syz.9.7074': attribute type 29 has an invalid length. [ 2167.815517][T32600] netlink: 'syz.9.7074': attribute type 29 has an invalid length. [ 2167.849282][T32600] netlink: 'syz.9.7074': attribute type 29 has an invalid length. [ 2168.541075][T32619] netlink: 'syz.3.7084': attribute type 27 has an invalid length. [ 2168.711718][ T25] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2169.011444][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 2169.023263][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2169.035816][ T25] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2169.045314][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.053804][ T25] usb 10-1: Product: syz [ 2169.058242][ T25] usb 10-1: Manufacturer: syz [ 2169.063164][ T25] usb 10-1: SerialNumber: syz [ 2169.617729][ T25] usb 10-1: config 0 descriptor?? [ 2169.640845][ T25] usb 10-1: Found Unit with invalid ID 0. [ 2170.401863][T32344] usb 10-1: USB disconnect, device number 37 [ 2173.886983][T32664] overlayfs: failed to resolve './file1': -2 [ 2175.058312][T12366] Bluetooth: hci6: Frame reassembly failed (-84) [ 2175.725948][T32732] loop9: detected capacity change from 0 to 512 [ 2176.266565][T32732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2176.279528][T32732] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2176.539289][T31517] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2177.115531][T31524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2178.083069][T32757] loop9: detected capacity change from 0 to 40427 [ 2178.176084][T32757] F2FS-fs (loop9): invalid crc value [ 2178.230858][T32757] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2178.343568][T32757] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2178.472056][T32757] overlayfs: failed to resolve './file0': -2 [ 2178.588269][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2178.782694][T31517] syz-executor: attempt to access beyond end of device [ 2178.782694][T31517] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2178.915403][T31517] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2178.982238][ T325] sctp: [Deprecated]: syz.1.7141 (pid 325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2178.982238][ T325] Use struct sctp_sack_info instead [ 2179.341397][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 2179.348195][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.366680][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2179.387790][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.417462][ T25] usb 3-1: Product: syz [ 2179.432054][ T25] usb 3-1: Manufacturer: syz [ 2179.436753][ T25] usb 3-1: SerialNumber: syz [ 2179.467852][ T25] usb 3-1: config 0 descriptor?? [ 2179.493334][ T25] usb 3-1: Found Unit with invalid ID 0. [ 2179.700324][T32344] usb 3-1: USB disconnect, device number 39 [ 2180.596188][T27875] Bluetooth: hci6: Frame reassembly failed (-84) [ 2180.956289][ T357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7155'. [ 2181.706904][ T362] overlayfs: failed to resolve './file0': -2 [ 2182.643360][T31524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2182.788541][ T5940] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2182.961168][ T395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7172'. [ 2183.087528][ T399] program syz.8.7171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2183.151617][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 2183.161836][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.221128][ T5940] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2183.256918][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.320481][ T5940] usb 5-1: Product: syz [ 2183.346630][ T5940] usb 5-1: Manufacturer: syz [ 2183.368872][ T5940] usb 5-1: SerialNumber: syz [ 2183.400647][ T5940] usb 5-1: config 0 descriptor?? [ 2183.460637][ T5940] usb 5-1: Found Unit with invalid ID 0. [ 2184.258347][T21315] Bluetooth: hci6: Frame reassembly failed (-84) [ 2185.207479][ T25] usb 5-1: USB disconnect, device number 32 [ 2186.683554][T31524] Bluetooth: hci6: command 0x1003 tx timeout [ 2186.691386][T20128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2187.425100][ T436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7184'. [ 2187.490048][ T436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2187.533693][ T440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7185'. [ 2187.541035][ T436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2187.550153][ T436] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 2187.563505][ T436] bond1: (slave vcan1): Error -95 calling set_mac_address [ 2188.120763][ T460] ip6tnl1: entered promiscuous mode [ 2189.773299][ T477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7199'. [ 2190.206456][ T5940] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2191.601497][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 2191.609109][ T488] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2191.738035][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.752742][ T5940] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2191.786074][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.796950][ T5940] usb 3-1: Product: syz [ 2191.801456][ T5940] usb 3-1: Manufacturer: syz [ 2191.806461][ T5940] usb 3-1: SerialNumber: syz [ 2191.887528][ T5940] usb 3-1: config 0 descriptor?? [ 2191.905947][ T5940] usb 3-1: Found Unit with invalid ID 0. [ 2192.134703][T32404] usb 3-1: USB disconnect, device number 40 [ 2193.856675][T21315] Bluetooth: hci6: Frame reassembly failed (-84) [ 2195.390049][ T564] loop9: detected capacity change from 0 to 512 [ 2195.642634][ T564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2195.655635][ T564] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2195.915043][T20128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2195.923865][T31524] Bluetooth: hci6: command 0x1003 tx timeout [ 2196.529236][T31517] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2196.657308][ T599] loop9: detected capacity change from 0 to 512 [ 2196.901780][ T610] vlan2: entered allmulticast mode [ 2196.907066][ T610] bond0: entered allmulticast mode [ 2196.921518][ T610] bond_slave_0: entered allmulticast mode [ 2196.927339][ T610] bond_slave_1: entered allmulticast mode [ 2196.938815][ T610] bridge0: port 4(vlan2) entered blocking state [ 2196.947889][ T610] bridge0: port 4(vlan2) entered disabled state [ 2196.961962][ T610] vlan2: entered promiscuous mode [ 2196.967141][ T610] bond0: entered promiscuous mode [ 2196.986808][ T610] bond_slave_0: entered promiscuous mode [ 2197.047750][ T599] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2197.061760][ T610] bond_slave_1: entered promiscuous mode [ 2197.070750][ T599] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2197.085336][ T610] bridge0: port 4(vlan2) entered blocking state [ 2197.091669][ T610] bridge0: port 4(vlan2) entered forwarding state [ 2197.112627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 2197.322337][ T599] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 2197.421691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2197.430191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2197.462576][T31517] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2197.511874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2197.520340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2197.529686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2197.651649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2197.660173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2198.372737][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7253'. [ 2198.446166][ T645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7253'. [ 2198.553412][T21315] Bluetooth: hci6: Frame reassembly failed (-84) [ 2198.890225][ T654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7258'. [ 2198.892406][ T656] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2198.905722][ T656] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2199.480802][ T660] netdevsim netdevsim8 : renamed from netdevsim0 (while UP) [ 2199.685810][ T663] loop9: detected capacity change from 0 to 16 [ 2199.766792][ T663] erofs (device loop9): mounted with root inode @ nid 36. [ 2199.961639][T32344] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2200.557641][T20128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2200.681396][ T685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2200.699617][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7271'. [ 2200.731577][T32344] usb 5-1: Using ep0 maxpacket: 16 [ 2200.755386][T32344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.769422][ T689] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7271'. [ 2200.776193][T32344] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2200.798949][T32344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.807182][T32344] usb 5-1: Product: syz [ 2200.811485][T32344] usb 5-1: Manufacturer: syz [ 2200.816116][T32344] usb 5-1: SerialNumber: syz [ 2200.832647][T32344] usb 5-1: config 0 descriptor?? [ 2200.851402][ T5940] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2200.862602][T32344] usb 5-1: Found Unit with invalid ID 0. [ 2201.063136][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2201.073525][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2201.544815][ T701] loop9: detected capacity change from 0 to 512 [ 2201.551283][ T5940] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2201.560531][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.575892][ T5940] usb 3-1: config 0 descriptor?? [ 2201.594717][T32344] usb 5-1: USB disconnect, device number 33 [ 2201.606600][ T5940] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2201.638793][ T701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2201.653381][ T701] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2201.986525][T31517] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2203.060826][T27875] Bluetooth: hci6: Frame reassembly failed (-84) [ 2203.084288][ T5940] usb 3-1: USB disconnect, device number 41 [ 2203.144612][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7288'. [ 2203.227742][ T741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7288'. [ 2204.466282][ T5940] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2204.561740][T11630] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2204.638259][ T5940] usb 9-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 2204.647921][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.667167][ T5940] usb 9-1: config 0 descriptor?? [ 2204.724357][T11630] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2204.733042][T11630] usb 2-1: config 0 has no interface number 0 [ 2204.744201][T11630] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2204.771583][T11630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.788935][T11630] usb 2-1: Product: syz [ 2204.794381][T11630] usb 2-1: Manufacturer: syz [ 2204.808350][T11630] usb 2-1: SerialNumber: syz [ 2204.825054][T11630] usb 2-1: config 0 descriptor?? [ 2204.908367][ T5940] snd-usb-hiface 9-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 2205.097234][T11630] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2205.100193][ T786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2205.107720][T11630] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2205.129822][T20128] Bluetooth: hci6: command 0x1003 tx timeout [ 2205.135903][T31524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2205.142818][T11630] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2205.161716][T32404] usb 9-1: USB disconnect, device number 54 [ 2205.172167][T11630] usb 2-1: media controller created [ 2205.188160][T11630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2205.320760][T11630] usb 2-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 2205.338054][T11630] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 2205.446280][T11630] DVB: Unable to find symbol mxl5005s_attach() [ 2205.623641][T11630] usb 2-1: USB disconnect, device number 54 [ 2206.015520][ T819] netlink: 312 bytes leftover after parsing attributes in process `syz.8.7321'. [ 2206.138953][T21315] Bluetooth: hci6: Frame reassembly failed (-84) [ 2207.312597][ T824] overlayfs: failed to resolve './file0': -2 [ 2207.584778][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2207.584807][ T29] audit: type=1326 audit(2000002000.067:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.621424][ T29] audit: type=1326 audit(2000002000.067:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.671432][ T29] audit: type=1326 audit(2000002000.087:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.693585][ C1] vkms_vblank_simulate: vblank timer overrun [ 2207.760948][ T29] audit: type=1326 audit(2000002000.087:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.783664][ T29] audit: type=1326 audit(2000002000.087:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.806547][ T29] audit: type=1326 audit(2000002000.087:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.828826][ C1] vkms_vblank_simulate: vblank timer overrun [ 2207.836008][ T29] audit: type=1326 audit(2000002000.087:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.858431][ T29] audit: type=1326 audit(2000002000.087:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.880788][ C1] vkms_vblank_simulate: vblank timer overrun [ 2207.887048][ T29] audit: type=1326 audit(2000002000.087:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2207.909253][ C1] vkms_vblank_simulate: vblank timer overrun [ 2207.916625][ T29] audit: type=1326 audit(2000002000.087:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=844 comm="syz.8.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d3b7e819 code=0x7ffc0000 [ 2208.098574][ T861] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.7340'. [ 2208.108209][ T861] netlink: zone id is out of range [ 2208.114193][ T861] netlink: zone id is out of range [ 2208.119543][ T861] netlink: zone id is out of range [ 2208.124908][ T861] netlink: zone id is out of range [ 2208.131247][ T861] netlink: get zone limit has 8 unknown bytes [ 2208.171203][T31524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2208.991663][T31695] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2209.052713][ T897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7353'. [ 2209.147167][ T898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7353'. [ 2209.463531][T31695] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2209.474739][T31695] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2209.485589][T31695] usb 10-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 2209.502126][T31695] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.953638][T31695] usb 10-1: config 0 descriptor?? [ 2210.309211][ T867] overlayfs: failed to resolve './file0': -2 [ 2210.336919][ T919] netlink: 'syz.1.7357': attribute type 39 has an invalid length. [ 2210.484315][T31695] wacom 0003:056A:00BB.005B: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 2210.496601][T31695] wacom 0003:056A:00BB.005B: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.9-1/input0 [ 2210.528128][T31695] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00BB.005B/input/input101 [ 2210.794409][ T875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.048754][ T875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.135266][ T931] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7359'. [ 2211.166998][ T931] netlink: zone id is out of range [ 2211.183068][ T931] netlink: zone id is out of range [ 2211.199401][ T931] netlink: zone id is out of range [ 2211.235532][ T931] netlink: zone id is out of range [ 2211.245693][ T931] netlink: get zone limit has 8 unknown bytes [ 2211.263352][T31695] usb 10-1: USB disconnect, device number 38 [ 2211.360750][ T3562] Bluetooth: hci6: Frame reassembly failed (-84) [ 2211.484747][ T945] netlink: 'syz.4.7364': attribute type 10 has an invalid length. [ 2211.501169][ T945] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7364'. [ 2212.185261][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7370'. [ 2212.272050][ T960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7370'. [ 2212.286539][ T957] loop9: detected capacity change from 0 to 40427 [ 2212.349224][ T957] F2FS-fs (loop9): invalid crc value [ 2212.539772][ T957] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2213.592833][T31524] Bluetooth: hci6: command 0x1003 tx timeout [ 2213.599453][T20128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2213.804164][ T957] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2213.834695][ T957] overlayfs: failed to resolve './file0': -2 [ 2214.092140][T31517] syz-executor: attempt to access beyond end of device [ 2214.092140][T31517] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2214.147617][T31517] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2214.201931][ T997] netlink: 'syz.3.7383': attribute type 10 has an invalid length. [ 2214.209898][ T997] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7383'. [ 2214.231870][ T5940] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2214.351110][ T1003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7385'. [ 2214.451529][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 2214.463758][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2214.484340][ T5940] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2214.496321][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.556805][ T5940] usb 2-1: Product: syz [ 2214.569915][ T5940] usb 2-1: Manufacturer: syz [ 2214.601394][ T5940] usb 2-1: SerialNumber: syz [ 2214.655515][ T5940] usb 2-1: config 0 descriptor?? [ 2214.703090][ T5940] usb 2-1: Found Unit with invalid ID 0. [ 2216.944367][T31695] usb 2-1: USB disconnect, device number 55 [ 2217.199517][ T1042] overlayfs: failed to resolve './file1': -2 [ 2217.289390][ T1065] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 2217.401584][T11630] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2217.563571][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2217.574963][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2217.594639][T11630] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2217.614404][T11630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.623565][T32344] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2217.654536][T11630] usb 5-1: config 0 descriptor?? [ 2217.801671][T32344] usb 9-1: Using ep0 maxpacket: 16 [ 2217.811246][T32344] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.839118][T32344] usb 9-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2217.869659][T20128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2217.888902][T32344] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.904915][T32344] usb 9-1: Product: syz [ 2217.909204][T32344] usb 9-1: Manufacturer: syz [ 2217.920299][T32344] usb 9-1: SerialNumber: syz [ 2217.997504][T32344] usb 9-1: config 0 descriptor?? [ 2218.034857][T32344] usb 9-1: Found Unit with invalid ID 0. [ 2218.181380][T11630] zydacron 0003:13EC:0006.005C: unknown main item tag 0x0 [ 2218.188701][T11630] zydacron 0003:13EC:0006.005C: unknown main item tag 0x0 [ 2218.196169][T11630] zydacron 0003:13EC:0006.005C: unknown main item tag 0x0 [ 2218.203751][T11630] zydacron 0003:13EC:0006.005C: unknown main item tag 0x0 [ 2218.210966][T11630] zydacron 0003:13EC:0006.005C: item fetching failed at offset 4/5 [ 2218.220041][T11630] zydacron 0003:13EC:0006.005C: parse failed [ 2218.226600][T11630] zydacron 0003:13EC:0006.005C: probe with driver zydacron failed with error -22 [ 2218.248520][T32344] usb 9-1: USB disconnect, device number 55 [ 2218.431601][T31695] usb 5-1: USB disconnect, device number 34 [ 2221.468178][ T1102] overlayfs: failed to resolve './file1': -2 [ 2221.472274][ T1128] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7425'. [ 2221.497599][ T1128] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7425'. [ 2221.593227][ T1128] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 2221.659514][ T1128] syz_tun: entered promiscuous mode [ 2221.995013][ T1153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7434'. [ 2222.612239][ T1161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7434'. [ 2222.641828][T11630] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2222.718294][ T1163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7436'. [ 2222.891516][T11630] usb 2-1: Using ep0 maxpacket: 16 [ 2222.898547][T11630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.041718][T11630] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2223.052022][T11630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.060073][T11630] usb 2-1: Product: syz [ 2223.068276][T11630] usb 2-1: Manufacturer: syz [ 2223.073227][T11630] usb 2-1: SerialNumber: syz [ 2223.080486][T11630] usb 2-1: config 0 descriptor?? [ 2223.090202][T11630] usb 2-1: Found Unit with invalid ID 0. [ 2223.211652][T31695] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2223.293636][T32404] usb 2-1: USB disconnect, device number 56 [ 2223.378875][T31695] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.389632][T31695] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 2223.424271][T31695] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2223.441596][T31695] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2223.453777][T31695] usb 9-1: SerialNumber: syz [ 2223.484242][T31695] usb 9-1: bad CDC descriptors [ 2223.698623][T31695] usb 9-1: USB disconnect, device number 56 [ 2224.631233][ T1203] loop9: detected capacity change from 0 to 512 [ 2224.824193][ T1178] overlayfs: failed to resolve './file1': -2 [ 2224.830937][ T61] Bluetooth: hci6: Frame reassembly failed (-84) [ 2224.842378][ T1203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2224.855532][ T1203] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2225.117052][T31517] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2225.305023][ T1229] netlink: 'syz.3.7455': attribute type 10 has an invalid length. [ 2225.318076][ T1229] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7455'. [ 2226.476580][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.485939][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2226.541562][T31695] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2226.703776][T31695] usb 10-1: Using ep0 maxpacket: 16 [ 2226.719703][T31695] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2226.753825][T31695] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2226.782093][T31695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.790361][T31695] usb 10-1: Product: syz [ 2226.801657][T31524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2226.805609][T31695] usb 10-1: Manufacturer: syz [ 2226.893065][T31695] usb 10-1: SerialNumber: syz [ 2226.912424][T31695] usb 10-1: config 0 descriptor?? [ 2227.185824][T31695] usb 10-1: Found Unit with invalid ID 0. [ 2227.194087][T31695] usb 10-1: USB disconnect, device number 39 [ 2227.885470][ T1277] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7471'. [ 2228.684536][T31524] Bluetooth: hci3: command 0x0406 tx timeout [ 2229.097177][ T1301] netlink: 'syz.9.7476': attribute type 10 has an invalid length. [ 2229.111674][ T1301] netlink: 55 bytes leftover after parsing attributes in process `syz.9.7476'. [ 2229.193468][ T1258] overlayfs: failed to resolve './file2': -2 [ 2229.451781][T29045] Bluetooth: hci6: Frame reassembly failed (-84) [ 2229.805679][ T1326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7490'. [ 2229.837874][ T1326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7490'. [ 2229.851831][ T1326] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2229.862784][ T1326] syz_tun: entered promiscuous mode [ 2229.868954][ T1326] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2229.877082][ T1326] Cannot create hsr debugfs directory [ 2230.191964][T32344] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2230.391995][T32344] usb 4-1: Using ep0 maxpacket: 16 [ 2230.405283][T32344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.424019][T32344] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2230.434195][T32344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.465974][T32344] usb 4-1: Product: syz [ 2230.474703][T32344] usb 4-1: Manufacturer: syz [ 2230.484530][T32344] usb 4-1: SerialNumber: syz [ 2230.498156][T32344] usb 4-1: config 0 descriptor?? [ 2230.513043][T32344] usb 4-1: Found Unit with invalid ID 0. [ 2230.721736][T32344] usb 4-1: USB disconnect, device number 28 [ 2231.435266][ T5154] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2232.281133][ T1368] netlink: 'syz.3.7504': attribute type 10 has an invalid length. [ 2232.332247][ T1368] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7504'. [ 2232.340691][ T1346] overlayfs: failed to resolve './file2': -2 [ 2233.409709][ T1407] netlink: 'syz.4.7520': attribute type 3 has an invalid length. [ 2233.417741][ T1407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7520'. [ 2234.811544][T31524] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2234.851516][T31524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2235.100301][T31524] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2235.237581][T31524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2235.247302][T31524] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2235.256005][T31524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2235.279027][ T1415] overlayfs: failed to resolve './file2': -2 [ 2236.017548][ T1424] chnl_net:caif_netlink_parms(): no params data found [ 2236.211233][ T1443] netlink: 'syz.8.7530': attribute type 10 has an invalid length. [ 2236.808422][ T1443] team0: Port device  added [ 2237.520168][ T1474] netlink: 'syz.9.7541': attribute type 10 has an invalid length. [ 2237.528213][ T1474] netlink: 55 bytes leftover after parsing attributes in process `syz.9.7541'. [ 2237.640773][ T3562] Bluetooth: hci1: Frame reassembly failed (-84) [ 2237.831602][ T5154] Bluetooth: hci6: command tx timeout [ 2238.169088][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.187282][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 2238.195227][ T1424] bridge_slave_0: entered allmulticast mode [ 2238.208970][ T1424] bridge_slave_0: entered promiscuous mode [ 2238.228219][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.240886][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 2238.260621][ T1424] bridge_slave_1: entered allmulticast mode [ 2238.276326][ T1424] bridge_slave_1: entered promiscuous mode [ 2238.335750][ T1424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2238.351928][ T1424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2238.486325][ T1489] netlink: 'syz.1.7546': attribute type 10 has an invalid length. [ 2238.522675][ T1424] team0: Port device team_slave_0 added [ 2238.537383][ T1489] team0: Port device netdevsim0 added [ 2238.555409][ T1424] team0: Port device team_slave_1 added [ 2238.624473][ T1424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2238.646005][ T1424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2238.672716][ T1424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2238.685165][ T1424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2238.692310][ T1424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2238.721201][ T1424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2238.771744][ T1424] hsr_slave_0: entered promiscuous mode [ 2238.784202][ T1424] hsr_slave_1: entered promiscuous mode [ 2239.037631][ T1424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2239.244768][ T1424] Cannot create hsr debugfs directory [ 2239.618902][ T1424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.647177][ T1505] team0: Port device team_slave_0 removed [ 2239.654931][ T1505] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2239.677291][T31524] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2239.921486][ T5154] Bluetooth: hci6: command tx timeout [ 2239.994426][ T1424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2240.017930][ T1515] netlink: 'syz.2.7556': attribute type 10 has an invalid length. [ 2240.026097][ T1515] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7556'. [ 2240.378497][ T1424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2240.986791][ T1424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.806735][ T1424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2241.963010][ T1424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2242.004808][ T1424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2242.012215][ T5154] Bluetooth: hci6: command tx timeout [ 2242.020382][ T1424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2242.677194][ T1424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2242.755745][ T1424] 8021q: adding VLAN 0 to HW filter on device team0 [ 2242.813124][T21315] bridge0: port 1(bridge_slave_0) entered blocking state [ 2242.820577][T21315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2242.854878][ T1534] loop9: detected capacity change from 0 to 40427 [ 2242.895996][T21315] bridge0: port 2(bridge_slave_1) entered blocking state [ 2242.903229][T21315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2243.142329][ T1534] F2FS-fs (loop9): invalid crc value [ 2243.399636][ T1534] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2243.472571][ T1534] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2243.535937][ T1424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2243.730539][T31517] syz-executor: attempt to access beyond end of device [ 2243.730539][T31517] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 2243.842162][T31517] syz-executor: attempt to access beyond end of device [ 2243.842162][T31517] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 2244.075774][ T5154] Bluetooth: hci6: command tx timeout [ 2244.177642][T21315] kworker/u8:14: attempt to access beyond end of device [ 2244.177642][T21315] loop9: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 2244.247114][T21315] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2244.277056][T21315] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2244.305684][T21315] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2244.349030][T21315] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2244.385468][T31517] syz_tun (unregistering): left promiscuous mode [ 2244.688992][T27646] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.835041][ T1574] netlink: 15999 bytes leftover after parsing attributes in process `syz.8.7574'. [ 2245.319888][ T1424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2245.354356][T27646] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2245.493172][ T1424] veth0_vlan: entered promiscuous mode [ 2245.536248][T27646] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2245.622517][ T1424] veth1_vlan: entered promiscuous mode [ 2246.013828][T27646] netdevsim netdevsim9 netdevsim0 (unregistering): left promiscuous mode [ 2246.245555][T27646] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.318458][ T1424] veth0_macvtap: entered promiscuous mode [ 2246.340546][ T1424] veth1_macvtap: entered promiscuous mode [ 2246.532844][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2246.587918][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2246.631753][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2246.662582][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2246.683130][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2246.719687][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2246.777176][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2246.848894][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2246.874163][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2246.889764][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2246.909854][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2247.041720][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.127195][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2247.209278][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.253976][T20128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2247.254161][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2247.272439][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.272506][T20128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2247.291080][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2247.302029][T20128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2247.309624][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.324254][T20128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2247.335863][T20128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2247.343877][T20128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2247.347666][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2247.380200][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.403097][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2247.420729][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.449813][ T1424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2247.563113][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.611339][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.637793][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.666894][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.691634][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.712633][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.741564][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.753824][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.764124][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.781368][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.793218][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.803763][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.813856][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.824469][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.835702][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.846248][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.856208][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.866788][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.876722][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.887400][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.897401][ T1424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2247.908619][ T1424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2247.920580][ T1424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2247.933723][ T1424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.942754][ T1424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.951622][ T1424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.960564][ T1424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2248.047129][ T1615] team0: Port device team_slave_0 removed [ 2248.053900][ T1615] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2248.094115][T27646] bridge_slave_1: left allmulticast mode [ 2248.111591][T27646] bridge_slave_1: left promiscuous mode [ 2248.137236][T27646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2248.206970][T27646] bridge_slave_0: left allmulticast mode [ 2248.232412][T27646] bridge_slave_0: left promiscuous mode [ 2248.239380][T27646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.334702][T20128] Bluetooth: hci4: command 0x0406 tx timeout [ 2249.431419][T20128] Bluetooth: hci1: command tx timeout [ 2249.784491][T27646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2249.817813][T27646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2249.847116][T27646] bond0 (unregistering): Released all slaves [ 2251.265685][T27646] hsr_slave_0: left promiscuous mode [ 2251.291848][T27646] hsr_slave_1: left promiscuous mode [ 2251.303961][T27646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2251.321628][T27646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2251.341035][T27646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2251.363274][T27646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2251.399360][T27646] veth1_macvtap: left promiscuous mode [ 2251.418416][T27646] veth0_macvtap: left promiscuous mode [ 2251.591658][ T5154] Bluetooth: hci1: command tx timeout [ 2251.698441][T27646] team0 (unregistering): Port device team_slave_1 removed [ 2251.724276][T27646] team0 (unregistering): Port device team_slave_0 removed [ 2251.845335][ T1612] chnl_net:caif_netlink_parms(): no params data found [ 2251.861905][ T1672] netlink: 168 bytes leftover after parsing attributes in process `syz.8.7603'. [ 2251.904619][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2251.912884][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2253.794135][ T5154] Bluetooth: hci1: command tx timeout [ 2253.906961][ T1697] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 2253.956071][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 2253.966362][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.010290][ T1612] bridge_slave_0: entered allmulticast mode [ 2254.031587][ T1612] bridge_slave_0: entered promiscuous mode [ 2254.216492][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2254.241725][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2254.257756][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.351454][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.360972][ T1612] bridge_slave_1: entered allmulticast mode [ 2254.382416][ T1612] bridge_slave_1: entered promiscuous mode [ 2255.515897][ T1612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2255.540651][ T1722] netlink: 'syz.3.7525': attribute type 29 has an invalid length. [ 2255.617721][ T1727] netlink: 'syz.3.7525': attribute type 29 has an invalid length. [ 2255.831548][ T5154] Bluetooth: hci1: command tx timeout [ 2256.062577][ T1612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2256.513023][ T1612] team0: Port device team_slave_0 added [ 2256.522044][ T1612] team0: Port device team_slave_1 added [ 2256.817682][ T1759] netlink: 'syz.3.7622': attribute type 10 has an invalid length. [ 2256.864843][ T1759] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7622'. [ 2256.937624][ T1612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2256.961526][ T1612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2257.021979][ T1612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2257.895363][ T1612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2257.931330][ T1612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2258.033855][ T1612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2258.120930][ T1779] netlink: 'syz.1.7629': attribute type 29 has an invalid length. [ 2258.170668][ T1612] hsr_slave_0: entered promiscuous mode [ 2258.181476][ T1522] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2258.190691][ T1612] hsr_slave_1: entered promiscuous mode [ 2258.217992][ T1612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2258.228089][ T1612] Cannot create hsr debugfs directory [ 2258.257858][ T1782] netlink: 'syz.1.7629': attribute type 29 has an invalid length. [ 2258.351619][ T1522] usb 9-1: Using ep0 maxpacket: 16 [ 2258.359294][ T1522] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.374373][ T1522] usb 9-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 2258.384371][ T1522] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.392928][ T1522] usb 9-1: Product: syz [ 2258.398193][ T1522] usb 9-1: Manufacturer: syz [ 2258.409680][ T1522] usb 9-1: SerialNumber: syz [ 2258.431158][ T1522] usb 9-1: config 0 descriptor?? [ 2259.060061][ T1522] usb 9-1: Found Unit with invalid ID 0. [ 2259.305469][ T1522] usb 9-1: USB disconnect, device number 57 [ 2259.708152][ T1817] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 2260.591566][ T1832] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.7638'. [ 2260.747099][ T1836] netlink: 'syz.8.7642': attribute type 10 has an invalid length. [ 2260.755268][ T1836] netlink: 55 bytes leftover after parsing attributes in process `syz.8.7642'. [ 2261.633983][ T1839] netlink: 'syz.2.7643': attribute type 29 has an invalid length. [ 2261.650689][ T1842] netlink: 'syz.2.7643': attribute type 29 has an invalid length. [ 2262.866823][ T1612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2262.946954][ T1612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2262.978401][ T1612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2263.001360][ T6021] Bluetooth: hci3: Frame reassembly failed (-84) [ 2263.602654][ T1612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2263.628494][ T1882] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 2264.014690][ T1900] netlink: 'syz.2.7661': attribute type 10 has an invalid length. [ 2264.027084][ T1612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2264.059183][ T1900] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7661'. [ 2264.074900][ T1612] 8021q: adding VLAN 0 to HW filter on device team0 [ 2264.111269][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.118445][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.149758][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.156910][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2265.031780][T20128] Bluetooth: hci3: command 0x1003 tx timeout [ 2265.074144][ T1612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2265.089120][ T5154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2266.531259][ T1612] veth0_vlan: entered promiscuous mode [ 2266.569231][ T1971] netlink: 'syz.8.7679': attribute type 10 has an invalid length. [ 2266.594611][ T1612] veth1_vlan: entered promiscuous mode [ 2266.601863][ T1971] netlink: 55 bytes leftover after parsing attributes in process `syz.8.7679'. [ 2266.904885][ T1612] veth0_macvtap: entered promiscuous mode [ 2266.946345][ T1612] veth1_macvtap: entered promiscuous mode [ 2266.980428][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.991341][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.001194][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.012147][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.022092][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.032724][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.042645][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.053153][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.063227][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.073804][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.084403][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.095557][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.105522][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.116513][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.126450][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.136980][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.146887][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.157417][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.167661][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.179394][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.189896][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.200563][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.212854][ T1612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2267.225271][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.236420][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.246421][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.257310][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.267411][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.278210][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.288767][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.299801][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.309763][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.320323][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.330519][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.341199][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.351074][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.361813][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.371816][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.382596][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.393608][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.404680][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.414566][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.425072][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.439042][ T1612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.452038][ T1612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.463364][ T1612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2267.564876][T27646] Bluetooth: hci3: Frame reassembly failed (-84) [ 2267.674626][ T1996] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.7690'. [ 2267.693467][ T1612] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.709866][ T1612] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.721044][ T1612] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.756390][ T1612] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.818865][ T2007] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7693'. [ 2268.045291][ T2013] netlink: 'syz.1.7695': attribute type 10 has an invalid length. [ 2268.078145][ T2013] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7695'. [ 2268.430773][T27646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2268.449369][T27646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2268.592257][T27875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2268.619927][T27875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2269.561331][ T5154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2269.919657][ T2085] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7708'. [ 2270.372665][T21428] syz_tun (unregistering): left promiscuous mode [ 2270.406638][ T2052] loop5: detected capacity change from 0 to 40427 [ 2270.438730][ T2052] F2FS-fs (loop5): invalid crc value [ 2270.460441][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2270.472038][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2270.479587][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2270.490993][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2270.499282][ T5154] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2270.507200][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2270.534984][ T2052] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2270.659470][ T2052] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2270.684975][T20336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.740045][ T1612] syz-executor: attempt to access beyond end of device [ 2270.740045][ T1612] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 2270.754525][ T1612] syz-executor: attempt to access beyond end of device [ 2270.754525][ T1612] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 2270.850219][T20336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.855763][T21312] kworker/u8:13: attempt to access beyond end of device [ 2270.855763][T21312] loop5: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 2270.877090][T21312] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2270.884609][T21312] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2270.892415][T21312] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2270.899409][T21312] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2270.944765][T20336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.048168][T20336] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 2271.069681][T20336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.095397][ T2099] chnl_net:caif_netlink_parms(): no params data found [ 2271.285160][T20336] bridge_slave_1: left allmulticast mode [ 2271.290867][T20336] bridge_slave_1: left promiscuous mode [ 2271.297127][T20336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.307885][T20336] bridge_slave_0: left allmulticast mode [ 2271.321516][T20336] bridge_slave_0: left promiscuous mode [ 2271.327275][T20336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.820016][T20336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2271.839288][T20336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2271.850968][T20336] bond0 (unregistering): Released all slaves [ 2271.878621][ T2099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2271.886911][ T2099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.895978][ T2099] bridge_slave_0: entered allmulticast mode [ 2271.903478][ T2099] bridge_slave_0: entered promiscuous mode [ 2271.925605][ T2099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2271.935875][ T2099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.944068][ T2099] bridge_slave_1: entered allmulticast mode [ 2271.951074][ T2099] bridge_slave_1: entered promiscuous mode [ 2271.959012][T20336] tipc: Disabling bearer [ 2271.965760][T20336] tipc: Left network mode [ 2272.014171][ T2099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2272.026967][ T2099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2272.059256][ T2099] team0: Port device team_slave_0 added [ 2272.086619][ T2099] team0: Port device team_slave_1 added [ 2272.133610][T20336] hsr_slave_0: left promiscuous mode [ 2272.140323][T20336] hsr_slave_1: left promiscuous mode [ 2272.146983][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2272.155868][T20336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2272.164866][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2272.173312][T20336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2272.189644][T20336] veth1_to_team: left promiscuous mode [ 2272.195979][T20336] veth1_macvtap: left promiscuous mode [ 2272.204219][T20336] veth0_macvtap: left promiscuous mode [ 2272.291701][T20336] team0 (unregistering): Port device team_slave_1 removed [ 2272.359470][ T2099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2272.366902][ T2099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2272.394696][ T2099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2272.412268][ T2099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2272.419249][ T2099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2272.446553][ T2099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2272.487516][ T2099] hsr_slave_0: entered promiscuous mode [ 2272.494774][ T2099] hsr_slave_1: entered promiscuous mode [ 2272.501161][ T2099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2272.510475][ T2099] Cannot create hsr debugfs directory [ 2272.553892][ T5154] Bluetooth: hci2: command tx timeout [ 2272.698612][T20336] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.778110][T20336] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.882242][T20336] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.948211][T20336] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.990189][ T2099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2273.009280][ T2099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2273.028253][ T2099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2273.043424][ T2099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2273.116146][T20336] bridge_slave_1: left allmulticast mode [ 2273.123853][T20336] bridge_slave_1: left promiscuous mode [ 2273.129603][T20336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.142836][T20336] bridge_slave_0: left allmulticast mode [ 2273.148556][T20336] bridge_slave_0: left promiscuous mode [ 2273.154388][T20336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2273.337065][T20336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2273.355131][T20336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2273.366100][T20336] bond0 (unregistering): Released all slaves [ 2273.483855][ T2099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2273.524279][ T2099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2273.547640][T20336] hsr_slave_0: left promiscuous mode [ 2273.561641][T20336] hsr_slave_1: left promiscuous mode [ 2273.570498][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2273.578134][T20336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2273.593028][T20336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2273.600546][T20336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2273.619833][T20336] veth1_macvtap: left promiscuous mode [ 2273.627362][T20336] veth0_macvtap: left promiscuous mode [ 2273.639185][T20336] veth1_vlan: left promiscuous mode [ 2273.645980][T20336] veth0_vlan: left promiscuous mode [ 2273.827758][T20336] team0 (unregistering): Port device team_slave_1 removed [ 2273.852782][T20336] team0 (unregistering): Port device team_slave_0 removed [ 2273.972577][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.979782][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2273.998986][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 2274.006261][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2274.240701][ T2099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2274.317142][ T2099] veth0_vlan: entered promiscuous mode [ 2274.329216][ T2099] veth1_vlan: entered promiscuous mode [ 2274.369190][ T2099] veth0_macvtap: entered promiscuous mode [ 2274.379138][ T2099] veth1_macvtap: entered promiscuous mode [ 2274.396971][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.408092][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.423304][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.434008][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.444210][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.456843][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.468763][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.481403][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.496544][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.511992][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.527821][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.538851][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.553213][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.564388][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.575337][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.586427][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.596868][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.609787][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.620138][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2274.631743][ T5154] Bluetooth: hci2: command tx timeout [ 2274.642644][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.659260][ T2099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2274.677372][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.688394][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.700266][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.711091][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.721901][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.732559][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.742681][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.753386][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.764304][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.774872][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.785018][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.796266][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.806699][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.817886][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.828088][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.838731][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.848863][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.861254][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.872385][ T2099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.882890][ T2099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.894147][ T2099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2274.910349][ T2099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.919506][ T2099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.930112][ T2099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.940162][ T2099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.999816][T27875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.024892][T27875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.061262][T27646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.070737][T27646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2276.711664][ T5154] Bluetooth: hci2: command tx timeout [ 2278.792369][ T5154] Bluetooth: hci2: command tx timeout [ 2287.915923][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2287.922713][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.356762][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.363260][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2361.671453][T20128] Bluetooth: hci6: command 0x0406 tx timeout [ 2397.511437][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 2410.795192][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.802824][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.235850][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.242263][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2533.674313][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2533.680770][ T1286] ieee802154 phy1 wpan1: encryption failed: -22